chore(tekton): operator console plugin pin

[ArthurVardevanyan]

PR Type

Bug fix

---

Description

• Pin console plugin image to stable digest

• Prevent upstream webpack caching corruption issues

• Update operator manifest generation script logic

• Ensure idempotent image pinning during CI

---

Diagram Walkthrough

flowchart LR
  script["create_manifest.sh"]
  perl["perl regex"]
  yaml["operator.yaml"]
  pin["pinned console plugin image"]
  script -- "executes" --> perl
  perl -- "modifies" --> yaml
  yaml -- "contains" --> pin

Loading

File Walkthrough

	Relevant files
Configuration changes	operator.yaml Pin console plugin image in operator deployment                    kubernetes/tekton/overlays/operator/operator.yaml Add IMAGE_PIPELINES_CONSOLE_PLUGIN environment variable Pin image to stable SHA256 digest +3/-0
Bug fix	create_manifest.sh Update manifest generation script for image pinning            kubernetes/tekton/create_manifest.sh Implement idempotent perl regex for image pinning Remove existing console plugin entries before appending Document upstream webpack caching corruption workaround +14/-0

---

---

⚙️ Agent run details

• Model: openai/qwen3.6-35b-a3b
• Tokens: 5,206 in / 4,270 out / 9,476 total
• Time cost: 28.3s
• AI calls: 1

[homelab-okd]

GitOps CI Results

Last Updated: 2026-09-23T17:14:23Z

✅ Expand: PR Checks

      ✅ PR Title

Passed.

      ✅ Signed Commits

Passed.

      ✅ PR Checklist

Passed.

✅ Expand: Linting

      ✅ Markdownlint

No markdown files changed.

      ✅ Prettier

Passed.

      ✅ Shellcheck

Passed.

      ✅ golangci-lint

No Go files changed.

      ✅ Kubeconform

Passed.

✅ Expand: Static Checks

      ✅ Large File

Passed.

      ✅ YAML Syntax

Passed.

      ✅ Config Sort Order

Passed.

      ✅ Starting CSV

Passed.

      ✅ Scaffold Table

Disabled.

✅ Expand: Kustomize Build

      ✅ Overlay Build

1 overlay(s) built successfully.

      ✅ Hooks

No hooks defined.

      ✅ Kustomize Fix

All kustomization.yaml files are up to date.

      ✅ Ghost Patches

None detected.

✅ Expand: Scaffold Validation

      ✅ Scaffold Drift

No drift detected.

      ✅ Scaffold Exec

All scaffold runs succeeded.

      ✅ Disabled Overlays

No modified overlay is disabled.

      ✅ Pre-Existing Scaffold Drift

None detected.

      ✅ Cluster Coverage

All clusters accounted for.

✅ Expand: Scaffold Drift Protection

All modified overlays with a scaffold template have drift protection enabled.

ℹ️ Expand: Resource Compliance

      ℹ️ Accepted Exemptions (pre-existing) (3)

Resource	Value	Scope
ClusterRole tekton-operator	resources	pre-existing
ClusterRole tekton-operator	resources	pre-existing
ClusterRole tekton-operator	resources	pre-existing

✅ Expand: CI Notes

Pipeline completed.

• Tool version: k8s-gitops-ci version 0.60.0-rc.1

k8s-gitops-ci pipeline --url="https://github.com/ArthurVardevanyan/HomeLab" --pr=739 --assume-openshift

[homelab-pr-agent]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪

🧪 No relevant tests

🔒 No security concerns identified

⚡ No major issues detected

---

⚙️ Agent run details

• Model: openai/qwen3.6-35b-a3b
• Tokens: 6,072 in / 3,912 out / 9,984 total
• Time cost: 44.8s
• AI calls: 1

[homelab-pr-agent]

PR Code Suggestions ✨

Explore these optional code suggestions:

Category	Suggestion	Impact
General	Handle Windows line endings and missing trailing newlines The regex assumes the target line ends with a Unix newline (\n). If the YAML file lacks a trailing newline or uses Windows line endings (\r\n), the match will fail and the pinned image will not be inserted. Update the regex to handle optional carriage returns and missing trailing newlines to prevent silent failures. kubernetes/tekton/create_manifest.sh [618] -perl -0pi -e 's~(IMAGE_ADDONS_PARAM_MAVEN_IMAGE\n([ \t]+value: .*?\n))~$1 - name: IMAGE_PIPELINES_CONSOLE_PLUGIN\n value: $ENV{IMAGE_PIPELINES_CONSOLE_PLUGIN}\n~m' "${OPERATOR_YAML}" +perl -0pi -e 's~(IMAGE_ADDONS_PARAM_MAVEN_IMAGE\r?\n([ \t]+value: .*?\r?\n))~$1 - name: IMAGE_PIPELINES_CONSOLE_PLUGIN\n value: $ENV{IMAGE_PIPELINES_CONSOLE_PLUGIN}\n~m' "${OPERATOR_YAML}" Suggestion importance[1-10]: 5 __ Why: The suggestion correctly identifies a potential edge case with line endings in regex matching. While it improves robustness for cross-platform compatibility, it is a minor improvement for a Linux-centric build script where Unix line endings are standard.	Low

---

⚙️ Agent run details

• Model: openai/qwen3.6-35b-a3b
• Tokens: 8,562 in / 10,853 out / 19,415 total
• Time cost: 100.9s
• AI calls: 2