From 40ef9e83975a6a5aaed454df7b00d00317fa3d7b Mon Sep 17 00:00:00 2001
From: Dale Haiducek <19750917+dhaiducek@users.noreply.github.com>
Date: Tue, 7 Jan 2025 11:29:07 -0500
Subject: [PATCH] Enable hermetic builds

Signed-off-by: Dale Haiducek <19750917+dhaiducek@users.noreply.github.com>
---
 .tekton/gatekeeper-operator-3-17-pull-request.yaml        | 4 ++++
 .tekton/gatekeeper-operator-3-17-push.yaml                | 4 ++++
 .tekton/gatekeeper-operator-bundle-3-17-pull-request.yaml | 2 ++
 .tekton/gatekeeper-operator-bundle-3-17-push.yaml         | 2 ++
 build/bundle.Dockerfile                                   | 1 +
 build/bundle.Dockerfile.rhtap                             | 1 +
 bundle/metadata/annotations.yaml                          | 1 +
 7 files changed, 15 insertions(+)

diff --git a/.tekton/gatekeeper-operator-3-17-pull-request.yaml b/.tekton/gatekeeper-operator-3-17-pull-request.yaml
index 7e6e3ec7..ceaa15f7 100644
--- a/.tekton/gatekeeper-operator-3-17-pull-request.yaml
+++ b/.tekton/gatekeeper-operator-3-17-pull-request.yaml
@@ -29,6 +29,10 @@ spec:
       value: build/Dockerfile.rhtap
     - name: path-context
       value: .
+    - name: hermetic
+      value: "true"
+    - name: prefetch-input
+      value: '[{"type": "gomod", "path": "."}]'
   pipelineSpec:
     description: |
       This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization.
diff --git a/.tekton/gatekeeper-operator-3-17-push.yaml b/.tekton/gatekeeper-operator-3-17-push.yaml
index 76e0029c..ce6296f8 100644
--- a/.tekton/gatekeeper-operator-3-17-push.yaml
+++ b/.tekton/gatekeeper-operator-3-17-push.yaml
@@ -27,6 +27,10 @@ spec:
       value: build/Dockerfile.rhtap
     - name: path-context
       value: .
+    - name: hermetic
+      value: "true"
+    - name: prefetch-input
+      value: '[{"type": "gomod", "path": "."}]'
   pipelineSpec:
     description: |
       This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization.
diff --git a/.tekton/gatekeeper-operator-bundle-3-17-pull-request.yaml b/.tekton/gatekeeper-operator-bundle-3-17-pull-request.yaml
index 9234f479..ce006fa5 100644
--- a/.tekton/gatekeeper-operator-bundle-3-17-pull-request.yaml
+++ b/.tekton/gatekeeper-operator-bundle-3-17-pull-request.yaml
@@ -29,6 +29,8 @@ spec:
       value: build/bundle.Dockerfile.rhtap
     - name: path-context
       value: .
+    - name: hermetic
+      value: true
   pipelineSpec:
     description: |
       This pipeline is ideal for building container images from a Containerfile while reducing network traffic.
diff --git a/.tekton/gatekeeper-operator-bundle-3-17-push.yaml b/.tekton/gatekeeper-operator-bundle-3-17-push.yaml
index f7bab4f0..9bcbafb7 100644
--- a/.tekton/gatekeeper-operator-bundle-3-17-push.yaml
+++ b/.tekton/gatekeeper-operator-bundle-3-17-push.yaml
@@ -26,6 +26,8 @@ spec:
       value: build/bundle.Dockerfile.rhtap
     - name: path-context
       value: .
+    - name: hermetic
+      value: true
   pipelineSpec:
     description: |
       This pipeline is ideal for building container images from a Containerfile while reducing network traffic.
diff --git a/build/bundle.Dockerfile b/build/bundle.Dockerfile
index 8e1c724b..ad017400 100644
--- a/build/bundle.Dockerfile
+++ b/build/bundle.Dockerfile
@@ -29,6 +29,7 @@ LABEL name=gatekeeper/gatekeeper-operator-bundle
 LABEL description="The Gatekeeper Operator installs and configures Open Policy Agent Gatekeeper."
 LABEL summary="Red Hat Gatekeeper Operator"
 LABEL version=v3.17.1
+LABEL release="0"
 LABEL distribution-scope=public
 LABEL maintainer="acm-component-maintainers@redhat.com"
 LABEL url=https://github.com/stolostron/gatekeeper-operator
diff --git a/build/bundle.Dockerfile.rhtap b/build/bundle.Dockerfile.rhtap
index d9966bb8..902fd060 100644
--- a/build/bundle.Dockerfile.rhtap
+++ b/build/bundle.Dockerfile.rhtap
@@ -35,6 +35,7 @@ LABEL name=gatekeeper/gatekeeper-operator-bundle
 LABEL description="The Gatekeeper Operator installs and configures Open Policy Agent Gatekeeper."
 LABEL summary="Red Hat Gatekeeper Operator"
 LABEL version=v3.17.1
+LABEL release="0"
 LABEL distribution-scope=public
 LABEL maintainer="acm-component-maintainers@redhat.com"
 LABEL url=https://github.com/stolostron/gatekeeper-operator
diff --git a/bundle/metadata/annotations.yaml b/bundle/metadata/annotations.yaml
index 134b1077..ecd149ed 100644
--- a/bundle/metadata/annotations.yaml
+++ b/bundle/metadata/annotations.yaml
@@ -24,6 +24,7 @@ annotations:
   description: "The Gatekeeper Operator installs and configures Open Policy Agent Gatekeeper."
   summary: "Red Hat Gatekeeper Operator"
   version: v3.17.1
+  release: "0"
   distribution-scope: public
   maintainer: "acm-component-maintainers@redhat.com"
   url: https://github.com/stolostron/gatekeeper-operator