keep: Add RHDS fork changes

Signed-off-by: mprahl <mprahl@users.noreply.github.com>

Author: mprahl

.tekton/mlflow-pull-request.yaml

@@ -2,40 +2,49 @@ apiVersion: tekton.dev/v1
 kind: PipelineRun
 metadata:
   annotations:
-    build.appstudio.openshift.io/repo: https://github.com/opendatahub-io/mlflow?rev={{revision}}
+    build.appstudio.openshift.io/repo: https://github.com/red-hat-data-services/mlflow?rev={{revision}}
     build.appstudio.redhat.com/commit_sha: '{{revision}}'
     build.appstudio.redhat.com/target_branch: '{{target_branch}}'
-    build.appstudio.redhat.com/pull_request_number: '{{pull_request_number}}'
-    pipelinesascode.tekton.dev/cancel-in-progress: "false"
+    build.appstudio.redhat.com/pull_request_number: "{{pull_request_number}}"
     pipelinesascode.tekton.dev/max-keep-runs: "3"
-    pipelinesascode.tekton.dev/on-cel-expression: event == "pull_request" && target_branch
-      == "master"
-  creationTimestamp: null
+    pipelinesascode.tekton.dev/on-comment: "^/build-konflux mlflow"
+    pipelinesascode.tekton.dev/on-label: "[kfbuild-all, kfbuild-mlflow]"
+    pipelinesascode.tekton.dev/on-target-branch: "[{{target_branch}}]"
+    pipelinesascode.tekton.dev/on-event: "[pull_request]"
+    pipelinesascode.tekton.dev/cancel-in-progress: "true"
   labels:
-    appstudio.openshift.io/application: opendatahub-builds
-    appstudio.openshift.io/component: mlflow-ci
+    appstudio.openshift.io/application: automation
+    appstudio.openshift.io/component: pull-request-pipelines-mlflow
     pipelines.appstudio.openshift.io/type: build
   name: mlflow-on-pull-request
-  namespace: open-data-hub-tenant
+  namespace: rhoai-tenant
 spec:
   params:
   - name: git-url
     value: '{{source_url}}'
   - name: revision
     value: '{{revision}}'
+  - name: additional-tags
+    value:
+    - 'pr-{{pull_request_number}}-into-{{target_branch}}'
+  - name: additional-labels
+    value:
+    - version=on-pr-{{revision}}
+    - io.openshift.tags=mlflow
   - name: output-image
-    value: quay.io/opendatahub/mlflow:odh-pr
+    value: quay.io/rhoai/pull-request-pipelines:mlflow-{{revision}}
   - name: dockerfile
     value: Dockerfile.konflux
   - name: path-context
     value: .
-  - name: additional-tags
-    value:
-    - 'odh-pr-{{revision}}'
   - name: hermetic
     value: 'true'
   - name: prefetch-input
     value: '[{"type": "pip", "path": ".", "requirements_files": ["requirements/konflux-pypi-requirements.txt"]}, {"type": "pip", "path": "requirements", "requirements_files": ["konflux-aipcc-requirements.txt", "konflux-build-aipcc-requirements.txt"], "binary": {"arch": ":all:"}}, {"type": "yarn", "path": "mlflow/server/js"}, {"type": "rpm", "path": "requirements"}]'
+  - name: build-source-image
+    value: true
+  - name: build-image-index
+    value: true
   - name: pipeline-type
     value: pull-request
   - name: build-platforms
@@ -44,26 +53,29 @@ spec:
     - linux-m2xlarge/arm64
     - linux/ppc64le
     - linux/s390x
+  - name: image-expires-after
+    value: 5d
+  - name: enable-slack-failure-notification
+    value: "false"
   pipelineRef:
     resolver: git
     params:
     - name: url
-      value: https://github.com/opendatahub-io/odh-konflux-central.git
+      value: https://github.com/red-hat-data-services/konflux-central.git
     - name: revision
-      value: main
+      value: '{{ target_branch }}'
     - name: pathInRepo
-      value: pipeline/multi-arch-container-build.yaml
-  # Extra memory prevents yarn from silently failing/timing out during prefetch.
+      value: pipelines/multi-arch-container-build.yaml
   taskRunSpecs:
   - pipelineTaskName: prefetch-dependencies
     computeResources:
       requests:
         cpu: '1'
-        memory: 6Gi
+        memory: 5120Mi
       limits:
-        memory: 6Gi
+        memory: 5120Mi
   taskRunTemplate:
-    serviceAccountName: build-pipeline-mlflow
+    serviceAccountName: build-pipeline-pull-request-pipelines
   workspaces:
   - name: git-auth
     secret:

.tekton/mlflow-push.yaml

@@ -58,9 +58,9 @@ spec:
     computeResources:
       requests:
         cpu: '1'
-        memory: 6Gi
+        memory: 4608Mi
       limits:
-        memory: 6Gi
+        memory: 4608Mi
   taskRunTemplate:
     serviceAccountName: build-pipeline-mlflow
   workspaces:

Dockerfile.konflux

@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi9/nodejs-20:9.7 AS ui-builder
+FROM registry.access.redhat.com/ubi9/nodejs-20:9.7@sha256:74cc7b1d13592b1e425074f434b90e470ab209da85fd1fdb8e6e9e4cabaec51a AS ui-builder
 WORKDIR /opt/app-root/src
 USER 0
 COPY --chown=1001:0 mlflow/server/js/ .
@@ -20,7 +20,7 @@ RUN if [ -f /cachi2/cachi2.env ]; then \
     && NODE_OPTIONS="--max_old_space_size=3072" yarn build \
     && NODE_OPTIONS="--max_old_space_size=3072" MLFLOW_API_BASE_URL=/mlflow yarn build:federated
 
-FROM registry.access.redhat.com/ubi9/python-312:9.7 AS python-builder
+FROM registry.access.redhat.com/ubi9/python-312:9.7@sha256:ff373f4b42b662e99954adea770ca87b4ea963186cc752174ccb94aa08fa702d AS python-builder
 WORKDIR /src
 USER 0
 COPY --chown=1001:0 . .
@@ -34,7 +34,7 @@ RUN if [ -f /cachi2/cachi2.env ]; then . /cachi2/cachi2.env; fi && \
     python -m build --wheel --outdir /tmp/dist libs/skinny && \
     python -m build --wheel --outdir /tmp/dist .
 
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.7
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.7@sha256:12db9874bd753eb98b1ab3d840e75de5d6842ac0604fbd68c012adefe97140be
 ARG MLFLOW_VERSION=3.3.2
 ENV PYTHONDONTWRITEBYTECODE=1 \
     PYTHONUNBUFFERED=1 \
@@ -78,3 +78,13 @@ EXPOSE 5000
 # Default command. Override in Kubernetes as needed.
 USER 1001
 CMD ["python3.12", "-m", "mlflow", "server", "--host", "0.0.0.0", "--port", "5000", "--app-name", "kubernetes-auth", "--enable-workspaces", "--workspace-store-uri", "kubernetes://", "--serve-artifacts"]
+
+LABEL com.redhat.component="odh-mlflow-rhel9" \
+      name="rhoai/odh-mlflow-rhel9" \
+      description="odh-mlflow" \
+      summary="odh-mlflow" \
+      maintainer="['managed-open-data-hub@redhat.com']" \
+      io.openshift.expose-services="" \
+      io.k8s.display-name="odh-mlflow" \
+      io.k8s.description="odh-mlflow" \
+      com.redhat.license_terms="https://www.redhat.com/licenses/Red_Hat_Standard_EULA_20191108.pdf"