feat: Tekton/Gerrit interaction
This PS adds the basic gerrit<->tekton interaction, which consists of two charts: * Jarvis-System: which launches a utility to scrape pending gerrit checks and rechecks, before forwarding requests to a tekton event- listener. This event listener then launches a pipeline that sets up the environment for the pipeline in the project repo to make use of. * Jarvis-Project: which launches a job, which sets up a repo in gerrit, configures the checks upon it, and addtionally sets up appropriate repos in harbor for oci images and helm charts. Note: This change makes use of the Jarvis-Connector, which is hosted here: * https://github.com/att-comdev/jarvis-connector Change-Id: I0ca023e357fb562b4f65e081a06ac6581471b4bc Signed-off-by: Pete Birley <pete@port.direct>
This commit is contained in:
Pete Birley
parent
ea909370ed
commit
2dab74898b
@ -1,8 +1,9 @@
|
|||||||
#NOTE(portdirect): we use the following images, untill https://gerrit-review.googlesource.com/c/k8s-gerrit/+/230465 is resolved.
|
# NOTE(portdirect): images from rebuilt on ubuntu, and have the checks plugin pre-installed
|
||||||
|
# https://github.com/portdirect/gerrit-k8s/commit/cbbe103d552af84885289aeb81dd09b1195c5e8b
|
||||||
images:
|
images:
|
||||||
registry:
|
registry:
|
||||||
name: quay.io
|
name: quay.io
|
||||||
version: v0.1-191-g251041b-dirty-3.3.0
|
version: v0.1-194-gcbbe103-3.3.1
|
||||||
gerrit:
|
gerrit:
|
||||||
images:
|
images:
|
||||||
gerritInit: port/gerrit-init
|
gerritInit: port/gerrit-init
|
||||||
|
|||||||
1
charts/jarvis-project/.helmignore
Normal file
1
charts/jarvis-project/.helmignore
Normal file
@ -0,0 +1 @@
|
|||||||
|
values_overrides
|
||||||
21
charts/jarvis-project/Chart.yaml
Normal file
21
charts/jarvis-project/Chart.yaml
Normal file
@ -0,0 +1,21 @@
|
|||||||
|
apiVersion: v2
|
||||||
|
name: jarvis-project
|
||||||
|
description: A Helm chart for Kubernetes
|
||||||
|
|
||||||
|
# A chart can be either an 'application' or a 'library' chart.
|
||||||
|
#
|
||||||
|
# Application charts are a collection of templates that can be packaged into versioned archives
|
||||||
|
# to be deployed.
|
||||||
|
#
|
||||||
|
# Library charts provide useful utilities or functions for the chart developer. They're included as
|
||||||
|
# a dependency of application charts to inject those utilities and functions into the rendering
|
||||||
|
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
|
||||||
|
type: application
|
||||||
|
|
||||||
|
# This is the chart version. This version number should be incremented each time you make changes
|
||||||
|
# to the chart and its templates, including the app version.
|
||||||
|
version: 0.1.0
|
||||||
|
|
||||||
|
# This is the version number of the application being deployed. This version number should be
|
||||||
|
# incremented each time you make changes to the application.
|
||||||
|
appVersion: 2.20.0
|
||||||
24
charts/jarvis-project/templates/Certificate-project.yaml
Normal file
24
charts/jarvis-project/templates/Certificate-project.yaml
Normal file
@ -0,0 +1,24 @@
|
|||||||
|
{{- define "Certificate-project" -}}
|
||||||
|
---
|
||||||
|
apiVersion: cert-manager.io/v1alpha2
|
||||||
|
kind: Certificate
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-project
|
||||||
|
labels: {{- include "helpers.labels.labels" . | nindent 4 }}
|
||||||
|
spec:
|
||||||
|
secretName: {{ template "helpers.labels.fullname" . }}-project-tls
|
||||||
|
issuerRef:
|
||||||
|
name: {{ .Values.params.endpoints.tls.issuer.name }}
|
||||||
|
# We can reference ClusterIssuers by changing the kind here.
|
||||||
|
# The default value is Issuer (i.e. a locally namespaced Issuer)
|
||||||
|
kind: {{ .Values.params.endpoints.tls.issuer.kind }}
|
||||||
|
commonName: {{ .Values.params.endpoints.hostname }}
|
||||||
|
organization:
|
||||||
|
- Kubernetes API
|
||||||
|
dnsNames:
|
||||||
|
- {{ .Values.params.endpoints.hostname }}
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- if .Values.params.endpoints.tls.cert_manager -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "Certificate-project" ) }}
|
||||||
|
{{- end -}}
|
||||||
80
charts/jarvis-project/templates/Job-project.yaml
Normal file
80
charts/jarvis-project/templates/Job-project.yaml
Normal file
@ -0,0 +1,80 @@
|
|||||||
|
{{- define "Job-project" -}}
|
||||||
|
---
|
||||||
|
apiVersion: batch/v1
|
||||||
|
kind: Job
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}
|
||||||
|
labels: {{- include "helpers.labels.labels" . | nindent 4 }}
|
||||||
|
annotations:
|
||||||
|
"helm.sh/hook": post-install,post-upgrade
|
||||||
|
"helm.sh/hook-delete-policy": before-hook-creation
|
||||||
|
spec:
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels: {{- include "helpers.labels.labels" . | nindent 8 }}
|
||||||
|
spec:
|
||||||
|
restartPolicy: OnFailure
|
||||||
|
nodeSelector:
|
||||||
|
{{ include "helpers.pod.node_selector" ( dict "Global" $ "Application" "project" ) | nindent 8 }}
|
||||||
|
containers:
|
||||||
|
- name: project
|
||||||
|
image: {{ include "helpers.pod.container.image" ( dict "Global" $ "Application" "project" ) }}
|
||||||
|
imagePullPolicy: {{ .Values.images.pull.policy | quote }}
|
||||||
|
env:
|
||||||
|
- name: SSL_CERT_FILE
|
||||||
|
value: /usr/local/share/ca-certificates/ca.crt
|
||||||
|
- name: JARVIS_PROJECT_NAME
|
||||||
|
value: {{ .Release.Name }}
|
||||||
|
- name: GERRIT_USERNAME
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}
|
||||||
|
key: gerrit-username
|
||||||
|
- name: GERRIT_HOST
|
||||||
|
value: {{ .Values.params.gerrit.host }}
|
||||||
|
- name: GERRIT_URL
|
||||||
|
value: "https://{{ .Values.params.gerrit.host }}"
|
||||||
|
command:
|
||||||
|
- sh
|
||||||
|
- -cex
|
||||||
|
- |
|
||||||
|
|
||||||
|
# Create gerrit repo
|
||||||
|
ssh -oStrictHostKeyChecking=accept-new -oUserKnownHostsFile=/dev/null -p 29418 -i /run/jarvis/secret/gerrit-ssh-key "${GERRIT_USERNAME}@${GERRIT_HOST}" gerrit ls-projects -r "^$JARVIS_PROJECT_NAME\$" | grep -q "^${JARVIS_PROJECT_NAME}\$" || \
|
||||||
|
ssh -oStrictHostKeyChecking=accept-new -oUserKnownHostsFile=/dev/null -p 29418 -i /run/jarvis/secret/gerrit-ssh-key ${GERRIT_USERNAME}@${GERRIT_HOST} gerrit create-project "${JARVIS_PROJECT_NAME}" --submit-type MERGE_IF_NECESSARY --owner Administrators --empty-commit
|
||||||
|
|
||||||
|
# Set up checks on the repo
|
||||||
|
jarvis-connector --auth_file /run/jarvis/gerrit-authfile --gerrit $GERRIT_URL --update --repo "${JARVIS_PROJECT_NAME}" --prefix jarvispipeline || \
|
||||||
|
jarvis-connector --auth_file /run/jarvis/gerrit-authfile --gerrit $GERRIT_URL --register --repo "${JARVIS_PROJECT_NAME}" --prefix jarvispipeline
|
||||||
|
|
||||||
|
# TODO: Add setup for harbor repo.
|
||||||
|
volumeMounts:
|
||||||
|
- name: gerrit-creds
|
||||||
|
mountPath: /run/jarvis/gerrit-authfile
|
||||||
|
subPath: gerrit-authfile
|
||||||
|
- name: gerrit-creds
|
||||||
|
mountPath: /run/jarvis/secret/gerrit-ssh-key
|
||||||
|
subPath: gerrit-ssh-key
|
||||||
|
- name: jarvis-ca-crt
|
||||||
|
mountPath: /usr/local/share/ca-certificates/ca.crt
|
||||||
|
subPath: ca.crt
|
||||||
|
volumes:
|
||||||
|
- name: gerrit-creds
|
||||||
|
secret:
|
||||||
|
secretName: {{ template "helpers.labels.fullname" . }}
|
||||||
|
defaultMode: 0400
|
||||||
|
items:
|
||||||
|
- key: gerrit-ssh-key
|
||||||
|
path: gerrit-ssh-key
|
||||||
|
- key: gerrit-authfile
|
||||||
|
path: gerrit-authfile
|
||||||
|
# NOTE: We are making the assumption that the ca for gerrit is the same as that for the tekton eventlistener
|
||||||
|
- name: jarvis-ca-crt
|
||||||
|
secret:
|
||||||
|
secretName: {{ template "helpers.labels.fullname" . }}-project-tls
|
||||||
|
items:
|
||||||
|
- key: ca.crt
|
||||||
|
path: ca.crt
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "Job-project" ) }}
|
||||||
14
charts/jarvis-project/templates/Secret-project.yaml
Normal file
14
charts/jarvis-project/templates/Secret-project.yaml
Normal file
@ -0,0 +1,14 @@
|
|||||||
|
{{- define "Secret-project" -}}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}
|
||||||
|
labels: {{- include "helpers.labels.labels" . | nindent 4 }}
|
||||||
|
data:
|
||||||
|
gerrit-username: "{{ b64enc .Values.params.gerrit.user }}"
|
||||||
|
gerrit-authfile: "{{ b64enc ( printf "%s:%s" .Values.params.gerrit.user .Values.params.gerrit.password ) }}"
|
||||||
|
gerrit-ssh-key: "{{ b64enc ( .Values.params.gerrit.ssh_key ) }}"
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "Secret-project" ) }}
|
||||||
28
charts/jarvis-project/templates/helpers/_config.tpl
Normal file
28
charts/jarvis-project/templates/helpers/_config.tpl
Normal file
@ -0,0 +1,28 @@
|
|||||||
|
{{- define "helpers.config.renderer" -}}
|
||||||
|
{{- $Global := index . "Global" -}}
|
||||||
|
{{- $key := index . "key" -}}
|
||||||
|
|
||||||
|
{{- $local := dict -}}
|
||||||
|
{{- $_ := set $local "templateRaw" ( index $Global.Values.config $key ) -}}
|
||||||
|
|
||||||
|
{{- with $Global -}}
|
||||||
|
{{- if not (kindIs "string" $local.templateRaw) -}}
|
||||||
|
{{- $_ := set $local "template" ( toString ( toPrettyJson ( $local.templateRaw ) ) ) -}}
|
||||||
|
{{- $_ := set $local "render" ( toString ( toYaml ( fromJson ( tpl $local.template . ) ) ) ) -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $_ := set $local "template" $local.templateRaw -}}
|
||||||
|
{{- $_ := set $local "render" ( tpl $local.template . ) -}}
|
||||||
|
{{- end }}
|
||||||
|
{{ printf "%s: |" $key }}
|
||||||
|
{{ $local.render | indent 2 }}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
|
||||||
|
{{- define "helpers.config.hash" -}}
|
||||||
|
{{- $name := index . "TemplateName" -}}
|
||||||
|
{{- $context := index . "Global" -}}
|
||||||
|
{{- $last := base $context.Template.Name }}
|
||||||
|
{{- $wtf := $context.Template.Name | replace $last $name -}}
|
||||||
|
{{- include $wtf $context | sha256sum | quote -}}
|
||||||
|
{{- end -}}
|
||||||
49
charts/jarvis-project/templates/helpers/_labels.tpl
Normal file
49
charts/jarvis-project/templates/helpers/_labels.tpl
Normal file
@ -0,0 +1,49 @@
|
|||||||
|
{{/* vim: set filetype=mustache: */}}
|
||||||
|
{{/*
|
||||||
|
Expand the name of the chart.
|
||||||
|
*/}}
|
||||||
|
{{- define "helpers.labels.name" -}}
|
||||||
|
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create a default fully qualified app name.
