feat: add a TaskRun to build a function runtime image

Author: lance

Gopkg.lock

@@ -12,6 +12,9 @@ import (
 	knv1alpha1 "knative.dev/serving/pkg/apis/serving/v1alpha1"
 	knv1beta1 "knative.dev/serving/pkg/apis/serving/v1beta1"
 
+	// Import tekton types
+	pipeline "github.com/tektoncd/pipeline/pkg/apis/pipeline/v1alpha1"
+
 	// Import all Kubernetes client auth plugins (e.g. Azure, GCP, OIDC, etc.)
 	_ "k8s.io/client-go/plugin/pkg/client/auth"
 
@@ -123,6 +126,11 @@ func main() {
 		os.Exit(1)
 	}
 
+	if err := pipeline.AddToScheme(mgr.GetScheme()); err != nil {
+		log.Error(err, "Can't register the tekton pipeline scheme")
+		os.Exit(1)
+	}
+
 	// Setup all Controllers
 	if err := controller.AddToManager(mgr); err != nil {
 		log.Error(err, "")

cmd/manager/main.go

@@ -0,0 +1,69 @@
+apiVersion: tekton.dev/v1alpha1
+kind: Task
+metadata:
+  name: js-function-build-runtime
+spec:
+  inputs:
+    params:
+    - name: FUNCTION_NAME
+      description: The name of the function being built
+      default: 'user-function'
+    - name: TLSVERIFY
+      description: Verify the TLS on the registry endpoint (default false)
+      default: 'false'
+  outputs:
+    resources:
+    - name: image
+      type: image
+  steps:
+  - name: copy-source
+    image: docker.io/alpine
+    command: ['cp', '-fpv', '/fn-source/index.js', '/fn-source/package.json', '/home/node/usr/']
+    volumeMounts:
+    - name: sourcedir
+      mountPath: /fn-source
+    - name: gen-source
+      mountPath: /home/node/usr
+    securityContext:
+      privileged: true
+  - name: generate
+    image: quay.io/openshift-pipeline/s2i
+    workingdir:  '/home/node/usr'
+    command: ['s2i', 'build', '.', 'quay.io/lanceball/js-runtime', '--as-dockerfile', '/home/node/build/Dockerfile.gen']
+    volumeMounts:
+    - name: gen-source
+      mountPath: /home/node/usr
+    - name: buildpath
+      mountPath: /home/node/build
+    securityContext:
+      privileged: true
+  - name: build
+    image: quay.io/buildah/stable
+    workingdir: /home/node/build
+    command: ['buildah', 'bud', '--tls-verify=${inputs.params.TLSVERIFY}', '--layers', '-f', '/Dockerfile.gen', '-t', '${outputs.resources.image.url}', '.']
+    volumeMounts:
+    - name: varlibcontainers
+      mountPath: /var/lib/containers
+    - name: buildpath
+      mountPath: /home/node/build
+    securityContext:
+      privileged: true
+  - name: push
+    image: quay.io/buildah/stable
+    command: ['buildah', 'push', '--tls-verify=${inputs.params.TLSVERIFY}', '${outputs.resources.image.url}', 'docker://${outputs.resources.image.url}']
+    volumeMounts:
+    - name: varlibcontainers
+      mountPath: /var/lib/containers
+    securityContext:
+      privileged: true
+
+  volumes:
+  - name: varlibcontainers
+    emptyDir: {}
+  - name: gen-source
+    emptyDir: {}
+  - name: buildpath
+    emptyDir: {}
+  - name: sourcedir
+    configMap:
+      name: ${inputs.params.FUNCTION_NAME}

deploy/build/js-function-build-task.yaml

@@ -16,7 +16,7 @@ spec:
       containers:
         - name: js-function-operator
           # Replace this with the built image name
-          image: docker.io/lanceball/js-function-operator:v0.0.2
+          image: quay.io/lanceball/js-function-operator:v0.0.2
           command:
           - js-function-operator
           imagePullPolicy: Always

deploy/operator.yaml

@@ -31,6 +31,12 @@ rules:
   - services
   verbs:
   - '*'
+- apiGroups:
+  - tekton.dev
+  resources:
+  - tasks
+  verbs:
+  - '*'
 - apiGroups:
   - monitoring.coreos.com
   resources:

deploy/role.yaml

@@ -4,6 +4,7 @@ import (
 	"context"
 	"fmt"
 
+	pipeline "github.com/tektoncd/pipeline/pkg/apis/pipeline/v1alpha1"
 	kneventing "knative.dev/eventing/pkg/apis/eventing/v1alpha1"
 	knv1alpha1 "knative.dev/serving/pkg/apis/serving/v1alpha1"
 	knv1beta1 "knative.dev/serving/pkg/apis/serving/v1beta1"
@@ -134,8 +135,19 @@ func (r *ReconcileJSFunction) Reconcile(request reconcile.Request) (reconcile.Re
 			return reconcile.Result{}, err
 		}
 
