chore: debug doc-build pipeline

Author: l-qing

.builds/doc-build.yaml

@@ -0,0 +1,182 @@
+# 3. 创建 pr 触发的流水线以运行文档构建任务
+apiVersion: tekton.dev/v1
+kind: PipelineRun
+metadata:
+  name: doc-build
+  annotations:
+    pipelinesascode.tekton.dev/on-comment: "^(/doc-build)$"
+    pipelinesascode.tekton.dev/cancel-in-progress: "true"
+    pipelinesascode.tekton.dev/max-keep-runs: "20"
+    pipelinesascode.tekton.dev/on-cel-expression: |-
+      (
+        event == "push" && (
+          source_branch.matches("^(main|master|release-.*)$") ||
+          target_branch.matches("^(main|master|release-.*)$") ||
+          target_branch.startsWith("refs/tags/")
+        )
+      ) || (
+        event == "pull_request" && (
+          target_branch.matches("^(main|master|release-.*)$")
+        )
+      )
+spec:
+  timeouts:
+    pipeline: 2h
+    tasks: 2h
+
+  params:
+    - name: doc-base
+      value: container_platform
+
+    # 下面这些变量都是 pac 触发时自动注入的
+    - name: git-url
+      value: "{{ repo_url }}"
+    - name: git-revision
+      value: "{{ source_branch }}"
+    - name: git-commit
+      value: "{{ revision }}"
+    - name: pull-request-number
+      value: "{{ pull_request_number }}"
+    - name: pull-request-target
+      value: "{{ target_branch }}"
+
+  pipelineRef:
+    resolver: cluster
+    params:
+      - name: kind
+        value: pipeline
+      - name: name
+        value: product-docs-pipeline
+      - name: namespace
+        value: idp-dev
+
+  workspaces:
+    - name: source
+      volumeClaimTemplate:
+        spec:
+          storageClassName: topolvm
+          accessModes:
+            - ReadWriteOnce
+          resources:
+            requests:
+              storage: 25Gi
+    - name: cache
+      persistentVolumeClaim:
+        claimName: build-cache
+      subPath: yarn_cache
+
+    # This secret will be replaced by the pac controller
+    - name: basic-auth
+      secret:
+        secretName: "{{ git_auth_secret }}"
+
+  taskRunTemplate:
+    # Default: run tasks as root (UID 0) since most build tasks require root privileges.
+    # Individual tasks can override this as needed (see taskRunSpecs below).
+    podTemplate:
+      securityContext:
+        runAsUser: 0
+        runAsGroup: 0
+        fsGroup: 0
+        fsGroupChangePolicy: "OnRootMismatch"
+
+  taskRunSpecs:
+    - pipelineTaskName: git-clone
+      # Override: run git-clone as non-root user for security.
+      podTemplate:
+        securityContext:
+          runAsUser: 65532
+          runAsGroup: 65532
+          fsGroup: 65532
+          fsGroupChangePolicy: "OnRootMismatch"
+
+    - pipelineTaskName: build-online-docs-io
+      computeResources:
+        - name: build
+          resources:
+            requests:
+              cpu: 2
+              memory: 6Gi
+            limits:
+              cpu: 4
+              memory: 12Gi
+    - pipelineTaskName: build-online-docs-cn
+      computeResources:
+        - name: build
+          resources:
+            requests:
+              cpu: 2
+              memory: 6Gi
+            limits:
+              cpu: 4
+              memory: 12Gi
+    - pipelineTaskName: build-offline-docs
+      computeResources:
+        - name: build
+          resources:
+            requests:
+              cpu: 2
+              memory: 6Gi
+            limits:
+              cpu: 4
+              memory: 12Gi
+    - pipelineTaskName: build-exports-docs
+      computeResources:
+        - name: build
+          resources:
+            requests:
+              cpu: 2
+              memory: 6Gi
+            limits:
+              cpu: 4
+              memory: 12Gi
+    - pipelineTaskName: export-docs
+      computeResources:
+        - name: export
+          resources:
+            requests:
+              cpu: 2
+              memory: 6Gi
+            limits:
+              cpu: 4
+              memory: 12Gi
+    - pipelineTaskName: build-online-docs-russian
+      computeResources:
+        - name: build
+          resources:
+            requests:
+              cpu: 2
+              memory: 6Gi
+            limits:
+              cpu: 4
+              memory: 12Gi
+    - pipelineTaskName: build-offline-docs-russian
+      computeResources:
+        - name: build
+          resources:
+            requests:
+              cpu: 2
+              memory: 6Gi
+            limits:
+              cpu: 4
+              memory: 12Gi
+    - pipelineTaskName: build-exports-docs-russian
+      computeResources:
+        - name: build
+          resources:
+            requests:
+              cpu: 2
+              memory: 6Gi
+            limits:
+              cpu: 4
+              memory: 12Gi
+    - pipelineTaskName: export-docs-russian
+      computeResources:
+        - name: export
+          resources:
+            requests:
+              cpu: 2
+              memory: 6Gi
+            limits:
+              cpu: 4
+              memory: 12Gi

.tekton/doc-build.yaml

@@ -4,7 +4,7 @@ kind: PipelineRun
 metadata:
   name: doc-pr-build
   annotations:
-    pipelinesascode.tekton.dev/on-comment: "^(/doc-pr)$"
+    pipelinesascode.tekton.dev/on-comment: "^(/doc-pr-build)$"
     pipelinesascode.tekton.dev/cancel-in-progress: "true"
     pipelinesascode.tekton.dev/max-keep-runs: "20"
     pipelinesascode.tekton.dev/on-cel-expression: |-