ymal: compose repeated node lane templates

2026-07-08 06:34:23 +02:00
parent 0cea74367a
commit d083e88bb9
13 changed files with 1232 additions and 1585 deletions
@@ -6,16 +6,14 @@ metadata:
    - 1148
    - 1110
    - 1117
-
 defaults:
  targetId: JD01
-
 server:
  id: benchmark-validated-master-shadowsocks-server
  enabled: true
-  benchmarkRef: pikasTech/unidesk#1110
-  implementationRef: pikasTech/unidesk#1117
-  sourceConfigRef: config/platform-infra/egress-proxy-sources.yaml#sources.master-shadowsocks
+  benchmarkRef: "pikasTech/unidesk#1110"
+  implementationRef: "pikasTech/unidesk#1117"
+  sourceConfigRef: "config/platform-infra/egress-proxy-sources.yaml#sources.master-shadowsocks"
  composeFile: config/platform-infra/sub2api-master-egress-proxy.compose.yaml
  serviceName: sub2api-master-egress-proxy
  containerName: unidesk-sub2api-master-egress-proxy
@@ -27,176 +25,116 @@ server:
    mode: tcp
    host: 127.0.0.1
    port: 18792
-
 sources:
  nc01-vpn-server-shadowsocks:
-    sourceType: vpn-server-shadowsocks
-    serverRef: /root/vpn-server
+    extends: templates.sources.singBoxHostClient
    benchmarkRef: local-vpn-server
-    implementationRef: /root/vpn-server
-    sourceConfigRef: config/platform-infra/egress-proxy-sources.yaml#sources.nc01-vpn-server-shadowsocks
-    client:
-      mode: trans-static-binary
-      upstreamUrl: https://github.com/SagerNet/sing-box/releases/download/v1.13.14/sing-box-1.13.14-linux-amd64.tar.gz
-      version: v1.13.14
-      archiveCachePath: .state/artifacts/platform-infra/sing-box-1.13.14-linux-amd64.tar.gz
-      archiveSha256: f48703461a15476951ac4967cdad339d986f4b8096b4eb3ff0829a500502d697
-      archiveInstallPath: /var/cache/unidesk/host-egress-proxy/sing-box-1.13.14-linux-amd64.tar.gz
-      binaryMember: sing-box-1.13.14-linux-amd64/sing-box
-      binaryCachePath: .state/artifacts/platform-infra/sing-box-1.13.14-linux-amd64
-      binarySha256: 68aeab83cc4ab2659a5b92232261a20746ccdafc3b3d1e19b2d63247eec3bbf7
-      installPath: /usr/local/bin/sing-box
-      configPath: /etc/unidesk/host-egress-proxy/sing-box.json
-      unitPath: /etc/systemd/system/unidesk-host-egress-proxy.service
-      serviceName: unidesk-host-egress-proxy
-      listenHost: 127.0.0.1
-      listenPort: 10808
-      podAccess:
-        enabled: true
-        listenHost: 10.42.0.1
-        listenPort: 10808
-        proxyUrl: http://10.42.0.1:10808
-      clashApiListen: 127.0.0.1:19090
-      healthUrl: http://127.0.0.1:19090/connections
-    proxyUrl: http://127.0.0.1:10808
-    externalProbeUrl: https://www.gstatic.com/generate_204
-
  jd01-real-deps-master-shadowsocks:
-    sourceType: vpn-server-shadowsocks
-    serverRef: /root/vpn-server
-    benchmarkRef: pikasTech/unidesk#1110
-    implementationRef: /root/vpn-server
-    sourceConfigRef: config/platform-infra/egress-proxy-sources.yaml#sources.nc01-vpn-server-shadowsocks
-    client:
-      mode: trans-static-binary
-      upstreamUrl: https://github.com/SagerNet/sing-box/releases/download/v1.13.14/sing-box-1.13.14-linux-amd64.tar.gz
-      version: v1.13.14
-      archiveCachePath: .state/artifacts/platform-infra/sing-box-1.13.14-linux-amd64.tar.gz
