organic/.webhook_bridge/pipeline-foreign-document-test.yaml

apiVersion: tekton.dev/v1
kind: PipelineRun
metadata:
  name: foreign-document-test
  labels:
    pdb: protect
spec:
  timeouts:
    pipeline: "2h0m0s"
    tasks: "1h0m40s"
    finally: "0h30m0s"
  taskRunTemplate:
    serviceAccountName: build-bot
  pipelineSpec:
    params:
      - name: image-name
        description: The name for the built image
        type: string
      - name: target-name
        description: The dockerfile target to build
        type: string
      - name: path-to-image-context
        description: The path to the build context
        type: string
      - name: path-to-dockerfile
        description: The path to the Dockerfile
        type: string
    tasks:
      - name: report-pending
        taskRef:
          resolver: git
          params:
            - name: url
              value: https://code.fizz.buzz/mirror/catalog.git # mirror of https://github.com/tektoncd/catalog.git
            - name: revision
              value: df36b3853a5657fd883015cdbf07ad6466918acf
            - name: pathInRepo
              value: task/gitea-set-status/0.1/gitea-set-status.yaml
        params:
          - name: CONTEXT
            value: "$(params.JOB_NAME)"
          - name: REPO_FULL_NAME
            value: "$(params.REPO_OWNER)/$(params.REPO_NAME)"
          - name: GITEA_HOST_URL
            value: code.fizz.buzz
          - name: SHA
            value: "$(tasks.fetch-repository.results.commit)"
          - name: DESCRIPTION
            value: "Build $(params.JOB_NAME) has started"
          - name: STATE
            value: pending
          - name: TARGET_URL
            value: "https://tekton.fizz.buzz/#/namespaces/$(context.pipelineRun.namespace)/pipelineruns/$(context.pipelineRun.name)"
      - name: fetch-repository
        params:
          - name: url
            value: $(params.REPO_URL)
          - name: revision
            value: $(params.PULL_BASE_SHA)
          - name: deleteExisting
            value: "true"
        taskRef:
          params:
            - name: url
              value: https://code.fizz.buzz/talexander/personal_tekton_catalog.git
            - name: revision
              value: "dda7b690195b43e8b9859d1caf5dcbf48588ade1"
            - name: pathInRepo
              value: task/git-clone/0.1/git-clone.yaml
          resolver: git
        workspaces:
          - name: output
            workspace: git-source
      - name: get-git-commit-time
        taskSpec:
          metadata: {}
          stepTemplate:
            image: alpine:3.20
            computeResources:
              requests:
                cpu: 10m
                memory: 600Mi
            workingDir: "$(workspaces.repo.path)"
          results:
            - name: unix-time
              description: The time of the git commit in unix timestamp format.
          steps:
            - image: alpine/git:v2.34.2
              name: detect-tag-step
              script: |
                #!/usr/bin/env sh
                set -euo pipefail
                echo -n "$(git log -1 --pretty=%ct)" | tee $(results.unix-time.path)
        workspaces:
          - name: repo
            workspace: git-source
        runAfter:
          - fetch-repository
      - name: build-image
        taskRef:
          resolver: git
          params:
            - name: url
              value: https://code.fizz.buzz/talexander/personal_tekton_catalog.git
            - name: revision
              value: f7d924afbd8fc7b3d234417f1e18a6f9e28caa31
            - name: pathInRepo
              value: task/buildah-rootless-daemonless/0.1/buildah-rootless-daemonless.yaml
        params:
          - name: OUTPUT
            value: >-
              $(params.image-name):$(tasks.fetch-repository.results.commit)
          - name: CONTEXT
            value: $(params.path-to-image-context)
          - name: DOCKERFILE
            value: $(params.path-to-dockerfile)
          - name: EXTRA_ARGS
            value:
              - --storage-driver=vfs
              - "--target"
              - "$(params.target-name)"
              - --cache-from
              - "$(params.image-name)-buildcache"
              - --cache-to
              - "$(params.image-name)-buildcache"
              # - --opt
              # - build-arg:SOURCE_DATE_EPOCH=$(tasks.get-git-commit-time.results.unix-time)
          - name: REGISTRIES_CONF
            value: |
              unqualified-search-registries = ["docker.io"]

              [[registry]]
              location = "dockerhub.dockerhub.svc.cluster.local"
              insecure = true

              [[registry]]
              location = "docker.io"