|
||||||
|
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
||||||
|
*/}}
|
||||||
|
{{- define "helpers.labels.fullname" -}}
|
||||||
|
{{- if .Values.fullnameOverride -}}
|
||||||
|
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $name := default .Chart.Name .Values.nameOverride -}}
|
||||||
|
{{- if contains $name .Release.Name -}}
|
||||||
|
{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create chart name and version as used by the chart label.
|
||||||
|
*/}}
|
||||||
|
{{- define "helpers.labels.chart" -}}
|
||||||
|
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Labels to use on {deploy|sts}.spec.selector.matchLabels and svc.spec.selector
|
||||||
|
*/}}
|
||||||
|
{{- define "helpers.labels.matchLabels" -}}
|
||||||
|
app.kubernetes.io/name: {{ include "helpers.labels.name" . }}
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Common labels
|
||||||
|
*/}}
|
||||||
|
{{- define "helpers.labels.labels" -}}
|
||||||
|
{{ include "helpers.labels.matchLabels" . }}
|
||||||
|
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||||
|
helm.sh/chart: {{ include "helpers.labels.chart" . }}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
22
charts/jarvis-project/templates/helpers/_pod.tpl
Normal file
22
charts/jarvis-project/templates/helpers/_pod.tpl
Normal file
@ -0,0 +1,22 @@
|
|||||||
|
|
||||||
|
{{- define "helpers.pod.container.image" -}}
|
||||||
|
{{- $Global := index . "Global" -}}
|
||||||
|
{{- $Application := index . "Application" -}}
|
||||||
|
{{- with index $.Global.Values.images.applications $Application -}}
|
||||||
|
{{- printf "%s/%s:%s" .repo .name ( .tag | toString ) | quote -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "helpers.pod.node_selector" -}}
|
||||||
|
{{- $Global := index . "Global" -}}
|
||||||
|
{{- $Application := index . "Application" -}}
|
||||||
|
{{- with index $.Global.Values.node_labels $Application -}}
|
||||||
|
{{ if kindIs "slice" . }}
|
||||||
|
{{ range $k, $item := . }}
|
||||||
|
{{ $item.key }}: {{ $item.value | quote }}
|
||||||
|
{{ end }}
|
||||||
|
{{ else }}
|
||||||
|
{{ .key }}: {{ .value | quote }}
|
||||||
|
{{ end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
107
charts/jarvis-project/templates/helpers/_template.tpl
Normal file
107
charts/jarvis-project/templates/helpers/_template.tpl
Normal file
@ -0,0 +1,107 @@
|
|||||||
|
{{- define "helpers.template.overlay" -}}
|
||||||
|
{{- $local := dict -}}
|
||||||
|
{{/*
|
||||||
|
By default we merge lists with a 'name' key's values
|
||||||
|
*/}}
|
||||||
|
{{- $_ := set $local "merge_same_named" true -}}
|
||||||
|
{{- if kindIs "map" $ -}}
|
||||||
|
{{- if hasKey $ "merge_same_named" -}}
|
||||||
|
{{- $_ := set $local "merge_same_named" $.merge_same_named -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- $_ := set $local "input" ( fromYaml ( toString ( include $.template_definition $.Global ) ) ) -}}
|
||||||
|
{{- $target := dict -}}
|
||||||
|
{{- $overlay_keys := regexSplit "-+" ( trimSuffix ".yaml" ( lower ( base $.Global.Template.Name ) ) ) 2 }}
|
||||||
|
{{- $_ := set $local "overlay" dict -}}
|
||||||
|
{{- if hasKey $.Global.Values.over_rides ( index $overlay_keys 0 ) -}}
|
||||||
|
{{- if hasKey ( index $.Global.Values.over_rides ( index $overlay_keys 0 ) ) ( index $overlay_keys 1 ) -}}
|
||||||
|
{{- $_ := set $local "overlay" ( index $.Global.Values.over_rides ( index $overlay_keys 0 ) ( index $overlay_keys 1 ) ) -}}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- range $item := tuple $local.input $local.overlay -}}
|
||||||
|
{{- $call := dict "target" $target "source" . "merge_same_named" $local.merge_same_named -}}
|
||||||
|
{{- $_ := include "helpers._merge" $call -}}
|
||||||
|
{{- $_ := set $local "result" $call.result -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- if kindIs "map" $ -}}
|
||||||
|
{{- $_ := set $ "result" $local.result -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{ $target | toYaml }}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "helpers._merge" -}}
|
||||||
|
{{- $local := dict -}}
|
||||||
|
{{- $_ := set $ "result" $.source -}}
|
||||||
|
{{/*
|
||||||
|
TODO: Should we `fail` when trying to merge a collection (map or slice) with
|
||||||
|
either a different kind of collection or a scalar?
|
||||||
|
*/}}
|
||||||
|
{{- if and (kindIs "map" $.target) (kindIs "map" $.source) -}}
|
||||||
|
{{- range $key, $sourceValue := $.source -}}
|
||||||
|
{{- if not (hasKey $.target $key) -}}
|
||||||
|
{{- $_ := set $local "newTargetValue" $sourceValue -}}
|
||||||
|
{{- if kindIs "map" $sourceValue -}}
|
||||||
|
{{- $copy := dict -}}
|
||||||
|
{{- $call := dict "target" $copy "source" $sourceValue -}}
|
||||||
|
{{- $_ := include "helpers._merge.shallow" $call -}}
|
||||||
|
{{- $_ := set $local "newTargetValue" $copy -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $targetValue := index $.target $key -}}
|
||||||
|
{{- $call := dict "target" $targetValue "source" $sourceValue "merge_same_named" $.merge_same_named -}}
|
||||||
|
{{- $_ := include "helpers._merge" $call -}}
|
||||||
|
{{- $_ := set $local "newTargetValue" $call.result -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- $_ := set $.target $key $local.newTargetValue -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- $_ := set $ "result" $.target -}}
|
||||||
|
{{- else if and (kindIs "slice" $.target) (kindIs "slice" $.source) -}}
|
||||||
|
{{- $call := dict "target" $.target "source" $.source -}}
|
||||||
|
{{- $_ := include "helpers._merge.append_slice" $call -}}
|
||||||
|
{{- if $.merge_same_named -}}
|
||||||
|
{{- $_ := set $local "result" list -}}
|
||||||
|
{{- $_ := set $local "named_items" dict -}}
|
||||||
|
{{- range $item := $call.result -}}
|
||||||
|
{{- $_ := set $local "has_name_key" false -}}
|
||||||
|
{{- if kindIs "map" $item -}}
|
||||||
|
{{- if hasKey $item "name" -}}
|
||||||
|
{{- $_ := set $local "has_name_key" true -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- if $local.has_name_key -}}
|
||||||
|
{{- if hasKey $local.named_items $item.name -}}
|
||||||
|
{{- $named_item := index $local.named_items $item.name -}}
|
||||||
|
{{- $call := dict "target" $named_item "source" $item "merge_same_named" $.merge_same_named -}}
|
||||||
|
{{- $_ := include "helpers._merge" $call -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $copy := dict -}}
|
||||||
|
{{- $copy_call := dict "target" $copy "source" $item -}}
|
||||||
|
{{- $_ := include "helpers._merge.shallow" $copy_call -}}
|
||||||
|
{{- $_ := set $local.named_items $item.name $copy -}}
|
||||||
|
{{- $_ := set $local "result" (append $local.result $copy) -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $_ := set $local "result" (append $local.result $item) -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $_ := set $local "result" $call.result -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- $_ := set $ "result" (uniq $local.result) -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "helpers._merge.shallow" -}}
|
||||||
|
{{- range $key, $value := $.source -}}
|
||||||
|
{{- $_ := set $.target $key $value -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "helpers._merge.append_slice" -}}
|
||||||
|
{{- $local := dict -}}
|
||||||
|
{{- $_ := set $local "result" $.target -}}
|
||||||
|
{{- range $value := $.source -}}
|
||||||
|
{{- $_ := set $local "result" (append $local.result $value) -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- $_ := set $ "result" $local.result -}}
|
||||||
|
{{- end -}}
|
||||||
93
charts/jarvis-project/values.schema.json
Normal file
93
charts/jarvis-project/values.schema.json
Normal file
@ -0,0 +1,93 @@
|
|||||||
|
{
|
||||||
|
"$id": "https://example.com/arrays.schema.json",
|
||||||
|
"$schema": "http://json-schema.org/draft-07/schema#",
|
||||||
|
"description": "A helm charts image references",
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"images": {
|
||||||
|
"type": "object",
|
||||||
|
"additionalProperties": false,
|
||||||
|
"required": [
|
||||||
|
"applications",
|
||||||
|
"pull"
|
||||||
|
],
|
||||||
|
"properties": {
|
||||||
|
"applications": {
|
||||||
|
"type": "object",
|
||||||
|
"additionalProperties": {
|
||||||
|
"type": "object",
|
||||||
|
"required": [
|
||||||
|
"tag",
|
||||||
|
"name",
|
||||||
|
"repo"
|
||||||
|
],
|
||||||
|
"additionalProperties": false,
|
||||||
|
"properties": {
|
||||||
|
"tag": {
|
||||||
|
"anyOf": [
|
||||||
|
{
|
||||||
|
"type": "object"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"type": "string"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"description": "The image tag."
|
||||||
|
},
|
||||||
|
"name": {
|
||||||
|
"type": "string",
|
||||||
|
"description": "The image name."
|
||||||
|
},
|
||||||
|
"repo": {
|
||||||
|
"type": "string",
|
||||||
|
"description": "The image repo."
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"pull": {
|
||||||
|
"type": "object",
|
||||||
|
"additionalProperties": false,
|
||||||
|
"required": [
|
||||||
|
"policy"
|
||||||
|
],
|
||||||
|
"properties": {
|
||||||
|
"policy": {
|
||||||
|
"type": "string",
|
||||||
|
"enum": [
|
||||||
|
"Always",
|
||||||
|
"IfNotPresent",
|
||||||
|
"Never"
|
||||||
|
]
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"config": {
|
||||||
|
"type": "object",
|
||||||
|
"additionalProperties": {
|
||||||
|
"anyOf": [
|
||||||
|
{
|
||||||
|
"type": "object"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"type": "string"
|
||||||
|
}
|
||||||
|
]
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"params": {
|
||||||
|
"type": "object",
|
||||||
|
"additionalProperties": {
|
||||||
|
"type": "object"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"over_rides": {
|
||||||
|
"type": "object",
|
||||||
|
"additionalProperties": {
|
||||||
|
"type": "object"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
34
charts/jarvis-project/values.yaml
Normal file
34
charts/jarvis-project/values.yaml
Normal file
@ -0,0 +1,34 @@
|
|||||||
|
# Default values for project-aio.
|
||||||
|
# This is a YAML-formatted file.
|
||||||
|
# Declare variables to be passed into your templates.
|
||||||
|
|
||||||
|
images:
|
||||||
|
applications:
|
||||||
|
project:
|
||||||
|
tag: latest
|
||||||
|
name: attcomdev/jarvis-connector
|
||||||
|
repo: quay.io
|
||||||
|
pull:
|
||||||
|
policy: Always
|
||||||
|
|
||||||
|
node_labels:
|
||||||
|
project:
|
||||||
|
key: kubernetes.io/os
|
||||||
|
value: linux
|
||||||
|
|
||||||
|
over_rides: {}
|
||||||
|
|
||||||
|
params:
|
||||||
|
gerrit:
|
||||||
|
user: ""
|
||||||
|
password: ""
|
||||||
|
ssh_key: ""
|
||||||
|
host: gerrit.jarvis.local
|
||||||
|
endpoints:
|
||||||
|
hostname: localhost
|
||||||
|
tls:
|
||||||
|
cert_manager: true
|
||||||
|
issuer:
