feat: Added test scripts for Tekton examples (#7)

vicenteherrera · web-flow · commit 18fd6428921c · 2021-03-02T11:45:17.000+01:00
* Changed replacabe values with bash variables and renamed secure-api-key to secure-api-token

* Added test scripts for Tekton alpha and beta, registry and localbuild with crc using bash variables on sample values
diff --git a/tekton/README.md b/tekton/README.md
@@ -28,7 +28,7 @@ You have to define a scanning step after building an image in a Tekton task, so
         valueFrom:
           secretKeyRef:
             name: sysdig-secrets
-            key: sysdig-secure-api-key
+            key: sysdig-secure-api-token
 ```
 
 You'll need to add a secret for your Sysdig Secure API token, and reference it in the service account definition that executes the pipeline, as you can see in the [full pipeline example for beta Tekton API](./beta/tekton-inline-scan-localbuild-beta.yaml).
@@ -90,7 +90,7 @@ spec:
           valueFrom:
             secretKeyRef:
               name: sysdig-secrets
-              key: sysdig-secure-api-key
+              key: sysdig-secure-api-token
 
     - name: push
       image: quay.io/skopeo/stable:v1.1.1
diff --git a/tekton/alpha/sample-registry-secrets.yaml b/tekton/alpha/sample-registry-secrets.yaml
@@ -7,5 +7,5 @@ metadata:
     tekton.dev/docker-1: https://gcr.io
 type: kubernetes.io/basic-auth
 stringData:
-  username: <username>
-  password: <password>
+  username: $DOCKER_USER
+  password: $DOCKER_PASS
diff --git a/tekton/alpha/sample-sysdig-secrets.yaml b/tekton/alpha/sample-sysdig-secrets.yaml
@@ -3,5 +3,4 @@ kind: Secret
 metadata:
   name: sysdig-secrets
 data:
-  sysdig-secure-api-key: <your_apy_key>
-
+  sysdig-secure-api-token: $SYSDIG_SECURE_API_TOKEN_BASE64
diff --git a/tekton/alpha/tekton-inline-scan-localbuild-alpha.yaml b/tekton/alpha/tekton-inline-scan-localbuild-alpha.yaml
@@ -100,7 +100,7 @@ spec:
           valueFrom:
             secretKeyRef:
               name: sysdig-secrets
-              key: sysdig-secure-api-key
+              key: sysdig-secure-api-token
 
     - name: push
       image: quay.io/skopeo/stable
@@ -158,7 +158,7 @@ spec:
   type: image
   params:
   - name: url
-    value: docker.io/username/leeroy-web2a
+    value: docker.io/$DOCKER_USER/leeroy-web
 
 ---
 apiVersion: tekton.dev/v1alpha1
diff --git a/tekton/alpha/tekton-inline-scan-registry-alpha.yaml b/tekton/alpha/tekton-inline-scan-registry-alpha.yaml
@@ -93,7 +93,7 @@ spec:
           valueFrom:
             secretKeyRef:
               name: sysdig-secrets
-              key: sysdig-secure-api-key
+              key: sysdig-secure-api-token
 
 ---
 apiVersion: tekton.dev/v1alpha1
@@ -136,7 +136,7 @@ spec:
   type: image
   params:
     - name: url
-      value: docker.io/vicenteherrera/leeroy-web
+      value: docker.io/$DOCKER_USER/leeroy-web
 
 ---
 apiVersion: tekton.dev/v1alpha1
diff --git a/tekton/beta/sample-registry-secrets-beta.sh b/tekton/beta/sample-registry-secrets-beta.sh
@@ -1,8 +1,9 @@
 #!/bin/bash
+set -x
 
 kubectl create secret docker-registry regcred \
                     --docker-server=index.docker.io \
-                    --docker-username=<username> \
-                    --docker-password=<password> \
-                    --docker-email=<email> \
+                    --docker-username=$DOCKER_USER \
+                    --docker-password=$DOCKER_PASS \
+                    --docker-email=$DOCKER_EMAIL
                      -n tekton-pipelines
diff --git a/tekton/beta/sample-sysdig-secrets.yaml b/tekton/beta/sample-sysdig-secrets.yaml
@@ -3,5 +3,4 @@ kind: Secret
 metadata:
   name: sysdig-secrets
 data:
-  sysdig-secure-api-key: <your_apy_key>
-
+  sysdig-secure-api-token: $SYSDIG_SECURE_API_TOKEN_BASE64
diff --git a/tekton/beta/tekton-inline-scan-localbuild-beta.yaml b/tekton/beta/tekton-inline-scan-localbuild-beta.yaml
@@ -29,7 +29,7 @@ spec:
   type: image
   params:
     - name: url
-      value: index.docker.io/username/leeroy-web
