Add new yaml target

- Add a new target 'yq-sort-and-format` to standardize the yaml files
- Apply the target to the existing files

Author: fontivan

.github/workflows/rust.yml

@@ -1,20 +1,18 @@
 ---
-name: Rust
-
-on:  # yamllint disable-line rule:truthy
-  push:
-    branches: ["main"]
-  pull_request:
-    branches: ["main"]
-
 jobs:
   build:
-
     runs-on: ubuntu-latest
-
     steps:
       - uses: actions/checkout@v4
         with:
           submodules: recursive
       - name: Run rust-ci job
         run: make rust-ci
+name: Rust
+on: # yamllint disable-line rule:truthy
+  pull_request:
+    branches:
+      - main
+  push:
+    branches:
+      - main

.github/workflows/yamllint.yml

@@ -1,20 +1,18 @@
 ---
-name: Yamllint
-
-on:  # yamllint disable-line rule:truthy
-  push:
-    branches: ["main"]
-  pull_request:
-    branches: ["main"]
-
 jobs:
   build:
-
     runs-on: ubuntu-latest
-
     steps:
       - uses: actions/checkout@v4
         with:
           submodules: recursive
       - name: Run yamllint
         run: make yamllint
+name: Yamllint
+on: # yamllint disable-line rule:truthy
+  pull_request:
+    branches:
+      - main
+  push:
+    branches:
+      - main

.konflux/lock-build/rpms.in.yaml

@@ -1,15 +1,15 @@
 ---
+arches:
+  - x86_64
+  - aarch64
 contentOrigin:
   repofiles:
     # rhel9 rpm repos
     - ./redhat.repo
-packages:
-  - rust-toolset
-  - protobuf-compiler
-arches:
-  - x86_64
-  - aarch64
 context:
   containerfile:
     file: ../Dockerfile
     stageName: build-image
+packages:
+  - rust-toolset
+  - protobuf-compiler

.konflux/lock-build/rpms.lock.yaml

@@ -1,14 +1,14 @@
 ---
+arches:
+  - x86_64
+  - aarch64
 contentOrigin:
   repofiles:
     # rhel9 rpm repos
     - ./redhat.repo
-packages:
-  - openssh-clients
-arches:
-  - x86_64
-  - aarch64
 context:
   containerfile:
     file: ../Dockerfile
     stageName: runtime-image
+packages:
+  - openssh-clients