-      archiveSha256: f48703461a15476951ac4967cdad339d986f4b8096b4eb3ff0829a500502d697
-      archiveInstallPath: /var/cache/unidesk/host-egress-proxy/sing-box-1.13.14-linux-amd64.tar.gz
-      binaryMember: sing-box-1.13.14-linux-amd64/sing-box
-      binaryCachePath: .state/artifacts/platform-infra/sing-box-1.13.14-linux-amd64
-      binarySha256: 68aeab83cc4ab2659a5b92232261a20746ccdafc3b3d1e19b2d63247eec3bbf7
-      installPath: /usr/local/bin/sing-box
-      configPath: /etc/unidesk/host-egress-proxy/sing-box.json
-      unitPath: /etc/systemd/system/unidesk-host-egress-proxy.service
-      serviceName: unidesk-host-egress-proxy
-      listenHost: 127.0.0.1
-      listenPort: 10808
-      podAccess:
-        enabled: true
-        listenHost: 10.42.0.1
-        listenPort: 10808
-        proxyUrl: http://10.42.0.1:10808
-      clashApiListen: 127.0.0.1:19090
-      healthUrl: http://127.0.0.1:19090/connections
-    proxyUrl: http://127.0.0.1:10808
-    externalProbeUrl: https://www.gstatic.com/generate_204
-
+    extends: templates.sources.singBoxHostClient
+    benchmarkRef: "pikasTech/unidesk#1110"
 targets:
  NC01:
+    extends: templates.targets.hostProxyClient
    route: NC01
-    enabled: true
    sourceRef: sources.nc01-vpn-server-shadowsocks
    env:
-      httpProxy: http://127.0.0.1:10808
-      httpsProxy: http://127.0.0.1:10808
-      allProxy: http://127.0.0.1:10808
-      noProxy:
-        - localhost
-        - 127.0.0.1
-        - ::1
-        - host.docker.internal
-        - 152.53.229.148
-        - 10.0.0.0/8
-        - 10.42.0.0/16
-        - 10.43.0.0/16
-        - 172.16.0.0/12
-        - 192.168.0.0/16
-        - .svc
-        - .svc.cluster.local
-        - .cluster.local
-        - kubernetes
-        - kubernetes.default
-        - kubernetes.default.svc
-        - argocd-repo-server
-        - argocd-repo-server.argocd
-        - argocd-redis
-        - argocd-redis.argocd
-        - git-mirror-http
-        - git-mirror-http.devops-infra
-        - git-mirror-write
-        - git-mirror-write.devops-infra
-        - 127.0.0.1:5000
-        - localhost:5000
-        - hyueapi.com
-        - .hyueapi.com
-    files:
-      envFile: /etc/unidesk/proxy.env
-      profile: /etc/profile.d/unidesk-proxy.sh
-      apt: /etc/apt/apt.conf.d/90unidesk-proxy
-      dockerSystemdDropIn: /etc/systemd/system/docker.service.d/10-unidesk-proxy.conf
-      k3sSystemdDropIn: /etc/systemd/system/k3s.service.d/10-unidesk-proxy.conf
-    trans:
-      hostProxyEnv:
-        enabled: true
-        envFileRef: files.envFile
-        applyTo: host-posix-commands
-    apply:
-      reloadSystemd: true
-      restartDocker: true
-      restartK3s: true
-
+      noProxyRefs:
+        common: noProxy.common
+        extras: noProxy.nodeExtras.NC01
  JD01:
+    extends: templates.targets.hostProxyClient
    route: JD01
-    enabled: true
    sourceRef: sources.jd01-real-deps-master-shadowsocks
    env:
-      httpProxy: http://127.0.0.1:10808
-      httpsProxy: http://127.0.0.1:10808
-      allProxy: http://127.0.0.1:10808
-      noProxy:
-        - localhost
-        - 127.0.0.1
-        - ::1
-        - host.docker.internal
-        - 74.48.78.17
-        - 82.156.23.220
-        - 10.0.0.0/8