              [[registry.mirror]]
              location = "dockerhub.dockerhub.svc.cluster.local" # Replace with your mirror URL
              insecure = true
        workspaces:
          - name: source
            workspace: git-source
          - name: dockerconfig
            workspace: docker-credentials
        runAfter:
          - fetch-repository
      - name: run-test
        taskSpec:
          metadata: {}
          params:
            - name: docker-image
              type: string
              description: Docker image to run.
              default: alpine:3.20
          stepTemplate:
            image: alpine:3.20
            computeResources:
              requests:
                cpu: 10m
                memory: 600Mi
            workingDir: /workspace/source
          workspaces:
            - name: source
              mountPath: /source
            - name: cargo-cache
              mountPath: /usr/local/cargo/registry
              optional: true
          steps:
            - name: run
              image: $(params.docker-image)
              workingDir: "$(workspaces.source.path)"
              env:
                - name: CARGO_TARGET_DIR
                  value: /target
                - name: RUSTUP_PERMIT_COPY_RENAME
                  value: "true"
        workspaces:
          - name: source
            workspace: git-source
          - name: cargo-cache
            workspace: cargo-cache
        runAfter:
          - build-image
        params:
          - name: docker-image
            value: "$(tasks.build-image.results.IMAGE_URL[1])"
    finally:
      - name: report-success
        when:
          - input: "$(tasks.status)"
            operator: in
            values: ["Succeeded", "Completed"]
        taskRef:
          resolver: git
          params:
            - name: url
              value: https://code.fizz.buzz/mirror/catalog.git # mirror of https://github.com/tektoncd/catalog.git
            - name: revision
              value: df36b3853a5657fd883015cdbf07ad6466918acf
            - name: pathInRepo
              value: task/gitea-set-status/0.1/gitea-set-status.yaml
        params:
          - name: CONTEXT
            value: "$(params.JOB_NAME)"
          - name: REPO_FULL_NAME
            value: "$(params.REPO_OWNER)/$(params.REPO_NAME)"
          - name: GITEA_HOST_URL
            value: code.fizz.buzz
          - name: SHA
            value: "$(tasks.fetch-repository.results.commit)"
          - name: DESCRIPTION
            value: "Build $(params.JOB_NAME) has succeeded"
          - name: STATE
            value: success
          - name: TARGET_URL
            value: "https://tekton.fizz.buzz/#/namespaces/$(context.pipelineRun.namespace)/pipelineruns/$(context.pipelineRun.name)"
      - name: report-failure
        when:
          - input: "$(tasks.status)"
            operator: in
            values: ["Failed"]
        taskRef:
          resolver: git
          params:
            - name: url
              value: https://code.fizz.buzz/mirror/catalog.git # mirror of https://github.com/tektoncd/catalog.git
            - name: revision
              value: df36b3853a5657fd883015cdbf07ad6466918acf
            - name: pathInRepo
              value: task/gitea-set-status/0.1/gitea-set-status.yaml
        params:
          - name: CONTEXT
            value: "$(params.JOB_NAME)"
          - name: REPO_FULL_NAME
            value: "$(params.REPO_OWNER)/$(params.REPO_NAME)"
          - name: GITEA_HOST_URL
            value: code.fizz.buzz
          - name: SHA
            value: "$(tasks.fetch-repository.results.commit)"
          - name: DESCRIPTION
            value: "Build $(params.JOB_NAME) has failed"
          - name: STATE
            value: failure
          - name: TARGET_URL
            value: "https://tekton.fizz.buzz/#/namespaces/$(context.pipelineRun.namespace)/pipelineruns/$(context.pipelineRun.name)"
      - name: cargo-cache-autoclean
        taskSpec:
          metadata: {}
          params:
            - name: docker-image
              type: string
              description: Docker image to run.
              default: alpine:3.20
          stepTemplate:
            image: alpine:3.20
            computeResources:
              requests:
                cpu: 10m
                memory: 600Mi
            workingDir: /workspace/source
          workspaces:
            - name: source
              mountPath: /source
            - name: cargo-cache
              mountPath: /usr/local/cargo/registry
              optional: true
          steps:
            - name: run
              image: $(params.docker-image)
              workingDir: "$(workspaces.source.path)"
              command: [cargo, cache, --autoclean]
              args: []
              env:
                - name: RUSTUP_PERMIT_COPY_RENAME
                  value: "true"
        workspaces:
          - name: source
            workspace: git-source
          - name: cargo-cache
            workspace: cargo-cache
        params:
          - name: docker-image
            value: "$(tasks.build-image.results.IMAGE_URL[1])"
    workspaces:
      - name: git-source
      - name: docker-credentials
      - name: cargo-cache
  workspaces:
    - name: git-source
      volumeClaimTemplate:
        spec:
          storageClassName: "local-path"
          accessModes:
            - ReadWriteOnce
          resources:
            requests:
              storage: 10Gi
      subPath: rust-source
    - name: cargo-cache
      persistentVolumeClaim:
        claimName: organic-cargo-cache-test-foreign-document
    - name: docker-credentials
      secret:
        secretName: harbor-plain
  params:
    - name: image-name
      value: "harbor.fizz.buzz/private/organic-test-foreign-document"
    - name: target-name
      value: "foreign-document"
    - name: path-to-image-context
      value: docker/organic_test/
    - name: path-to-dockerfile
      value: docker/organic_test/Dockerfile