tekton task资源

浅浅的花香味﹌ 2022-10-12 04:22 101阅读 0赞

#  欢迎关注我的公众号： #

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAaHhwamF2YTE_size_8_color_FFFFFF_t_70_g_se_x_16][]

目前刚开始写一个月，一共写了18篇原创文章，文章目录如下：

[istio多集群探秘，部署了50次多集群后我得出的结论][istio_50]

[istio多集群链路追踪，附实操视频][istio]

[istio防故障利器，你知道几个,istio新手不要读，太难！][istio_istio]

[istio业务权限控制，原来可以这么玩][istio 1]

[istio实现非侵入压缩，微服务之间如何实现压缩][istio 2]

[不懂envoyfilter也敢说精通istio系列-http-rbac-不要只会用AuthorizationPolicy配置权限][envoyfilter_istio_-http-rbac-_AuthorizationPolicy]

[不懂envoyfilter也敢说精通istio系列-02-http-corsFilter-不要只会vs][envoyfilter_istio_-02-http-corsFilter-_vs]

[不懂envoyfilter也敢说精通istio系列-03-http-csrf filter-再也不用再代码里写csrf逻辑了][envoyfilter_istio_-03-http-csrf filter-_csrf]

[不懂envoyfilter也敢说精通istio系列http-jwt\_authn-不要只会RequestAuthorization][envoyfilter_istio_http-jwt_authn-_RequestAuthorization]

[不懂envoyfilter也敢说精通istio系列-05-fault-filter-故障注入不止是vs][envoyfilter_istio_-05-fault-filter-_vs]

[不懂envoyfilter也敢说精通istio系列-06-http-match-配置路由不只是vs][envoyfilter_istio_-06-http-match-_vs]

[不懂envoyfilter也敢说精通istio系列-07-负载均衡配置不止是dr][envoyfilter_istio_-07-_dr]

[不懂envoyfilter也敢说精通istio系列-08-连接池和断路器][envoyfilter_istio_-08-]

[不懂envoyfilter也敢说精通istio系列-09-http-route filter][envoyfilter_istio_-09-http-route filter]

[不懂envoyfilter也敢说精通istio系列-network filter-redis proxy][envoyfilter_istio_-network filter-redis proxy]

[不懂envoyfilter也敢说精通istio系列-network filter-HttpConnectionManager][envoyfilter_istio_-network filter-HttpConnectionManager]

[不懂envoyfilter也敢说精通istio系列-ratelimit-istio ratelimit完全手册][envoyfilter_istio_-ratelimit-istio ratelimit]

# tekton新课发布：[ci/cd之tekton实战--其他视频教程-系统/网络/运维-CSDN程序员研修院][ci_cd_tekton_--_-_-CSDN] #

# 什么是task #

A `Task` is a collection of `Steps` that you define and arrange in a specific order of execution as part of your continuous integration flow. A `Task` executes as a Pod on your Kubernetes cluster. A `Task` is available within a specific namespace, while a `ClusterTask` is available across the entire cluster.

A `Task` declaration includes the following elements:

*  [Parameters][]
 *  [Resources][]
 *  [Steps][]
 *  [Workspaces][]
 *  [Results][]

# 资源详解 #

## steps ##

### name ###

task/steps/task-name.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: hello
    spec:
      steps:
        - name: hello
          image: ubuntu
          command:
            - echo
          args:
            - "Hello World!"

tkn task start -f task-name.yaml -n tekton

### image ###

task/steps/task-name.yaml

tkn task start -f task-name.yaml -n tekton

### script ###

task/steps/task-script-shell.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: script
    spec:
      steps:
      - image: ubuntu 
        script: |
          #!/usr/bin/env bash
          echo "Hello from Bash!"

task/steps/task-script-python.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: script
    spec:
      steps:
      - image: python  # contains python
        script: |
          #!/usr/bin/env python3
          print("Hello from Python!")

task/steps/task-script-node.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: script
    spec:
      steps:
      - image: node  # contains node
        script: |
          #!/usr/bin/env node
          console.log("Hello from Node!")

