[chore] Updating orchestrator npm packages to OCI artifacts #2231

OpinionatedHeron · 2026-01-28T22:46:36Z

Description

Updating orchestrator npm packages to the relevant OCI Artifacts to reflect updates to RHDH.

npm packages were causing the scaffolder plugin to throw an error during startup

Which issue(s) does this PR fix or relate to

RHDHBUGS-2527

PR acceptance criteria

Tests
Documentation

How to test changes / Special notes to the reviewer

Deploy Operator-based instance of RHDH with the orchestrator plugins enabled.

Signed-off-by: Leanne Ahern <lahern@redhat.com>

openshift-ci · 2026-01-28T22:46:42Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign nickboldt for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

github-actions · 2026-01-28T22:52:17Z

PR images are available:

sonarqubecloud · 2026-01-28T22:54:18Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

gazarenkov · 2026-01-29T09:34:16Z

config/profile/rhdh/default-config/dynamic-plugins.yaml

    plugins:
      - disabled: true
-        package: "@redhat/backstage-plugin-orchestrator@1.8.2"
+        package: "oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator:bs_1.45.3__5.1.0!red-hat-developer-hub-backstage-plugin-orchestrator"


I think we can use just oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator:bs_1.45.3__5.1.0 here and later if it is a single artifact in oci image

yes, now that we have fixed the downstream issue with discovering the path from the annotation, you can safely use this for ghcr.io (community builds, not for GA use) AND quay.io (CI builds).

Ideally you would have the registry.access.redhat.com/rhdh/ path here, instead of either community or CI builds.

But then your install process needs a "can't find plugin on reg.acc.rh.com (because not GA yet) so fall back to quay.io/rhdh via mirror / IDMS" bit of mapping logic

So... maybe for THIS repo you use quay, and for downstream we transform from quay.io to/rhdh/ to registry.access.redhat.com/rhdh/ ?

see also https://issues.redhat.com/browse/RHIDP-11725

rm3l · 2026-01-29T10:10:36Z

config/profile/rhdh/default-config/dynamic-plugins.yaml

      - disabled: true
-        package: "@redhat/backstage-plugin-orchestrator@1.8.2"
+        package: "oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator:bs_1.45.3__5.1.0!red-hat-developer-hub-backstage-plugin-orchestrator"
        integrity: sha512-rnUA6iZ2JVAyASfwS4P9HeFmpqCgH6FQouzzg4s6lCPAsYUFvu6tifJ3df5lThXPUTJ2cDvvQgamU+4DiHP2jw==


Suggested change

integrity: sha512-rnUA6iZ2JVAyASfwS4P9HeFmpqCgH6FQouzzg4s6lCPAsYUFvu6tifJ3df5lThXPUTJ2cDvvQgamU+4DiHP2jw==

You can remove the integrity line when using OCI references as it is not used for OCI references: https://github.com/redhat-developer/rhdh/blob/main/docker/install-dynamic-plugins.py#L54
Using a digest instead of tag allows performing an integrity check for OCI packages.

as noted above we probably want to use the downstream Konflux builds, not the ghcr.io community builds.

thought more about this and realized we need to do more transformation work to make this happen -- see https://issues.redhat.com/browse/RHIDP-11725

rm3l · 2026-01-29T10:10:49Z

config/profile/rhdh/default-config/dynamic-plugins.yaml

      - disabled: true
-        package: "@redhat/backstage-plugin-orchestrator-backend-dynamic@1.8.2"
+        package: "oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend:bs_1.45.3__8.3.0!red-hat-developer-hub-backstage-plugin-orchestrator-backend"
        integrity: sha512-6G0YguzCM5nCDpOrIGJpLTXVMr6EBdIVqSXtsLH9RvBH25RTuFpfJ7q6eEp26DqveaiqUCfBpJ51smdjcsEzFQ==


Suggested change

integrity: sha512-6G0YguzCM5nCDpOrIGJpLTXVMr6EBdIVqSXtsLH9RvBH25RTuFpfJ7q6eEp26DqveaiqUCfBpJ51smdjcsEzFQ==

rm3l · 2026-01-29T10:10:57Z

config/profile/rhdh/default-config/dynamic-plugins.yaml

      - disabled: true
-        package: "@redhat/backstage-plugin-scaffolder-backend-module-orchestrator-dynamic@1.8.2"
+        package: "oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator:bs_1.45.3__1.3.1!red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator"
        integrity: sha512-N2hCn9RI/QVEoK56FAkGkSDbvfQCOIzVsJTwDX0kf//npO++2crRSJpB1Lr/m2UtYxfaXZX53p8sPcK3g8yWkQ==


Suggested change

integrity: sha512-N2hCn9RI/QVEoK56FAkGkSDbvfQCOIzVsJTwDX0kf//npO++2crRSJpB1Lr/m2UtYxfaXZX53p8sPcK3g8yWkQ==

rm3l · 2026-01-29T10:11:06Z

config/profile/rhdh/default-config/dynamic-plugins.yaml

      - disabled: true
-        package: "@redhat/backstage-plugin-orchestrator-form-widgets@1.8.2"
+        package: "oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets:bs_1.45.3__1.2.0!red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets"
        integrity: sha512-Pe0dn3g+YTK3jbl36E8nt4zdyH/3w+MWgRyFWPc2B0eV4/L/aRfRC4KxcktmHPdamRGXTIaXL6cFae8TZl8Htw==


