feat: 打通 v0.1 runner job 正式路径

scripts/src/gitops-render.ts

@@ -50,7 +50,7 @@ export async function renderGitops(options: RenderOptions): Promise<JsonRecord>
   await writeFile(path.join(options.outDir, "runtime-v01", "kustomization.yaml"), kustomizationYaml());
   await writeFile(path.join(options.outDir, "runtime-v01", "namespace.yaml"), namespaceYaml(runtimeNamespace));
   await writeFile(path.join(options.outDir, "runtime-v01", "postgres.yaml"), postgresYaml(runtimeNamespace));
-  await writeFile(path.join(options.outDir, "runtime-v01", "mgr.yaml"), managerYaml(runtimeNamespace, image));
+  await writeFile(path.join(options.outDir, "runtime-v01", "mgr.yaml"), managerYaml(runtimeNamespace, image, options.sourceCommit));
   await writeFile(path.join(options.outDir, "runtime-v01", "runner-rbac.yaml"), runnerRbacYaml(runtimeNamespace));
   return { outDir: options.outDir, runtimeNamespace, gitopsBranch, runtimePath, image: image.repositoryDigest, sourceCommit: options.sourceCommit };
 }
@@ -209,7 +209,7 @@ spec:
 `;
 }
 
-function managerYaml(namespace: string, image: { repositoryDigest: string }): string {
+function managerYaml(namespace: string, image: { repositoryDigest: string }, sourceCommit: string): string {
   return `apiVersion: v1
 kind: ServiceAccount
 metadata:
@@ -262,6 +262,16 @@ spec:
                 secretKeyRef:
                   name: agentrun-v01-mgr-db
                   key: DATABASE_URL
+            - name: AGENTRUN_SOURCE_COMMIT
+              value: ${JSON.stringify(sourceCommit)}
+            - name: AGENTRUN_RUNTIME_NAMESPACE
+              value: ${JSON.stringify(namespace)}
+            - name: AGENTRUN_INTERNAL_MGR_URL
+              value: ${JSON.stringify(`http://agentrun-mgr.${namespace}.svc.cluster.local:8080`)}
+            - name: AGENTRUN_RUNNER_IMAGE
+              value: ${JSON.stringify(image.repositoryDigest)}
+            - name: AGENTRUN_RUNNER_SERVICE_ACCOUNT
+              value: "agentrun-v01-runner"
           readinessProbe:
             httpGet:
               path: /health/readiness
@@ -277,6 +287,32 @@ spec:
             limits:
               cpu: 800m
               memory: 1Gi
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: agentrun-v01-mgr-runner-job-controller
+  namespace: ${namespace}
+rules:
+  - apiGroups: ["batch"]
+    resources: ["jobs"]
+    verbs: ["create", "get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["pods"]
+    verbs: ["get", "list", "watch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: agentrun-v01-mgr-runner-job-controller
+  namespace: ${namespace}
+subjects:
+  - kind: ServiceAccount
+    name: agentrun-v01-mgr
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: agentrun-v01-mgr-runner-job-controller
 `;
 }