Tekton进阶使用

1
cat tekton/cicd/build-push-image-task.yaml
2

3
apiVersion: tekton.dev/v1beta1
4
kind: Task
5
metadata:
6
  name: build-push-image
7
spec:
8
  params:
9
    - name: pathToDockerfile
10
      description: The path to the dockerfile to build (relative to the context)
11
      default: Dockerfile
12
    - name: imageUrl
13
      description: Url of image repository
14
    - name: imageTag
15
      description: Tag to apply to the built image
16
      default: latest
17
  workspaces:
18
    - name: source
19
    - name: dockerconfig
20
      mountPath: /kaniko/.docker # config.json 的挂载目录
21
    - name: hexo-config
22
      mountPath: /opt/blog/_config.butterfly.yml # hexo配置文件 的挂载目录
23
  steps:
24
    - name: build-and-push
25
      image: aiotceo/kaniko-executor:v1.6.0
26
      workingDir: $(workspaces.source.path)
27
      command:
28
        - /kaniko/executor
29
      args:
30
        - --dockerfile=$(params.pathToDockerfile)
31
        - --destination=$(params.imageUrl):$(params.imageTag)
32
        - --context=$(workspaces.source.path)
33
        - --skip-tls-verify  # 跳过证书验证

1
cat tekton/cicd/blog-pipeline.yaml
2

3
apiVersion: tekton.dev/v1beta1
4
kind: Pipeline
5
metadata:
6
  name: blog-pipeline
7
spec:
8
  workspaces: # 声明 workspaces,名字与类型一定要与taks里的对上
9
    - name: blog-build-pvc # pvc
10
    - name: docker-config # docker认证
11
    - name: hexo-config #hexo配置
12
    - name: kubernetes-config # kubeconfig
13
  params:
14
    - name: git_url
15
    - name: revision
16
    - name: gitInitImage
17
      type: string
18
      default: "ccr.ccs.tencentyun.com/ccops/tektoncd-pipeline-cmd-git-init:v0.33.3"
19
    - name: pathToDockerfile
20
    - name: imageUrl
21
    - name: imageTag
22
  tasks: # 添加task到流水线中
23
    - name: clone
24
      taskRef:
25
        name: git-clone
26
      workspaces:
27
        - name: output
28
          workspace: blog-build-pvc
29
      params:
30
        - name: url
31
          value: $(params.git_url)
32
        - name: revision
33
          value: $(params.revision)
34
        - name: gitInitImage
35
          value: $(params.gitInitImage)
36
    - name: build-push-image
37
      params:
38
        - name: pathToDockerfile
39
          value: $(params.pathToDockerfile)
40
        - name: imageUrl
41
          value: $(params.imageUrl)
42
        - name: imageTag
43
          value: $(tasks.clone.results.commit)
44
      taskRef:
45
        name: build-push-image
46
      workspaces: # 传递 workspaces
47
        - name: source
48
          workspace: blog-build-pvc
49
        - name: dockerconfig
50
          workspace: docker-config
51
        - name: hexo-config
52
          workspace: hexo-config
53
    - name: deploy-to-k8s
54
      taskRef:
55
        name: deploy-to-k8s
56
      params:
57
        - name: pathToYamlFile
58
          value: deployment.yaml
59
        - name: IMAGE
60
          value: $(params.imageUrl)
61
        - name: TAG
62
          value: $(tasks.clone.results.commit)
63
      workspaces:
64
        - name: source
65
          workspace: blog-build-pvc
66
        - name: kubernetesconfig
67
          workspace: kubernetes-config
68
      runAfter:
69
        - build-push-image

1
apiVersion: v1
2
kind: Secret
3
metadata:
4
  name: gitlab-auth
5
  annotations:
6
    tekton.dev/git-0: https://git.ccops.cc/
7
type: kubernetes.io/basic-auth
8
stringData:
9
  username: xxxx # git账号
10
  password: xxxx # git密码
11
---
12
apiVersion: v1
13
kind: ServiceAccount
14
metadata:
15
  name: tekton-build-sa
16
secrets:
17
  - name: gitlab-auth
18
---
19
apiVersion: rbac.authorization.k8s.io/v1
20
kind: ClusterRoleBinding
21
metadata:
22
  name: tekton-clusterrole-binding
23
roleRef:
24
  apiGroup: rbac.authorization.k8s.io
25
  kind: ClusterRole
26
  name: edit
27
subjects:
28
  - kind: ServiceAccount
29
    name: tekton-build-sa
30
    namespace: blog-cicd
31
# 上半部分为权限配置,因为这个只是测试用我和到一起了
32
---
33
apiVersion: tekton.dev/v1beta1
34
kind: PipelineRun
35
metadata:
36
  name: blog-pipeline-run
37
spec:
38
  pipelineRef:
39
    name: blog-pipeline
40
  params:
41
    - name: revision
42
      value: master
43
    - name: git_url
44
      value: https://git.ccops.cc/blog/blog.git
45
    - name: imageUrl
46
      value: ccr.ccs.tencentyun.com/ccops/blog
47
    - name: imageTag
48
      value: "1.1"
49
    - name: pathToDockerfile
50
      value: Dockerfile
51
  workspaces:
52
    - name: blog-build-pvc
53
      volumeClaimTemplate:
54
        spec:
55
          storageClassName: local-path # 通过local sc自动创建pv
56
          accessModes:
57
            - ReadWriteOnce
58
          resources:
59
            requests:
60
              storage: 50M
61
    - name: docker-config
62
      secret:
63
        secretName: docker-config
64
    - name: hexo-config
65
      configmap:
66
        name: hexo-config  # hexo的configmap名称
67
      subPath: _config.butterfly.yml # 挂载的文件名,taks里一定写文件名而不是目录名
68
    - name: kubernetes-config
69
      secret:
70
        secretName: kubernetes-config
71
  serviceAccountName: tekton-build-sa