### resources ###

task/steps/task-resources.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: resources
    spec:
      steps:
      - name: step-with-limts
        image: ubuntu
        command:
        - echo
        args:
        - "Hello World!"
        resources:
          requests:
            memory: 100Mi
            cpu: 10m
          limits:
            memory: 100Mi
            cpu: 10m

### timeout ###

task/steps/task-timeout.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: timeout
    spec:  
      steps:
      - name: sleep-then-timeout
        image: ubuntu
        script: | 
          #!/usr/bin/env bash
          echo "I am supposed to sleep for 60 seconds!"
          sleep 60
        timeout: 5s

### args ###

task/steps/task-name.yaml

### command ###

task/steps/task-name.yaml

### env ###

plain

task/steps/task-env.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: env
    spec: 
      steps:
      - image: ubuntu
        command: [echo]
        args: ["FOO is $(FOO)"]
        env:
          - name: "FOO"
            value: "baz"

**secret-env**

secret.yaml

apiVersion: v1
    kind: Secret
    metadata:
      name: mysecret
    type: Opaque
    data:
      username: YWRtaW4=

task/steps/task-env-secret.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: env
    spec:  
      steps:
      - image: ubuntu
        command: [echo]
        args: ["FOO is $(FOO)"]
        env:
          - name: "FOO"
            valueFrom:
              secretKeyRef:
                name: mysecret
                key: username

### volumeMounts ###

task/steps/task-volumeMounts.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: volumemounts
    spec:   
      steps:
      - image: docker:20.10.5
        name: client
        script: |
            #!/usr/bin/env sh
            cat > Dockerfile << EOF
            FROM ubuntu
            RUN apt-get update
            ENTRYPOINT ["echo", "hello"]
            EOF
            docker build -t hello . && docker run hello
            docker images
        volumeMounts:
          - mountPath: /var/run/docker.sock
            name: docker-socket
      volumes:
        - name: docker-socket
          hostPath:
            path: /var/run/docker.sock
            type: Socket

### workingDir ###

task/steps/task-workingDir.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: workingdir
    spec:  
      steps:
      - image: ubuntu
        command: [pwd]
        workingDir: /workspace/src/

### securityContext ###

task/steps/task-securityContext.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: securitycontext
    spec:  
      steps:
      - image: ubuntu
        command: [id]
        securityContext:
          runAsUser: 2000

### imagePullPolicy ###

task/steps/task-imagePullPolicy .yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: imagepullpolicy 
    spec:  
      steps:
      - image: ubuntu
        command: [echo]
        args:
        - hello
        imagePullPolicy: IfNotPresent

### workspaces ###

## description ##

task/task-description.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: description 
    spec: 
      description:  this is a test task
      steps:
      - image: ubuntu
        command: [echo]
        args:
        - hello
        imagePullPolicy: IfNotPresent

## params ##

### array ###

task/task-params-array.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: params-array
    spec:
      params:
      - name: array-param
        type: array
        default:
        - a
        - b
        - c
      steps:
      - image: ubuntu
        command: [echo]
        args:
        - "$(params.array-param[*])"
        imagePullPolicy: IfNotPresent

### string ###

task/task-params-string.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: params-string 
    spec: 
      params:
        - name: directory
          type: string
          description: The directory containing the build context.
          default: /workspace
      steps:
      - image: ubuntu
        command: [pwd]
        workingDir: "$(params.directory)"
        imagePullPolicy: IfNotPresent

tkn task start -f task-params-string.yaml --param=directory=/test -n tekton

## resources ##

task/resources/sa.yaml

apiVersion: v1
    kind: ServiceAccount
    metadata:
      name: test-task-robot-git-ssh
    secrets:
      - name: registry-secret

kubectl create secret docker-registry registry-secret \
           --docker-server=registry.cn-beijing.aliyuncs.com \
           --docker-username=195446040@qq.com \
           --docker-password=123456 -n tekton

task/resources/res-dockerfile-examples.yaml

apiVersion: tekton.dev/v1alpha1
    kind: PipelineResource
    metadata:
      name: dockerfile-examples
    spec:
      type: git
      params:
        - name: url
          value: https://github.com/13567436138/tekton.git
        - name: revision
          value: main

task/resources/res-my-app-image.yaml

apiVersion: tekton.dev/v1alpha1
    kind: PipelineResource
    metadata:
      name: my-app-image
    spec:
      type: image
      params:
        - name: url
          value: registry.cn-beijing.aliyuncs.com/hxpdocker/tekton-test

task/resources/task-example-task.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: example-task
    spec:
      params:
        - name: pathToDockerFile
          type: string
          description: The path to the dockerfile to build
          default: /workspace/workspace/
      resources:
        inputs:
          - name: workspace
            type: git
        outputs:
          - name: builtImage
            type: image
      steps:
        - image: docker:20.10.5
          command: ["docker"]
          imagePullPolicy: IfNotPresent
          args: 
          - build
          - --tag 
          - $(resources.outputs.builtImage.url)
          - $(params.pathToDockerFile)
          volumeMounts:
            - name: docker-socket
              mountPath: /var/run/docker.sock
        - name: dockerfile-pushexample
          image: docker:20.10.5
          imagePullPolicy: IfNotPresent
          command: ["docker"]
          args: ["push","$(resources.outputs.builtImage.url)"]
          volumeMounts:
            - name: docker-socket
              mountPath: /var/run/docker.sock