-        - 10.42.0.0/16
-        - 10.43.0.0/16
-        - 172.16.0.0/12
-        - 192.168.0.0/16
-        - .svc
-        - .svc.cluster.local
-        - .cluster.local
-        - kubernetes
-        - kubernetes.default
-        - kubernetes.default.svc
-        - argocd-repo-server
-        - argocd-repo-server.argocd
-        - argocd-redis
-        - argocd-redis.argocd
-        - git-mirror-http
-        - git-mirror-http.devops-infra
-        - git-mirror-write
-        - git-mirror-write.devops-infra
-        - 127.0.0.1:5000
-        - localhost:5000
-        - hyueapi.com
-        - .hyueapi.com
-    files:
-      envFile: /etc/unidesk/proxy.env
-      profile: /etc/profile.d/unidesk-proxy.sh
-      apt: /etc/apt/apt.conf.d/90unidesk-proxy
-      dockerSystemdDropIn: /etc/systemd/system/docker.service.d/10-unidesk-proxy.conf
-      k3sSystemdDropIn: /etc/systemd/system/k3s.service.d/10-unidesk-proxy.conf
-    trans:
-      hostProxyEnv:
-        enabled: true
-        envFileRef: files.envFile
-        applyTo: host-posix-commands
-    apply:
-      reloadSystemd: true
-      restartDocker: true
-      restartK3s: true
+      noProxyRefs:
+        common: noProxy.common
+        extras: noProxy.nodeExtras.JD01
+templates:
+  sources:
+    singBoxHostClient:
+      sourceType: vpn-server-shadowsocks
+      serverRef: /root/vpn-server
+      implementationRef: /root/vpn-server
+      sourceConfigRef: "config/platform-infra/egress-proxy-sources.yaml#sources.nc01-vpn-server-shadowsocks"
+      client:
+        mode: trans-static-binary
+        upstreamUrl: https://github.com/SagerNet/sing-box/releases/download/v1.13.14/sing-box-1.13.14-linux-amd64.tar.gz
+        version: v1.13.14
+        archiveCachePath: .state/artifacts/platform-infra/sing-box-1.13.14-linux-amd64.tar.gz
+        archiveSha256: f48703461a15476951ac4967cdad339d986f4b8096b4eb3ff0829a500502d697
+        archiveInstallPath: /var/cache/unidesk/host-egress-proxy/sing-box-1.13.14-linux-amd64.tar.gz
+        binaryMember: sing-box-1.13.14-linux-amd64/sing-box
+        binaryCachePath: .state/artifacts/platform-infra/sing-box-1.13.14-linux-amd64
+        binarySha256: 68aeab83cc4ab2659a5b92232261a20746ccdafc3b3d1e19b2d63247eec3bbf7
+        installPath: /usr/local/bin/sing-box
+        configPath: /etc/unidesk/host-egress-proxy/sing-box.json
+        unitPath: /etc/systemd/system/unidesk-host-egress-proxy.service
+        serviceName: unidesk-host-egress-proxy
+        listenHost: 127.0.0.1
+        listenPort: 10808
+        podAccess:
+          enabled: true
+          listenHost: 10.42.0.1
+          listenPort: 10808
+          proxyUrl: http://10.42.0.1:10808
+        clashApiListen: 127.0.0.1:19090
+        healthUrl: http://127.0.0.1:19090/connections
+      proxyUrl: http://127.0.0.1:10808
+      externalProbeUrl: https://www.gstatic.com/generate_204
+  targets:
+    hostProxyClient:
+      enabled: true
+      env:
+        httpProxy: http://127.0.0.1:10808
+        httpsProxy: http://127.0.0.1:10808
+        allProxy: http://127.0.0.1:10808
+      files:
+        envFile: /etc/unidesk/proxy.env
+        profile: /etc/profile.d/unidesk-proxy.sh
+        apt: /etc/apt/apt.conf.d/90unidesk-proxy
