WIP: chore: add pac pipeline

.tekton/doc-build.yaml

@@ -0,0 +1,164 @@
+# 3. 创建 pr 触发的流水线以运行文档构建任务
+apiVersion: tekton.dev/v1
+kind: PipelineRun
+metadata:
+  name: doc-build
+  annotations:
+    pipelinesascode.tekton.dev/on-comment: '^(/doc-build)$'
+    pipelinesascode.tekton.dev/cancel-in-progress: 'true'
+    pipelinesascode.tekton.dev/max-keep-runs: '20'
+    pipelinesascode.tekton.dev/on-cel-expression: |-
+      (
+        event == "push" && (
+          source_branch.matches("^(main|master|release-.*)$") ||
+          target_branch.matches("^(main|master|release-.*)$") ||
+          target_branch.startsWith("refs/tags/")
+        )
+      ) || (
+        event == "pull_request" && (
+          target_branch.matches("^(main|master|release-.*)$")
+        )
+      )
+spec:
+  timeouts:
+    pipeline: 2h
+    tasks: 2h
+
+  params:
+    - name: doc-base
+      value: container_platform
+
+    # 下面这些变量都是 pac 触发时自动注入的
+    - name: git-url
+      value: '{{ repo_url }}'
+    - name: git-revision
+      value: '{{ source_branch }}'
+    - name: git-commit
+      value: '{{ revision }}'
+    - name: pull-request-number
+      value: '{{ pull_request_number }}'
+    - name: pull-request-target
+      value: '{{ target_branch }}'
+
+  pipelineRef:
+    resolver: cluster
+    params:
+      - name: kind
+        value: pipeline
+      - name: name
+        value: product-docs-pipeline
+      - name: namespace
+        value: idp-dev
+
+  workspaces:
+    - name: source
+      volumeClaimTemplate:
+        spec:
+          storageClassName: topolvm
+          accessModes:
+            - ReadWriteOnce
+          resources:
+            requests:
+              storage: 25Gi
+    - name: cache
+      persistentVolumeClaim:
+        claimName: build-cache
+      subPath: yarn_cache
+
+    # This secret will be replaced by the pac controller
+    - name: basic-auth
+      secret:
+        secretName: '{{ git_auth_secret }}'
+
+  taskRunTemplate:
+    # Default: run tasks as root (UID 0) since most build tasks require root privileges.
+    # Individual tasks can override this as needed (see taskRunSpecs below).
+    podTemplate:
+      securityContext:
+        runAsUser: 0
+        runAsGroup: 0
+        fsGroup: 0
+        fsGroupChangePolicy: 'OnRootMismatch'
+
+  taskRunSpecs:
+    - pipelineTaskName: git-clone
+      # Override: run git-clone as non-root user for security.
+      podTemplate:
+        securityContext:
+          runAsUser: 65532
+          runAsGroup: 65532
+          fsGroup: 65532
+          fsGroupChangePolicy: 'OnRootMismatch'
+
+    - pipelineTaskName: build-online-docs-io
+      computeResources:
+        requests:
+          cpu: 2
+          memory: 6Gi
+        limits:
+          cpu: 4
+          memory: 12Gi
+    - pipelineTaskName: build-online-docs-cn
+      computeResources:
+        requests:
+          cpu: 2
+          memory: 6Gi
+        limits:
+          cpu: 4
+          memory: 12Gi
+    - pipelineTaskName: build-offline-docs
+      computeResources:
+        requests:
+          cpu: 2
+          memory: 6Gi
+        limits:
+          cpu: 4
+          memory: 12Gi
+    - pipelineTaskName: build-exports-docs
+      computeResources:
+        requests:
+          cpu: 2
+          memory: 6Gi
+        limits:
+          cpu: 4
+          memory: 12Gi
+    - pipelineTaskName: export-docs
+      computeResources:
+        requests:
+          cpu: 2
+          memory: 6Gi
+        limits:
+          cpu: 4
+          memory: 12Gi
+    - pipelineTaskName: build-online-docs-russian
+      computeResources:
+        requests:
+          cpu: 2
+          memory: 6Gi
+        limits:
+          cpu: 4
+          memory: 12Gi
+    - pipelineTaskName: build-offline-docs-russian
+      computeResources:
+        requests:
+          cpu: 2
+          memory: 6Gi
+        limits:
+          cpu: 4
+          memory: 12Gi
+    - pipelineTaskName: build-exports-docs-russian
+      computeResources:
+        requests:
+          cpu: 2
+          memory: 6Gi
+        limits:
+          cpu: 4
+          memory: 12Gi
+    - pipelineTaskName: export-docs-russian
+      computeResources:
+        requests:
+          cpu: 2
+          memory: 6Gi
+        limits:
+          cpu: 4
+          memory: 12Gi