task/resources/taskrun-mytaskrun.yaml

apiVersion: tekton.dev/v1beta1
    kind: TaskRun
    metadata:
      generateName: mytaskrun-
    spec:
      serviceAccountName: test-task-robot-git-ssh
      taskRef:
        name: example-task
      resources:
        inputs:
          - name: workspace
            resourceRef:
              name: dockerfile-examples
        outputs:
          - name: builtImage
            resourceRef:
              name: my-app-image
      podTemplate:
        volumes:
        - name: docker-socket
          hostPath:
            path: /var/run/docker.sock
            type: Socket

## workspaces ##

task/task-workspaces.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: workspaces
    spec:
      steps:
      - name: write-message
        image: ubuntu
        script: |
          #!/usr/bin/env bash
          set -xe
          if [ "$(workspaces.messages.bound)" == "true" ] ; then
            echo hello! > $(workspaces.messages.path)/message
            cat $(workspaces.messages.path)/message
          fi
      workspaces:
      - name: messages
        description: |
          The folder where we write the message to. If no workspace
          is provided then the message will not be written.
        optional: true
        mountPath: /test

task/taskrun-workspaces.yaml

apiVersion: tekton.dev/v1beta1
    kind: TaskRun
    metadata:
      generateName: workspaces-
    spec:
      taskRef:
        name: workspaces
      workspaces:
        - name: messages
          emptyDir: {}

## results ##

task/task-results.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: print-date
      annotations:
        description: |
          A simple task that prints the date
    spec:
      results:
        - name: current-date-unix-timestamp
          description: The current date in unix timestamp format
        - name: current-date-human-readable
          description: The current date in human readable format
      steps:
        - name: print-date-unix-timestamp
          image: bash:latest
          script: |
            #!/usr/bin/env bash
            date +%s | tee $(results.current-date-unix-timestamp.path)
        - name: print-date-human-readable
          image: bash:latest
          script: |
            #!/usr/bin/env bash
            date | tee $(results.current-date-human-readable.path)
        - name: message
          image: ubuntu
          script: |
            #!/usr/bin/env bash
            set -xe
            ls /tekton/results

## volumes ##

task/task-volumes.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: volumes
    spec:
      steps:
      - image: docker:20.10.5
        name: client
        script: |
            #!/usr/bin/env sh
            cat > Dockerfile << EOF
            FROM ubuntu
            ENTRYPOINT ["echo", "hello"]
            EOF
            chmod 777 Dockerfile
            docker build -t hello .
        securityContext:
          privileged: true
        volumeMounts:
          - mountPath: /var/run/docker.sock
            name: docker-socket
      volumes:
        - name: docker-socket
          hostPath:
            path: /var/run/docker.sock
            type: Socket

## stepTemplate ##

task/task-stepTemplate.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: steptemplate
    spec:
      stepTemplate:
        env:
        - name: "FOO"
          value: "bar"
      steps:
      - image: ubuntu
        command: [echo]
        args: ["FOO is $(FOO)"]
      - image: ubuntu
        command: [echo]
        args: ["FOO is $(FOO)"]
        env:
          - name: "FOO"
            value: "baz"

## sidecars ##

task/task-sidecars.yaml

apiVersion: tekton.dev/v1beta1
    kind: Task
    metadata:
      name: sidecars
    spec:
      steps:
      - image: docker
        name: client
        workingDir: /context
        script: |
            #!/usr/bin/env sh
            cat > Dockerfile << EOF
            FROM ubuntu
            ENTRYPOINT ["echo", "hello"]
            EOF
            docker build -t hello . && docker run hello
        securityContext:
          privileged: true
        volumeMounts:
          - mountPath: /var/run/
            name: dind-socket
          - mountPath: /context
            name: context
      sidecars:
      - image: docker:18.05-dind
        name: server
        securityContext:
          privileged: true
        volumeMounts:
          - mountPath: /var/lib/docker
            name: dind-storage
          - mountPath: /var/run/
            name: dind-socket
          - mountPath: /context
            name: context
      volumes:
      - name: dind-storage
        emptyDir: {}
      - name: dind-socket
      - name: context
        emptyDir: {}

