1.2. Red Hat OpenShift Pipelines 1.19 发行注记

apiVersion: triggers.tekton.dev/v1beta1
kind: EventListener
metadata:
  name: listener-securitycontext
spec:
  serviceAccountName: pipeline
  resources:
    kubernetesResource:
      spec:
        template:
          spec:
            securityContext:
              runAsNonRoot: true
            containers:
              - resources:
                  requests:
                    memory: "64Mi"
                    cpu: "250m"
                  limits:
                    memory: "128Mi"
                    cpu: "500m"
                securityContext:
                  readOnlyRootFilesystem: true
  triggers:
    - name: foo-trig
      bindings:
        - ref: pipeline-binding
        - ref: message-binding
      template:
        ref: pipeline-template
# ...

apiVersion: operator.tekton.dev/v1alpha1
kind: TektonResult
metadata:
  name: result
spec:
  db_secret_name: # optional: custom database secret name
  db_secret_user_key: # optional
  db_secret_password_key: # optional
...

apiVersion: v1
kind: ConfigMap
metadata:
  name: bundleresolver-config
  namespace: tekton-pipelines-resolvers
  labels:
    app.kubernetes.io/component: resolvers
    app.kubernetes.io/instance: default
    app.kubernetes.io/part-of: tekton-pipelines
data:
  # The initial duration for a backoff.
  backoff-duration: "500ms"
  # The factor by which the sleep duration increases every step
  backoff-factor: "2.5"
  # A random amount of additional sleep between 0 and duration * jitter.
  backoff-jitter: "0.1"
  # The number of backoffs to attempt.
  backoff-steps: "3"
  # The maxumum backoff duration. If reached, remaining steps are zeroed.
  backoff-cap: "10s"
  # The default layer kind in the bundle image.
  default-kind: "task"

apiVersion: tekton.dev/v1beta1
kind: PipelineRun
metadata:
  name: git-clone-demo-pr
spec:
  pipelineRef:
    resolver: git
    params:
    - name: url
      value: https://github.com/tektoncd/catalog.git
    - name: revision
      value: main
    - name: pathInRepo
      value: pipeline/simple/0.1/simple.yaml
    - name: gitToken
      value: "secret-with-token"
    - name: gitTokenKey (optional, defaults to "token")
      value: "token"
  params:
  - name: name
    value: Ranni

apiVersion: operator.tekton.dev/v1alpha1
kind: TektonConfig
metadata:
  name: config
  options:
    deployments:
       tekton-results-api:
         spec:
           template:
             spec:
               containers:
               - name: api
                 env:
                 - name: SQL_LOG_LEVEL
                   value: debug
# ...

apiVersion: operator.tekton.dev/v1alpha1
kind: TektonConfig
metadata:
  name: config
spec:
# ...
  result:
    performance:
      disable-ha: false
      buckets: 4
      replicas: 4
      statefulset-ordinals: true
# ...

apiVersion: operator.tekton.dev/v1
kind: TektonConfig
metadata:
  name: config
spec:
  chain:
    disabled: false
    generateSigningSecret: true
# ...

apiVersion: tekton.dev/v1
kind: Task
metadata:
  name: build-task
spec:
  workspaces:
    - name: source
    - name: cred
  params:
    - name: cachePatterns
      default: $(params.cachePatterns)
  steps:
    - name: cache-fetch
      ref:
        resolver: cluster
        params:
          - name: name
            value: cache-fetch
          - name: namespace
            value: openshift-pipelines
          - name: kind
            value: stepaction
      params:
        - name: PATTERNS
          value: $(params.cachePatterns)
        - name: SOURCE
          value: oci://$(params.registry)/cache-go:{{hash}}
        - name: CACHE_PATH
          value: $(workspaces.source.path)/cache
        - name: WORKING_DIR
          value: $(workspaces.source.path)/repo
        - name: DOCKER_CONFIG
          value: $(workspaces.cred.path)/
    - name: cache-upload
      ref:
        resolver: cluster
        params:
          - name: name
            value: cache-upload
          - name: namespace
            value: openshift-pipelines
          - name: kind
            value: stepaction
      params:
        - name: PATTERNS
          value: $(params.cachePatterns)
        - name: TARGET
          value: oci://$(params.registry)/cache-go:{{hash}}
        - name: CACHE_PATH
          value: $(workspaces.source.path)/cache
        - name: WORKING_DIR
          value: $(workspaces.source.path)/repo
        - name: DOCKER_CONFIG
          value: $(workspaces.cred.path)/
			...
# ...

apiVersion: operator.tekton.dev/v1alpha1
kind: TektonChains
metadata:
  name: chain
spec:
  chain:
    performance:
      disable-ha: false
      buckets: 4
      replicas: 4
      statefulset-ordinals: true

---
apiVersion: tekton.dev/v1
kind: PipelineRun
metadata:
  name: pull-pr-3
  annotations:
    pipelinesascode.tekton.dev/on-event: ["push"]
    pipelinesascode.tekton.dev/on-target-branch: ["refs/tags/*"]
spec:
  params:
    - name: tag
      value: "{{ git_tag }}"
  pipelineSpec:
    tasks:
        # ...
    tasks:
        ...
        taskSpec:
          steps:
            ...
              script: |

apiVersion: operator.tekton.dev/v1alpha1
kind: TektonConfig
metadata:
  name: config
# ...
platforms:
  openshift:
    pipelinesAsCode:
      additionalPACControllers:
        <controllerName>:
          enable: true
          configMapName:
          secretName:
          settings:
      enable: true
        # ...
        settings:
          # ...
          hub-url: https://api.hub.tekton.dev/v1
          skip-push-event-for-pr-commits: "true"
          remote-tasks: "true"
          secret-auto-create: "true"
          # ...