chore: centralize ko base image configuration

- Add defaultBaseImage to .ko.yaml for consistent base image usage
- Remove inline .ko.yaml generation from CI workflow
- Remove inline .ko.yaml generation from presubmit test script
- Use repository's .ko.yaml as single source of truth

This eliminates duplication and makes base image configuration
easier to maintain and update in one place.

Signed-off-by: Vibhav Bobade <vibhav.bobde@gmail.com>

Author: waveywaves

.github/workflows/ci.yaml

@@ -105,18 +105,7 @@ jobs:
     - uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9
     - name: ko-resolve
       run: |
-          cat <<EOF > .ko.yaml
-          defaultBaseImage: cgr.dev/chainguard/static
-          baseImageOverrides:
-            # Use the combined base image for images that should include Windows support.
-            # NOTE: Make sure this list of images to use the combined base image is in sync with what's in tekton/publish.yaml's 'create-ko-yaml' Task.
-            github.com/tektoncd/pipeline/cmd/entrypoint: ghcr.io/tektoncd/pipeline/github.com/tektoncd/pipeline/combined-base-image:latest
-            github.com/tektoncd/pipeline/cmd/nop: ghcr.io/tektoncd/pipeline/github.com/tektoncd/pipeline/combined-base-image:latest
-            github.com/tektoncd/pipeline/cmd/workingdirinit: ghcr.io/tektoncd/pipeline/github.com/tektoncd/pipeline/combined-base-image:latest
-
-            github.com/tektoncd/pipeline/cmd/git-init: cgr.dev/chainguard/git
-          EOF
-
+          # Use the repository's .ko.yaml for consistent base images
           KO_DOCKER_REPO=example.com ko resolve -l 'app.kubernetes.io/component!=resolvers' --platform=all --push=false -R -f config 1>/dev/null
           KO_DOCKER_REPO=example.com ko resolve --platform=all --push=false -f config/resolvers 1>/dev/null
   e2e-tests:

.ko.yaml

@@ -1,2 +1,10 @@
+defaultBaseImage: cgr.dev/chainguard/static@sha256:67a1b00e0134e2b3a614c7198a26f7deed9d11b7acad4d52c79c0cfd47a2eae7
 baseImageOverrides:
+  # Use the combined base image for images that should include Windows support.
+  # NOTE: Make sure this list of images to use the combined base image is in sync with what's in tekton/publish.yaml's 'create-ko-yaml' Task.
+  github.com/tektoncd/pipeline/cmd/entrypoint: ghcr.io/tektoncd/pipeline/github.com/tektoncd/pipeline/combined-base-image:latest
+  github.com/tektoncd/pipeline/cmd/nop: ghcr.io/tektoncd/pipeline/github.com/tektoncd/pipeline/combined-base-image:latest
+  github.com/tektoncd/pipeline/cmd/workingdirinit: ghcr.io/tektoncd/pipeline/github.com/tektoncd/pipeline/combined-base-image:latest
+
+  github.com/tektoncd/pipeline/cmd/git-init: cgr.dev/chainguard/git
   github.com/tektoncd/pipeline/cmd/resolvers: ghcr.io/tektoncd/plumbing/tini-git@sha256:2c18f0b3ed4394e27068b5c70bb55419797e8fc743d8ea9e0c2766001b36b5b4

test/presubmit-tests.sh

@@ -46,18 +46,7 @@ function check_yaml_lint() {
 function ko_resolve() {
   header "Running `ko resolve`"
 
-  cat <<EOF > .ko.yaml
-    defaultBaseImage: cgr.dev/chainguard/static
-    baseImageOverrides:
-      # Use the combined base image for images that should include Windows support.
-      # NOTE: Make sure this list of images to use the combined base image is in sync with what's in tekton/publish.yaml's 'create-ko-yaml' Task.
-      github.com/tektoncd/pipeline/cmd/entrypoint: ghcr.io/tektoncd/pipeline/github.com/tektoncd/pipeline/combined-base-image:latest
-      github.com/tektoncd/pipeline/cmd/nop: ghcr.io/tektoncd/pipeline/github.com/tektoncd/pipeline/combined-base-image:latest
-      github.com/tektoncd/pipeline/cmd/workingdirinit: ghcr.io/tektoncd/pipeline/github.com/tektoncd/pipeline/combined-base-image:latest
-
-      github.com/tektoncd/pipeline/cmd/resolvers: ghcr.io/tektoncd/plumbing/tini-git@sha256:2c18f0b3ed4394e27068b5c70bb55419797e8fc743d8ea9e0c2766001b36b5b4
-EOF
-
+  # Use the repository's .ko.yaml for consistent base images
   KO_DOCKER_REPO=example.com ko resolve -l 'app.kubernetes.io/component!=resolvers' --platform=all --push=false -R -f config 1>/dev/null
   KO_DOCKER_REPO=example.com ko resolve --platform=all --push=false -f config/resolvers 1>/dev/null
 }