mirror of
https://github.com/bvanroll/cicdTest.git
synced 2025-08-29 12:02:47 +00:00
94 lines
3.5 KiB
YAML
94 lines
3.5 KiB
YAML
# MAKE SURE TO SET UP SECRETS.YAML BEFORE EXAMPLE:
|
|
#
|
|
# this sets up webhooks for github. you can also do this manually in web gui
|
|
#
|
|
#
|
|
#
|
|
# apiVersion: v1
|
|
# kind: Secret
|
|
# metadata:
|
|
# name: webhook-secret
|
|
# namespace: tekton-pipeline-istio-project-1
|
|
# stringData:
|
|
# token: GITHUBTOKEN
|
|
# secret: random-string-data
|
|
---
|
|
apiVersion: tekton.dev/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: create-webhook
|
|
namespace: tekton-pipeline-istio-project-1
|
|
spec:
|
|
volumes:
|
|
- name: github-secret
|
|
secret:
|
|
secretName: $(inputs.params.GitHubSecretName)
|
|
inputs:
|
|
params:
|
|
- name: ExternalDomain
|
|
description: "The external domain for the EventListener e.g. `$(inputs.params.EventListenerName).<PROXYIP>.nip.io`"
|
|
- name: GitHubUser
|
|
description: "The GitHub user"
|
|
- name: GitHubRepo
|
|
description: "The GitHub repo where the webhook will be created"
|
|
- name: GitHubOrg
|
|
description: "The GitHub organization where the webhook will be created"
|
|
- name: GitHubSecretName
|
|
description: "The Secret name for GitHub access token. This is always mounted and must exist"
|
|
- name: GitHubAccessTokenKey
|
|
description: "The GitHub access token key name"
|
|
- name: GitHubSecretStringKey
|
|
description: "The GitHub secret string key name"
|
|
- name: GitHubDomain
|
|
description: "The GitHub domain. Override for GitHub Enterprise"
|
|
default: "github.com"
|
|
- name: WebhookEvents
|
|
description: "List of events the webhook will send notifications for"
|
|
default: '[\"push\",\"pull_request\"]'
|
|
steps:
|
|
- name: create-webhook
|
|
image: pstauffer/curl:latest
|
|
volumeMounts:
|
|
- name: github-secret
|
|
mountPath: /var/secret
|
|
command:
|
|
- sh
|
|
args:
|
|
- -ce
|
|
- |
|
|
set -e
|
|
echo "Create Webhook"
|
|
if [ $(inputs.params.GitHubDomain) = "github.com" ];then
|
|
curl -v -d "{\"name\": \"web\",\"active\": true,\"events\": $(inputs.params.WebhookEvents),\"config\": {\"url\": \"https://$(inputs.params.ExternalDomain)\",\"content_type\": \"json\",\"insecure_ssl\": \"1\" ,\"secret\": \"$(cat /var/secret/$(inputs.params.GitHubSecretStringKey))\"}}" -X POST -u $(inputs.params.GitHubUser):$(cat /var/secret/$(inputs.params.GitHubAccessTokenKey)) -L https://api.github.com/repos/$(inputs.params.GitHubOrg)/$(inputs.params.GitHubRepo)/hooks
|
|
else
|
|
curl -d "{\"name\": \"web\",\"active\": true,\"events\": $(inputs.params.WebhookEvents),\"config\": {\"url\": \"https://$(inputs.params.ExternalDomain)/\",\"content_type\": \"json\",\"insecure_ssl\": \"1\" ,\"secret\": \"$(cat /var/secret/$(inputs.params.GitHubSecretStringKey))\"}}" -X POST -u $(inputs.params.GitHubUser):$(cat /var/secret/$(inputs.params.GitHubAccessTokenKey)) -L https://$(inputs.params.GitHubDomain)/api/v3/repos/$(inputs.params.GitHubOrg)/$(inputs.params.GitHubRepo)/hooks
|
|
fi
|
|
---
|
|
# https://medium.com/@nikhilthomas1/cloud-native-cicd-on-openshift-with-openshift-pipelines-tektoncd-pipelines-part-3-github-1db6dd8e8ca7
|
|
apiVersion: tekton.dev/v1alpha1
|
|
kind: TaskRun
|
|
metadata:
|
|
name: create-repo-webhook
|
|
namespace: tekton-pipeline-istio-project-1
|
|
spec:
|
|
taskRef:
|
|
name: create-webhook
|
|
inputs:
|
|
params:
|
|
- name: GitHubOrg
|
|
value: "beppevanrolleghem"
|
|
- name: GitHubUser
|
|
value: "beppevanrolleghem"
|
|
- name: GitHubRepo
|
|
value: "cicdTest"
|
|
- name: GitHubSecretName
|
|
value: webhook-secret
|
|
- name: GitHubAccessTokenKey
|
|
value: token
|
|
- name: GitHubSecretStringKey
|
|
value: secret
|
|
- name: ExternalDomain
|
|
value: 35.233.93.220
|
|
timeout: 1000s
|
|
serviceAccountName: service-acc
|