41 lines
1.1 KiB
Bash
41 lines
1.1 KiB
Bash
#!/bin/sh
|
|
set -eu
|
|
|
|
root=$(CDPATH= cd -- "$(dirname -- "$0")/.." && pwd)
|
|
task="$root/catalog/maidn-node-static-image.yaml"
|
|
|
|
contains() {
|
|
grep -qF -- "$1" "$task"
|
|
}
|
|
|
|
for value in \
|
|
'apiVersion: tekton.dev/v1' \
|
|
'kind: Task' \
|
|
'name: maidn-node-static-image' \
|
|
'emptyDir: {}' \
|
|
'forgejo-git-credentials' \
|
|
'forgejo-registry-credentials' \
|
|
'case "$REPOSITORY_URL" in https://git.pingu.pw/*.git)' \
|
|
'case "$REVISION" in [A-Za-z0-9]*)' \
|
|
'case "$OUTPUT_DIRECTORY" in' \
|
|
'case "$BUILD_CONFIGURATION" in' \
|
|
'GIT_ASKPASS=/work/askpass' \
|
|
'runAsNonRoot: true' \
|
|
'allowPrivilegeEscalation: false' \
|
|
'drop: [ALL]' \
|
|
'type: RuntimeDefault' \
|
|
'npm install --ignore-scripts --no-audit --no-fund --package-lock=false' \
|
|
'memory: 256Mi' \
|
|
'memory: 512Mi' \
|
|
'tar -C /work/layer -cf /work/layer.tar www' \
|
|
'--base=$(params.base-image)' \
|
|
'--new_tag=$(params.image):$(params.revision)'; do
|
|
contains "$value"
|
|
done
|
|
|
|
for param in url revision image output-directory build-configuration base-image; do
|
|
contains "name: $param"
|
|
done
|
|
|
|
! grep -qiE 'kaniko|privileged: true' "$task"
|