菜单
Use when changing the Dockerfile, .tekton/ PipelineRuns, pulp-tool-container image, UBI/Python base, or Konflux container build integration. Container images are built by Konflux Tekton — not GitHub Actions.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | changing-pulp-container |
| description | Use when changing the Dockerfile, .tekton/ PipelineRuns, pulp-tool-container image, UBI/Python base, or Konflux container build integration. Container images are built by Konflux Tekton — not GitHub Actions. |
The pulp-tool-container image is built and published by Konflux Tekton (Pipelines as Code). GitHub Actions runs unit tests and lint only; it does not build the container.
In-repo: Dockerfile, .tekton/. Remote pipeline: single-arch-build-pipeline.yaml (git resolver @ main). Full task chain: reference.md.
Downstream consumers of the published image: changing-pulp-upload + CLAUDE.md.
| File | PAC trigger | Output image |
|---|---|---|
| pulp-tool-container-build-push.yaml | push → main | quay.io/.../pulp-tool-container:latest |
| pulp-tool-container-build-pull-request.yaml | pull_request → main | …/pulp-tool-container:on-pr-{{revision}} (image-expires-after: 5d) |
Shared: namespace artifact-storage-tenant, app/component tooling / pulp-tool-container, SA build-pipeline-pulp-tool-container, workspace git-auth, params git-url + revision.
init — gate build; optional cache proxy.git-clone-oci-ta — checkout repo at revision.prefetch-dependencies-oci-ta — Cachi2 (empty for pulp-tool; no prefetch config in-repo).buildah-oci-ta (build-container) — Buildah builds Dockerfile at repo root (path-context: .) and pushes output-image. Dockerfile RUN steps need network (hermetic defaults false).skip-checks) — deprecated base image, Clair, cert preflight, Snyk SAST, ClamAV, SBOM JSON.show-sbom, show-summary.Debug tip: Dockerfile errors appear in Konflux build-container logs, not GitHub Actions.
.tekton/pulp-tool-container-build-*.yaml and upstream single-arch-build-pipeline on GitHub (bundles evolve).Dockerfile / pyproject.toml install deps as needed..tekton/ for publish paths/triggers only — do not vendor the remote pipeline in-repo.docker build as a merge gate.make test-container.Dockerfile builds (make test-container or Konflux PR build-container task)pulp-tool --version / --help in built image.tekton/ image refs and PAC CEL expressions correctdocker build as CI gate — Konflux builds on every PR/push to maindnf/pip in Dockerfile/root/.cache left in final image layers| Concern | Where |
|---|---|
| Image recipe | Dockerfile |
| Triggers / Quay tags | .tekton/pulp-tool-container-build-*.yaml |
| Build implementation | Upstream single-arch-build-pipeline → buildah-oci-ta |
| Task details | reference.md |
| Local smoke test | make test-container |
| Runtime usage | changing-pulp-upload + CLAUDE.md |
Use when the user confirms paste-ready PR materials, or asks for a PR title/body, commit message, or CHANGELOG entry after substantive pulp-tool repo changes.
Use when changing upload, global CLI flags (--config, --build-id, --namespace), --rpm-path, --parent-package, --sbom-path, --artifact-results, Tekton workspace paths, or Konflux downstream integration. Container image *build*: changing-pulp-container.
Use when make test-diff-coverage fails, CI reports diff coverage below 100%, or a GitHub PR is blocked on uncovered changed lines.
Use when pre-commit hooks fail repeatedly, lint errors persist after make format, or local checks disagree with CI on pulp-tool.