Codex
115 lines
4.2 KiB
Bash
115 lines
4.2 KiB
Bash
#!/bin/sh
|
|
set +e
|
|
|
|
tmpdir=$(mktemp -d)
|
|
cleanup() { rm -rf "${tmpdir}"; }
|
|
trap cleanup EXIT INT TERM
|
|
|
|
script_dir="${NATIVE_CICD_SCRIPT_DIR}"
|
|
repo_path="${REPO_PATH}"
|
|
branch="${SOURCE_BRANCH}"
|
|
repository="${REPOSITORY}"
|
|
snapshot_prefix="${SNAPSHOT_PREFIX}"
|
|
gitops_branch="${GITOPS_BRANCH:-}"
|
|
tekton_namespace="${TEKTON_NAMESPACE:-}"
|
|
pipeline_run_prefix="${PIPELINE_RUN_PREFIX:-}"
|
|
argo_namespace="${ARGO_NAMESPACE:-}"
|
|
argo_application="${ARGO_APPLICATION:-}"
|
|
|
|
emit_file_b64() {
|
|
key="$1"
|
|
path="$2"
|
|
printf 'UNIDESK_NATIVE_JSON\t%s\t' "${key}"
|
|
base64 "${path}" | tr -d '\n'
|
|
printf '\n'
|
|
}
|
|
|
|
emit_error_b64() {
|
|
key="$1"
|
|
path="$2"
|
|
printf 'UNIDESK_NATIVE_ERROR\t%s\t' "${key}"
|
|
base64 "${path}" | tr -d '\n'
|
|
printf '\n'
|
|
}
|
|
|
|
emit_kube_json() {
|
|
key="$1"
|
|
path="$2"
|
|
raw="${tmpdir}/${key}.raw"
|
|
out="${tmpdir}/${key}.out"
|
|
err="${tmpdir}/${key}.err"
|
|
if node "${script_dir}/kube-get.mjs" "${path}" >"${raw}" 2>"${err}" && node "${script_dir}/compact-native-object.mjs" "${key}" <"${raw}" >"${out}" 2>>"${err}"; then
|
|
emit_file_b64 "${key}" "${out}"
|
|
else
|
|
emit_error_b64 "${key}" "${err}"
|
|
fi
|
|
}
|
|
|
|
emit_plan_artifacts() {
|
|
namespace="$1"
|
|
pipeline_run="$2"
|
|
out="${tmpdir}/planArtifacts.out"
|
|
err="${tmpdir}/planArtifacts.err"
|
|
if node "${script_dir}/plan-artifacts.mjs" "${namespace}" "${pipeline_run}" >"${out}" 2>"${err}"; then
|
|
emit_file_b64 planArtifacts "${out}"
|
|
else
|
|
emit_error_b64 planArtifacts "${err}"
|
|
fi
|
|
}
|
|
|
|
source_commit=
|
|
source_err="${tmpdir}/source.err"
|
|
if [ -x /etc/unidesk-cicd-branch-follower/sync-source.sh ]; then
|
|
/etc/unidesk-cicd-branch-follower/sync-source.sh "${repository}" "${branch}" "${snapshot_prefix}" "${repo_path}" >/dev/null 2>"${source_err}" || true
|
|
fi
|
|
|
|
if [ -d "${repo_path}/objects" ]; then
|
|
source_commit=$(git --git-dir="${repo_path}" rev-parse --verify "refs/heads/${branch}^{commit}" 2>>"${source_err}" | head -n 1 | tr -d '\r' || true)
|
|
else
|
|
printf 'formal controller/job must mount k8s git-mirror cache at %s; fallback exec is disabled\n' "${repo_path}" >>"${source_err}"
|
|
fi
|
|
|
|
case "${source_commit}" in
|
|
[0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f])
|
|
stage_ref="${snapshot_prefix%/}/${source_commit}"
|
|
source_out="${tmpdir}/source.out"
|
|
printf '{"commit":"%s","branch":"%s","stageRef":"%s","sourceAuthority":"k8s-git-mirror-snapshot","mode":"k8s-git-mirror-cache","repoPath":"%s"}' "${source_commit}" "${branch}" "${stage_ref}" "${repo_path}" >"${source_out}"
|
|
emit_file_b64 source "${source_out}"
|
|
;;
|
|
*)
|
|
emit_error_b64 source "${source_err}"
|
|
;;
|
|
esac
|
|
|
|
if [ -d "${repo_path}/objects" ]; then
|
|
git_mirror_out="${tmpdir}/gitMirror.out"
|
|
git_mirror_err="${tmpdir}/gitMirror.err"
|
|
if REPO_PATH="${repo_path}" REPOSITORY="${repository}" SOURCE_BRANCH="${branch}" SNAPSHOT_PREFIX="${snapshot_prefix}" GITOPS_BRANCH="${gitops_branch}" node "${script_dir}/compact-git-mirror.mjs" >"${git_mirror_out}" 2>"${git_mirror_err}"; then
|
|
emit_file_b64 gitMirror "${git_mirror_out}"
|
|
else
|
|
emit_error_b64 gitMirror "${git_mirror_err}"
|
|
fi
|
|
fi
|
|
|
|
if [ -n "${source_commit}" ] && [ -n "${tekton_namespace}" ] && [ -n "${pipeline_run_prefix}" ]; then
|
|
sha12=$(printf '%s' "${source_commit}" | cut -c1-12)
|
|
pipeline_run="${pipeline_run_prefix}-${sha12}"
|
|
emit_kube_json pipelineRun "/apis/tekton.dev/v1/namespaces/${tekton_namespace}/pipelineruns/${pipeline_run}"
|
|
emit_kube_json taskRuns "/apis/tekton.dev/v1/namespaces/${tekton_namespace}/taskruns?labelSelector=tekton.dev%2FpipelineRun%3D${pipeline_run}"
|
|
emit_plan_artifacts "${tekton_namespace}" "${pipeline_run}"
|
|
fi
|
|
|
|
if [ -n "${argo_namespace}" ] && [ -n "${argo_application}" ]; then
|
|
emit_kube_json argoApplication "/apis/argoproj.io/v1alpha1/namespaces/${argo_namespace}/applications/${argo_application}"
|
|
fi
|
|
|
|
if [ -n "${WORKLOAD_REFS_B64:-}" ]; then
|
|
printf '%s' "${WORKLOAD_REFS_B64}" | base64 -d | while IFS="$(printf '\t')" read -r key path; do
|
|
[ -n "${key}" ] || continue
|
|
[ -n "${path}" ] || continue
|
|
emit_kube_json "${key}" "${path}"
|
|
done
|
|
fi
|
|
|
|
exit 0
|