+      value: index.docker.io/$DOCKER_USER/leeroy-web
 
 ---
 apiVersion: tekton.dev/v1beta1
@@ -82,7 +82,7 @@ spec:
           valueFrom:
             secretKeyRef:
               name: sysdig-secrets
-              key: sysdig-secure-api-key
+              key: sysdig-secure-api-token
 
     - name: push
       image: quay.io/skopeo/stable:v1.1.1
diff --git a/tekton/beta/tekton-inline-scan-registry-beta.yaml b/tekton/beta/tekton-inline-scan-registry-beta.yaml
@@ -29,7 +29,7 @@ spec:
   type: image
   params:
     - name: url
-      value: index.docker.io/username/leeroy-web
+      value: index.docker.io/$DOCKER_USER/leeroy-web
 
 ---
 apiVersion: tekton.dev/v1beta1
@@ -82,7 +82,7 @@ spec:
           valueFrom:
             secretKeyRef:
               name: sysdig-secrets
-              key: sysdig-secure-api-key
+              key: sysdig-secure-api-token
 
 ---
 apiVersion: tekton.dev/v1beta1
diff --git a/tekton/test/alpha/delete-credentials.sh b/tekton/test/alpha/delete-credentials.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+
+kubectl delete secret docker-auth-for-tekton -n tekton-pipelines
+kubectl delete secret sysdig-secrets -n tekton-pipelines
diff --git a/tekton/test/alpha/delete-pipeline-localbuild.sh b/tekton/test/alpha/delete-pipeline-localbuild.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+
+export DOCKER_USER=$(cat $KEYS/DOCKER_USER)
+
+cat ../../alpha/tekton-inline-scan-localbuild-alpha.yaml | envsubst | \
+    kubectl delete -n tekton-pipelines -f -
diff --git a/tekton/test/alpha/delete-pipeline-registry.sh b/tekton/test/alpha/delete-pipeline-registry.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+
+export DOCKER_USER=$(cat $KEYS/DOCKER_USER)
+
+cat ../../alpha/tekton-inline-scan-registry-alpha.yaml | envsubst | \
+    kubectl delete -n tekton-pipelines -f -
diff --git a/tekton/test/alpha/delete-tekton-alpha.sh b/tekton/test/alpha/delete-tekton-alpha.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+
+tekton_version=v0.10.2
+dashboard_version=v0.5.1
+
+kubectl delete -f https://github.com/tektoncd/dashboard/releases/download/$dashboard_version/tekton-dashboard-release.yaml
+kubectl delete -f https://github.com/tektoncd/pipeline/releases/download/$tekton_version/release.notags.yaml
diff --git a/tekton/test/alpha/init-tekton-alpha.sh b/tekton/test/alpha/init-tekton-alpha.sh
@@ -0,0 +1,8 @@
+#!/bin/bash
+
+tekton_version=v0.10.2
+dashboard_version=v0.5.1
+
+kubectl create -f https://github.com/tektoncd/pipeline/releases/download/$tekton_version/release.notags.yaml
+kubectl create -f https://github.com/tektoncd/dashboard/releases/download/$dashboard_version/tekton-dashboard-release.yaml
+
diff --git a/tekton/test/alpha/prepare-credentials.sh b/tekton/test/alpha/prepare-credentials.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+
+export DOCKER_USER=$(cat $KEYS/DOCKER_USER)
+export DOCKER_PASS=$(cat $KEYS/DOCKER_PASS)
+export SYSDIG_SECURE_API_TOKEN_BASE64=$(printf "$(cat $KEYS/SYSDIG_SECURE_API_TOKEN)" | base64)
+
+cat ../../alpha/sample-registry-secrets.yaml | envsubst | \
+    kubectl apply -n tekton-pipelines -f -
+
+cat ../../alpha/sample-sysdig-secrets.yaml | envsubst | \
+    kubectl apply -n tekton-pipelines -f -
diff --git a/tekton/test/alpha/run-pipeline-localbuild.sh b/tekton/test/alpha/run-pipeline-localbuild.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+
+export DOCKER_USER=$(cat $KEYS/DOCKER_USER)
+
+cat ../../alpha/tekton-inline-scan-localbuild-alpha.yaml | envsubst | \
+    kubectl apply -n tekton-pipelines -f -
diff --git a/tekton/test/alpha/run-pipeline-registry.sh b/tekton/test/alpha/run-pipeline-registry.sh
@@ -0,0 +1,8 @@
+#!/bin/bash
+
+export DOCKER_USER=$(cat $KEYS/DOCKER_USER)
+
+cat ../../alpha/tekton-inline-scan-registry-alpha.yaml | envsubst | \
+    kubectl apply -n tekton-pipelines -f -
+
+
diff --git a/tekton/test/alpha/wait-tekton-ready.sh b/tekton/test/alpha/wait-tekton-ready.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+
+echo "Waiting for Tekton pods to be ready..."
