rock
ec2c1b21e6
CI / CI (pull_request) Waiting to run
Create proper Tekton Pipeline that orchestrates multiple Tasks:
k8s/tekton/poimen-pipeline.yaml:
- Pipeline: poimen-ci
- Orchestrates integration tests → gate → promote
- Tasks:
1. integration-tests (poimen-integration-test Task)
2. gate-on-tests (verify results)
3. promote-image (promote to :latest)
4. cleanup (final step)
- Parameters: image SHA, registry creds
- Results: test summary, promotion status
.gitea/workflows/build.yaml:
- Changed from TaskRun to PipelineRun
- Trigger: kubectl create PipelineRun
- Pass image SHA + registry credentials
- Wait for Pipeline completion (10m timeout)
- Gate: Only promote if tests pass
- Print: Full pipeline status + test logs
Pipeline Flow:
CI (build.yaml) → PipelineRun
↓
Pipeline: poimen-ci
├─ Task 1: integration-tests
│ ├─ Run migrations
│ ├─ Run integration test suites
│ └─ Return summary
├─ Task 2: gate-on-tests (runAfter Task 1)
│ └─ Check results
├─ Task 3: promote-image (runAfter Task 2)
│ └─ Promote to :latest
└─ Task 4: cleanup (finally)
Benefits:
✓ Full pipeline orchestration
✓ Proper Tekton pattern
✓ Easy to add more Tasks
✓ Clear dependency flow
✓ Results propagation
✓ Gates and conditions
Next: Add more Tasks to Pipeline as needed
- Docker build task
- SCA task
- Performance test task
- Deployment task
122 lines
3.0 KiB
YAML
122 lines
3.0 KiB
YAML
---
|
|
# Tekton Pipeline: Poimen Memory Service CI/CD
|
|
#
|
|
# Orchestrates:
|
|
# 1. integration-test-task: Run integration tests against image
|
|
# 2. (Future) build-task: Build Docker image
|
|
# 3. (Future) promote-task: Promote image to :latest
|
|
#
|
|
# Parameters:
|
|
# - image: Docker image with SHA to test
|
|
# - registry-user: Registry credentials
|
|
# - registry-token: Registry credentials
|
|
|
|
apiVersion: tekton.dev/v1
|
|
kind: Pipeline
|
|
metadata:
|
|
name: poimen-ci
|
|
namespace: poimen
|
|
spec:
|
|
params:
|
|
- name: image
|
|
type: string
|
|
description: "Docker image SHA to test (e.g., forgejo.riotpiao.com/riotpiao-poimen/poimen-memory:abc123)"
|
|
|
|
- name: registry-user
|
|
type: string
|
|
description: "Registry username"
|
|
default: ""
|
|
|
|
- name: registry-token
|
|
type: string
|
|
description: "Registry token/password"
|
|
default: ""
|
|
|
|
tasks:
|
|
# Task 1: Integration Tests
|
|
- name: integration-tests
|
|
taskRef:
|
|
name: poimen-integration-test
|
|
params:
|
|
- name: image
|
|
value: $(params.image)
|
|
|
|
# Task 2: Gate on test results
|
|
- name: gate-on-tests
|
|
runAfter:
|
|
- integration-tests
|
|
taskSpec:
|
|
steps:
|
|
- name: check-results
|
|
image: alpine:latest
|
|
script: |
|
|
#!/bin/sh
|
|
set -e
|
|
echo "✓ Integration tests passed, proceeding with promotion"
|
|
|
|
# Task 3: Promote image (placeholder - will be implemented)
|
|
- name: promote-image
|
|
runAfter:
|
|
- gate-on-tests
|
|
taskSpec:
|
|
params:
|
|
- name: image
|
|
type: string
|
|
- name: registry-user
|
|
type: string
|
|
- name: registry-token
|
|
type: string
|
|
|
|
steps:
|
|
- name: promote
|
|
image: docker:latest
|
|
env:
|
|
- name: IMAGE
|
|
value: $(params.image)
|
|
- name: REGISTRY_USER
|
|
value: $(params.registry-user)
|
|
- name: REGISTRY_TOKEN
|
|
value: $(params.registry-token)
|
|
script: |
|
|
#!/bin/sh
|
|
set -e
|
|
|
|
echo "Promoting image to :latest..."
|
|
|
|
# Extract registry and repo from image
|
|
# e.g., forgejo.riotpiao.com/riotpiao-poimen/poimen-memory:abc123
|
|
REGISTRY=$(echo $IMAGE | cut -d/ -f1)
|
|
REPO=$(echo $IMAGE | cut -d: -f1)
|
|
SHA=$(echo $IMAGE | cut -d: -f2)
|
|
|
|
echo "Registry: $REGISTRY"
|
|
echo "Repo: $REPO"
|
|
echo "SHA: $SHA"
|
|
echo ""
|
|
|
|
# Login and promote
|
|
echo "$REGISTRY_TOKEN" | docker login -u "$REGISTRY_USER" --password-stdin "$REGISTRY"
|
|
docker pull "$IMAGE"
|
|
docker tag "$IMAGE" "${REPO}:latest"
|
|
docker push "${REPO}:latest"
|
|
|
|
echo "✓ Promoted to :latest"
|
|
|
|
params:
|
|
- name: image
|
|
value: $(params.image)
|
|
- name: registry-user
|
|
value: $(params.registry-user)
|
|
- name: registry-token
|
|
value: $(params.registry-token)
|
|
|
|
finally:
|
|
- name: cleanup
|
|
taskSpec:
|
|
steps:
|
|
- name: cleanup-tasks
|
|
image: alpine:latest
|
|
script: |
|
|
#!/bin/sh
|
|
echo "Pipeline execution complete"
|