From 1f36f690c8332988605e1c28c2299a9619a66a67 Mon Sep 17 00:00:00 2001
From: Batuhan Apaydin <batuhan.apaydin@chainguard.dev>
Date: Tue, 10 Dec 2024 12:23:56 +0300
Subject: [PATCH] kyverno-notation-aws package build

Signed-off-by: Batuhan Apaydin <batuhan.apaydin@chainguard.dev>
---
 kyverno-notation-aws.yaml | 48 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100644 kyverno-notation-aws.yaml

diff --git a/kyverno-notation-aws.yaml b/kyverno-notation-aws.yaml
new file mode 100644
index 000000000000..89428cf1645e
--- /dev/null
+++ b/kyverno-notation-aws.yaml
@@ -0,0 +1,48 @@
+#nolint:git-checkout-must-use-github-updates,valid-pipeline-git-checkout-tag
+package:
+  name: kyverno-notation-aws
+  version: 1.0.1_git20241210
+  epoch: 0
+  description: Kyverno extension service for Notation and the AWS signer
+  copyright:
+    - license: Apache-2.0
+
+pipeline:
+  - uses: git-checkout
+    with:
+      expected-commit: efda86b8e6a97938c3caafcb5c98a5aede2b97e1
+      repository: https://github.com/nirmata/kyverno-notation-aws
+      branch: main
+
+  - uses: go/bump
+    with:
+      deps: github.com/kyverno/kyverno@v1.13.0 github.com/golang-jwt/jwt/v4@v4.5.1 github.com/open-policy-agent/opa@v0.68.0
+      replaces: github.com/docker/docker=github.com/docker/docker@v26.1.5+incompatible
+
+  - uses: go/build
+    with:
+      modroot: .
+      output: kyverno-notation-aws
+      packages: .
+
+subpackages:
+  - name: ${{package.name}}-compat
+    description: "Kyverno extension service for Notation and the AWS signer (compatibility)"
+    pipeline:
+      - runs: |
+          mkdir -p ${{targets.contextdir}}/plugins/com.amazonaws.signer.notation.plugin
+          ln -sf /usr/bin/kyverno-notation-aws ${{targets.contextdir}}/kyverno-notation-aws
+          ln -sf /usr/bin/notation-com.amazonaws.signer.notation.plugin ${{targets.contextdir}}/plugins/com.amazonaws.signer.notation.plugin/notation-com.amazonaws.signer.notation.plugin
+
+update:
+  enabled: true
+  git: {}
+  schedule:
+    period: weekly
+    reason: they don't have a release schedule yet the main branch is more up to date
+
+test:
+  pipeline:
+    - name: Help test
+      runs: |
+        kyverno-notation-aws -h