+kubectl wait --for=condition=ready pod -l 'app.kubernetes.io/name=tekton-pipelines'
diff --git a/tekton/test/beta/delete-credentials.sh b/tekton/test/beta/delete-credentials.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+
+kubectl delete secret regcred -n tekton-pipelines
+kubectl delete secret sysdig-secrets -n tekton-pipelines
+
+kubectl delete clusterrole tutorial-role
+kubectl delete clusterrolebinding tutorial-binding
diff --git a/tekton/test/beta/delete-pipeline-localbuild.sh b/tekton/test/beta/delete-pipeline-localbuild.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+
+export DOCKER_USER=$(cat $KEYS/DOCKER_USER)
+
+cat ../../beta/tekton-inline-scan-localbuild-beta.yaml | envsubst | \
+    kubectl delete -n tekton-pipelines -f -
diff --git a/tekton/test/beta/delete-pipeline-registry.sh b/tekton/test/beta/delete-pipeline-registry.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+
+export DOCKER_USER=$(cat $KEYS/DOCKER_USER)
+
+cat ../../beta/tekton-inline-scan-registry-beta.yaml | envsubst | \
+    kubectl delete -n tekton-pipelines -f -
diff --git a/tekton/test/beta/delete-tekton-beta.sh b/tekton/test/beta/delete-tekton-beta.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+
+tekton_version=v0.16.3
+dashboard_version=v0.9.0
+
+kubectl delete -f https://github.com/tektoncd/dashboard/releases/download/$dashboard_version/tekton-dashboard-release.yaml
+kubectl delete -f https://github.com/tektoncd/pipeline/releases/download/$tekton_version/release.notags.yaml
diff --git a/tekton/test/beta/init-tekton-beta.sh b/tekton/test/beta/init-tekton-beta.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+
+tekton_version=v0.16.3
+dashboard_version=v0.9.0
+
+kubectl create -f https://github.com/tektoncd/pipeline/releases/download/$tekton_version/release.notags.yaml
+kubectl create -f https://github.com/tektoncd/dashboard/releases/download/$dashboard_version/tekton-dashboard-release.yaml
diff --git a/tekton/test/beta/prepare-credentials.sh b/tekton/test/beta/prepare-credentials.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+
+export DOCKER_USER=$(cat $KEYS/DOCKER_USER)
+export DOCKER_PASS=$(cat $KEYS/DOCKER_PASS)
+export DOCKER_EMAIL=$(cat $KEYS/DOCKER_EMAIL)
+export SYSDIG_SECURE_API_TOKEN_BASE64=$(printf "$(cat $KEYS/SYSDIG_SECURE_API_TOKEN)" | base64)
+
+cat ../../beta/sample-sysdig-secrets.yaml | envsubst | \
+    kubectl apply -n tekton-pipelines -f -
+
+../../beta/sample-registry-secrets-beta.sh
+
diff --git a/tekton/test/beta/run-pipeline-localbuild.sh b/tekton/test/beta/run-pipeline-localbuild.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+
+export DOCKER_USER=$(cat $KEYS/DOCKER_USER)
+cat ../../beta/tekton-inline-scan-localbuild-beta.yaml | envsubst | \
+    kubectl create -n tekton-pipelines -f -
diff --git a/tekton/test/beta/run-pipeline-registry.sh b/tekton/test/beta/run-pipeline-registry.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+
+# Execute example
+export DOCKER_USER=$(cat $KEYS/DOCKER_USER)
+cat ../../beta/tekton-inline-scan-registry-beta.yaml | envsubst | \
+    kubectl create -n tekton-pipelines -f -
diff --git a/tekton/test/beta/wait-tekton-ready.sh b/tekton/test/beta/wait-tekton-ready.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+
+echo "Waiting for Tekton pods to be ready..."