.konflux/lock-runtime/rpms.in.yaml

@@ -27,7 +27,7 @@ spec:
     - description: Source Repository URL
       name: git-url
       type: string
-    - default: ''
+    - default: ""
       description: Revision of the Source Repository
       name: revision
       type: string
@@ -42,54 +42,54 @@ spec:
       description: Path to the Dockerfile inside the context specified by parameter path-context
       name: dockerfile
       type: string
-    - default: 'false'
+    - default: "false"
       description: Force rebuild image
       name: rebuild
       type: string
-    - default: 'false'
+    - default: "false"
       description: Skip checks against built image
       name: skip-checks
       type: string
-    - default: 'false'
+    - default: "false"
       description: Skip the ecosystem preflight checks (bundles should skip)
       name: skip-preflight
       type: string
-    - default: 'false'
+    - default: "false"
       description: Skip the sast coverity check
       name: skip-sast-coverity
       type: string
-    - default: 'false'
+    - default: "false"
       description: Execute the build with network isolation
       name: hermetic
       type: string
-    - default: ''
+    - default: ""
       description: Build dependencies to be prefetched by Cachi2
       name: prefetch-input
       type: string
-    - default: 'false'
+    - default: "false"
       description: Enable dev-package-manager within prefetching task
       name: dev-package-managers
       type: string
-    - default: ''
+    - default: ""
       description: Image tag expiration time, time values could be something like 1h, 2d, 3w for hours, days, and weeks, respectively.
       name: image-expires-after
-    - default: 'false'
+    - default: "false"
       description: Build a source image.
       name: build-source-image
       type: string
-    - default: 'true'
+    - default: "true"
       description: Add built image into an OCI image index
       name: build-image-index
       type: string
     - default: []
       description: Array of --build-arg values ("arg=value" strings) for buildah
       name: build-args
       type: array
-    - default: ''
+    - default: ""
       description: Path to a file with build arguments for buildah, see https://www.mankier.com/1/buildah-build#--build-arg-file
       name: build-args-file
       type: string
-    - default: 'false'
+    - default: "false"
       description: Whether to enable privileged mode, should be used only with remote VMs
       name: privileged-nested
       type: string
@@ -103,16 +103,16 @@ spec:
       name: additional-tags
       type: array
   results:
-    - description: ''
+    - description: ""
       name: IMAGE_URL
       value: $(tasks.build-image-index.results.IMAGE_URL)
-    - description: ''
+    - description: ""
       name: IMAGE_DIGEST
       value: $(tasks.build-image-index.results.IMAGE_DIGEST)
-    - description: ''
+    - description: ""
       name: CHAINS-GIT_URL
       value: $(tasks.clone-repository.results.url)
-    - description: ''
+    - description: ""
       name: CHAINS-GIT_COMMIT
       value: $(tasks.clone-repository.results.commit)
   tasks:
@@ -158,7 +158,7 @@ spec:
         - input: $(tasks.init.results.build)
           operator: in
           values:
-            - 'true'
+            - "true"
       workspaces:
         - name: basic-auth
           workspace: git-auth
@@ -243,7 +243,7 @@ spec:
         - name: CACHI2_ARTIFACT
           value: $(tasks.prefetch-dependencies.results.CACHI2_ARTIFACT)
         - name: IMAGE_APPEND_PLATFORM
-          value: 'true'
+          value: "true"
         - name: LABELS
           value:
             - $(tasks.generate-labels.results.labels[*])
@@ -274,7 +274,7 @@ spec:
         - input: $(tasks.init.results.build)
           operator: in
           values:
-            - 'true'
+            - "true"
     - name: build-image-index
       params:
         - name: IMAGE
@@ -303,7 +303,7 @@ spec:
         - input: $(tasks.init.results.build)
           operator: in
           values:
-            - 'true'
+            - "true"
     - name: build-source-image
       params:
         - name: BINARY_IMAGE
@@ -329,11 +329,11 @@ spec:
         - input: $(tasks.init.results.build)
           operator: in
           values:
-            - 'true'
+            - "true"
         - input: $(params.build-source-image)
           operator: in
           values:
-            - 'true'
+            - "true"
     - name: deprecated-base-image-check
       params:
         - name: IMAGE_URL
@@ -355,7 +355,7 @@ spec:
         - input: $(params.skip-checks)
           operator: in
           values:
-            - 'false'
+            - "false"
     - name: clair-scan
       params:
         - name: image-digest
@@ -377,7 +377,7 @@ spec:
         - input: $(params.skip-checks)
           operator: in
           values:
-            - 'false'
+            - "false"
     - name: ecosystem-cert-preflight-checks
       params:
         - name: image-url
@@ -397,11 +397,11 @@ spec:
         - input: $(params.skip-checks)
           operator: in
           values:
-            - 'false'
+            - "false"
         - input: $(params.skip-preflight)
           operator: in
           values:
-            - 'false'
+            - "false"
     - name: sast-snyk-check
       params:
         - name: image-digest
@@ -427,7 +427,7 @@ spec:
         - input: $(params.skip-checks)
           operator: in
           values:
-            - 'false'
+            - "false"
     - name: clamav-scan
       params:
         - name: image-digest
@@ -449,7 +449,7 @@ spec:
         - input: $(params.skip-checks)
           operator: in
           values:
-            - 'false'
+            - "false"
     - name: sast-coverity-check
       # This task is optional per Product Security
       onError: continue
@@ -496,11 +496,11 @@ spec:
         - input: $(params.skip-checks)
           operator: in
           values:
-            - 'false'
+            - "false"
         - input: $(params.skip-sast-coverity)
           operator: in
           values:
-            - 'false'
+            - "false"
         - input: $(tasks.coverity-availability-check.results.STATUS)
           operator: in
           values:
@@ -521,11 +521,11 @@ spec:
         - input: $(params.skip-checks)
           operator: in
           values:
-            - 'false'
+            - "false"
         - input: $(params.skip-sast-coverity)
           operator: in
           values:
-            - 'false'
+            - "false"
     - name: sast-shell-check
       params:
         - name: image-digest
@@ -551,7 +551,7 @@ spec:
         - input: $(params.skip-checks)
           operator: in
           values:
-            - 'false'
+            - "false"
     - name: sast-unicode-check
       params:
         - name: image-digest
@@ -577,7 +577,7 @@ spec:
         - input: $(params.skip-checks)
           operator: in
           values:
-            - 'false'
+            - "false"
     - name: apply-tags
       params:
         - name: ADDITIONAL_TAGS
@@ -641,7 +641,7 @@ spec:
         - input: $(params.skip-checks)
           operator: in
           values:
-            - 'false'
+            - "false"
   workspaces:
     - name: git-auth
       optional: true

.konflux/lock-runtime/rpms.lock.yaml

@@ -1,8 +1,6 @@
 ---
 extends: default
-
 ignore:
   - vendor/
-
 rules:
   line-length: disable

.tekton/build-pipeline.yaml

@@ -44,6 +44,21 @@ yamllint: ## Download yamllint and lint YAML files in the repository
 	yamllint -c $(ROOT_DIR)/.yamllint.yaml .
 	@echo "YAML linting completed successfully."
 
+.PHONY: yq
+yq: ## Download yq
+	@echo "Downloading yq..."
+	$(MAKE) -C $(ROOT_DIR)/telco5g-konflux/scripts/download download-yq DOWNLOAD_INSTALL_DIR=$(ROOT_DIR)/bin
+	@echo "Yq downloaded successfully."
+
+.PHONY: yq-sort-and-format
+yq-sort-and-format: yq ## Sort keys/reformat all YAML files in the repository
+	@echo "Sorting keys and reformatting YAML files..."
+	@find . -name "*.yaml" -o -name "*.yml" | grep -v -E "(telco5g-konflux/|target/|vendor/|bin/|\.git/)" | while read file; do \
+		echo "Processing $$file..."; \
+		yq -i '.. |= sort_keys(.)' "$$file"; \
+	done
+	@echo "YAML sorting and formatting completed successfully."
+
 .PHONY: konflux-all
 konflux-all: konflux-filter-unused-redhat-repos konflux-update-tekton-task-refs ## Run all Konflux-related targets
 	@echo "All Konflux targets completed successfully."