add Service for chains metrics

    - Add  Service for observalibilty in Tekton Chains
    - Add metrics test pipelinerun
    - Manully adding until PLNSRVCE-1359 is fixed

Signed-off-by: Avinal Kumar <[email protected]>

Author: avinal

operator/gitops/argocd/pipeline-service/openshift-pipelines/chains-observability-service.yaml

@@ -0,0 +1,20 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: tekton-chains
+  namespace: openshift-pipelines
+  labels:
+    app.kubernetes.io/instance: default
+    app.kubernetes.io/part-of: tekton-chains
+spec:
+  ports:
+    - name: metrics
+      port: 9090
+      protocol: TCP
+      targetPort: 9090
+  selector:
+    app.kubernetes.io/name: controller
+    app.kubernetes.io/component: controller
+    app.kubernetes.io/instance: default
+    app.kubernetes.io/part-of: tekton-chains

operator/gitops/argocd/pipeline-service/openshift-pipelines/kustomization.yaml

@@ -8,3 +8,5 @@ resources:
   - tekton-config.yaml
   - config-pac.yaml
   - config-logging.yaml
+  # Manully add ConfigMap and Service until PLNSRVCE-1359 is fixed
+  - chains-observability-service.yaml

operator/gitops/argocd/pipeline-service/tekton-chains/kustomization.yaml

@@ -2,13 +2,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  #
-  # For now we'll use the official release directly rather than downloading
-  # it and checking it in.
-  #
-  # To list available releases:
-  #  curl -s https://storage.googleapis.com/tekton-releases/ | xq | grep -E 'chains/.*/release.yaml'
-  #
   - namespace.yaml
   - chains-secrets-config.yaml
   - public-key.yaml

operator/test/manifests/test/tekton-chains/tekton-chains-metrics.yaml

@@ -0,0 +1,23 @@
+---
+kind: PipelineRun
+apiVersion: tekton.dev/v1beta1
+metadata:
+  generateName: tekton-chains-metrics-
+spec:
+  serviceAccountName: chains-test
+  pipelineSpec:
+    tasks:
+      - name: chains-metrics-curl
+        taskSpec:
+          steps:
+            - image: registry.access.redhat.com/ubi8/ubi-minimal:8.7
+              name: chains-metrics-curl
+              securityContext:
+                runAsNonRoot: true
+              script: |
+                stats="$(curl http://tekton-chains.openshift-pipelines.svc.cluster.local:9090/metrics 2> /dev/null | grep 'github.com.tektoncd.chains')"
+                if [ -z "$stats" ]; then
+                   echo "FAILED: tekton chains metrics is not available/working"
+                   exit 1
+                fi
+                echo "SUCCESS: tekton chains metrics is available/working"

operator/test/test.sh

@@ -228,6 +228,18 @@ test_chains() {
   #   exit 1
   # fi
 
+  echo -n "  - Metrics: "
+  prName="$(kubectl create -n "$NAMESPACE" -f "$SCRIPT_DIR/manifests/test/tekton-chains/tekton-chains-metrics.yaml" | awk '{print $1}')"
+  wait_for_pipeline "$prName" "$NAMESPACE"
+    if [ "$(kubectl get "$prName" -n "$NAMESPACE" \
+    -o 'jsonpath={.status.conditions[0].reason}')" = "Succeeded" ]; then
+    echo "OK"
+  else
+    echo "Failed"
+    echo "[ERROR] Tekton Chains metrics is not available/working" >&2
+    exit 1
+  fi
+
   echo
 }