177 lines
4.7 KiB
HCL
177 lines
4.7 KiB
HCL
|
|
locals {
|
|
common-labels = {
|
|
"vynil.solidite.fr/owner-name" = var.instance
|
|
"vynil.solidite.fr/owner-namespace" = var.namespace
|
|
"vynil.solidite.fr/owner-category" = var.category
|
|
"vynil.solidite.fr/owner-component" = var.component
|
|
"app.kubernetes.io/managed-by" = "vynil"
|
|
"app.kubernetes.io/name" = var.component
|
|
"app.kubernetes.io/instance" = var.instance
|
|
}
|
|
rb-patch = <<-EOF
|
|
- op: replace
|
|
path: /subjects/0/namespace
|
|
value: "${var.namespace}"
|
|
EOF
|
|
|
|
}
|
|
data "kustomization_overlay" "data" {
|
|
common_labels = local.common-labels
|
|
namespace = var.namespace
|
|
resources = [for file in fileset(path.module, "*.yaml"): file if file != "index.yaml" && length(regexall("ClusterRole",file))<1 && length(regexall("WebhookConfiguration",file))<1]
|
|
images {
|
|
name = "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/events"
|
|
new_name = "${var.images.events.registry}/${var.images.events.repository}"
|
|
new_tag = "${var.images.events.tag}"
|
|
}
|
|
images {
|
|
name = "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/controller"
|
|
new_name = "${var.images.controller.registry}/${var.images.controller.repository}"
|
|
new_tag = "${var.images.controller.tag}"
|
|
}
|
|
images {
|
|
name = "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/resolvers"
|
|
new_name = "${var.images.resolvers.registry}/${var.images.resolvers.repository}"
|
|
new_tag = "${var.images.resolvers.tag}"
|
|
}
|
|
images {
|
|
name = "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook"
|
|
new_name = "${var.images.webhook.registry}/${var.images.webhook.repository}"
|
|
new_tag = "${var.images.webhook.tag}"
|
|
}
|
|
patches {
|
|
target {
|
|
kind = "Deployment"
|
|
name = "tekton-pipelines-webhook"
|
|
}
|
|
patch = <<-EOF
|
|
- op: replace
|
|
path: /spec/template/spec/containers/0/imagePullPolicy
|
|
value: "${var.images.webhook.pull_policy}"
|
|
EOF
|
|
}
|
|
patches {
|
|
target {
|
|
kind = "ConfigMap"
|
|
name = "feature-flags"
|
|
}
|
|
patch = <<-EOF
|
|
- op: replace
|
|
path: /data/enable-api-fields
|
|
value: "alpha"
|
|
- op: replace
|
|
path: /data/enable-cel-in-whenexpression
|
|
value: "true"
|
|
EOF
|
|
}
|
|
patches {
|
|
target {
|
|
kind = "Deployment"
|
|
name = "tekton-pipelines-remote-resolvers"
|
|
}
|
|
patch = <<-EOF
|
|
- op: replace
|
|
path: /spec/template/spec/containers/0/imagePullPolicy
|
|
value: "${var.images.resolvers.pull_policy}"
|
|
EOF
|
|
}
|
|
patches {
|
|
target {
|
|
kind = "Deployment"
|
|
name = "tekton-pipelines-controller"
|
|
}
|
|
patch = <<-EOF
|
|
- op: replace
|
|
path: /spec/template/spec/containers/0/imagePullPolicy
|
|
value: "${var.images.controller.pull_policy}"
|
|
EOF
|
|
}
|
|
patches {
|
|
target {
|
|
kind = "Deployment"
|
|
name = "tekton-events-controller"
|
|
}
|
|
patch = <<-EOF
|
|
- op: replace
|
|
path: /spec/template/spec/containers/0/imagePullPolicy
|
|
value: "${var.images.events.pull_policy}"
|
|
EOF
|
|
}
|
|
}
|
|
|
|
data "kustomization_overlay" "data_no_ns" {
|
|
common_labels = local.common-labels
|
|
resources = [for file in fileset(path.module, "*.yaml"): file if file != "index.yaml" && (length(regexall("ClusterRole",file))>0 || length(regexall("WebhookConfiguration",file))>0)]
|
|
patches {
|
|
target {
|
|
kind = "ClusterRoleBinding"
|
|
name = "tekton-events-controller-cluster-access"
|
|
}
|
|
patch = local.rb-patch
|
|
}
|
|
patches {
|
|
target {
|
|
kind = "ClusterRoleBinding"
|
|
name = "tekton-pipelines-controller-cluster-access"
|
|
}
|
|
patch = local.rb-patch
|
|
}
|
|
patches {
|
|
target {
|
|
kind = "ClusterRoleBinding"
|
|
name = "tekton-pipelines-controller-tenant-access"
|
|
}
|
|
patch = local.rb-patch
|
|
}
|
|
patches {
|
|
target {
|
|
kind = "ClusterRoleBinding"
|
|
name = "tekton-pipelines-resolvers"
|
|
}
|
|
patch = local.rb-patch
|
|
}
|
|
patches {
|
|
target {
|
|
kind = "ClusterRoleBinding"
|
|
name = "tekton-pipelines-webhook-cluster-access"
|
|
}
|
|
patch = local.rb-patch
|
|
}
|
|
patches {
|
|
target {
|
|
kind = "MutatingWebhookConfiguration"
|
|
name = "webhook.pipeline.tekton.dev"
|
|
}
|
|
patch = <<-EOF
|
|
- op: replace
|
|
path: /webhooks/0/clientConfig/service/namespace
|
|
value: "${var.namespace}"
|
|
EOF
|
|
}
|
|
patches {
|
|
target {
|
|
kind = "ValidatingWebhookConfiguration"
|
|
name = "validation.webhook.pipeline.tekton.dev"
|
|
}
|
|
patch = <<-EOF
|
|
- op: replace
|
|
path: /webhooks/0/clientConfig/service/namespace
|
|
value: "${var.namespace}"
|
|
EOF
|
|
}
|
|
patches {
|
|
target {
|
|
kind = "ValidatingWebhookConfiguration"
|
|
name = "config.webhook.pipeline.tekton.dev"
|
|
}
|
|
patch = <<-EOF
|
|
- op: replace
|
|
path: /webhooks/0/clientConfig/service/namespace
|
|
value: "${var.namespace}"
|
|
EOF
|
|
}
|
|
}
|
|
|
|
|