|
||||||
|
name: jarvis-ca-issuer
|
||||||
|
kind: ClusterIssuer
|
||||||
|
|
||||||
1
charts/jarvis-system/.helmignore
Normal file
1
charts/jarvis-system/.helmignore
Normal file
@ -0,0 +1 @@
|
|||||||
|
values_overrides
|
||||||
21
charts/jarvis-system/Chart.yaml
Normal file
21
charts/jarvis-system/Chart.yaml
Normal file
@ -0,0 +1,21 @@
|
|||||||
|
apiVersion: v2
|
||||||
|
name: jarvis-system
|
||||||
|
description: A Helm chart for Kubernetes
|
||||||
|
|
||||||
|
# A chart can be either an 'application' or a 'library' chart.
|
||||||
|
#
|
||||||
|
# Application charts are a collection of templates that can be packaged into versioned archives
|
||||||
|
# to be deployed.
|
||||||
|
#
|
||||||
|
# Library charts provide useful utilities or functions for the chart developer. They're included as
|
||||||
|
# a dependency of application charts to inject those utilities and functions into the rendering
|
||||||
|
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
|
||||||
|
type: application
|
||||||
|
|
||||||
|
# This is the chart version. This version number should be incremented each time you make changes
|
||||||
|
# to the chart and its templates, including the app version.
|
||||||
|
version: 0.1.0
|
||||||
|
|
||||||
|
# This is the version number of the application being deployed. This version number should be
|
||||||
|
# incremented each time you make changes to the application.
|
||||||
|
appVersion: 2.20.0
|
||||||
24
charts/jarvis-system/templates/Certificate-el.yaml
Normal file
24
charts/jarvis-system/templates/Certificate-el.yaml
Normal file
@ -0,0 +1,24 @@
|
|||||||
|
{{- define "Certificate-el" -}}
|
||||||
|
---
|
||||||
|
apiVersion: cert-manager.io/v1alpha2
|
||||||
|
kind: Certificate
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-el
|
||||||
|
labels: {{- include "helpers.labels.labels" . | nindent 4 }}
|
||||||
|
spec:
|
||||||
|
secretName: {{ template "helpers.labels.fullname" . }}-el-tls
|
||||||
|
issuerRef:
|
||||||
|
name: {{ .Values.params.endpoints.tls.issuer.name }}
|
||||||
|
# We can reference ClusterIssuers by changing the kind here.
|
||||||
|
# The default value is Issuer (i.e. a locally namespaced Issuer)
|
||||||
|
kind: {{ .Values.params.endpoints.tls.issuer.kind }}
|
||||||
|
commonName: {{ .Values.params.endpoints.hostname }}
|
||||||
|
organization:
|
||||||
|
- Kubernetes API
|
||||||
|
dnsNames:
|
||||||
|
- {{ .Values.params.endpoints.hostname }}
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- if .Values.params.endpoints.tls.cert_manager -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "Certificate-el" ) }}
|
||||||
|
{{- end -}}
|
||||||
@ -1,7 +1,9 @@
|
|||||||
|
{{- define "ClusterRole-el" -}}
|
||||||
|
---
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
metadata:
|
metadata:
|
||||||
name: tekton-triggers-example-clusterrole
|
name: {{ template "helpers.labels.fullname" . }}-el
|
||||||
rules:
|
rules:
|
||||||
# Permissions for every EventListener deployment to function
|
# Permissions for every EventListener deployment to function
|
||||||
- apiGroups: ["triggers.tekton.dev"]
|
- apiGroups: ["triggers.tekton.dev"]
|
||||||
@ -9,9 +11,15 @@ rules:
|
|||||||
verbs: ["get", "list", "watch"]
|
verbs: ["get", "list", "watch"]
|
||||||
- apiGroups: [""]
|
- apiGroups: [""]
|
||||||
# secrets are only needed for GitHub/GitLab interceptors
|
# secrets are only needed for GitHub/GitLab interceptors
|
||||||
resources: ["configmaps", "secrets"]
|
resources: ["configmaps"]
|
||||||
verbs: ["get", "list", "watch"]
|
verbs: ["get", "list", "watch"]
|
||||||
# Permissions to create resources in associated TriggerTemplates
|
# Permissions to create resources in associated TriggerTemplates
|
||||||
- apiGroups: ["tekton.dev"]
|
- apiGroups: ["tekton.dev"]
|
||||||
resources: ["pipelineruns", "pipelineresources", "taskruns"]
|
resources: ["pipelineruns", "pipelineresources", "taskruns"]
|
||||||
verbs: ["create"]
|
verbs: ["create"]
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources: ["serviceaccounts"]
|
||||||
|
verbs: ["impersonate"]
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "ClusterRole-el" ) }}
|
||||||
17
charts/jarvis-system/templates/ClusterRoleBinding-el.yaml
Normal file
17
charts/jarvis-system/templates/ClusterRoleBinding-el.yaml
Normal file
@ -0,0 +1,17 @@
|
|||||||
|
{{- define "ClusterRoleBinding-el" -}}
|
||||||
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRoleBinding
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-el
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: ClusterRole
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-el
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-el
|
||||||
|
namespace: {{ $.Release.Namespace }}
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "ClusterRoleBinding-el" ) }}
|
||||||
66
charts/jarvis-system/templates/Deployment-connector.yaml
Normal file
66
charts/jarvis-system/templates/Deployment-connector.yaml
Normal file
@ -0,0 +1,66 @@
|
|||||||
|
{{- define "Deployment-connector" -}}
|
||||||
|
---
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}
|
||||||
|
labels: {{- include "helpers.labels.labels" . | nindent 4 }}
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
minReadySeconds: 30
|
||||||
|
strategy:
|
||||||
|
rollingUpdate:
|
||||||
|
maxUnavailable: 0
|
||||||
|
selector:
|
||||||
|
matchLabels: {{- include "helpers.labels.matchLabels" . | nindent 6 }}
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels: {{- include "helpers.labels.labels" . | nindent 8 }}
|
||||||
|
spec:
|
||||||
|
nodeSelector:
|
||||||
|
{{ include "helpers.pod.node_selector" ( dict "Global" $ "Application" "connector" ) | nindent 8 }}
|
||||||
|
containers:
|
||||||
|
- name: connector
|
||||||
|
image: {{ include "helpers.pod.container.image" ( dict "Global" $ "Application" "connector" ) }}
|
||||||
|
imagePullPolicy: {{ .Values.images.pull.policy | quote }}
|
||||||
|
env:
|
||||||
|
- name: SSL_CERT_FILE
|
||||||
|
value: /usr/local/share/ca-certificates/ca.crt
|
||||||
|
- name: GERRIT_URL
|
||||||
|
value: "https://{{ .Values.params.gerrit.host }}"
|
||||||
|
- name: EVENTLISTENER_URL
|
||||||
|
value: "http://el-{{ template "helpers.labels.fullname" . }}.{{ .Release.Namespace }}.svc:8080"
|
||||||
|
command:
|
||||||
|
- /usr/bin/jarvis-connector
|
||||||
|
args:
|
||||||
|
- --auth_file
|
||||||
|
- /run/jarvis/gerrit-authfile
|
||||||
|
- --gerrit
|
||||||
|
- "$(GERRIT_URL)"
|
||||||
|
- --event_listener
|
||||||
|
- "$(EVENTLISTENER_URL)"
|
||||||
|
volumeMounts:
|
||||||
|
- name: gerrit-authfile
|
||||||
|
mountPath: /run/jarvis/gerrit-authfile
|
||||||
|
subPath: gerrit-authfile
|
||||||
|
- name: jarvis-ca-crt
|
||||||
|
mountPath: /usr/local/share/ca-certificates/ca.crt
|
||||||
|
subPath: ca.crt
|
||||||
|
volumes:
|
||||||
|
- name: gerrit-authfile
|
||||||
|
secret:
|
||||||
|
secretName: {{ template "helpers.labels.fullname" . }}-gerrit
|
||||||
|
defaultMode: 0444
|
||||||
|
items:
|
||||||
|
- key: gerrit-authfile
|
||||||
|
path: gerrit-authfile
|
||||||
|
# NOTE: We are making the assumption that the ca for gerrit is the same as that for the tekton eventlistener
|
||||||
|
- name: jarvis-ca-crt
|
||||||
|
secret:
|
||||||
|
secretName: {{ template "helpers.labels.fullname" . }}-el-tls
|
||||||
|
items:
|
||||||
|
- key: ca.crt
|
||||||
|
path: ca.crt
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "Deployment-connector" ) }}
|
||||||
41
charts/jarvis-system/templates/EventListener-system.yaml
Normal file
41
charts/jarvis-system/templates/EventListener-system.yaml
Normal file
@ -0,0 +1,41 @@
|
|||||||
|
{{- define "EventListener-system" -}}
|
||||||
|
---
|
||||||
|
apiVersion: triggers.tekton.dev/v1alpha1
|
||||||
|
kind: EventListener
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}
|
||||||
|
spec:
|
||||||
|
serviceAccountName: {{ template "helpers.labels.fullname" . }}-el
|
||||||
|
triggers:
|
||||||
|
- name: jarvis-create
|
||||||
|
interceptors:
|
||||||
|
- cel:
|
||||||
|
filter: >-
|
||||||
|
header.match('X-Jarvis', 'create')
|
||||||
|
bindings:
|
||||||
|
- ref: {{ template "helpers.labels.fullname" . }}-create
|
||||||
|
template:
|
||||||
|
ref: {{ template "helpers.labels.fullname" . }}-create
|
||||||
|
- name: jarvis-create-success
|
||||||
|
interceptors:
|
||||||
|
- cel:
|
||||||
|
filter: >-
|
||||||
|
header.match('Ce-Type', 'dev.tekton.event.pipelinerun.successful.v1') &&
|
||||||
|
body.pipelineRun.metadata.labels['triggers.tekton.dev/trigger'] == 'jarvis-create'
|
||||||
|
bindings:
|
||||||
|
- ref: {{ template "helpers.labels.fullname" . }}-createresult
|
||||||
|
template:
|
||||||
|
ref: {{ template "helpers.labels.fullname" . }}-createsuccess
|
||||||
|
- name: jarvis-create-failure
|
||||||
|
interceptors:
|
||||||
|
- cel:
|
||||||
|
filter: >-
|
||||||
|
header.match('Ce-Type', 'dev.tekton.event.pipelinerun.failed.v1') &&
|
||||||
|
body.pipelineRun.metadata.labels['triggers.tekton.dev/trigger'] == 'jarvis-create'
|
||||||
|
bindings:
|
||||||
|
- ref: {{ template "helpers.labels.fullname" . }}-createresult
|
||||||
|
template:
|
||||||
|
ref: {{ template "helpers.labels.fullname" . }}-createfailure
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "EventListener-system" ) }}
|
||||||
48
charts/jarvis-system/templates/Pipeline-create.yaml
Normal file
48
charts/jarvis-system/templates/Pipeline-create.yaml
Normal file
@ -0,0 +1,48 @@
|
|||||||
|
{{- define "Pipeline-create" -}}
|
||||||
|
---
|
||||||
|
apiVersion: tekton.dev/v1beta1
|
||||||
|
kind: Pipeline
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-create
|
||||||
|
spec:
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
- name: project
|
||||||
|
- name: changeNumber
|
||||||
|
- name: patchSetNumber
|
||||||
|
- name: checkerUUID
|
||||||
|
workspaces:
|
||||||
|
- name: output
|
||||||
|
tasks:
|
||||||
|
- name: createregisterscheduled
|
||||||
|
taskRef:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-createregisterscheduled
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
value: $(params.repoRoot)
|
||||||
|
- name: project
|
||||||
|
value: $(params.project)
|
||||||
|
- name: changeNumber
|
||||||
|
value: $(params.changeNumber)
|
||||||
|
- name: patchSetNumber
|
||||||
|
value: $(params.patchSetNumber)
|
||||||
|
- name: checkerUUID
|
||||||
|
value: $(params.checkerUUID)
|
||||||
|
- name: createcheckoutrepo
|
||||||
|
taskRef:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-createcheckoutrepo
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
value: $(params.repoRoot)
|
||||||
|
- name: project
|
||||||
|
value: $(params.project)
|
||||||
|
- name: changeNumber
|
||||||
|
value: $(params.changeNumber)
|
||||||
|