+        dockerSystemdDropIn: /etc/systemd/system/docker.service.d/10-unidesk-proxy.conf
+        k3sSystemdDropIn: /etc/systemd/system/k3s.service.d/10-unidesk-proxy.conf
+      trans:
+        hostProxyEnv:
+          enabled: true
+          envFileRef: files.envFile
+          applyTo: host-posix-commands
+      apply:
+        reloadSystemd: true
+        restartDocker: true
+        restartK3s: true
+noProxy:
+  common:
+    - localhost
+    - 127.0.0.1
+    - "::1"
+    - host.docker.internal
+    - 10.0.0.0/8
+    - 10.42.0.0/16
+    - 10.43.0.0/16
+    - 172.16.0.0/12
+    - 192.168.0.0/16
+    - .svc
+    - .svc.cluster.local
+    - .cluster.local
+    - kubernetes
+    - kubernetes.default
+    - kubernetes.default.svc
+    - argocd-repo-server
+    - argocd-repo-server.argocd
+    - argocd-redis
+    - argocd-redis.argocd
+    - git-mirror-http
+    - git-mirror-http.devops-infra
+    - git-mirror-write
+    - git-mirror-write.devops-infra
+    - 127.0.0.1:5000
+    - localhost:5000
+    - hyueapi.com
+    - .hyueapi.com
+  nodeExtras:
+    NC01:
+      - 152.53.229.148
+    JD01:
+      - 74.48.78.17
+      - 82.156.23.220
@@ -1,6 +1,5 @@
 version: 1
 kind: platform-infra-pipelines-as-code
-
 metadata:
  id: pac-gitea-consumers
  owner: unidesk
@@ -10,14 +9,11 @@ metadata:
    - 1555
    - 1557
    - 1560
-
 defaults:
  targetId: NC01
  consumerId: hwlab-nc01-v03
-
 display:
  timeZone: Asia/Shanghai
-
 release:
  version: v0.48.0
  manifestUrl: https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.48.0/release.k8s.yaml
@@ -25,13 +21,11 @@ release:
  controllerServiceName: pipelines-as-code-controller
  controllerServicePort: 8080
  waitTimeoutSeconds: 55
-
 closeout:
  gitOpsMirrorFlush:
    enabled: true
    waitTimeoutSeconds: 55
    maxAttempts: 5
-
 targets:
  - id: JD01
    route: JD01:k3s
@@ -43,9 +37,8 @@ targets:
    namespace: agentrun-ci
    role: active-cicd-trigger-authority
    enabled: true
-
 gitea:
-  configRef: config/platform-infra/gitea.yaml#sourceAuthority.repositories
+  configRef: "config/platform-infra/gitea.yaml#sourceAuthority.repositories"
  internalBaseUrl: http://gitea-http.devops-infra.svc.cluster.local:3000
  admin:
    sourceRoot: /root/unidesk
@@ -60,212 +53,164 @@ gitea:
    events:
      - push
    branch: params.source_branch
-
 repositories:
-  - id: agentrun-jd01-v02
-    name: agentrun-jd01-v02
-    namespace: agentrun-ci
-    providerType: gitea
+  - extends: templates.repositories.agentrunV02
+    variables:
+      NODE: JD01
+      LANE: v02
    url: https://gitea.pikapython.com/mirrors/pikasTech-agentrun
-    cloneUrl: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-agentrun.git
-    owner: mirrors
-    repo: pikasTech-agentrun
-    secretName: pac-gitea-agentrun-jd01-v02
-    tokenKey: token
-    webhookSecretKey: webhook.secret
-    concurrencyLimit: 1
-    params:
-      git_read_url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-agentrun.git
-      git_write_url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-agentrun.git
-      source_branch: v0.2
-      gitops_branch: jd01-v0.2-gitops
-      # Historical prefix name retained for existing snapshot refs; active architecture is Gitea + PaC, not Gitea Actions.
