// Update upstream Konflux component versions. Use when bumping component versions, updating refs, or syncing to latest upstream.
Deploy Konflux on a local Kind cluster. Supports development mode (operator outside cluster for fast iteration) and preview mode (operator deployed in-cluster from release/build). Use when the user wants to start, restart, or recreate a local Konflux environment, run the operator locally, install integrations like sigstore or quay, or troubleshoot local deployment.
Create pull requests for konflux-ci repository. Explains CI behavior differences between fork and same-repo PRs, and the /allow command. Use when creating a PR, CI not running, or asking about fork PRs.
| name | update-upstream-deps |
| description | Update upstream Konflux component versions. Use when bumping component versions, updating refs, or syncing to latest upstream. |
Each operator/upstream-kustomizations/<component>/core/kustomization.yaml pins:
?ref=<SHA> — git commitnewTag: <SHA> — image tag (must match)| Component | Upstream |
|---|---|
| build-service | konflux-ci/build-service |
| integration | konflux-ci/integration-service |
| release | konflux-ci/release-service |
| image-controller | konflux-ci/image-controller |
| application-api | redhat-appstudio/application-api |
| enterprise-contract | conforma/crds |
Other components (cli, ui, registry, namespace-lister, etc.) have local-only configs or different structures.
.github/workflows/update-upstream-manifests.yaml runs weekly on Mondays at 02:00 UTC; use workflow_dispatch for an on-demand run.
Renovate also proposes ref/tag bumps via renovate.json.
Requires: gh CLI authenticated, kustomize
./operator/pkg/manifests/process-component.sh build-service "$(pwd)"
In local mode: updates refs, rebuilds manifests, reports changes.
./operator/pkg/manifests/process-all-components.sh "$(pwd)"
operator/upstream-kustomizations/<component>/core/kustomization.yaml:
?ref=<SHA>newTag: <SHA>kustomize build operator/upstream-kustomizations/<component> > \
operator/pkg/manifests/<component>/manifests.yaml
| Script | Purpose |
|---|---|
operator/pkg/manifests/update-upstream-refs.sh | Resolves latest SHA |
operator/pkg/manifests/process-component.sh | Single component update |
operator/pkg/manifests/process-all-components.sh | All components |
build-pipeline-config.yaml contains image digests (not git SHAs). Managed separately by Renovate.