Suggested change

integrity: sha512-Pe0dn3g+YTK3jbl36E8nt4zdyH/3w+MWgRyFWPc2B0eV4/L/aRfRC4KxcktmHPdamRGXTIaXL6cFae8TZl8Htw==

rm3l · 2026-01-29T10:12:34Z

/cherry-pick release-1.9

openshift-cherrypick-robot · 2026-01-29T10:12:38Z

@rm3l: once the present PR merges, I will cherry-pick it on top of release-1.9 in a new PR and assign it to you.

Details

In response to this:

/cherry-pick release-1.9

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

rm3l · 2026-01-29T10:23:02Z

config/profile/rhdh/default-config/dynamic-plugins.yaml

              url: http://sonataflow-platform-data-index-service               
      - disabled: true
-        package: "@redhat/backstage-plugin-orchestrator-form-widgets@1.8.2"
+        package: "oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets:bs_1.45.3__1.2.0!red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets"


Looks like there is a newer tag under bs_1.45.3. See redhat-developer/rhdh-chart#307 (comment)

rm3l · 2026-01-29T10:23:32Z

config/profile/rhdh/default-config/dynamic-plugins.yaml

          - ref: sonataflow
      - disabled: true
-        package: "@redhat/backstage-plugin-scaffolder-backend-module-orchestrator-dynamic@1.8.2"
+        package: "oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator:bs_1.45.3__1.3.1!red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator"


New tag available. See redhat-developer/rhdh-chart#307 (comment)

rm3l · 2026-01-29T10:24:08Z

config/profile/rhdh/default-config/dynamic-plugins.yaml

    plugins:
      - disabled: true
-        package: "@redhat/backstage-plugin-orchestrator@1.8.2"
+        package: "oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator:bs_1.45.3__5.1.0!red-hat-developer-hub-backstage-plugin-orchestrator"


New tag available. See redhat-developer/rhdh-chart#307 (comment)

rm3l · 2026-01-29T10:24:29Z

config/profile/rhdh/default-config/dynamic-plugins.yaml

                              - IsOrchestratorCatalogTabAvailable
      - disabled: true
-        package: "@redhat/backstage-plugin-orchestrator-backend-dynamic@1.8.2"
+        package: "oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend:bs_1.45.3__8.3.0!red-hat-developer-hub-backstage-plugin-orchestrator-backend"


New tag available. See redhat-developer/rhdh-chart#307 (comment)

rm3l · 2026-01-29T11:15:27Z

config/profile/rhdh/default-config/dynamic-plugins.yaml

See my other comment in the Helm Chart about leveraging the {{inherit}} option introduced in 1.9.0: redhat-developer/rhdh-chart#307 (comment)
This is also applicable to the Operator and would make the config much simpler IMO.

nickboldt · 2026-01-30T15:45:57Z

/cherry-pick release-1.9

If we use quay refs here instead, you can't cherry pick because the plugins will be using different tags (1.9.0-- or 1.10.0--) and therefore also different digests.

Updating orchestrator npm packages to OCI artifacts

faec3c0

Signed-off-by: Leanne Ahern <lahern@redhat.com>

OpinionatedHeron temporarily deployed to internal January 28, 2026 22:46 — with GitHub Actions Inactive

openshift-ci bot requested review from subhashkhileri and zdrapela January 28, 2026 22:46

gazarenkov reviewed Jan 29, 2026

View reviewed changes

rm3l reviewed Jan 29, 2026

View reviewed changes

rm3l mentioned this pull request Jan 29, 2026

[chore] Updating orchestrator npm packages to OCI artifacts redhat-developer/rhdh-chart#307

Open

5 tasks

rm3l reviewed Jan 29, 2026

View reviewed changes

[chore] Updating orchestrator npm packages to OCI artifacts #2231

Are you sure you want to change the base?

[chore] Updating orchestrator npm packages to OCI artifacts #2231

Uh oh!

Conversation

OpinionatedHeron commented Jan 28, 2026

Description

Which issue(s) does this PR fix or relate to

PR acceptance criteria

How to test changes / Special notes to the reviewer

Uh oh!

openshift-ci bot commented Jan 28, 2026

Uh oh!

github-actions bot commented Jan 28, 2026

Uh oh!

sonarqubecloud bot commented Jan 28, 2026

Quality Gate passed

Uh oh!

Choose a reason for hiding this comment

Uh oh!

nickboldt Jan 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

nickboldt Jan 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

rm3l commented Jan 29, 2026

Uh oh!

openshift-cherrypick-robot commented Jan 29, 2026

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

nickboldt commented Jan 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

nickboldt Jan 30, 2026 •

edited

Loading

nickboldt Jan 30, 2026 •

edited

Loading