-      source_snapshot_prefix: refs/unidesk/snapshots/gitea-actions/agentrun-v0.2
-      pipeline_name: agentrun-jd01-v02-ci-image-publish
-      pipeline_run_prefix: agentrun-jd01-v02-ci
-      service_account: agentrun-jd01-v02-tekton-runner
-      workspace_pvc_size: 2Gi
-  - id: agentrun-nc01-v02
-    name: agentrun-nc01-v02
-    namespace: agentrun-ci
-    providerType: gitea
-    url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-agentrun
-    cloneUrl: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-agentrun.git
-    owner: mirrors
-    repo: pikasTech-agentrun
-    secretName: pac-gitea-agentrun-nc01-v02
-    tokenKey: token
-    webhookSecretKey: webhook.secret
-    concurrencyLimit: 1
-    params:
-      git_read_url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-agentrun.git
-      git_write_url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-agentrun.git
-      source_branch: v0.2
-      gitops_branch: nc01-v0.2-gitops
-      # Historical prefix name retained for existing snapshot refs; active architecture is Gitea + PaC, not Gitea Actions.
-      source_snapshot_prefix: refs/unidesk/snapshots/gitea-actions/agentrun-v0.2
-      pipeline_name: agentrun-nc01-v02-ci-image-publish
-      pipeline_run_prefix: agentrun-nc01-v02-ci
-      service_account: agentrun-nc01-v02-tekton-runner
-      workspace_pvc_size: 2Gi
-  - id: sentinel-jd01-v03
-    name: sentinel-jd01-v03
-    namespace: devops-infra
-    providerType: gitea
+  - extends: templates.repositories.agentrunV02
+    variables:
+      NODE: NC01
+      LANE: v02
+  - extends: templates.repositories.sentinelV03
+    variables:
+      NODE: JD01
+      LANE: v03
    url: https://gitea.pikapython.com/mirrors/pikasTech-unidesk
-    cloneUrl: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-unidesk.git
-    owner: mirrors
-    repo: pikasTech-unidesk
-    secretName: pac-gitea-sentinel-jd01-v03
-    tokenKey: token
-    webhookSecretKey: webhook.secret
-    concurrencyLimit: 1
-    params:
-      git_read_url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-unidesk.git
-      source_branch: master
-      # Historical prefix name retained for existing snapshot refs; active architecture is Gitea + PaC, not Gitea Actions.
-      source_snapshot_prefix: refs/unidesk/snapshots/gitea-actions/unidesk-master
-      node: JD01
-      lane: v03
-      sentinel_id: jd01-web-probe-sentinel
-      image_repository: 127.0.0.1:5000/hwlab/web-probe-sentinel-jd01
-      registry_probe_base: http://127.0.0.1:5000
-      gitops_branch: v0.3-gitops
-      gitops_manifest_path: deploy/gitops/node/jd01/web-probe-sentinel/web-probe-sentinel.yaml
-      pipeline_name: hwlab-web-probe-sentinel-jd01-pac
-      pipeline_run_prefix: hwlab-web-probe-sentinel-jd01
-  - id: sentinel-nc01-v03
-    name: sentinel-nc01-v03
-    namespace: devops-infra
-    providerType: gitea
-    url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-unidesk
-    cloneUrl: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-unidesk.git
-    owner: mirrors
-    repo: pikasTech-unidesk
-    secretName: pac-gitea-sentinel-nc01-v03
-    tokenKey: token
-    webhookSecretKey: webhook.secret
-    concurrencyLimit: 1
-    params:
-      git_read_url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-unidesk.git
-      source_branch: master
-      # Historical prefix name retained for existing snapshot refs; active architecture is Gitea + PaC, not Gitea Actions.
