charts/pipelines-library/templates/pipelines/docker/kaniko/bitbucket-review.yaml

{{ if has "bitbucket" .Values.global.gitProviders }}
{{ if .Values.pipelines.deployableResources.docker }}
apiVersion: tekton.dev/v1
kind: Pipeline
metadata:
  name: bitbucket-kaniko-docker-lib-review
  labels:
    app.edp.epam.com/pipelinetype: review
    {{- include "edp-tekton.labels" . | nindent 4 }}
spec:
  description: "The Review pipeline for building Docker with Kaniko"
  workspaces:
    - name: shared-workspace
    - name: ssh-creds
  params:
    - name: pipelineUrl
      default: https://portal-{{ .Release.Namespace }}.{{ .Values.global.dnsWildCard }}/c/main/pipelines/$(context.pipelineRun.namespace)/$(context.pipelineRun.name)
      type: string
    - name: git-source-url
      default: "https://github.com/epmd-edp/container-kaniko-docker"
      description: git url to clone
      type: string
    - name: git-source-revision
      description: 'git revision to checkout (branch, tag, sha, ref…)'
      default: "edp"
      type: string
    - name: changeNumber
      description: Change number from Merge Request
      default: ""
      type: string
    - name: git-refspec
      description: Refspec to fetch before checking out revision.
      default: ""
      type: string
    - name: gitfullrepositoryname
      description: "repository full name"
      type: string
  tasks:

    - name: bitbucket-set-pending-status
      taskRef:
        kind: Task
        name: bitbucket-set-status
      params:
        - name: REPO_FULL_NAME
          value: $(params.gitfullrepositoryname)
        - name: SHA
          value: "$(params.git-source-revision)"
        - name: TARGET_URL
          value: $(params.pipelineUrl)
        - name: DESCRIPTION
          value: "Review Pipeline"
        - name: STATE
          value: "INPROGRESS"
        - name: BITBUCKET_TOKEN_SECRET_NAME
          value: ci-bitbucket
        - name: BITBUCKET_TOKEN_SECRET_KEY
          value: token
        - name: KEY
          value: "review"
        - name: NAME
          value: "Pipeline"

    - name: fetch-repository
      taskRef:
        kind: Task
        name: git-clone
      runAfter:
        - bitbucket-set-pending-status
      params:
        - name: url
          value: "$(params.git-source-url)"
        - name: revision
          value: $(params.git-source-revision)
        - name: refspec
          value: $(params.git-refspec)
        - name: subdirectory
          value: source
      workspaces:
        - name: output
          workspace: shared-workspace
        - name: ssh-directory
          workspace: ssh-creds

    - name: dockerfile-lint
      taskRef:
        kind: Task
        name: hadolint
      runAfter:
        - fetch-repository
      workspaces:
        - name: source
          workspace: shared-workspace
          subPath: source

{{ include "dockerbuild-verify-docker" . | nindent 4 }}

{{ include "bitbucket-review-vote" . | nindent 2 }}

{{ end }}
{{ end }}