- name: patchSetNumber
|
||||||
|
value: $(params.patchSetNumber)
|
||||||
|
workspaces:
|
||||||
|
- name: output
|
||||||
|
workspace: output
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "Pipeline-create" ) }}
|
||||||
31
charts/jarvis-system/templates/Pipeline-createFailure.yaml
Normal file
31
charts/jarvis-system/templates/Pipeline-createFailure.yaml
Normal file
@ -0,0 +1,31 @@
|
|||||||
|
{{- define "Pipeline-createFailure" -}}
|
||||||
|
---
|
||||||
|
apiVersion: tekton.dev/v1beta1
|
||||||
|
kind: Pipeline
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-createfailure
|
||||||
|
spec:
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
- name: project
|
||||||
|
- name: changeNumber
|
||||||
|
- name: patchSetNumber
|
||||||
|
- name: checkerUUID
|
||||||
|
tasks:
|
||||||
|
- name: createfailure
|
||||||
|
taskRef:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-createfailure
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
value: $(params.repoRoot)
|
||||||
|
- name: project
|
||||||
|
value: $(params.project)
|
||||||
|
- name: changeNumber
|
||||||
|
value: $(params.changeNumber)
|
||||||
|
- name: patchSetNumber
|
||||||
|
value: $(params.patchSetNumber)
|
||||||
|
- name: checkerUUID
|
||||||
|
value: $(params.checkerUUID)
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "Pipeline-createFailure" ) }}
|
||||||
31
charts/jarvis-system/templates/Pipeline-createSuccess.yaml
Normal file
31
charts/jarvis-system/templates/Pipeline-createSuccess.yaml
Normal file
@ -0,0 +1,31 @@
|
|||||||
|
{{- define "Pipeline-createSuccess" -}}
|
||||||
|
---
|
||||||
|
apiVersion: tekton.dev/v1beta1
|
||||||
|
kind: Pipeline
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-createsuccess
|
||||||
|
spec:
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
- name: project
|
||||||
|
- name: changeNumber
|
||||||
|
- name: patchSetNumber
|
||||||
|
- name: checkerUUID
|
||||||
|
tasks:
|
||||||
|
- name: createsuccess
|
||||||
|
taskRef:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-createsuccess
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
value: $(params.repoRoot)
|
||||||
|
- name: project
|
||||||
|
value: $(params.project)
|
||||||
|
- name: changeNumber
|
||||||
|
value: $(params.changeNumber)
|
||||||
|
- name: patchSetNumber
|
||||||
|
value: $(params.patchSetNumber)
|
||||||
|
- name: checkerUUID
|
||||||
|
value: $(params.checkerUUID)
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "Pipeline-createSuccess" ) }}
|
||||||
13
charts/jarvis-system/templates/Secret-gerrit.yaml
Normal file
13
charts/jarvis-system/templates/Secret-gerrit.yaml
Normal file
@ -0,0 +1,13 @@
|
|||||||
|
{{- define "Secret-gerrit" -}}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-gerrit
|
||||||
|
labels: {{- include "helpers.labels.labels" . | nindent 4 }}
|
||||||
|
data:
|
||||||
|
gerrit-authfile: "{{ b64enc ( printf "%s:%s" .Values.params.gerrit.user .Values.params.gerrit.password ) }}"
|
||||||
|
gerrit-netrc: "{{ b64enc ( printf "machine %s login %s password %s" "gerrit.jarvis.local" .Values.params.gerrit.user .Values.params.gerrit.password ) }}"
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "Secret-gerrit" ) }}
|
||||||
9
charts/jarvis-system/templates/ServiceAccount-el.yaml
Normal file
9
charts/jarvis-system/templates/ServiceAccount-el.yaml
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
{{- define "ServiceAccount-el" -}}
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ServiceAccount
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-el
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "ServiceAccount-el" ) }}
|
||||||
69
charts/jarvis-system/templates/Task-createCheckoutRepo.yaml
Normal file
69
charts/jarvis-system/templates/Task-createCheckoutRepo.yaml
Normal file
@ -0,0 +1,69 @@
|
|||||||
|
{{- define "Task-createCheckoutRepo" -}}
|
||||||
|
---
|
||||||
|
apiVersion: tekton.dev/v1beta1
|
||||||
|
kind: Task
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-createcheckoutrepo
|
||||||
|
spec:
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
- name: project
|
||||||
|
- name: changeNumber
|
||||||
|
- name: patchSetNumber
|
||||||
|
workspaces:
|
||||||
|
- name: output
|
||||||
|
description: The git repo will be cloned onto the volume backing this workspace
|
||||||
|
results:
|
||||||
|
- name: commit
|
||||||
|
description: The precise commit SHA that was fetched by this Task
|
||||||
|
steps:
|
||||||
|
- name: checkout-repo
|
||||||
|
image: {{ include "helpers.pod.container.image" ( dict "Global" $ "Application" "task_git" ) }}
|
||||||
|
script: |
|
||||||
|
#!/bin/sh
|
||||||
|
set -eu -o pipefail -x
|
||||||
|
|
||||||
|
# A change ref has the format refs/changes/X/Y/Z where X is
|
||||||
|
# the last two digits of the change number, Y is the entire
|
||||||
|
# change number, and Z is the patch set. For example, if
|
||||||
|
# the change number is 263270, the ref would be
|
||||||
|
# refs/changes/70/263270/2 for the second patch set.
|
||||||
|
change_ref="refs/changes/$(echo "0$(params.changeNumber)" | awk '{ print substr( $0, length($0) - 1, length($0) ) }')/$(params.changeNumber)/$(params.patchSetNumber)"
|
||||||
|
echo $change_ref
|
||||||
|
|
||||||
|
|
||||||
|
CHECKOUT_DIR="$(workspaces.output.path)"
|
||||||
|
|
||||||
|
cleandir() {
|
||||||
|
# Delete any existing contents of the repo directory if it exists.
|
||||||
|
#
|
||||||
|
# We don't just "rm -rf $CHECKOUT_DIR" because $CHECKOUT_DIR might be "/"
|
||||||
|
# or the root of a mounted volume.
|
||||||
|
if [[ -d "$CHECKOUT_DIR" ]] ; then
|
||||||
|
# Delete non-hidden files and directories
|
||||||
|
rm -rf "$CHECKOUT_DIR"/*
|
||||||
|
# Delete files and directories starting with . but excluding ..
|
||||||
|
rm -rf "$CHECKOUT_DIR"/.[!.]*
|
||||||
|
# Delete files and directories starting with .. plus any other character
|
||||||
|
rm -rf "$CHECKOUT_DIR"/..?*
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
cleandir
|
||||||
|
|
||||||
|
cd ${CHECKOUT_DIR}
|
||||||
|
git init
|
||||||
|
git config http.sslVerify "false"
|
||||||
|
git config advice.detachedHead "false"
|
||||||
|
git fetch $(params.repoRoot)/$(params.project) $change_ref
|
||||||
|
git checkout FETCH_HEAD
|
||||||
|
|
||||||
|
RESULT_SHA="$(git rev-parse HEAD)"
|
||||||
|
EXIT_CODE="$?"
|
||||||
|
if [ "$EXIT_CODE" != 0 ] ; then
|
||||||
|
exit $EXIT_CODE
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo -n "$RESULT_SHA" > $(results.commit.path)
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "Task-createCheckoutRepo" ) }}
|
||||||
60
charts/jarvis-system/templates/Task-createFailure.yaml
Normal file
60
charts/jarvis-system/templates/Task-createFailure.yaml
Normal file
@ -0,0 +1,60 @@
|
|||||||
|
{{- define "Task-createFailure" -}}
|
||||||
|
---
|
||||||
|
apiVersion: tekton.dev/v1beta1
|
||||||
|
kind: Task
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-createfailure
|
||||||
|
spec:
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
- name: project
|
||||||
|
- name: changeNumber
|
||||||
|
- name: patchSetNumber
|
||||||
|
- name: checkerUUID
|
||||||
|
steps:
|
||||||
|
- name: createfailure
|
||||||
|
image: {{ include "helpers.pod.container.image" ( dict "Global" $ "Application" "task_curl" ) }}
|
||||||
|
env:
|
||||||
|
- name: "JARVIS_TASKRUN_NAMESPACE"
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
fieldPath: metadata.namespace
|
||||||
|
- name: "JARVIS_TASKRUN_NAME"
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
fieldPath: metadata.labels['tekton.dev/taskRun']
|
||||||
|
volumeMounts:
|
||||||
|
- name: gerrit-netrc
|
||||||
|
mountPath: /run/jarvis/gerrit-netrc
|
||||||
|
subPath: gerrit-netrc
|
||||||
|
script: |
|
||||||
|
#!/bin/sh
|
||||||
|
set -eu -o pipefail -x
|
||||||
|
|
||||||
|
curl \
|
||||||
|
--netrc-file /run/jarvis/gerrit-netrc \
|
||||||
|
--fail \
|
||||||
|
--insecure \
|
||||||
|
-L \
|
||||||
|
-H "Content-Type: application/json; charset=UTF-8" \
|
||||||
|
$(params.repoRoot)/a/changes/$(params.changeNumber)/revisions/$(params.patchSetNumber)/checks/ \
|
||||||
|
--data-binary @- << EOF
|
||||||
|
{
|
||||||
|
"checker_uuid": "$(params.checkerUUID)",
|
||||||
|
"state": "FAILED",
|
||||||
|
"url": "http://{{ .Values.params.tekton.dashboard.host }}/#/namespaces/${JARVIS_TASKRUN_NAMESPACE}/taskruns/${JARVIS_TASKRUN_NAME}",
|
||||||
|
"message": "Jarvis failed to process the run for change #$(params.changeNumber) ps #$(params.patchSetNumber) to the $(params.project) repo",
|
||||||
|
"finished": "$(date --utc '+%F %T.%N')"
|
||||||
|
}
|
||||||
|
EOF
|
||||||
|
volumes:
|
||||||
|
- name: gerrit-netrc
|
||||||
|
secret:
|
||||||
|
secretName: {{ template "helpers.labels.fullname" . }}-gerrit
|
||||||
|
defaultMode: 0444
|
||||||
|
items:
|
||||||
|
- key: gerrit-netrc
|
||||||
|
path: gerrit-netrc
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "Task-createFailure" ) }}
|
||||||
@ -0,0 +1,59 @@
|
|||||||
|
{{- define "Task-createRegisterScheduled" -}}
|
||||||
|
---
|
||||||
|
apiVersion: tekton.dev/v1beta1
|
||||||
|
kind: Task
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-createregisterscheduled
|
||||||
|
spec:
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
- name: project
|
||||||
|
- name: changeNumber
|
||||||
|
- name: patchSetNumber
|
||||||
|
- name: checkerUUID
|
||||||
|
steps:
|
||||||
|
- name: register-scheduled
|
||||||
|
image: {{ include "helpers.pod.container.image" ( dict "Global" $ "Application" "task_curl" ) }}
|
||||||
|
env:
|
||||||
|
- name: "JARVIS_TASKRUN_NAMESPACE"
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
fieldPath: metadata.namespace
|
||||||
|
- name: "JARVIS_TASKRUN_NAME"
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
fieldPath: metadata.labels['tekton.dev/taskRun']
|
||||||
|
volumeMounts:
|
||||||
|
- name: gerrit-netrc
|
||||||
|
mountPath: /run/jarvis/gerrit-netrc
|
||||||
|
subPath: gerrit-netrc
|
||||||
|
script: |
|
||||||
|
#!/bin/sh
|
||||||
|
set -eu -o pipefail -x
|
||||||
|
|
||||||
|
curl \
|
||||||
|
--netrc-file /run/jarvis/gerrit-netrc \
|
||||||
|
--fail \
|
||||||
|
--insecure \
|
||||||
|
-L \
|
||||||
|
-H "Content-Type: application/json; charset=UTF-8" \
|
||||||
|
$(params.repoRoot)/a/changes/$(params.changeNumber)/revisions/$(params.patchSetNumber)/checks/ \
|
||||||
|
--data-binary @- << EOF
|
||||||
|
{
|
||||||
|
"checker_uuid": "$(params.checkerUUID)",
|
||||||
|
"state": "SCHEDULED",
|
||||||
|
"url": "http://{{ .Values.params.tekton.dashboard.host }}/#/namespaces/${JARVIS_TASKRUN_NAMESPACE}/taskruns/${JARVIS_TASKRUN_NAME}",
|
||||||
|
"message": "Jarvis has started to process the run for change #$(params.changeNumber) ps #$(params.patchSetNumber) to the $(params.project) repo"