-      source_snapshot_prefix: refs/unidesk/snapshots/gitea-actions/unidesk-master
-      node: NC01
-      lane: v03
-      sentinel_id: nc01-web-probe-sentinel
-      image_repository: 127.0.0.1:5000/hwlab/web-probe-sentinel-nc01
-      registry_probe_base: http://127.0.0.1:5000
-      gitops_branch: v0.3-gitops
-      gitops_manifest_path: deploy/gitops/node/nc01/web-probe-sentinel/web-probe-sentinel.yaml
-      pipeline_name: hwlab-web-probe-sentinel-nc01-pac
-      pipeline_run_prefix: hwlab-web-probe-sentinel-nc01
-  - id: hwlab-jd01-v03
-    name: hwlab-jd01-v03
-    namespace: hwlab-ci
-    providerType: gitea
+  - extends: templates.repositories.sentinelV03
+    variables:
+      NODE: NC01
+      LANE: v03
+  - extends: templates.repositories.hwlabV03
+    variables:
+      NODE: JD01
+      LANE: v03
    url: https://gitea.pikapython.com/mirrors/pikasTech-HWLAB
-    cloneUrl: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-HWLAB.git
-    owner: mirrors
-    repo: pikasTech-HWLAB
-    secretName: pac-gitea-hwlab-jd01-v03
-    tokenKey: token
-    webhookSecretKey: webhook.secret
-    concurrencyLimit: 1
-    params:
-      git_read_url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-HWLAB.git
-      git_write_url: http://git-mirror-write.devops-infra.svc.cluster.local:8080/pikasTech/HWLAB.git
-      source_branch: v0.3
-      gitops_branch: v0.3-gitops
-      # Historical prefix name retained for existing snapshot refs; active architecture is Gitea + PaC, not Gitea Actions.
-      source_snapshot_prefix: refs/unidesk/snapshots/gitea-actions/hwlab-node-runtime/v0.3
-      pipeline_name: hwlab-jd01-v03-ci-image-publish
-      pipeline_run_prefix: hwlab-jd01-v03-ci-poll
-      service_account: hwlab-jd01-v03-tekton-runner
-      node: JD01
-      lane: v03
-      runtime_namespace: hwlab-v03
-  - id: hwlab-nc01-v03
-    name: hwlab-nc01-v03
-    namespace: hwlab-ci
-    providerType: gitea
-    url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-HWLAB
-    cloneUrl: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-HWLAB.git
-    owner: mirrors
-    repo: pikasTech-HWLAB
-    secretName: pac-gitea-hwlab-nc01-v03
-    tokenKey: token
-    webhookSecretKey: webhook.secret
-    concurrencyLimit: 1
-    params:
-      git_read_url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-HWLAB.git
-      git_write_url: http://git-mirror-write.devops-infra.svc.cluster.local:8080/pikasTech/HWLAB.git
-      source_branch: v0.3
-      gitops_branch: v0.3-gitops
-      # Historical prefix name retained for existing snapshot refs; active architecture is Gitea + PaC, not Gitea Actions.
-      source_snapshot_prefix: refs/unidesk/snapshots/gitea-actions/hwlab-node-runtime/v0.3
-      pipeline_name: hwlab-nc01-v03-ci-image-publish
-      pipeline_run_prefix: hwlab-nc01-v03-ci-poll
-      service_account: hwlab-nc01-v03-tekton-runner
-      node: NC01
-      lane: v03
-      runtime_namespace: hwlab-v03
-
+  - extends: templates.repositories.hwlabV03
+    variables:
+      NODE: NC01
+      LANE: v03
 consumers:
-  - id: agentrun-jd01-v02
-    repositoryRef: agentrun-jd01-v02
-    node: JD01
-    lane: jd01-v02
-    namespace: agentrun-ci
-    pipeline: agentrun-jd01-v02-ci-image-publish
-    pipelineRunPrefix: agentrun-jd01-v02-ci
-    argoNamespace: argocd
-    argoApplication: agentrun-jd01-v02
-  - id: agentrun-nc01-v02
