tekton taskrun资源

tekton新课发布：https://edu.csdn.net/course/detail/35202

什么是taskrun

使用TaskRun资源对象创建并运行群集上的进程以完成操作。task只是定义了一个任务模版，taskRun才真正代表了一次实际的运行，启动taskrun才可以运行task，当然你也可以自己手动创建一个taskRun，taskRun创建出来之后，就会自动触发task描述的构建任务。taskRun只有当task的所有Step都执行完成才会运行完。

资源详解

taskRef

taskrun/taskrun-taskref.yaml

apiVersion: tekton.dev/v1beta1
kind: Task
metadata:
  name: hello
spec:
  steps:
    - name: hello
      image: ubuntu
      command:
        - echo
      args:
        - "Hello World!"
---        
apiVersion: tekton.dev/v1beta1
kind: TaskRun
metadata:
  name: hello-run
spec:
  taskRef:
    name: hello

taskSpec

taskrun/taskrun-taskSpec.yaml

apiVersion: tekton.dev/v1beta1
kind: TaskRun
metadata:
  generateName: taskspec-
spec:
  taskSpec:
    steps:
    - name: hello
      image: ubuntu
      command:
        - echo
      args:
        - "Hello World!"

serviceAccountName

task/resources/sa.yaml

apiVersion: v1
kind: ServiceAccount
metadata:
  name: test-task-robot-git-ssh
secrets:
  - name: registry-secret

kubectl create secret docker-registry registry-secret \
       --docker-server=registry.cn-beijing.aliyuncs.com \
       --docker-username=195446040@qq.com \
       --docker-password=123456 -n tekton 

task/resources/res-dockerfile-examples.yaml

apiVersion: tekton.dev/v1alpha1
kind: PipelineResource
metadata:
  name: dockerfile-examples
spec:
  type: git
  params:
    - name: url
      value: https://github.com/13567436138/tekton.git
    - name: revision
      value: main

task/resources/res-my-app-image.yaml

apiVersion: tekton.dev/v1alpha1
kind: PipelineResource
metadata:
  name: my-app-image
spec:
  type: image
  params:
    - name: url
      value: registry.cn-beijing.aliyuncs.com/hxpdocker/tekton-test

task/resources/task-example-task.yaml

apiVersion: tekton.dev/v1beta1
kind: Task
metadata:
  name: example-task
spec:
  params:
    - name: pathToDockerFile
      type: string
      description: The path to the dockerfile to build
      default: /workspace/workspace/
  resources:
    inputs:
      - name: workspace
        type: git
    outputs:
      - name: builtImage
        type: image
  steps:
    - image: docker:20.10.5
      command: ["docker"]
      imagePullPolicy: IfNotPresent
      args: 
      - build
      - --tag 
      - $(resources.outputs.builtImage.url)
      - $(params.pathToDockerFile)
      volumeMounts:
        - name: docker-socket
          mountPath: /var/run/docker.sock
    - name: dockerfile-pushexample
      image: docker:20.10.5
      imagePullPolicy: IfNotPresent
      command: ["docker"]
      args: ["push","$(resources.outputs.builtImage.url)"]
      volumeMounts:
        - name: docker-socket
          mountPath: /var/run/docker.sock

task/resources/taskrun-mytaskrun.yaml

apiVersion: tekton.dev/v1beta1
kind: TaskRun
metadata:
  generateName: mytaskrun-
spec:
  serviceAccountName: test-task-robot-git-ssh
  taskRef:
    name: example-task
  resources:
    inputs:
      - name: workspace
        resourceRef:
          name: dockerfile-examples
    outputs:
      - name: builtImage
        resourceRef:
          name: my-app-image
  podTemplate:
    volumes:
    - name: docker-socket
      hostPath:
        path: /var/run/docker.sock
        type: Socket
    

params

taskrun/taskrun-params.yaml

apiVersion: tekton.dev/v1beta1
kind: Task
metadata:
  name: my-params-array
spec:
  params:
  - name: array-param
    type: array
    default:
    - a
    - b
    - c
  steps:
  - image: ubuntu
    command: [echo]
    args:
    - "$(params.array-param[*])"
    imagePullPolicy: IfNotPresent
---
apiVersion: tekton.dev/v1beta1
kind: TaskRun
metadata:
  generateName: params-
spec:
  taskRef:
    name: my-params-array
  params:
    - name: array-param
      value: 
      - xxx
      - yyy

