goghvideo/cicd
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

chore: updated rbac and added cabundle cm

Browse Source
This commit is contained in:
Randal Harisch
2025-02-12 12:53:34 -07:00
parent 9b659e74b4
commit 1d6e9a7f9b
4 changed files with 21 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
common/templates/_pipeline.yaml
View File

@@ -136,7 +136,7 @@ spec:
- name: ephemeral-namespace - name: ephemeral-namespace
params: params:
- name: VERSION - name: VERSION
value: "4.11" value: "4.17"
- name: SCRIPT - name: SCRIPT
value: | value: |
echo "${SHELL}" echo "${SHELL}"
@@ -144,6 +144,16 @@ spec:
oc new-project goghvideo-test-${RANDOMID} >/dev/null oc new-project goghvideo-test-${RANDOMID} >/dev/null
oc label namespace goghvideo-test-${RANDOMID} app=goghvideo-test oc label namespace goghvideo-test-${RANDOMID} app=goghvideo-test
oc apply -f - <<EOF
apiVersion: v1
data: {}
kind: ConfigMap
metadata:
labels:
config.openshift.io/inject-trusted-cabundle: "true"
name: config-trusted-cabundle
EOF
x=0; until [[ -n $(oc -n goghvideo-test-${RANDOMID} get secret/goghvideo-openshift-builder-pull-secret 2>/dev/null) || $x -eq 10 ]]; do echo "Waiting for secret replication" && sleep 10 && ((x++)); done x=0; until [[ -n $(oc -n goghvideo-test-${RANDOMID} get secret/goghvideo-openshift-builder-pull-secret 2>/dev/null) || $x -eq 10 ]]; do echo "Waiting for secret replication" && sleep 10 && ((x++)); done
if [[ "${x}" -eq 10 ]]; then exit 1; fi if [[ "${x}" -eq 10 ]]; then exit 1; fi

2
common/templates/_task-openshift-client.yaml
View File

@@ -18,7 +18,7 @@ spec:
description: The OpenShift CLI arguments to run description: The OpenShift CLI arguments to run
name: SCRIPT name: SCRIPT
type: string type: string
- default: "4.7" - default: "4.17"
description: The OpenShift Version to use description: The OpenShift Version to use
name: VERSION name: VERSION
type: string type: string

2
common/templates/_task-s2i-go.yaml
View File

@@ -64,7 +64,7 @@ spec:
cat /env-vars/env-file cat /env-vars/env-file
s2i build $(params.PATH_CONTEXT) quay01.ipa.endofday.com/goghvideo/golang:$(params.VERSION) \ s2i build $(params.PATH_CONTEXT) quay01.ipa.endofday.com/goghvideo/golang:$(params.VERSION) \
--as-dockerfile /gen-source/Dockerfile.gen --environment-file /env-vars/env-file --assemble-user 0 --as-dockerfile /gen-source/Dockerfile.gen --environment-file /env-vars/env-file
echo "Outputting Generated /gen-source/Dockerfile.gen file" echo "Outputting Generated /gen-source/Dockerfile.gen file"
cat /gen-source/Dockerfile.gen cat /gen-source/Dockerfile.gen

9
custom-rbac.yaml
View File

@@ -27,6 +27,13 @@ rules:
- tekton.dev - tekton.dev
resources: ["pipelineruns"] resources: ["pipelineruns"]
verbs: ["list", "get", "create", "update", "delete", "watch"] verbs: ["list", "get", "create", "update", "delete", "watch"]
- apiGroups:
- project.openshift.io
resources: ["*"]
verbs: ["*"]
- apiGroups: ["*"]
resources: ["namespaces"]
verbs: ["*"]
# Add any other resources you need access to (modify the apiGroups/resources as required) # Add any other resources you need access to (modify the apiGroups/resources as required)