# ClusterTask #

task/clustertask/task-deploy.yaml

apiVersion: tekton.dev/v1beta1
    kind: ClusterTask
    metadata:
      name: kubectl-deploy
      namespace: default
    spec:
      resources:
        inputs:
          - name: workspace
            type: git
      steps:
        - name: kubectl-deploy
          image: registry.cn-shanghai.aliyuncs.com/hxpdocker/kubectl:latest
          script: |
            #!/bin/sh
            kubectl apply -f /workspace/workspace/deployment.yaml

task/clustertask/pipeline-my.yaml

apiVersion: tekton.dev/v1beta1
    kind: Pipeline
    metadata:
      name: mypipeline
    spec:
      tasks:
      - name: deploy-app
        taskRef:
          name: kubectl-deploy
          kind: ClusterTask
        resources:
          inputs:
          - name: workspace
            resource: workspace
      resources:
        - name: workspace
          type: git

task/clustertask/pipelinerun-my.yaml

apiVersion: tekton.dev/v1beta1
    kind: PipelineRun
    metadata:
      generateName: mypipeline-run
    spec:
      serviceAccountName: test-task-robot-git-ssh
      pipelineRef:
        name: mypipeline
      resources:
        - name: workspace
          resourceRef: 
            name: workspace

[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAaHhwamF2YTE_size_8_color_FFFFFF_t_70_g_se_x_16]: /images/20221005/b551aa3d408a44a1b62d72cdc5ca7f29.png
[istio_50]: https://mp.weixin.qq.com/s/_OPMjmWCDSTlmbAxytg33A
[istio]: https://mp.weixin.qq.com/s/kjvtno_UzJAGr1joxm3tvw
[istio_istio]: https://mp.weixin.qq.com/s/e2-p_NY31Mc5y07S4Bb1JQ
[istio 1]: https://mp.weixin.qq.com/s/iTV0SCQLhSOTYncp3PxoHQ
[istio 2]: https://mp.weixin.qq.com/s/eINlrT242RlAwfuZu1_PcA
[envoyfilter_istio_-http-rbac-_AuthorizationPolicy]: https://mp.weixin.qq.com/s/Q-yTGBNqkjOov49LTXPrPA
[envoyfilter_istio_-02-http-corsFilter-_vs]: https://mp.weixin.qq.com/s/bFMdrT7OKSqoWv8pDXOIqQ
[envoyfilter_istio_-03-http-csrf filter-_csrf]: https://mp.weixin.qq.com/s/dlG9phV-kMMxs4UPzuRNYg
[envoyfilter_istio_http-jwt_authn-_RequestAuthorization]: https://mp.weixin.qq.com/s/IfrJ-FdLYsdhPkDrcO_YXA
[envoyfilter_istio_-05-fault-filter-_vs]: https://mp.weixin.qq.com/s/a4gDXqD8uswgglMwkUph2Q
[envoyfilter_istio_-06-http-match-_vs]: https://mp.weixin.qq.com/s/TpS3DHdcaJiPivIS_jsIGw
[envoyfilter_istio_-07-_dr]: https://mp.weixin.qq.com/s/k-zJm7n7OOKg6MotQJYPAA
[envoyfilter_istio_-08-]: https://mp.weixin.qq.com/s/n_bJ3saNeTtXRprIymhwzg
[envoyfilter_istio_-09-http-route filter]: https://mp.weixin.qq.com/s/JAeZr0BMVQxIrB3S_7Ru0A
[envoyfilter_istio_-network filter-redis proxy]: https://mp.weixin.qq.com/s/B9IPTI8F3q42nVkqbQRlPw
[envoyfilter_istio_-network filter-HttpConnectionManager]: https://mp.weixin.qq.com/s/W3OPQWkCVvuHGS49cTNhlg
[envoyfilter_istio_-ratelimit-istio ratelimit]: https://mp.weixin.qq.com/s/KgiDsELNol27mgZvDbFsqw
[ci_cd_tekton_--_-_-CSDN]: https://edu.csdn.net/course/detail/35202
[Parameters]: https://tekton.dev/docs/pipelines/tasks/#specifying-parameters
[Resources]: https://tekton.dev/docs/pipelines/tasks/#specifying-resources
[Steps]: https://tekton.dev/docs/pipelines/tasks/#defining-steps
[Workspaces]: https://tekton.dev/docs/pipelines/tasks/#specifying-workspaces
[Results]: https://tekton.dev/docs/pipelines/tasks/#emitting-results