resources

task/resources/sa.yaml

apiVersion: v1
kind: ServiceAccount
metadata:
  name: test-task-robot-git-ssh
secrets:
  - name: registry-secret

kubectl create secret docker-registry registry-secret \
       --docker-server=registry.cn-beijing.aliyuncs.com \
       --docker-username=195446040@qq.com \
       --docker-password=123456 -n tekton 

task/resources/res-dockerfile-examples.yaml

apiVersion: tekton.dev/v1alpha1
kind: PipelineResource
metadata:
  name: dockerfile-examples
spec:
  type: git
  params:
    - name: url
      value: https://github.com/13567436138/tekton.git
    - name: revision
      value: main

task/resources/res-my-app-image.yaml

apiVersion: tekton.dev/v1alpha1
kind: PipelineResource
metadata:
  name: my-app-image
spec:
  type: image
  params:
    - name: url
      value: registry.cn-beijing.aliyuncs.com/hxpdocker/tekton-test

task/resources/task-example-task.yaml

apiVersion: tekton.dev/v1beta1
kind: Task
metadata:
  name: example-task
spec:
  params:
    - name: pathToDockerFile
      type: string
      description: The path to the dockerfile to build
      default: /workspace/workspace/
  resources:
    inputs:
      - name: workspace
        type: git
    outputs:
      - name: builtImage
        type: image
  steps:
    - image: docker:20.10.5
      command: ["docker"]
      imagePullPolicy: IfNotPresent
      args: 
      - build
      - --tag 
      - $(resources.outputs.builtImage.url)
      - $(params.pathToDockerFile)
      volumeMounts:
        - name: docker-socket
          mountPath: /var/run/docker.sock
    - name: dockerfile-pushexample
      image: docker:20.10.5
      imagePullPolicy: IfNotPresent
      command: ["docker"]
      args: ["push","$(resources.outputs.builtImage.url)"]
      volumeMounts:
        - name: docker-socket
          mountPath: /var/run/docker.sock

task/resources/taskrun-mytaskrun.yaml

apiVersion: tekton.dev/v1beta1
kind: TaskRun
metadata:
  generateName: mytaskrun-
spec:
  serviceAccountName: test-task-robot-git-ssh
  taskRef:
    name: example-task
  resources:
    inputs:
      - name: workspace
        resourceRef:
          name: dockerfile-examples
    outputs:
      - name: builtImage
        resourceRef:
          name: my-app-image
  podTemplate:
    volumes:
    - name: docker-socket
      hostPath:
        path: /var/run/docker.sock
        type: Socket
    

timeout

taskrun/taskrun-timeout.yaml

apiVersion: tekton.dev/v1beta1
kind: Task
metadata:
  name: hello
spec:
  steps:
    - name: hello
      image: ubuntu
      command:
        - echo
      args:
        - "Hello World!"
---        
apiVersion: tekton.dev/v1beta1
kind: TaskRun
metadata:
  generateName: timout-run-
spec:
  taskRef:
    name: hello
  timeout: 1s

podTemplate

taskrun/taskrun-podTemplate.yaml

apiVersion: tekton.dev/v1beta1
kind: Task
metadata:
  name: hello-podtemplate
spec:
  steps:
    - name: hello
      image: ubuntu
      command:
        - id
---
apiVersion: tekton.dev/v1beta1
kind: TaskRun
metadata:
  generateName: podtemplate-
spec:
  taskRef:
    name: hello-podtemplate
  podTemplate:
    securityContext:
      runAsNonRoot: true
      runAsUser: 1001

workspaces

task/task-workspaces.yaml

apiVersion: tekton.dev/v1beta1
kind: Task
metadata:
  name: workspaces
spec:
  steps:
  - name: write-message
    image: ubuntu
    script: |
      #!/usr/bin/env bash
      set -xe
      if [ "$(workspaces.messages.bound)" == "true" ] ; then
        echo hello! > $(workspaces.messages.path)/message
        cat $(workspaces.messages.path)/message
      fi
  workspaces:
  - name: messages
    description: |
      The folder where we write the message to. If no workspace
      is provided then the message will not be written.
    optional: true
    mountPath: /test

task/taskrun-workspaces.yaml

apiVersion: tekton.dev/v1beta1
kind: TaskRun
metadata:
  generateName: workspaces-
spec:
  taskRef:
    name: workspaces
  workspaces:
    - name: messages
      emptyDir: {}