mirror of
https://github.com/bvanroll/cicdTest.git
synced 2025-08-29 12:02:47 +00:00
313 lines
8.3 KiB
YAML
313 lines
8.3 KiB
YAML
# ---
|
|
# apiVersion: v1
|
|
# kind: #namespace
|
|
# metadata:
|
|
# name: stage-tekton-pipeline
|
|
# labels:
|
|
# istio-injection: enabled #zorgt voor auto sidecar injection
|
|
---
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
name: service-acc
|
|
#namespace: stage-tekton-pipeline
|
|
secrets:
|
|
- name: regcred
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: allow-creation
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
- "apps"
|
|
- "deploy"
|
|
# deze zullen we ook moeten aanpassen elke pipeline die we maken, maar, deze pipelines zijn nu specifiek per branch, dus dit zou geen probleem leveren.
|
|
resources:
|
|
- pods
|
|
- serviceaccounts
|
|
- namespaces
|
|
- services
|
|
- deployments
|
|
- deployments.apps
|
|
- destinationrules
|
|
- gateways
|
|
- virtualservices
|
|
verbs:
|
|
- list
|
|
- watch
|
|
- get
|
|
- create
|
|
- update
|
|
- patch
|
|
- delete
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: allow-creation-binding
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: allow-creation
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: service-acc
|
|
namespace: default
|
|
---
|
|
# TODO add git clone task
|
|
apiVersion: tekton.dev/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: git-clone
|
|
spec:
|
|
workspaces:
|
|
- name: output
|
|
description: The git repo will be cloned onto the volume backing this workspace
|
|
params:
|
|
- name: url
|
|
description: git url to clone
|
|
type: string
|
|
- name: revision
|
|
description: git revision to checkout (branch, tag, sha, ref…)
|
|
type: string
|
|
default: master
|
|
- name: submodules
|
|
description: defines if the resource should initialize and fetch the submodules
|
|
type: string
|
|
default: "true"
|
|
- name: depth
|
|
description: performs a shallow clone where only the most recent commit(s) will be fetched
|
|
type: string
|
|
default: "1"
|
|
- name: sslVerify
|
|
description: defines if http.sslVerify should be set to true or false in the global git config
|
|
type: string
|
|
default: "true"
|
|
- name: subdirectory
|
|
description: subdirectory inside the "output" workspace to clone the git repo into
|
|
type: string
|
|
default: "src"
|
|
- name: deleteExisting
|
|
description: clean out the contents of the repo's destination directory (if it already exists) before trying to clone the repo there
|
|
type: string
|
|
default: "true"
|
|
results:
|
|
- name: commit
|
|
description: The precise commit SHA that was fetched by this Task
|
|
steps:
|
|
- name: clone
|
|
image: gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/git-init:latest
|
|
script: |
|
|
CHECKOUT_DIR="$(workspaces.output.path)/$(inputs.params.subdirectory)"
|
|
cleandir() {
|
|
# Delete any existing contents of the repo directory if it exists.
|
|
#
|
|
# We don't just "rm -rf $CHECKOUT_DIR" because $CHECKOUT_DIR might be "/"
|
|
# or the root of a mounted volume.
|
|
if [[ -d "$CHECKOUT_DIR" ]] ; then
|
|
# Delete non-hidden files and directories
|
|
rm -rf "$CHECKOUT_DIR"/*
|
|
# Delete files and directories starting with . but excluding ..
|
|
rm -rf "$CHECKOUT_DIR"/.[!.]*
|
|
# Delete files and directories starting with .. plus any other character
|
|
rm -rf "$CHECKOUT_DIR"/..?*
|
|
fi
|
|
}
|
|
if [[ "$(inputs.params.deleteExisting)" == "true" ]] ; then
|
|
cleandir
|
|
ls -lah "$CHECKOUT_DIR"
|
|
fi
|
|
/ko-app/git-init \
|
|
-url "$(inputs.params.url)" \
|
|
-revision "$(inputs.params.revision)" \
|
|
-path "$CHECKOUT_DIR" \
|
|
-sslVerify "$(inputs.params.sslVerify)" \
|
|
-submodules "$(inputs.params.submodules)" \
|
|
-depth "$(inputs.params.depth)"
|
|
cd "$CHECKOUT_DIR"
|
|
RESULT_SHA="$(git rev-parse HEAD | tr -d '\n')"
|
|
EXIT_CODE="$?"
|
|
if [ "$EXIT_CODE" != 0 ]
|
|
then
|
|
exit $EXIT_CODE
|
|
fi
|
|
# Make sure we don't add a trailing newline to the result!
|
|
echo -n "$RESULT_SHA" > $(results.commit.path)
|
|
---
|
|
apiVersion: tekton.dev/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: build-and-push
|
|
spec:
|
|
params:
|
|
- name: context
|
|
description: The path to the build context, used by Kaniko - within the workspace
|
|
default: .