|
||||||
|
}
|
||||||
|
EOF
|
||||||
|
volumes:
|
||||||
|
- name: gerrit-netrc
|
||||||
|
secret:
|
||||||
|
secretName: {{ template "helpers.labels.fullname" . }}-gerrit
|
||||||
|
defaultMode: 0444
|
||||||
|
items:
|
||||||
|
- key: gerrit-netrc
|
||||||
|
path: gerrit-netrc
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "Task-createRegisterScheduled" ) }}
|
||||||
59
charts/jarvis-system/templates/Task-createSuccess.yaml
Normal file
59
charts/jarvis-system/templates/Task-createSuccess.yaml
Normal file
@ -0,0 +1,59 @@
|
|||||||
|
{{- define "Task-createSuccess" -}}
|
||||||
|
---
|
||||||
|
apiVersion: tekton.dev/v1beta1
|
||||||
|
kind: Task
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-createsuccess
|
||||||
|
spec:
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
- name: project
|
||||||
|
- name: changeNumber
|
||||||
|
- name: patchSetNumber
|
||||||
|
- name: checkerUUID
|
||||||
|
steps:
|
||||||
|
- name: createsuccess
|
||||||
|
image: {{ include "helpers.pod.container.image" ( dict "Global" $ "Application" "task_curl" ) }}
|
||||||
|
env:
|
||||||
|
- name: "JARVIS_TASKRUN_NAMESPACE"
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
fieldPath: metadata.namespace
|
||||||
|
- name: "JARVIS_TASKRUN_NAME"
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
fieldPath: metadata.labels['tekton.dev/taskRun']
|
||||||
|
volumeMounts:
|
||||||
|
- name: gerrit-netrc
|
||||||
|
mountPath: /run/jarvis/gerrit-netrc
|
||||||
|
subPath: gerrit-netrc
|
||||||
|
script: |
|
||||||
|
#!/bin/sh
|
||||||
|
set -eu -o pipefail -x
|
||||||
|
|
||||||
|
curl \
|
||||||
|
--netrc-file /run/jarvis/gerrit-netrc \
|
||||||
|
--fail \
|
||||||
|
--insecure \
|
||||||
|
-L \
|
||||||
|
-H "Content-Type: application/json; charset=UTF-8" \
|
||||||
|
$(params.repoRoot)/a/changes/$(params.changeNumber)/revisions/$(params.patchSetNumber)/checks/ \
|
||||||
|
--data-binary @- << EOF
|
||||||
|
{
|
||||||
|
"checker_uuid": "$(params.checkerUUID)",
|
||||||
|
"state": "SUCCESSFUL",
|
||||||
|
"url": "http://{{ .Values.params.tekton.dashboard.host }}/#/namespaces/${JARVIS_TASKRUN_NAMESPACE}/taskruns/${JARVIS_TASKRUN_NAME}",
|
||||||
|
"message": "Jarvis has successfully processed the run for change #$(params.changeNumber) ps #$(params.patchSetNumber) to the $(params.project) repo"
|
||||||
|
}
|
||||||
|
EOF
|
||||||
|
volumes:
|
||||||
|
- name: gerrit-netrc
|
||||||
|
secret:
|
||||||
|
secretName: {{ template "helpers.labels.fullname" . }}-gerrit
|
||||||
|
defaultMode: 0444
|
||||||
|
items:
|
||||||
|
- key: gerrit-netrc
|
||||||
|
path: gerrit-netrc
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "Task-createSuccess" ) }}
|
||||||
21
charts/jarvis-system/templates/TriggerBinding-create.yaml
Normal file
21
charts/jarvis-system/templates/TriggerBinding-create.yaml
Normal file
@ -0,0 +1,21 @@
|
|||||||
|
{{- define "TriggerBinding-create" -}}
|
||||||
|
---
|
||||||
|
apiVersion: triggers.tekton.dev/v1alpha1
|
||||||
|
kind: TriggerBinding
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-create
|
||||||
|
spec:
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
value: $(body.repoRoot)
|
||||||
|
- name: project
|
||||||
|
value: $(body.project)
|
||||||
|
- name: changeNumber
|
||||||
|
value: $(body.changeNumber)
|
||||||
|
- name: patchSetNumber
|
||||||
|
value: $(body.patchSetNumber)
|
||||||
|
- name: checkerUUID
|
||||||
|
value: $(body.checkerUUID)
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "TriggerBinding-create" ) }}
|
||||||
@ -0,0 +1,21 @@
|
|||||||
|
{{- define "TriggerBinding-createResult" -}}
|
||||||
|
---
|
||||||
|
apiVersion: triggers.tekton.dev/v1alpha1
|
||||||
|
kind: TriggerBinding
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-createresult
|
||||||
|
spec:
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
value: $(body.pipelineRun.spec.params[?(@.name=='repoRoot')].value)
|
||||||
|
- name: project
|
||||||
|
value: $(body.pipelineRun.spec.params[?(@.name=='project')].value)
|
||||||
|
- name: changeNumber
|
||||||
|
value: $(body.pipelineRun.spec.params[?(@.name=='changeNumber')].value)
|
||||||
|
- name: patchSetNumber
|
||||||
|
value: $(body.pipelineRun.spec.params[?(@.name=='patchSetNumber')].value)
|
||||||
|
- name: checkerUUID
|
||||||
|
value: $(body.pipelineRun.spec.params[?(@.name=='checkerUUID')].value)
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "TriggerBinding-createResult" ) }}
|
||||||
38
charts/jarvis-system/templates/TriggerTemplate-create.yaml
Normal file
38
charts/jarvis-system/templates/TriggerTemplate-create.yaml
Normal file
@ -0,0 +1,38 @@
|
|||||||
|
{{- define "TriggerTemplate-create" -}}
|
||||||
|
---
|
||||||
|
apiVersion: triggers.tekton.dev/v1alpha1
|
||||||
|
kind: TriggerTemplate
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-create
|
||||||
|
spec:
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
- name: project
|
||||||
|
- name: changeNumber
|
||||||
|
- name: patchSetNumber
|
||||||
|
- name: checkerUUID
|
||||||
|
resourcetemplates:
|
||||||
|
- apiVersion: tekton.dev/v1beta1
|
||||||
|
kind: PipelineRun
|
||||||
|
metadata:
|
||||||
|
generateName: {{ template "helpers.labels.fullname" . }}-create-
|
||||||
|
spec:
|
||||||
|
pipelineRef:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-create
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
value: $(tt.params.repoRoot)
|
||||||
|
- name: project
|
||||||
|
value: $(tt.params.project)
|
||||||
|
- name: changeNumber
|
||||||
|
value: $(tt.params.changeNumber)
|
||||||
|
- name: patchSetNumber
|
||||||
|
value: $(tt.params.patchSetNumber)
|
||||||
|
- name: checkerUUID
|
||||||
|
value: $(tt.params.checkerUUID)
|
||||||
|
workspaces:
|
||||||
|
- name: output
|
||||||
|
emptyDir: {}
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "TriggerTemplate-create" ) }}
|
||||||
@ -0,0 +1,35 @@
|
|||||||
|
{{- define "TriggerTemplate-createFailure" -}}
|
||||||
|
---
|
||||||
|
apiVersion: triggers.tekton.dev/v1alpha1
|
||||||
|
kind: TriggerTemplate
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-createfailure
|
||||||
|
spec:
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
- name: project
|
||||||
|
- name: changeNumber
|
||||||
|
- name: patchSetNumber
|
||||||
|
- name: checkerUUID
|
||||||
|
resourcetemplates:
|
||||||
|
- apiVersion: tekton.dev/v1beta1
|
||||||
|
kind: PipelineRun
|
||||||
|
metadata:
|
||||||
|
generateName: {{ template "helpers.labels.fullname" . }}-createfailure-
|
||||||
|
spec:
|
||||||
|
pipelineRef:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-createfailure
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
value: $(tt.params.repoRoot)
|
||||||
|
- name: project
|
||||||
|
value: $(tt.params.project)
|
||||||
|
- name: changeNumber
|
||||||
|
value: $(tt.params.changeNumber)
|
||||||
|
- name: patchSetNumber
|
||||||
|
value: $(tt.params.patchSetNumber)
|
||||||
|
- name: checkerUUID
|
||||||
|
value: $(tt.params.checkerUUID)
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "TriggerTemplate-createFailure" ) }}
|
||||||
@ -0,0 +1,35 @@
|
|||||||
|
{{- define "TriggerTemplate-createSuccess" -}}
|
||||||
|
---
|
||||||
|
apiVersion: triggers.tekton.dev/v1alpha1
|
||||||
|
kind: TriggerTemplate
|
||||||
|
metadata:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-createsuccess
|
||||||
|
spec:
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
- name: project
|
||||||
|
- name: changeNumber
|
||||||
|
- name: patchSetNumber
|
||||||
|
- name: checkerUUID
|
||||||
|
resourcetemplates:
|
||||||
|
- apiVersion: tekton.dev/v1beta1
|
||||||
|
kind: PipelineRun
|
||||||
|
metadata:
|
||||||
|
generateName: {{ template "helpers.labels.fullname" . }}-createsuccess-
|
||||||
|
spec:
|
||||||
|
pipelineRef:
|
||||||
|
name: {{ template "helpers.labels.fullname" . }}-createsuccess
|
||||||
|
params:
|
||||||
|
- name: repoRoot
|
||||||
|
value: $(tt.params.repoRoot)
|
||||||
|
- name: project
|
||||||
|
value: $(tt.params.project)
|
||||||
|
- name: changeNumber
|
||||||
|
value: $(tt.params.changeNumber)
|
||||||
|
- name: patchSetNumber
|
||||||
|
value: $(tt.params.patchSetNumber)
|
||||||
|
- name: checkerUUID
|
||||||
|
value: $(tt.params.checkerUUID)
|
||||||
|
...
|
||||||
|
{{- end -}}
|
||||||
|
{{- include "helpers.template.overlay" ( dict "Global" $ "template_definition" "TriggerTemplate-createSuccess" ) }}
|
||||||
28
charts/jarvis-system/templates/helpers/_config.tpl
Normal file
28
charts/jarvis-system/templates/helpers/_config.tpl
Normal file
@ -0,0 +1,28 @@
|
|||||||
|
{{- define "helpers.config.renderer" -}}
|
||||||
|
{{- $Global := index . "Global" -}}
|
||||||
|
{{- $key := index . "key" -}}
|
||||||
|
|
||||||
|
{{- $local := dict -}}
|
||||||
|
{{- $_ := set $local "templateRaw" ( index $Global.Values.config $key ) -}}
|
||||||
|
|
||||||
|
{{- with $Global -}}
|
||||||
|
{{- if not (kindIs "string" $local.templateRaw) -}}
|
||||||
|
{{- $_ := set $local "template" ( toString ( toPrettyJson ( $local.templateRaw ) ) ) -}}
|
||||||
|
{{- $_ := set $local "render" ( toString ( toYaml ( fromJson ( tpl $local.template . ) ) ) ) -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $_ := set $local "template" $local.templateRaw -}}
|
||||||
|
{{- $_ := set $local "render" ( tpl $local.template . ) -}}
|
||||||
|
{{- end }}
|
||||||
|
{{ printf "%s: |" $key }}
|
||||||
|
{{ $local.render | indent 2 }}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
|
||||||
|
{{- define "helpers.config.hash" -}}
|
||||||
|
{{- $name := index . "TemplateName" -}}
|
||||||
|
{{- $context := index . "Global" -}}
|
||||||
|
{{- $last := base $context.Template.Name }}
|
||||||
|
{{- $wtf := $context.Template.Name | replace $last $name -}}
|
||||||
|
{{- include $wtf $context | sha256sum | quote -}}
|
||||||
|
{{- end -}}
|
||||||
49
charts/jarvis-system/templates/helpers/_labels.tpl
Normal file
49
charts/jarvis-system/templates/helpers/_labels.tpl
Normal file
@ -0,0 +1,49 @@
|
|||||||
|
{{/* vim: set filetype=mustache: */}}
|
||||||
|
{{/*
|
||||||
|
Expand the name of the chart.
|
||||||
|
*/}}
|
||||||
|
{{- define "helpers.labels.name" -}}
|
||||||
|
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create a default fully qualified app name.
|
||||||
|
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
||||||
|
*/}}
|
||||||
|
{{- define "helpers.labels.fullname" -}}
|
||||||
|
{{- if .Values.fullnameOverride -}}
|
||||||
|
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $name := default .Chart.Name .Values.nameOverride -}}
|
||||||
|
{{- if contains $name .Release.Name -}}
|
||||||
|
{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create chart name and version as used by the chart label.
