원클릭으로
deploying-to-konflux
Deploy locally-working hermetic build configuration into Konflux pipelines for RHOAI components
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
메뉴
Deploy locally-working hermetic build configuration into Konflux pipelines for RHOAI components
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Clone a repo with working hermetic builds and compare the implementation against the hermeto guide to identify gaps and improvements
Provision a VM on Red Hat Beaker for multi-arch testing
Run check-payload locally to scan container images for FIPS compliance issues before they block a Konflux release
Run Conforma (Enterprise Contract) validation against a Konflux snapshot or a single image to check release policy compliance
Create a temporary pull request PipelineRun from an existing push PipelineRun to test build changes on an RHOAI release branch
Productize an upstream Dockerfile for Konflux builds — base image swaps, digest pinning, FIPS compliance, label metadata, and build-arg simplification
| name | deploying-to-konflux |
| description | Deploy locally-working hermetic build configuration into Konflux pipelines for RHOAI components |
| version | 1.0.0 |
Read guides/deploying-to-konflux.md (relative to the plugin root) thoroughly before starting. It is the source of truth for the deployment workflow — do not duplicate its content, reference it as you go.
Determine starting point: Ask the user:
kubectl access to the Konflux cluster (needed for Conforma validation and snapshot lookups).Midstream path (if applicable): Walk through the odh-konflux-central workflow from the guide:
prefetch-input)Downstream path: Walk through the RHDS workflow from the guide:
Sync back to konflux-central: After changes are verified, remind the user to sync PipelineRun changes back to the relevant konflux-central repo (ODH or RHDS, depending on the path taken). Walk through which files need updating (main branch PR pipeline, release branch push pipeline).
Verify production builds: Help them confirm that release branch builds are running correctly with the new config.