-    repositoryRef: agentrun-nc01-v02
-    node: NC01
-    lane: nc01-v02
-    namespace: agentrun-ci
-    pipeline: agentrun-nc01-v02-ci-image-publish
-    pipelineRunPrefix: agentrun-nc01-v02-ci
-    argoNamespace: argocd
-    argoApplication: agentrun-nc01-v02
-  - id: sentinel-jd01-v03
-    repositoryRef: sentinel-jd01-v03
-    node: JD01
-    lane: v03
-    namespace: devops-infra
-    pipeline: hwlab-web-probe-sentinel-jd01-pac
-    pipelineRunPrefix: hwlab-web-probe-sentinel-jd01
-    argoNamespace: argocd
-    argoApplication: hwlab-web-probe-sentinel-jd01
-  - id: sentinel-nc01-v03
-    repositoryRef: sentinel-nc01-v03
-    node: NC01
-    lane: v03
-    namespace: devops-infra
-    pipeline: hwlab-web-probe-sentinel-nc01-pac
-    pipelineRunPrefix: hwlab-web-probe-sentinel-nc01
-    argoNamespace: argocd
-    argoApplication: hwlab-web-probe-sentinel-nc01
-  - id: hwlab-jd01-v03
-    repositoryRef: hwlab-jd01-v03
-    node: JD01
-    lane: v03
-    namespace: hwlab-ci
-    pipeline: hwlab-jd01-v03-ci-image-publish
-    pipelineRunPrefix: hwlab-jd01-v03-ci-poll
-    argoNamespace: argocd
-    argoApplication: hwlab-node-v03
-    closeoutGitOpsMirrorFlush: true
-
-  - id: hwlab-nc01-v03
-    repositoryRef: hwlab-nc01-v03
-    node: NC01
-    lane: v03
-    namespace: hwlab-ci
-    pipeline: hwlab-nc01-v03-ci-image-publish
-    pipelineRunPrefix: hwlab-nc01-v03-ci-poll
-    argoNamespace: argocd
-    argoApplication: hwlab-node-v03
-    closeoutGitOpsMirrorFlush: true
+  - extends: templates.consumers.agentrunV02
+    variables:
+      NODE: JD01
+      LANE: v02
+  - extends: templates.consumers.agentrunV02
+    variables:
+      NODE: NC01
+      LANE: v02
+  - extends: templates.consumers.sentinelV03
+    variables:
+      NODE: JD01
+      LANE: v03
+  - extends: templates.consumers.sentinelV03
+    variables:
+      NODE: NC01
+      LANE: v03
+  - extends: templates.consumers.hwlabV03
+    variables:
+      NODE: JD01
+      LANE: v03
+  - extends: templates.consumers.hwlabV03
+    variables:
+      NODE: NC01
+      LANE: v03
+templates:
+  repositories:
+    agentrunV02:
+      id: "agentrun-${nodeLower}-v02"
+      name: "agentrun-${nodeLower}-v02"
+      namespace: agentrun-ci
+      providerType: gitea
+      url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-agentrun
+      cloneUrl: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-agentrun.git
+      owner: mirrors
+      repo: pikasTech-agentrun
+      secretName: "pac-gitea-agentrun-${nodeLower}-v02"
+      tokenKey: token
+      webhookSecretKey: webhook.secret
+      concurrencyLimit: 1
+      params:
+        git_read_url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-agentrun.git
+        git_write_url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-agentrun.git
+        source_branch: v0.2
+        gitops_branch: "${nodeLower}-v0.2-gitops"
+        source_snapshot_prefix: refs/unidesk/snapshots/gitea-actions/agentrun-v0.2
+        pipeline_name: "agentrun-${nodeLower}-v02-ci-image-publish"
+        pipeline_run_prefix: "agentrun-${nodeLower}-v02-ci"
+        service_account: "agentrun-${nodeLower}-v02-tekton-runner"
+        workspace_pvc_size: 2Gi
+    sentinelV03:
+      id: "sentinel-${nodeLower}-v03"
+      name: "sentinel-${nodeLower}-v03"
+      namespace: devops-infra
+      providerType: gitea
