Merge pull request #695 from xinredhat/PLNSRVCE-1124

PLNSRVCE-1124-Move CI to StoneSoup Prod MVP

Author: gabemontero

.tekton/tasks/deploy-cluster.yaml

@@ -27,20 +27,20 @@ spec:
           value: "$(params.region)"
         - name: OCP_VERSION
           value: "$(params.ocp_version)"
-        - name: BW_CLIENTID
+        - name: ROSA_TOKEN
           valueFrom:
             secretKeyRef:
-              name: hypershift-bitwarden
-              key: "BW_CLIENTID"
-        - name: BW_CLIENTSECRET
+              name: plnsvc-ci-secret
+              key: "PLNSVC_ROSA_TOKEN"
+        - name: AWS_ACCESS_KEY_ID
           valueFrom:
             secretKeyRef:
-              name: hypershift-bitwarden
-              key: "BW_CLIENTSECRET"
-        - name: BW_PASSWORD
+              name: plnsvc-ci-secret
+              key: "PLNSVC_AWS_KEY_ID"
+        - name: AWS_SECRET_ACCESS_KEY
           valueFrom:
             secretKeyRef:
-              name: hypershift-bitwarden
-              key: "BW_PASSWORD"
+              name: plnsvc-ci-secret
+              key: "PLNSVC_AWS_KEY"
       command:
         - $(workspaces.source.path)/ci/images/ci-runner/hack/bin/deploy-cluster.sh

.tekton/tasks/destroy-cluster.yaml

@@ -18,21 +18,21 @@ spec:
       env:
         - name: CLUSTER_NAME
           value: "$(params.cluster-name)"
-        - name: BW_CLIENTID
+        - name: ROSA_TOKEN
           valueFrom:
             secretKeyRef:
-              name: hypershift-bitwarden
-              key: "BW_CLIENTID"
-        - name: BW_CLIENTSECRET
+              name: plnsvc-ci-secret
+              key: "PLNSVC_ROSA_TOKEN"
+        - name: AWS_ACCESS_KEY_ID
           valueFrom:
             secretKeyRef:
-              name: hypershift-bitwarden
-              key: "BW_CLIENTSECRET"
-        - name: BW_PASSWORD
+              name: plnsvc-ci-secret
+              key: "PLNSVC_AWS_KEY_ID"
+        - name: AWS_SECRET_ACCESS_KEY
           valueFrom:
             secretKeyRef:
-              name: hypershift-bitwarden
-              key: "BW_PASSWORD"
+              name: plnsvc-ci-secret
+              key: "PLNSVC_AWS_KEY"
         - name: KUBECONFIG_DIR
           value: "$(workspaces.output.path)"
         - name: REGION

.tekton/tasks/destroy-existing-cluster.yaml

@@ -14,21 +14,21 @@ spec:
     - name: destroy
       image: quay.io/redhat-pipeline-service/ci-runner:$(params.target_branch)
       env:
-        - name: BW_CLIENTID
+        - name: ROSA_TOKEN
           valueFrom:
             secretKeyRef:
-              name: hypershift-bitwarden
-              key: "BW_CLIENTID"
-        - name: BW_CLIENTSECRET
+              name: plnsvc-ci-secret
+              key: "PLNSVC_ROSA_TOKEN"
+        - name: AWS_ACCESS_KEY_ID
           valueFrom:
             secretKeyRef:
-              name: hypershift-bitwarden
-              key: "BW_CLIENTSECRET"
-        - name: BW_PASSWORD
+              name: plnsvc-ci-secret
+              key: "PLNSVC_AWS_KEY_ID"
+        - name: AWS_SECRET_ACCESS_KEY
           valueFrom:
             secretKeyRef:
-              name: hypershift-bitwarden
-              key: "BW_PASSWORD"
+              name: plnsvc-ci-secret
+              key: "PLNSVC_AWS_KEY"
         - name: REGION
           value: "$(params.region)"
       command:

ci/images/ci-runner/hack/bin/cleanup-expired-clusters.sh

@@ -13,13 +13,6 @@ source "$SCRIPT_DIR/utils.sh"
 
 EXCLUDE_CLUSTER=(local-cluster newci4plnsvc)
 
-fetch_bitwarden_secrets() {
-    printf "Fetch secrets from bitwarden server\n" | indent 2
-    open_bitwarden_session
-    get_aws_credentials
-    get_rosa_token
-}
-
 is_cluster_expired() {
     cluster_name=$1
 
@@ -47,7 +40,6 @@ destroy_expired_clusters() {
     done
 }
 
-fetch_bitwarden_secrets
 setx_off
 rosa login --token="$ROSA_TOKEN"
 setx_on

ci/images/ci-runner/hack/bin/deploy-cluster.sh

@@ -11,13 +11,6 @@ SCRIPT_DIR="$(
 # shellcheck source=ci/images/ci-runner/hack/bin/utils.sh
 source "$SCRIPT_DIR/utils.sh"
 
-fetch_bitwarden_secrets() {
-    printf "Fetch secrets from bitwarden server\n" | indent 2
-    open_bitwarden_session
-    get_aws_credentials
-    get_rosa_token
-}
-
 print_debug_info() {
     printf "Print debug info......\n" | indent 2
     rosa describe cluster --cluster="$CLUSTER_NAME"
@@ -102,5 +95,4 @@ deploy_cluster() {
     check_clusteroperators
 }
 
-fetch_bitwarden_secrets
 deploy_cluster

ci/images/ci-runner/hack/bin/destroy-cluster.sh

@@ -36,9 +36,6 @@ source "$SCRIPT_DIR/utils.sh"
 
 if [[ -n "$CLUSTER_NAME"  ]]; then
     echo "Started to destroy cluster [$CLUSTER_NAME]..."
-    open_bitwarden_session
-    get_aws_credentials
-    get_rosa_token
 
     printf "Log in to your Red Hat account...\n" | indent 2
     setx_off