+		reqLogger.Info("Creating TaskRun for function build.")
+		build, err := r.buildForFunction(function)
+		if err != nil {
+			return reconcile.Result{}, err
+		}
+		err = r.client.Create(context.TODO(), build)
+		if err != nil {
+			reqLogger.Error(err, "Failed to create TaskRun for function build.", "Service.Namespace", build.Namespace, "ConfigMap.Name", build.Name)
+			return reconcile.Result{}, err
+		}
+
 		// Create service, mounting the config map
-		service, err := r.serviceForFunction(function, configMap.Name)
+		service, err := r.serviceForFunction(function, configMap.Name, runtimeImageForFunction(function))
 		if err != nil {
 			return reconcile.Result{}, err
 		}
@@ -216,6 +228,49 @@ func (r *ReconcileJSFunction) Reconcile(request reconcile.Request) (reconcile.Re
 	return reconcile.Result{}, nil
 }
 
+func (r *ReconcileJSFunction) buildForFunction(f *faasv1alpha1.JSFunction) (*pipeline.TaskRun, error) {
+	imageName := runtimeImageForFunction(f)
+	taskRun := &pipeline.TaskRun{
+		ObjectMeta: metav1.ObjectMeta{
+			Name:      fmt.Sprintf("%s-build", f.Name),
+			Namespace: f.Namespace,
+		},
+		Spec: pipeline.TaskRunSpec{
+			ServiceAccount: "js-function-operator",
+			TaskRef: &pipeline.TaskRef{
+				Name: "js-function-build-runtime",
+			},
+			Inputs: pipeline.TaskRunInputs{
+				Params: []pipeline.Param{{
+					Name: "FUNCTION_NAME",
+					Value: pipeline.ArrayOrString{
+						Type:      "string",
+						StringVal: f.Name,
+					},
+				}},
+			},
+			Outputs: pipeline.TaskRunOutputs{
+				Resources: []pipeline.TaskResourceBinding{
+					{
+						Name: "image",
+						ResourceSpec: &pipeline.PipelineResourceSpec{
+							Type: "image",
+							Params: []pipeline.ResourceParam{{
+								Name:  "url",
+								Value: imageName,
+							}},
+						},
+					},
+				},
+			},
+		},
+	}
+	if err := controllerutil.SetControllerReference(f, taskRun, r.scheme); err != nil {
+		return nil, err
+	}
+	return taskRun, nil
+}
+
 func (r *ReconcileJSFunction) configMapWithFunction(f *faasv1alpha1.JSFunction) (*corev1.ConfigMap, error) {
 
 	data := map[string]string{"index.js": f.Spec.Func}
@@ -238,7 +293,7 @@ func (r *ReconcileJSFunction) configMapWithFunction(f *faasv1alpha1.JSFunction)
 	return configMap, nil
 }
 
-func (r *ReconcileJSFunction) serviceForFunction(f *faasv1alpha1.JSFunction, configMapName string) (*knv1alpha1.Service, error) {
+func (r *ReconcileJSFunction) serviceForFunction(f *faasv1alpha1.JSFunction, configMapName string, imageName string) (*knv1alpha1.Service, error) {
 	service := &knv1alpha1.Service{
 		ObjectMeta: metav1.ObjectMeta{
 			Name:      f.Name,
@@ -252,7 +307,7 @@ func (r *ReconcileJSFunction) serviceForFunction(f *faasv1alpha1.JSFunction, con
 					},
 					Spec: knv1alpha1.RevisionSpec{
 						RevisionSpec: knv1beta1.RevisionSpec{
-							PodSpec: createPodSpec(f.Name, configMapName),
+							PodSpec: createPodSpec(f.Name, configMapName, imageName),
 						},
 					},
 				},
@@ -269,11 +324,11 @@ func (r *ReconcileJSFunction) serviceForFunction(f *faasv1alpha1.JSFunction, con
 	return service, nil
 }
 
-func createPodSpec(functionName, configMapName string) corev1.PodSpec {
+func createPodSpec(functionName, configMapName string, imageName string) corev1.PodSpec {
 	volumeName := fmt.Sprintf("%s-source", functionName)
 	return corev1.PodSpec{
 		Containers: []corev1.Container{{
-			Image: "docker.io/zroubalik/js-runtime",
+			Image: imageName,
 			Name:  fmt.Sprintf("nodejs-%s", functionName),
 			Ports: []corev1.ContainerPort{{
 				ContainerPort: 8080,
@@ -357,3 +412,7 @@ func (r *ReconcileJSFunction) subscriptionForFunction(f *faasv1alpha1.JSFunction
 
 	return subscription, nil
 }
+
+func runtimeImageForFunction(f *faasv1alpha1.JSFunction) string {
+	return fmt.Sprintf("image-registry.openshift-image-registry.svc:5000/%s/%s-runtime", f.Namespace, f.Name)
+}