+      url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-unidesk
+      cloneUrl: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-unidesk.git
+      owner: mirrors
+      repo: pikasTech-unidesk
+      secretName: "pac-gitea-sentinel-${nodeLower}-v03"
+      tokenKey: token
+      webhookSecretKey: webhook.secret
+      concurrencyLimit: 1
+      params:
+        git_read_url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-unidesk.git
+        source_branch: master
+        source_snapshot_prefix: refs/unidesk/snapshots/gitea-actions/unidesk-master
+        node: "${NODE}"
+        lane: v03
+        sentinel_id: "${nodeLower}-web-probe-sentinel"
+        image_repository: "127.0.0.1:5000/hwlab/web-probe-sentinel-${nodeLower}"
+        registry_probe_base: http://127.0.0.1:5000
+        gitops_branch: v0.3-gitops
+        gitops_manifest_path: "deploy/gitops/node/${nodeLower}/web-probe-sentinel/web-probe-sentinel.yaml"
+        pipeline_name: "hwlab-web-probe-sentinel-${nodeLower}-pac"
+        pipeline_run_prefix: "hwlab-web-probe-sentinel-${nodeLower}"
+    hwlabV03:
+      id: "hwlab-${nodeLower}-v03"
+      name: "hwlab-${nodeLower}-v03"
+      namespace: hwlab-ci
+      providerType: gitea
+      url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-HWLAB
+      cloneUrl: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-HWLAB.git
+      owner: mirrors
+      repo: pikasTech-HWLAB
+      secretName: "pac-gitea-hwlab-${nodeLower}-v03"
+      tokenKey: token
+      webhookSecretKey: webhook.secret
+      concurrencyLimit: 1
+      params:
+        git_read_url: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-HWLAB.git
+        git_write_url: http://git-mirror-write.devops-infra.svc.cluster.local:8080/pikasTech/HWLAB.git
+        source_branch: v0.3
+        gitops_branch: v0.3-gitops
+        source_snapshot_prefix: refs/unidesk/snapshots/gitea-actions/hwlab-node-runtime/v0.3
+        pipeline_name: "hwlab-${nodeLower}-v03-ci-image-publish"
+        pipeline_run_prefix: "hwlab-${nodeLower}-v03-ci-poll"
+        service_account: "hwlab-${nodeLower}-v03-tekton-runner"
+        node: "${NODE}"
+        lane: v03
+        runtime_namespace: hwlab-v03
+  consumers:
+    agentrunV02:
+      id: "agentrun-${nodeLower}-v02"
+      repositoryRef: "agentrun-${nodeLower}-v02"
+      node: "${NODE}"
+      lane: "${nodeLower}-v02"
+      namespace: agentrun-ci
+      pipeline: "agentrun-${nodeLower}-v02-ci-image-publish"
+      pipelineRunPrefix: "agentrun-${nodeLower}-v02-ci"
+      argoNamespace: argocd
+      argoApplication: "agentrun-${nodeLower}-v02"
+    sentinelV03:
+      id: "sentinel-${nodeLower}-v03"
+      repositoryRef: "sentinel-${nodeLower}-v03"
+      node: "${NODE}"
+      lane: v03
+      namespace: devops-infra
+      pipeline: "hwlab-web-probe-sentinel-${nodeLower}-pac"
+      pipelineRunPrefix: "hwlab-web-probe-sentinel-${nodeLower}"
+      argoNamespace: argocd
+      argoApplication: "hwlab-web-probe-sentinel-${nodeLower}"
+    hwlabV03:
+      id: "hwlab-${nodeLower}-v03"
+      repositoryRef: "hwlab-${nodeLower}-v03"
+      node: "${NODE}"
+      lane: v03
+      namespace: hwlab-ci
+      pipeline: "hwlab-${nodeLower}-v03-ci-image-publish"
+      pipelineRunPrefix: "hwlab-${nodeLower}-v03-ci-poll"
+      argoNamespace: argocd
+      argoApplication: hwlab-node-v03
+      closeoutGitOpsMirrorFlush: true