Tekton入门

1
 cat deploy-to-k8s-task.yaml
2
apiVersion: tekton.dev/v1alpha1
3
kind: Task
4
metadata:
5
  name: deploy-to-k8s
6
spec:
7
  workspaces:
8
    - name: source
9
    - name: kubernetesconfig
10
      mountPath: /root/.kube
11
  params:
12
    - name: pathToYamlFile
13
      description: The path to the yaml file to deploy within the git source
14
      default: deployment.yaml
15
    - name: IMAGE
16
    - name: TAG
17
  steps:
18
    - name: run-kubectl
19
      image: registry.cn-hangzhou.aliyuncs.com/coolops/kubectl:1.19.16
20
      workingDir: $(workspaces.source.path)
21
      script: |
22
        sed -i s#IMAGE#$(params.IMAGE)#g $(params.pathToYamlFile)
23
        sed -i s#TAG#$(params.TAG)#g $(params.pathToYamlFile)
24
        kubectl apply -f $(params.pathToYamlFile)

1
apiVersion: tekton.dev/v1beta1
2
kind: Pipeline
3
metadata:
4
  name: devops-hello-world-pipeline
5
spec:
6
  workspaces: # 声明 workspaces
7
    - name: go-repo-pvc
8
    - name: docker-config
9
    - name: kubernetes-config
10
  params:
11
    # 定义代码仓库
12
    - name: git_url
13
      description: https://git.ccops.cc/golang_test/go_demo.git
14
    - name: revision
15
      type: string
16
      default: "master"
17
    - name: gitInitImage
18
      type: string
19
      default: "gexuchuan123/tektoncd-pipeline-cmd-git-init:v0.33.3"
20
    # 定义镜像参数
21
    - name: pathToDockerfile
22
      description: The path to the build context, used by Kaniko - within the workspace
23
      default: .
24
    - name: imageUrl
25
      description: Url of image repository
26
    - name: imageTag
27
      description: Tag to apply to the built image
28
      default: latest
29
  tasks: # 添加task到流水线中
30
    - name: clone
31
      taskRef:
32
        name: git-clone
33
      workspaces:
34
        - name: output
35
          workspace: go-repo-pvc
36
      params:
37
        - name: url
38
          value: $(params.git_url)
39
        - name: revision
40
          value: $(params.revision)
41
        - name: gitInitImage
42
          value: $(params.gitInitImage)
43
    - name: unit-test
44
      workspaces: # 传递 workspaces
45
        - name: source
46
          workspace: go-repo-pvc
47
      taskRef:
48
        name: unit-test
49
      runAfter: # 控制Task顺序
50
        - clone
51
    - name: build-push-image
52
      params:
53
        - name: pathToDockerfile
54
          value: $(params.pathToDockerfile)
55
        - name: imageUrl
56
          value: $(params.imageUrl)
57
        - name: imageTag
58
          value: $(tasks.clone.results.commit)
59
      taskRef:
60
        name: build-push-image
61
      runAfter:
62
        - unit-test
63
      workspaces: # 传递 workspaces
64
        - name: source
65
          workspace: go-repo-pvc
66
        - name: dockerconfig
67
          workspace: docker-config
68
    - name: deploy-to-k8s
69
      taskRef:
70
        name: deploy-to-k8s
71
      params:
72
        - name: pathToYamlFile
73
          value: deployment.yaml
74
        - name: IMAGE
75
          value: $(params.imageUrl)
76
        - name: TAG
77
          value: $(tasks.clone.results.commit)
78
      workspaces:
79
        - name: source
80
          workspace: go-repo-pvc
81
        - name: kubernetesconfig
82
          workspace: kubernetes-config
83
      runAfter:
84
        - build-push-image

1
vim tekton/deploy/serviceaccount.yaml
2
apiVersion: v1
3
kind: Secret
4
metadata:
5
  name: gitlab-auth
6
  annotations:
7
    tekton.dev/git-0: https://git.ccops.cc/ # git地址
8
type: kubernetes.io/basic-auth
9
stringData:
10
  username: 用户名
11
  password: 密码
12
---
13
apiVersion: v1
14
kind: ServiceAccount
15
metadata:
16
  name: tekton-build-sa
17
secrets:
18
  - name: gitlab-auth
19
---
20
apiVersion: rbac.authorization.k8s.io/v1
21
kind: ClusterRoleBinding
22
metadata:
23
  name: tekton-clusterrole-binding
24
roleRef:
25
  apiGroup: rbac.authorization.k8s.io
26
  kind: ClusterRole
27
  name: edit
28
subjects:
29
  - kind: ServiceAccount
30
    name: tekton-build-sa
31
    namespace: default # 这里注意下命名空间,如果不在default要改
32
kubectl apply -f tekton/deploy/serviceaccount.yaml

1
cim tekton/deploy/pipeline-run.yaml
2
apiVersion: tekton.dev/v1beta1
3
kind: PipelineRun
4
metadata:
5
  name: devops-hello-world-pipeline-run
6
spec:
7
  pipelineRef:
8
    name: devops-hello-world-pipeline
9
  params:
10
    - name: revision
11
      value: master
12
    - name: git_url
13
      value: https://git.ccops.cc/golang_test/go_demo.git
14
    - name: imageUrl
15
      value: 自己的仓库地址
16
    - name: imageTag
17
      value: 这里配置也没用,会自动根据commit id修改
18
    - name: pathToDockerfile
19
      value: Dockerfile #dockerfile名称
20
  workspaces:
21
    - name: go-repo-pvc
22
      volumeClaimTemplate:
23
        spec:
24
          storageClassName: nfs-client # 通过nfs csi自动创建pv,这里选择存储要注意,有的可能报错pvc被占用,因为tekton运行完tasks的pod不属于正常删除,文件句柄没有及时关闭导致挂载不了
25
          accessModes:
26
            - ReadWriteMany
27
          resources:
28
            requests:
29
              storage: 1G
30
    - name: docker-config
31
      secret:
32
        secretName: docker-config # 刚才添加的docker仓库信息
33
    - name: kubernetes-config
34
      secret:
35
        secretName: kubernetes-config
36
  serviceAccountName: tekton-build-sa