+kubectl wait --for=condition=ready pod -l 'app.kubernetes.io/part-of=tekton-pipelines'
diff --git a/tekton/test/delete-crc.sh b/tekton/test/delete-crc.sh
@@ -0,0 +1,3 @@
+#!/bin/bash
+#crc stop
+crc delete
diff --git a/tekton/test/delete-test-alpha-localbuild.sh b/tekton/test/delete-test-alpha-localbuild.sh
@@ -0,0 +1,8 @@
+#!/bin/bash
+
+cd alpha
+./delete-pipeline-localbuild.sh
+./delete-credentials.sh
+./delete-tekton-alpha.sh
+
+
diff --git a/tekton/test/delete-test-alpha-registry.sh b/tekton/test/delete-test-alpha-registry.sh
@@ -0,0 +1,8 @@
+#!/bin/bash
+
+cd alpha
+./delete-pipeline-localbuild.sh
+./delete-credentials.sh
+./delete-tekton-alpha.sh
+
+
diff --git a/tekton/test/delete-test-beta-localbuild.sh b/tekton/test/delete-test-beta-localbuild.sh
@@ -0,0 +1,8 @@
+#!/bin/bash
+
+cd beta
+./delete-pipeline-localbuild.sh
+./delete-credentials.sh
+./delete-tekton-beta.sh
+
+
diff --git a/tekton/test/delete-test-beta-registry.sh b/tekton/test/delete-test-beta-registry.sh
@@ -0,0 +1,8 @@
+#!/bin/bash
+
+cd beta
+./delete-pipeline-localbuild.sh
+./delete-credentials.sh
+./delete-tekton-beta.sh
+
+
diff --git a/tekton/test/init/kubernetes-namespace.sh b/tekton/test/init/kubernetes-namespace.sh
@@ -0,0 +1,3 @@
+#!/bin/bash
+
+kubectl create namespace tekton-pipelines
diff --git a/tekton/test/init/oc-login.sh b/tekton/test/init/oc-login.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+CRC_KUBEADMIN_KEY=$(cat $KEYS/CRC_KUBEADMIN_KEY)
+
+export PATH=$HOME/.crc/bin:$PATH
+oc login -u kubeadmin -p $CRC_KUBEADMIN_KEY https://api.crc.testing:6443
+
+oc adm policy add-scc-to-user anyuid -z tekton-pipelines-controller
diff --git a/tekton/test/init/openshift-project.sh b/tekton/test/init/openshift-project.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+
+export PATH=$HOME/.crc/bin:$PATH
+oc new-project tekton-pipelines
+oc adm policy add-scc-to-user anyuid -z tekton-pipelines-controller
diff --git a/tekton/test/logs.sh b/tekton/test/logs.sh
@@ -0,0 +1,2 @@
+#!/bin/bash
+stern tekton-pipelines-controller --exclude 'level.:.info' --exclude 'Failed to log the metrics'
diff --git a/tekton/test/port-forwarding.sh b/tekton/test/port-forwarding.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+
+./init/wait-tekton-ready.sh
+kubectl port-forward svc/tekton-dashboard -n tekton-pipelines 9097:9097
diff --git a/tekton/test/start-prepare-crc.sh b/tekton/test/start-prepare-crc.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+
+crc setup
+crc start -p $KEYS/crc-pull-secret.txt
+
+./init/oc-login.sh
+./init/openshift-project.sh
diff --git a/tekton/test/test-alpha-localbuild.sh b/tekton/test/test-alpha-localbuild.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+
+cd alpha
+./init-tekton-alpha.sh
+./wait-tekton-ready.sh
+./prepare-credentials.sh
+./run-pipeline-localbuild.sh
diff --git a/tekton/test/test-alpha-registry.sh b/tekton/test/test-alpha-registry.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+
+cd alpha
+./init-tekton-alpha.sh
+./wait-tekton-ready.sh
+./prepare-credentials.sh
+./run-pipeline-registry.sh
diff --git a/tekton/test/test-beta-localbuild.sh b/tekton/test/test-beta-localbuild.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+
+cd beta
+./init-tekton-beta.sh
+./wait-tekton-ready.sh
+./prepare-credentials.sh
+./run-pipeline-localbuild.sh
diff --git a/tekton/test/test-beta-registry.sh b/tekton/test/test-beta-registry.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+
+cd beta
+./init-tekton-beta.sh
+./wait-tekton-ready.sh
+./prepare-credentials.sh
+./run-pipeline-registry.sh