|
||||||
|
*/}}
|
||||||
|
{{- define "helpers.labels.chart" -}}
|
||||||
|
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Labels to use on {deploy|sts}.spec.selector.matchLabels and svc.spec.selector
|
||||||
|
*/}}
|
||||||
|
{{- define "helpers.labels.matchLabels" -}}
|
||||||
|
app.kubernetes.io/name: {{ include "helpers.labels.name" . }}
|
||||||
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Common labels
|
||||||
|
*/}}
|
||||||
|
{{- define "helpers.labels.labels" -}}
|
||||||
|
{{ include "helpers.labels.matchLabels" . }}
|
||||||
|
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||||
|
helm.sh/chart: {{ include "helpers.labels.chart" . }}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
22
charts/jarvis-system/templates/helpers/_pod.tpl
Normal file
22
charts/jarvis-system/templates/helpers/_pod.tpl
Normal file
@ -0,0 +1,22 @@
|
|||||||
|
|
||||||
|
{{- define "helpers.pod.container.image" -}}
|
||||||
|
{{- $Global := index . "Global" -}}
|
||||||
|
{{- $Application := index . "Application" -}}
|
||||||
|
{{- with index $.Global.Values.images.applications $Application -}}
|
||||||
|
{{- printf "%s/%s:%s" .repo .name ( .tag | toString ) | quote -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "helpers.pod.node_selector" -}}
|
||||||
|
{{- $Global := index . "Global" -}}
|
||||||
|
{{- $Application := index . "Application" -}}
|
||||||
|
{{- with index $.Global.Values.node_labels $Application -}}
|
||||||
|
{{ if kindIs "slice" . }}
|
||||||
|
{{ range $k, $item := . }}
|
||||||
|
{{ $item.key }}: {{ $item.value | quote }}
|
||||||
|
{{ end }}
|
||||||
|
{{ else }}
|
||||||
|
{{ .key }}: {{ .value | quote }}
|
||||||
|
{{ end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
107
charts/jarvis-system/templates/helpers/_template.tpl
Normal file
107
charts/jarvis-system/templates/helpers/_template.tpl
Normal file
@ -0,0 +1,107 @@
|
|||||||
|
{{- define "helpers.template.overlay" -}}
|
||||||
|
{{- $local := dict -}}
|
||||||
|
{{/*
|
||||||
|
By default we merge lists with a 'name' key's values
|
||||||
|
*/}}
|
||||||
|
{{- $_ := set $local "merge_same_named" true -}}
|
||||||
|
{{- if kindIs "map" $ -}}
|
||||||
|
{{- if hasKey $ "merge_same_named" -}}
|
||||||
|
{{- $_ := set $local "merge_same_named" $.merge_same_named -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- $_ := set $local "input" ( fromYaml ( toString ( include $.template_definition $.Global ) ) ) -}}
|
||||||
|
{{- $target := dict -}}
|
||||||
|
{{- $overlay_keys := regexSplit "-+" ( trimSuffix ".yaml" ( lower ( base $.Global.Template.Name ) ) ) 2 }}
|
||||||
|
{{- $_ := set $local "overlay" dict -}}
|
||||||
|
{{- if hasKey $.Global.Values.over_rides ( index $overlay_keys 0 ) -}}
|
||||||
|
{{- if hasKey ( index $.Global.Values.over_rides ( index $overlay_keys 0 ) ) ( index $overlay_keys 1 ) -}}
|
||||||
|
{{- $_ := set $local "overlay" ( index $.Global.Values.over_rides ( index $overlay_keys 0 ) ( index $overlay_keys 1 ) ) -}}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- range $item := tuple $local.input $local.overlay -}}
|
||||||
|
{{- $call := dict "target" $target "source" . "merge_same_named" $local.merge_same_named -}}
|
||||||
|
{{- $_ := include "helpers._merge" $call -}}
|
||||||
|
{{- $_ := set $local "result" $call.result -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- if kindIs "map" $ -}}
|
||||||
|
{{- $_ := set $ "result" $local.result -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{ $target | toYaml }}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "helpers._merge" -}}
|
||||||
|
{{- $local := dict -}}
|
||||||
|
{{- $_ := set $ "result" $.source -}}
|
||||||
|
{{/*
|
||||||
|
TODO: Should we `fail` when trying to merge a collection (map or slice) with
|
||||||
|
either a different kind of collection or a scalar?
|
||||||
|
*/}}
|
||||||
|
{{- if and (kindIs "map" $.target) (kindIs "map" $.source) -}}
|
||||||
|
{{- range $key, $sourceValue := $.source -}}
|
||||||
|
{{- if not (hasKey $.target $key) -}}
|
||||||
|
{{- $_ := set $local "newTargetValue" $sourceValue -}}
|
||||||
|
{{- if kindIs "map" $sourceValue -}}
|
||||||
|
{{- $copy := dict -}}
|
||||||
|
{{- $call := dict "target" $copy "source" $sourceValue -}}
|
||||||
|
{{- $_ := include "helpers._merge.shallow" $call -}}
|
||||||
|
{{- $_ := set $local "newTargetValue" $copy -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $targetValue := index $.target $key -}}
|
||||||
|
{{- $call := dict "target" $targetValue "source" $sourceValue "merge_same_named" $.merge_same_named -}}
|
||||||
|
{{- $_ := include "helpers._merge" $call -}}
|
||||||
|
{{- $_ := set $local "newTargetValue" $call.result -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- $_ := set $.target $key $local.newTargetValue -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- $_ := set $ "result" $.target -}}
|
||||||
|
{{- else if and (kindIs "slice" $.target) (kindIs "slice" $.source) -}}
|
||||||
|
{{- $call := dict "target" $.target "source" $.source -}}
|
||||||
|
{{- $_ := include "helpers._merge.append_slice" $call -}}
|
||||||
|
{{- if $.merge_same_named -}}
|
||||||
|
{{- $_ := set $local "result" list -}}
|
||||||
|
{{- $_ := set $local "named_items" dict -}}
|
||||||
|
{{- range $item := $call.result -}}
|
||||||
|
{{- $_ := set $local "has_name_key" false -}}
|
||||||
|
{{- if kindIs "map" $item -}}
|
||||||
|
{{- if hasKey $item "name" -}}
|
||||||
|
{{- $_ := set $local "has_name_key" true -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- if $local.has_name_key -}}
|
||||||
|
{{- if hasKey $local.named_items $item.name -}}
|
||||||
|
{{- $named_item := index $local.named_items $item.name -}}
|
||||||
|
{{- $call := dict "target" $named_item "source" $item "merge_same_named" $.merge_same_named -}}
|
||||||
|
{{- $_ := include "helpers._merge" $call -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $copy := dict -}}
|
||||||
|
{{- $copy_call := dict "target" $copy "source" $item -}}
|
||||||
|
{{- $_ := include "helpers._merge.shallow" $copy_call -}}
|
||||||
|
{{- $_ := set $local.named_items $item.name $copy -}}
|
||||||
|
{{- $_ := set $local "result" (append $local.result $copy) -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $_ := set $local "result" (append $local.result $item) -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- $_ := set $local "result" $call.result -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- $_ := set $ "result" (uniq $local.result) -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "helpers._merge.shallow" -}}
|
||||||
|
{{- range $key, $value := $.source -}}
|
||||||
|
{{- $_ := set $.target $key $value -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- define "helpers._merge.append_slice" -}}
|
||||||
|
{{- $local := dict -}}
|
||||||
|
{{- $_ := set $local "result" $.target -}}
|
||||||
|
{{- range $value := $.source -}}
|
||||||
|
{{- $_ := set $local "result" (append $local.result $value) -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- $_ := set $ "result" $local.result -}}
|
||||||
|
{{- end -}}
|
||||||
93
charts/jarvis-system/values.schema.json
Normal file
93
charts/jarvis-system/values.schema.json
Normal file
@ -0,0 +1,93 @@
|
|||||||
|
{
|
||||||
|
"$id": "https://example.com/arrays.schema.json",
|
||||||
|
"$schema": "http://json-schema.org/draft-07/schema#",
|
||||||
|
"description": "A helm charts image references",
|
||||||
|
"type": "object",
|
||||||
|
"properties": {
|
||||||
|
"images": {
|
||||||
|
"type": "object",
|
||||||
|
"additionalProperties": false,
|
||||||
|
"required": [
|
||||||
|
"applications",
|
||||||
|
"pull"
|
||||||
|
],
|
||||||
|
"properties": {
|
||||||
|
"applications": {
|
||||||
|
"type": "object",
|
||||||
|
"additionalProperties": {
|
||||||
|
"type": "object",
|
||||||
|
"required": [
|
||||||
|
"tag",
|
||||||
|
"name",
|
||||||
|
"repo"
|
||||||
|
],
|
||||||
|
"additionalProperties": false,
|
||||||
|
"properties": {
|
||||||
|
"tag": {
|
||||||
|
"anyOf": [
|
||||||
|
{
|
||||||
|
"type": "object"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"type": "string"
|
||||||
|
}
|
||||||
|
],
|
||||||
|
"description": "The image tag."
|
||||||
|
},
|
||||||
|
"name": {
|
||||||
|
"type": "string",
|
||||||
|
"description": "The image name."
|
||||||
|
},
|
||||||
|
"repo": {
|
||||||
|
"type": "string",
|
||||||
|
"description": "The image repo."
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"pull": {
|
||||||
|
"type": "object",
|
||||||
|
"additionalProperties": false,
|
||||||
|
"required": [
|
||||||
|
"policy"
|
||||||
|
],
|
||||||
|
"properties": {
|
||||||
|
"policy": {
|
||||||
|
"type": "string",
|
||||||
|
"enum": [
|
||||||
|
"Always",
|
||||||
|
"IfNotPresent",
|
||||||
|
"Never"
|
||||||
|
]
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"config": {
|
||||||
|
"type": "object",
|
||||||
|
"additionalProperties": {
|
||||||
|
"anyOf": [
|
||||||
|
{
|
||||||
|
"type": "object"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"type": "string"
|
||||||
|
}
|
||||||
|
]
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"params": {
|
||||||
|
"type": "object",
|
||||||
|
"additionalProperties": {
|
||||||
|
"type": "object"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"over_rides": {
