mirrors/pikasTech-unidesk
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: complete JD01 PaC Gitea env reuse flow

Browse Source
This commit is contained in:
Codex
2026-07-05 12:11:18 +00:00
parent b19c2f8db3
commit 3e2b28e26d
8 changed files with 103 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/src/agentrun-manifests.ts
+20 -1
View File
@@ -265,6 +265,14 @@ function agentRunBuildPublishTask(spec: AgentRunLaneSpec): Record<string, unknow
image: "$(params.buildkit-image)",
env: [
{ name: "BUILDKITD_FLAGS", value: "--oci-worker-no-process-sandbox --oci-worker-net=host --allow-insecure-entitlement network.host" },
{ name: "HTTP_PROXY", value: "$(params.build-http-proxy)" },
{ name: "http_proxy", value: "$(params.build-http-proxy)" },
{ name: "HTTPS_PROXY", value: "$(params.build-https-proxy)" },
{ name: "https_proxy", value: "$(params.build-https-proxy)" },
{ name: "ALL_PROXY", value: "$(params.build-https-proxy)" },
{ name: "all_proxy", value: "$(params.build-https-proxy)" },
{ name: "NO_PROXY", value: "$(params.build-no-proxy)" },
{ name: "no_proxy", value: "$(params.build-no-proxy)" },
],
securityContext: { privileged: true, runAsUser: 1000, runAsGroup: 1000 },
script: agentRunTektonBuildImageScript(),
@@ -272,6 +280,9 @@ function agentRunBuildPublishTask(spec: AgentRunLaneSpec): Record<string, unknow
{
name: "publish-gitops",
image: "$(params.tools-image)",
env: [
{ name: "GITEA_TOKEN", valueFrom: { secretKeyRef: { name: "pac-gitea-agentrun-jd01-v02", key: "token", optional: true } } },
],
script: agentRunTektonGitopsPublishScript(spec),
},
],
@@ -381,6 +392,7 @@ function agentRunTektonProbeImageScript(): string {
"else",
" printf '{\"ok\":false,\"status\":\"cache-miss\",\"sourceCommit\":\"%s\",\"envIdentity\":\"%s\",\"valuesPrinted\":false}\\n' \"$(params.revision)\" \"$env_identity\" > \"$root/build-result.json\"",
"fi",
"chmod a+rw \"$root/build-result.json\"",
"cat \"$root/build-result.json\"",
].join("\n");
}
@@ -428,8 +440,14 @@ function agentRunTektonGitopsPublishScript(spec: AgentRunLaneSpec): string {
"build_result=\"$root/build-result.json\"",
"test -s \"$build_result\"",
`templates_b64=${JSON.stringify(templateB64)}`,
"git_write_url='$(params.git-write-url)'",
"git_auth_url=\"$git_write_url\"",
"if printf '%s' \"$git_write_url\" | grep -q '^http://gitea-http\\.'; then",
" test -n \"${GITEA_TOKEN:-}\"",
" git_auth_url=$(printf '%s' \"$git_write_url\" | sed \"s#^http://#http://x-access-token:${GITEA_TOKEN}@#\")",
"fi",
"rm -rf \"$root/gitops\"",
"git clone \"$(params.git-write-url)\" \"$root/gitops\"",
"git clone \"$git_auth_url\" \"$root/gitops\"",
"cd \"$root/gitops\"",
"git fetch origin \"$(params.gitops-branch)\" || true",
"if git rev-parse --verify \"refs/remotes/origin/$(params.gitops-branch)^{commit}\" >/dev/null 2>&1; then git checkout -B \"$(params.gitops-branch)\" \"refs/remotes/origin/$(params.gitops-branch)\"; else git checkout --orphan \"$(params.gitops-branch)\"; git rm -rf . >/dev/null 2>&1 || true; fi",
@@ -455,6 +473,7 @@ function agentRunTektonGitopsPublishScript(spec: AgentRunLaneSpec): string {
"NODE",
"git add source.json \"$(params.artifact-catalog)\" \"$(params.gitops-root)\"",
"if git diff --quiet --cached; then changed=false; else changed=true; git -c user.email=agentrun@unidesk.local -c user.name='UniDesk AgentRun PaC' commit -m \"deploy: render AgentRun $(params.gitops-branch) from PaC\"; fi",
"git remote set-url origin \"$git_auth_url\"",
"git push -u origin \"$(params.gitops-branch)\"",
"gitops_commit=$(git rev-parse HEAD)",
"BUILD_RESULT=\"$build_result\" CHANGED=\"$changed\" GITOPS_COMMIT=\"$gitops_commit\" node <<'NODE'",