feat: update prow to v20200128 8dae29413 (#58)

* feat: update images to v20200128-8dae29413

* feat: remove watch from deck

* feat: remove patch from plank

* feat: remove get, watch from tide

* fix: remove HELM_REPO

* fix: rbac

* feat: add support for pipeline

* feat: update app version

Author: alexouzounis

Makefile

@@ -1,7 +1,6 @@
 CHART_NAME ?= prow
 CHART_VERSION ?= 0.0.0
 CHART_DIST ?= $(CHART_NAME)/dist
-HELM_REPO ?= gs://ouzi-helm-charts
 
 .PHONY: clean
 clean:

prow/Chart.yaml

@@ -17,4 +17,4 @@ type: application
 version: 0.0.0
 
 # Uses the Prow version
-appVersion: v20191017
+appVersion: v20200128-8dae29413

prow/templates/pipeline-deployemnt.yaml

@@ -0,0 +1,40 @@
+kind: Deployment
+apiVersion: apps/v1
+metadata:
+  name: prow-pipeline
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: prow-pipeline
+  template:
+    metadata:
+      labels:
+        app: prow-pipeline
+    spec:
+      # use service account to use local cluster and not a remote
+      serviceAccountName: prow-pipeline
+      containers:
+      - name: pipeline
+        image: {{ .Values.pipeline.image }}
+        args:
+        - --all-contexts
+        - --config=/etc/prow-config/config.yaml
+        # - --build-cluster=/etc/build-cluster/cluster
+        volumeMounts:
+        # - mountPath: /etc/build-cluster
+        #   name: build-cluster
+        #   readOnly: true
+        - mountPath: /etc/prow-config
+          name: prow-config
+          readOnly: true
+      volumes:
+      # - name: build-cluster
+      #   secret:
+      #     defaultMode: 420
+      #     secretName: build-cluster
+      - name: prow-config
+        configMap:
+          name: config

prow/templates/pipeline-rbac.yaml

@@ -0,0 +1,46 @@
+kind: ServiceAccount
+apiVersion: v1
+metadata:
+  name: prow-pipeline
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: prow-pipeline
+rules:
+- apiGroups:
+  - tekton.dev
+  resources:
+  - pipelineruns
+  - pipelineresources
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - update
+  - watch
+- apiGroups:
+  - prow.k8s.io
+  resources:
+  - prowjobs
+  - prowjobs/status
+  verbs:
+  - get
+  - list
+  - watch
+  - update
+  - patch
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: prow-pipeline
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: prow-pipeline
+subjects:
+- kind: ServiceAccount
+  name: prow-pipeline
+  namespace: {{ .Release.Namespace }}

prow/values.yaml

@@ -18,7 +18,7 @@ oauthproxy:
   image: quay.io/pusher/oauth2_proxy:v3.1.0
 
 hook:
-  image: gcr.io/k8s-prow/hook:v20191028-a687a71be
+  image: gcr.io/k8s-prow/hook:v20200128-8dae29413
   replicas: 1
   ingress:
     host: prow.test-infra.ouzi.io
@@ -28,14 +28,14 @@ hook:
       kubernetes.io/ingress.class: nginx  
 
 plank:
-  image: gcr.io/k8s-prow/plank:v20191028-a687a71be
+  image: gcr.io/k8s-prow/plank:v20200128-8dae29413
 
 sinker:
-  image: gcr.io/k8s-prow/sinker:v20191028-a687a71be
+  image: gcr.io/k8s-prow/sinker:v20200128-8dae29413
   replicas: 1
 
 deck:
-  image: gcr.io/k8s-prow/deck:v20191028-a687a71be
+  image: gcr.io/k8s-prow/deck:v20200128-8dae29413
   replicas: 1
   ingress:
     host: prow.test-infra.ouzi.io
@@ -47,30 +47,36 @@ deck:
       nginx.ingress.kubernetes.io/auth-signin: "https://oauth2.test-infra.ouzi.io/oauth2/start?rd=/redirect/$http_host$request_uri"
 
 horologium:
-  image: gcr.io/k8s-prow/horologium:v20191028-a687a71be
+  image: gcr.io/k8s-prow/horologium:v20200128-8dae29413
 
 tide:
-  image: gcr.io/k8s-prow/tide:v20191028-a687a71be
+  image: gcr.io/k8s-prow/tide:v20200128-8dae29413
 
 statusreconciler:
-  image: gcr.io/k8s-prow/status-reconciler:v20191028-a687a71be
+  image: gcr.io/k8s-prow/status-reconciler:v20200128-8dae29413
   replicas: 1
 
 needsrebase:
-  image: gcr.io/k8s-prow/needs-rebase:v20191028-a687a71be
+  image: gcr.io/k8s-prow/needs-rebase:v20200128-8dae29413
 
 branchprotector:
-  image: gcr.io/k8s-prow/branchprotector:v20191028-a687a71be
+  image: gcr.io/k8s-prow/branchprotector:v20200128-8dae29413
   schedule: 12 * * * * # Every hour at 12 minutes past the hour
 
 crier:
-  image: gcr.io/k8s-prow/crier:v20191028-a687a71be
+  image: gcr.io/k8s-prow/crier:v20200128-8dae29413
   replicas: 1
 
 labelsync:
-  image: gcr.io/k8s-prow/label_sync:v20191028-a687a71be
+  image: gcr.io/k8s-prow/label_sync:v20200128-8dae29413
   schedule: 0 5 * * * # Every day at 5AM
 
+# requires tekton to work - 
+# we will install it part of the chart in a later revision
+pipeline:
+  # image: gcr.io/k8s-prow/pipeline:v20200131-19ad23dfd
+  image: gcr.io/k8s-prow/pipeline:v20200128-8dae29413
+
 pushgateway:
   image: prom/pushgateway:v0.4.0
   replicas: 1
@@ -79,7 +85,7 @@ pushgateway:
     replicas: 1
 
 ghproxy:
-  image: gcr.io/k8s-prow/ghproxy:v20191028-a687a71be
+  image: gcr.io/k8s-prow/ghproxy:v20200128-8dae29413
   replicas: 1
   cache:
     sizeGB: 19