|
||||||
|
"type": "object",
|
||||||
|
"additionalProperties": {
|
||||||
|
"type": "object"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
43
charts/jarvis-system/values.yaml
Normal file
43
charts/jarvis-system/values.yaml
Normal file
@ -0,0 +1,43 @@
|
|||||||
|
# Default values for dex-aio.
|
||||||
|
# This is a YAML-formatted file.
|
||||||
|
# Declare variables to be passed into your templates.
|
||||||
|
|
||||||
|
images:
|
||||||
|
applications:
|
||||||
|
connector:
|
||||||
|
tag: latest
|
||||||
|
name: attcomdev/jarvis-connector
|
||||||
|
repo: quay.io
|
||||||
|
task_git:
|
||||||
|
tag: v0.18.1
|
||||||
|
name: tekton-releases/github.com/tektoncd/pipeline/cmd/git-init
|
||||||
|
repo: gcr.io
|
||||||
|
task_curl:
|
||||||
|
tag: "3.8"
|
||||||
|
name: evl.ms/curl
|
||||||
|
repo: quay.io
|
||||||
|
pull:
|
||||||
|
policy: Always
|
||||||
|
|
||||||
|
node_labels:
|
||||||
|
connector:
|
||||||
|
key: kubernetes.io/os
|
||||||
|
value: linux
|
||||||
|
|
||||||
|
over_rides: {}
|
||||||
|
|
||||||
|
params:
|
||||||
|
gerrit:
|
||||||
|
user: jarvis
|
||||||
|
password: password
|
||||||
|
host: gerrit.jarvis.local
|
||||||
|
tekton:
|
||||||
|
dashboard:
|
||||||
|
host: tekton.jarvis.local
|
||||||
|
endpoints:
|
||||||
|
hostname: el-jarvis-system.jarvis-system.svc.cluster.local
|
||||||
|
tls:
|
||||||
|
cert_manager: true
|
||||||
|
issuer:
|
||||||
|
name: jarvis-ca-issuer
|
||||||
|
kind: ClusterIssuer
|
||||||
4
charts/tekton-pipelines/values_overrides/default.yaml
Normal file
4
charts/tekton-pipelines/values_overrides/default.yaml
Normal file
@ -0,0 +1,4 @@
|
|||||||
|
controller:
|
||||||
|
conf:
|
||||||
|
defaults:
|
||||||
|
default_cloud_events_sink: http://el-jarvis-system.jarvis-system.svc.cluster.local:8080/
|
||||||
@ -54,15 +54,15 @@ images:
|
|||||||
tekton_controller:
|
tekton_controller:
|
||||||
name: tektoncd/triggers/cmd/controller
|
name: tektoncd/triggers/cmd/controller
|
||||||
repo: gcr.io/tekton-releases/github.com
|
repo: gcr.io/tekton-releases/github.com
|
||||||
tag: v0.10.1
|
tag: v0.10.2
|
||||||
tekton_eventlistener:
|
tekton_eventlistener:
|
||||||
name: tektoncd/triggers/cmd/eventlistenersink
|
name: tektoncd/triggers/cmd/eventlistenersink
|
||||||
repo: gcr.io/tekton-releases/github.com
|
repo: gcr.io/tekton-releases/github.com
|
||||||
tag: v0.10.1
|
tag: v0.10.2
|
||||||
tekton_webhook:
|
tekton_webhook:
|
||||||
name: tektoncd/triggers/cmd/webhook
|
name: tektoncd/triggers/cmd/webhook
|
||||||
repo: gcr.io/tekton-releases/github.com
|
repo: gcr.io/tekton-releases/github.com
|
||||||
tag: v0.10.1
|
tag: v0.10.2
|
||||||
pull:
|
pull:
|
||||||
policy: IfNotPresent
|
policy: IfNotPresent
|
||||||
|
|
||||||
|
|||||||
2
tools/deployment/vagrant/Vagrantfile
vendored
2
tools/deployment/vagrant/Vagrantfile
vendored
@ -40,5 +40,7 @@ Vagrant.configure("2") do |config|
|
|||||||
./tools/gate/jarvis/400-deploy-harbor.sh
|
./tools/gate/jarvis/400-deploy-harbor.sh
|
||||||
./tools/gate/jarvis/500-deploy-gerrit.sh
|
./tools/gate/jarvis/500-deploy-gerrit.sh
|
||||||
./tools/gate/jarvis/600-deploy-tekton.sh
|
./tools/gate/jarvis/600-deploy-tekton.sh
|
||||||
|
./tools/gate/jarvis/700-deploy-jarvis-system.sh
|
||||||
|
./tools/gate/jarvis/800-deploy-jarvis-projects.sh
|
||||||
SHELL
|
SHELL
|
||||||
end
|
end
|
||||||
|
|||||||
@ -15,6 +15,28 @@ function get_repo() {
|
|||||||
}
|
}
|
||||||
get_repo "${gerrit_source}" "${repo_remote}" "${repo_sha}"
|
get_repo "${gerrit_source}" "${repo_remote}" "${repo_sha}"
|
||||||
|
|
||||||
|
# TODO: This needs fixed upstream
|
||||||
|
patch ${gerrit_source}/helm-charts/gerrit/templates/gerrit.stateful-set.yaml <<'EOF'
|
||||||
|
--- /tmp/tmp.8ZADMTe64b/helm-charts/gerrit/templates/gerrit.stateful-set.yaml 2021-01-16 21:33:32.331105033 +0000
|
||||||
|
+++ /tmp/tmp.z8R6CX0Gqg/helm-charts/gerrit/templates/gerrit.stateful-set.yaml 2021-01-16 20:11:36.275929405 +0000
|
||||||
|
@@ -57,9 +57,14 @@
|
||||||
|
imagePullPolicy: {{ .Values.images.imagePullPolicy }}
|
||||||
|
command:
|
||||||
|
- /bin/ash
|
||||||
|
- - -ce
|
||||||
|
+ - -cex
|
||||||
|
args:
|
||||||
|
- |
|
||||||
|
+ python3 /var/tools/gerrit-initializer \
|
||||||
|
+ -c /var/config/gerrit-init.yaml \
|
||||||
|
+ -s /var/gerrit \
|
||||||
|
+ init
|
||||||
|
+
|
||||||
|
symlink_config_to_site(){
|
||||||
|
for file in /var/mnt/etc/config/* /var/mnt/etc/secret/*; do
|
||||||
|
ln -sf $file /var/gerrit/etc/$(basename $file)
|
||||||
|
EOF
|
||||||
|
|
||||||
function generate_ssh_host_key_override() {
|
function generate_ssh_host_key_override() {
|
||||||
local work_dir
|
local work_dir
|
||||||
work_dir="$(mktemp -d)"
|
work_dir="$(mktemp -d)"
|
||||||
@ -59,6 +81,7 @@ kubectl patch -n gerrit svc gerrit-gerrit-service --patch '{
|
|||||||
]
|
]
|
||||||
}
|
}
|
||||||
}'
|
}'
|
||||||
|
sleep 30
|
||||||
|
|
||||||
function gerrit_bootstrap() {
|
function gerrit_bootstrap() {
|
||||||
# Define creds to use for gerrit.
|
# Define creds to use for gerrit.
|
||||||
@ -118,6 +141,9 @@ EOF
|
|||||||
# Give Admins, Service Users and Project Owners voting rights for the Verified Label
|
# Give Admins, Service Users and Project Owners voting rights for the Verified Label
|
||||||
sed -i '/\[access "refs\/heads\/\*"\]/a\ \ \ \ \ \ \ \ label-Verified = -1..+1 group Administrators\n\ \ \ \ \ \ \ \ label-Verified = -1..+1 group Service Users\n\ \ \ \ \ \ \ \ label-Verified = -1..+1 group Project Owners' project.config
|
sed -i '/\[access "refs\/heads\/\*"\]/a\ \ \ \ \ \ \ \ label-Verified = -1..+1 group Administrators\n\ \ \ \ \ \ \ \ label-Verified = -1..+1 group Service Users\n\ \ \ \ \ \ \ \ label-Verified = -1..+1 group Project Owners' project.config
|
||||||
|
|
||||||
|
# Give Admins, Service Users and Project Owners voting rights for the Verified Label
|
||||||
|
sed -i '/\[capability\]/a\ \ \ \ \ \ \ \ checks-administrateCheckers = group Administrators' project.config
|
||||||
|
|
||||||
# Commit and push config
|
# Commit and push config
|
||||||
git add .
|
git add .
|
||||||
git commit -asm "Create Verified Label"
|
git commit -asm "Create Verified Label"
|
||||||
|
|||||||
@ -12,98 +12,4 @@ for chart in tekton-pipelines tekton-triggers tekton-dashboard; do
|
|||||||
$(./tools/deployment/common/get-values-overrides.sh "${chart}")
|
$(./tools/deployment/common/get-values-overrides.sh "${chart}")
|
||||||
done
|
done
|
||||||
|
|
||||||
function get_yq() {
|
./tools/deployment/common/wait-for-pods.sh tekton-pipelines
|
||||||
version=$(curl --silent "https://api.github.com/repos/mikefarah/yq/releases/latest" | grep '"tag_name"' | sed -E 's/.*"([^"]+)".*/\1/')
|
|
||||||
sudo -E curl -L -o "/usr/local/bin/yq" "https://github.com/mikefarah/yq/releases/download/${version}/yq_linux_amd64"
|
|
||||||
sudo -E chmod +x "/usr/local/bin/yq"
|
|
||||||
ls "/usr/local/bin/yq"
|
|
||||||
}
|
|
||||||
|
|
||||||
./tools/deployment/common/wait-for-pods.sh tekton-pipelines
|
|
||||||
|
|
||||||
function validate() {
|
|
||||||
|
|
||||||
# if we are using the proxy we should place that into the template
|
|
||||||
if [ -n "${HTTP_PROXY}" ]; then
|
|
||||||
get_yq
|
|
||||||
|
|
||||||
# Note: This assume syntax of yq >= 4.x
|
|
||||||
yq eval '(.spec.resourcetemplates[].spec.params[] | select(.name=="httpProxy")).value |= env(HTTP_PROXY)' -i ./tools/gate/jarvis/resources/tekton/yaml/triggertemplates/triggertemplate.yaml
|
|
||||||
yq eval '(.spec.resourcetemplates[].spec.params[] | select(.name=="httpsProxy")).value |= env(HTTPS_PROXY)' -i ./tools/gate/jarvis/resources/tekton/yaml/triggertemplates/triggertemplate.yaml
|
|
||||||
yq eval '(.spec.resourcetemplates[].spec.params[] | select(.name=="noProxy")).value |= env(NO_PROXY)' -i ./tools/gate/jarvis/resources/tekton/yaml/triggertemplates/triggertemplate.yaml
|
|
||||||
fi
|
|
||||||
|
|
||||||
kubectl -n tekton-pipelines apply -f ./tools/gate/jarvis/resources/tekton/yaml/role-resources/secret.yaml
|
|
||||||
kubectl -n tekton-pipelines apply -f ./tools/gate/jarvis/resources/tekton/yaml/role-resources/serviceaccount.yaml
|
|
||||||
kubectl -n tekton-pipelines apply -f ./tools/gate/jarvis/resources/tekton/yaml/role-resources/clustertriggerbinding-roles
|
|
||||||
kubectl -n tekton-pipelines apply -f ./tools/gate/jarvis/resources/tekton/yaml/role-resources/triggerbinding-roles
|
|
||||||
kubectl -n tekton-pipelines apply -f ./tools/gate/jarvis/resources/tekton/yaml/triggertemplates/triggertemplate.yaml
|
|
||||||
kubectl -n tekton-pipelines apply -f ./tools/gate/jarvis/resources/tekton/yaml/triggerbindings/triggerbinding.yaml
|
|
||||||
kubectl -n tekton-pipelines apply -f ./tools/gate/jarvis/resources/tekton/yaml/triggerbindings/triggerbinding-message.yaml
|
|
||||||
kubectl -n tekton-pipelines apply -f ./tools/gate/jarvis/resources/tekton/yaml/eventlisteners/eventlistener.yaml
|
|
||||||
kubectl -n tekton-pipelines apply -f ./tools/gate/jarvis/resources/tekton/yaml/example-pipeline.yaml
|
|
||||||
|
|
||||||
# Install the pipeline
|
|
||||||
kubectl -n tekton-pipelines wait --for=condition=Ready pod --timeout=120s --all
|
|
||||||
|
|
||||||
# Define creds to use for gerrit.
|
|
||||||
ldap_username="jarvis"
|
|
||||||
ldap_password="password"
|
|
||||||
|
|
||||||
# Create repo for Jarvis sanity testing
|
|
||||||
ssh -p 29418 ${ldap_username}@gerrit.jarvis.local gerrit create-project jarvis-sanity --submit-type MERGE_IF_NECESSARY --owner Administrators --empty-commit
|
|
||||||
|
|
||||||
# Configure repo webhook
|
|
||||||
jarvis_sanity_repo=$(mktemp -d)
|
|
||||||
pushd "${jarvis_sanity_repo}"
|
|
||||||
git init
|
|
||||||
git remote add origin ssh://${ldap_username}@gerrit.jarvis.local:29418/jarvis-sanity.git
|
|
||||||
git fetch origin refs/meta/config:refs/remotes/origin/meta/config
|
|
||||||
git checkout meta/config
|
|
||||||
tee --append project.config <<EOF
|
|
||||||
[plugin "webhooks"]
|
|
||||||
connectionTimeout = 3000
|
|
||||||
maxTries = 300
|
|
||||||
retryInterval = 2000
|
|
||||||
socketTimeout = 2500
|
|
||||||
threadPoolSize = 3
|
|
||||||
EOF
|
|
||||||
tee webhooks.config <<EOF
|
|
||||||
[remote "Tekton"]
|
|
||||||
url = http://el-listener.tekton-pipelines.svc.cluster.local:8080/
|
|
||||||
maxTries = 3
|
|
||||||
sslVerify = false
|
|
||||||
event = patchset-created
|
|
||||||
event = patchset-updated
|
|
||||||
EOF
|
|
||||||
git add .