|
|
type: string
|
|
- name: image-name
|
|
description: dockerhub url
|
|
type: string
|
|
- name: version
|
|
description: image-version (for instance latest or beta)
|
|
type: string
|
|
workspaces:
|
|
- name: source
|
|
mountpath: /source
|
|
steps:
|
|
- name: build-and-push
|
|
image: gcr.io/kaniko-project/executor
|
|
env:
|
|
- name: "DOCKER_CONFIG"
|
|
value: "/tekton/home/.docker/"
|
|
command:
|
|
- /kaniko/executor
|
|
args:
|
|
- "--dockerfile=/source/$(params.context)/dockerfile"
|
|
- "--destination=beppev/$(params.image-name):$(params.version)"
|
|
- "--context=/source/$(params.context)/"
|
|
---
|
|
apiVersion: tekton.dev/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: execute-yaml
|
|
#namespace: stage-tekton-pipeline
|
|
spec:
|
|
params:
|
|
- name: yaml-location
|
|
default: deploy.yaml
|
|
- name: command
|
|
default: apply
|
|
workspaces:
|
|
- name: source
|
|
mountpath: /source
|
|
steps:
|
|
- name: deploy-new-app
|
|
image: lachlanevenson/k8s-kubectl
|
|
command: ["kubectl"]
|
|
args:
|
|
- "$(params.command)"
|
|
- "-f"
|
|
- "/source/$(params.yaml-location)"
|
|
---
|
|
apiVersion: tekton.dev/v1beta1
|
|
kind: Pipeline
|
|
metadata:
|
|
name: application-pipeline
|
|
#namespace: stage-tekton-pipeline
|
|
spec:
|
|
params:
|
|
- name: git-url
|
|
description: url of the github repository to clone
|
|
- name: branch
|
|
description: name of the master branch of the repository
|
|
workspaces:
|
|
- name: workspace-master
|
|
- name: workspace-experimental
|
|
tasks:
|
|
- name: clone-master
|
|
taskRef:
|
|
name: git-clone
|
|
workspaces:
|
|
- name: output
|
|
workspace: workspace-master
|
|
params:
|
|
- name: url
|
|
value: $(inputs.params.git-url)
|
|
- name: revision
|
|
value: $(inputs.params.master-branch)
|
|
- name: build-and-push-a
|
|
taskRef:
|
|
name: build-and-push
|
|
runAfter:
|
|
- clone-master
|
|
workspaces:
|
|
- name: source
|
|
workspace: workspace-master
|
|
params:
|
|
- name: context
|
|
value: "server-a"
|
|
- name: image-name
|
|
value: "server-a"
|
|
- name: version
|
|
value: "$(inputs.params.master-branch)"
|
|
- name: build-and-push-b-stable
|
|
taskRef:
|
|
name: build-and-push
|
|
runAfter:
|
|
- clone-master
|
|
workspaces:
|
|
- name: source
|
|
workspace: workspace-master
|
|
params:
|
|
- name: context
|
|
value: "server-b"
|
|
- name: image-name
|
|
value: "server-b"
|
|
- name: version
|
|
value: "$(inputs.params.master-branch)"
|
|
- name: build-and-push-d
|
|
taskRef:
|
|
name: build-and-push
|
|
runAfter:
|
|
- clone-master
|
|
workspaces:
|
|
- name: source
|
|
workspace: workspace-master
|
|
params:
|
|
- name: context
|
|
value: "server-d"
|
|
- name: image-name
|
|
value: "server-d"
|
|
- name: version
|
|
value: "$(inputs.params.master-branch)"
|
|
- name: clone-experimental
|
|
taskRef:
|
|
name: git-clone
|
|
workspaces:
|
|
- name: output
|
|
workspace: workspace-experimental
|
|
params:
|
|
- name: url
|
|
value: $(inputs.params.git-url)
|
|
- name: revision
|
|
value: $(inputs.params.experimental-branch)
|
|
- name: build-and-push-b-experimental
|
|
taskRef:
|
|
name: build-and-push
|
|
workspaces:
|
|
- name: source
|
|
workspace: workspace-experimental
|
|
runAfter:
|
|
- clone-experimental
|
|
params:
|
|
- name: context
|
|
value: "server-b"
|
|
- name: image-name
|
|
value: "server-b"
|
|
- name: version
|
|
value: "$(inputs.params.experimental-branch)"
|
|
- name: deploy-infra
|
|
taskRef:
|
|
name: execute-yaml
|
|
workspaces:
|
|
- name: source
|
|
workspace: workspace-master
|
|
runAfter:
|
|
- build-and-push-b-experimental
|
|
- build-and-push-d
|
|
- build-and-push-a
|
|
- build-and-push-b-stable
|
|
params:
|
|
- name: yaml-location
|
|
value: "infra.yaml"
|
|
- name: execute-yaml #@TODO make it so that the delete can be skipped if error
|
|
taskRef:
|
|
name: execute-yaml
|
|
workspaces:
|
|
- name: source
|
|
workspace: workspace-master
|
|
runAfter:
|
|
- deploy-infra
|