|
|
||||||
git commit -asm "Create Add PS Webhook Config"
|
|
||||||
git push origin HEAD:refs/meta/config
|
|
||||||
popd
|
|
||||||
|
|
||||||
# Create PS to repo to test webhook
|
|
||||||
jarvis_sanity_repo=$(mktemp -d)
|
|
||||||
git clone ssh://${ldap_username}@gerrit.jarvis.local:29418/jarvis-sanity.git "${jarvis_sanity_repo}"
|
|
||||||
pushd "${jarvis_sanity_repo}"
|
|
||||||
tee .gitreview <<EOF
|
|
||||||
[gerrit]
|
|
||||||
host=gerrit.jarvis.local
|
|
||||||
port=29418
|
|
||||||
project=jarvis-sanity.git
|
|
||||||
EOF
|
|
||||||
git review -s
|
|
||||||
git add .gitreview
|
|
||||||
git commit -asm "Add .gitreview"
|
|
||||||
git review
|
|
||||||
|
|
||||||
# Sleep for 5s to give time for webhook to fire, and be responded to
|
|
||||||
sleep 5
|
|
||||||
|
|
||||||
# Ensure the run is successful
|
|
||||||
kubectl -n tekton-pipelines wait --for=condition=Succeeded pipelineruns --timeout=120s --all
|
|
||||||
|
|
||||||
# Check the pipeline runs
|
|
||||||
kubectl -n tekton-pipelines get pipelinerun
|
|
||||||
}
|
|
||||||
|
|
||||||
validate
|
|
||||||
13
tools/gate/jarvis/700-deploy-jarvis-system.sh
Executable file
13
tools/gate/jarvis/700-deploy-jarvis-system.sh
Executable file
@ -0,0 +1,13 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
set -ex
|
||||||
|
|
||||||
|
# shellcheck disable=SC2046
|
||||||
|
helm upgrade \
|
||||||
|
--create-namespace \
|
||||||
|
--install \
|
||||||
|
--namespace=jarvis-system \
|
||||||
|
jarvis-system \
|
||||||
|
"./charts/jarvis-system" \
|
||||||
|
$(./tools/deployment/common/get-values-overrides.sh jarvis-system)
|
||||||
|
|
||||||
|
./tools/deployment/common/wait-for-pods.sh jarvis-system
|
||||||
67
tools/gate/jarvis/800-deploy-jarvis-projects.sh
Executable file
67
tools/gate/jarvis/800-deploy-jarvis-projects.sh
Executable file
@ -0,0 +1,67 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
set -ex
|
||||||
|
|
||||||
|
function generate_gerrit_creds_override() {
|
||||||
|
local output_file
|
||||||
|
output_file="$(mktemp -d)/gerrit-host-rsa-key.yaml"
|
||||||
|
tee "${output_file}" <<EOF
|
||||||
|
params:
|
||||||
|
gerrit:
|
||||||
|
user: jarvis
|
||||||
|
password: password
|
||||||
|
ssh_key: |
|
||||||
|
$(awk '{ print " " $0 }' "${HOME}/.ssh/id_rsa")
|
||||||
|
EOF
|
||||||
|
export gerrit_creds_override="${output_file}"
|
||||||
|
}
|
||||||
|
generate_gerrit_creds_override
|
||||||
|
|
||||||
|
jarvis_project=jarvis-project
|
||||||
|
|
||||||
|
# shellcheck disable=SC2046
|
||||||
|
helm upgrade \
|
||||||
|
--create-namespace \
|
||||||
|
--install \
|
||||||
|
--namespace=jarvis-projects \
|
||||||
|
"${jarvis_project}" \
|
||||||
|
"./charts/jarvis-project" \
|
||||||
|
--values="${gerrit_creds_override}" \
|
||||||
|
$(./tools/deployment/common/get-values-overrides.sh jarvis-project)
|
||||||
|
|
||||||
|
./tools/deployment/common/wait-for-pods.sh jarvis-projects
|
||||||
|
|
||||||
|
sleep 60
|
||||||
|
|
||||||
|
# Define creds to use for gerrit.
|
||||||
|
ldap_username="jarvis"
|
||||||
|
|
||||||
|
# Create PS to repo to test jarvis
|
||||||
|
jarvis_sanity_repo=$(mktemp -d)
|
||||||
|
git clone ssh://${ldap_username}@gerrit.jarvis.local:29418/${jarvis_project}.git "${jarvis_sanity_repo}"
|
||||||
|
pushd "${jarvis_sanity_repo}"
|
||||||
|
tee .gitreview <<EOF
|
||||||
|
[gerrit]
|
||||||
|
host=gerrit.jarvis.local
|
||||||
|
port=29418
|
||||||
|
project=${jarvis_project}.git
|
||||||
|
EOF
|
||||||
|
git review -s
|
||||||
|
git add .gitreview
|
||||||
|
git commit -asm "Add .gitreview"
|
||||||
|
git review
|
||||||
|
popd
|
||||||
|
|
||||||
|
# Check jarvis pipeline run
|
||||||
|
end=$(date +%s)
|
||||||
|
timeout="900"
|
||||||
|
end=$((end + timeout))
|
||||||
|
while true; do
|
||||||
|
result="$(curl -L https://gerrit.jarvis.local/changes/1/revisions/1/checks | tail -1 | jq -r .[].state)"
|
||||||
|
[ $result == "SUCCESSFUL" ] && break || true
|
||||||
|
sleep 5
|
||||||
|
now=$(date +%s)
|
||||||
|
if [ $now -gt $end ] ; then
|
||||||
|
echo "Pipeline failed to complete $timeout seconds"
|
||||||
|
exit -1
|
||||||
|
fi
|
||||||
|
done
|
||||||
@ -1,14 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: triggers.tekton.dev/v1alpha1
|
|
||||||
kind: EventListener
|
|
||||||
metadata:
|
|
||||||
name: listener
|
|
||||||
spec:
|
|
||||||
serviceAccountName: tekton-triggers-example-sa
|
|
||||||
triggers:
|
|
||||||
- name: foo-trig
|
|
||||||
bindings:
|
|
||||||
- ref: pipeline-binding
|
|
||||||
- ref: message-binding
|
|
||||||
template:
|
|
||||||
ref: pipeline-template
|
|
||||||
@ -1,43 +0,0 @@
|
|||||||
apiVersion: tekton.dev/v1beta1
|
|
||||||
kind: Task
|
|
||||||
metadata:
|
|
||||||
name: print-info
|
|
||||||
spec:
|
|
||||||
params:
|
|
||||||
- name: info
|
|
||||||
type: string
|
|
||||||
steps:
|
|
||||||
- name: print-info
|
|
||||||
image: bash
|
|
||||||
command: ["bash", "-c"]
|
|
||||||
args:
|
|
||||||
- echo -e '$(params.info)'
|
|
||||||
---
|
|
||||||
apiVersion: tekton.dev/v1beta1
|
|
||||||
kind: Pipeline
|
|
||||||
metadata:
|
|
||||||
name: simple-pipeline
|
|
||||||
spec:
|
|
||||||
params:
|
|
||||||
- name: gitrepositoryurl
|
|
||||||
- name: gitrevision
|
|
||||||
- name: message
|
|
||||||
tasks:
|
|
||||||
- name: print-url
|
|
||||||
taskRef:
|
|
||||||
name: print-info
|
|
||||||
params:
|
|
||||||
- name: info
|
|
||||||
value: $(params.gitrepositoryurl)
|
|
||||||
- name: print-revision
|
|
||||||
taskRef:
|
|
||||||
name: print-info
|
|
||||||
params:
|
|
||||||
- name: info
|
|
||||||
value: $(params.gitrevision)
|
|
||||||
- name: print-message
|
|
||||||
taskRef:
|
|
||||||
name: print-info
|
|
||||||
params:
|
|
||||||
- name: info
|
|
||||||
value: $(params.message)
|
|
||||||
@ -1,12 +0,0 @@
|
|||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRoleBinding
|
|
||||||
metadata:
|
|
||||||
name: tekton-triggers-example-clusterbinding
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: tekton-triggers-example-sa
|
|
||||||
namespace: tekton-pipelines
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: ClusterRole
|
|
||||||
name: tekton-triggers-example-clusterrole
|
|
||||||
@ -1,7 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Secret
|
|
||||||
metadata:
|
|
||||||
name: tekton-triggers-example-secret
|
|
||||||
type: Opaque
|
|
||||||
stringData:
|
|
||||||
secretToken: "1234567"
|
|
||||||
@ -1,6 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: ServiceAccount
|
|
||||||
metadata:
|
|
||||||
name: tekton-triggers-example-sa
|
|
||||||
secrets:
|
|
||||||
- name: tekton-triggers-example-secret
|
|
||||||
@ -1,11 +0,0 @@
|
|||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: RoleBinding
|
|
||||||
metadata:
|
|
||||||
name: tekton-triggers-example-binding
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: tekton-triggers-example-sa
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: Role
|
|
||||||
name: tekton-triggers-example-minimal
|
|
||||||
@ -1,20 +0,0 @@
|
|||||||
kind: Role
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
metadata:
|
|
||||||
name: tekton-triggers-example-minimal
|
|
||||||
rules:
|
|
||||||
# Permissions for every EventListener deployment to function
|
|
||||||
- apiGroups: ["triggers.tekton.dev"]
|
|
||||||
resources: ["eventlisteners", "triggerbindings", "triggertemplates", "triggers"]
|
|
||||||
verbs: ["get", "list", "watch"]
|
|
||||||
- apiGroups: [""]
|
|
||||||
# secrets are only needed for GitHub/GitLab interceptors
|
|
||||||
resources: ["configmaps", "secrets"]
|
|
||||||
verbs: ["get", "list", "watch"]
|
|
||||||
# Permissions to create resources in associated TriggerTemplates
|
|
||||||
- apiGroups: ["tekton.dev"]
|
|
||||||
resources: ["pipelineruns", "pipelineresources", "taskruns"]
|
|
||||||
verbs: ["create"]
|
|
||||||
- apiGroups: [""]
|
|
||||||
resources: ["serviceaccounts"]
|
|
||||||
verbs: ["impersonate"]
|
|
||||||
@ -1,8 +0,0 @@
|
|||||||
apiVersion: triggers.tekton.dev/v1alpha1
|
|
||||||
kind: TriggerBinding
|
|
||||||
metadata:
|
|
||||||
name: message-binding
|
|
||||||
spec:
|
|
||||||
params:
|
|
||||||
- name: message
|
|
||||||
value: Hello from the Triggers EventListener!
|
|
||||||
@ -1,10 +0,0 @@
|
|||||||
apiVersion: triggers.tekton.dev/v1alpha1
|
|
||||||
kind: TriggerBinding
|
|
||||||
metadata:
|
|
||||||
name: pipeline-binding
|
|
||||||
spec:
|
|
||||||
params:
|
|
||||||
- name: gitrevision
|
|
||||||
value: $(body.change.id)
|
|
||||||
- name: gitrepositoryurl
|
|
||||||
value: $(body.change.url)
|
|
||||||
@ -1,33 +0,0 @@
|
|||||||
apiVersion: triggers.tekton.dev/v1alpha1
|
|
||||||
kind: TriggerTemplate
|
|
||||||
metadata:
|
|
||||||
name: pipeline-template
|
|
||||||
spec:
|
|
||||||
params:
|
|
||||||
- name: gitrevision
|
|
||||||
description: The git revision
|
|
||||||
- name: gitrepositoryurl
|
|
||||||
description: The git repository url
|
|
||||||
- name: message
|
|
||||||
description: The message to print
|
|
||||||
resourcetemplates:
|
|
||||||
- apiVersion: tekton.dev/v1beta1
|
|
||||||
kind: PipelineRun
|
|
||||||
metadata:
|
|
||||||
generateName: simple-pipeline-run-
|
|
||||||
spec:
|
|
||||||
pipelineRef:
|
|
||||||
name: simple-pipeline
|
|
||||||
params:
|
|
||||||
- name: gitrepositoryurl
|
|
||||||
value: $(tt.params.gitrepositoryurl)
|
|
||||||
- name: gitrevision
|
|
||||||
value: $(tt.params.gitrevision)
|
|
||||||
- name: message
|
|
||||||
value: $(tt.params.message)
|
|
||||||
- name: httpProxy
|
|
||||||
value: ""
|
|
||||||
- name: httpsProxy
|
|
||||||
value: ""
|
|
||||||
- name: noProxy
|
|
||||||
value: "172.28.0.2,localhost,127.0.0.1,10.96.0.0/12,192.168.49.0/24,192.168.99.0/24,107.124.202.156,10.0.2.15,10.244.0.0/16,.minikube.internal,.svc,.svc.cluster.local,jarvis.local,jarvis"
|
|
||||||
@ -38,6 +38,8 @@
|
|||||||
- ./tools/gate/jarvis/400-deploy-harbor.sh
|
- ./tools/gate/jarvis/400-deploy-harbor.sh
|
||||||
- ./tools/gate/jarvis/500-deploy-gerrit.sh
|
- ./tools/gate/jarvis/500-deploy-gerrit.sh
|
||||||
- ./tools/gate/jarvis/600-deploy-tekton.sh
|
- ./tools/gate/jarvis/600-deploy-tekton.sh
|
||||||
|
- ./tools/gate/jarvis/700-deploy-jarvis-system.sh
|
||||||
|
- ./tools/gate/jarvis/800-deploy-jarvis-projects.sh
|
||||||
|
|
||||||
- job:
|
- job:
|
||||||
name: airship-jarvis-sample-workload-validation
|
name: airship-jarvis-sample-workload-validation
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user