77 lines
2.2 KiB
YAML
77 lines
2.2 KiB
YAML
|
# Task for pre-deployment validation
|
||
|
|
apiVersion: tekton.dev/v1beta1
|
||
|
|
kind: Task
|
||
|
|
metadata:
|
||
|
|
name: pre-deploy-validation
|
||
|
|
namespace: tekton-pipelines
|
||
|
|
labels:
|
||
|
|
app.kubernetes.io/name: bakery-ia-cicd
|
||
|
|
app.kubernetes.io/component: validation
|
||
|
|
spec:
|
||
|
|
workspaces:
|
||
|
|
- name: source
|
||
|
|
description: Source code workspace
|
||
|
|
params:
|
||
|
|
- name: services
|
||
|
|
type: string
|
||
|
|
description: Comma-separated list of services to validate
|
||
|
|
- name: environment
|
||
|
|
type: string
|
||
|
|
description: Target environment (staging/production)
|
||
|
|
default: "production"
|
||
|
|
results:
|
||
|
|
- name: validation-status
|
||
|
|
description: Status of validation (passed/failed)
|
||
|
|
steps:
|
||
|
|
- name: validate
|
||
|
|
image: registry.k8s.io/kustomize/kustomize:v5.3.0
|
||
|
|
script: |
|
||
|
|
#!/bin/sh
|
||
|
|
set -e
|
||
|
|
|
||
|
|
SOURCE_PATH="$(workspaces.source.path)"
|
||
|
|
SERVICES="$(params.services)"
|
||
|
|
ENVIRONMENT="$(params.environment)"
|
||
|
|
|
||
|
|
echo "============================================"
|
||
|
|
echo "Pre-Deployment Validation"
|
||
|
|
echo "============================================"
|
||
|
|
echo "Environment: $ENVIRONMENT"
|
||
|
|
echo "Services: $SERVICES"
|
||
|
|
echo "============================================"
|
||
|
|
|
||
|
|
cd "$SOURCE_PATH"
|
||
|
|
|
||
|
|
# Validate kustomization can be built
|
||
|
|
KUSTOMIZE_DIR="infrastructure/environments/$ENVIRONMENT"
|
||
|
|
|
||
|
|
if [ -d "$KUSTOMIZE_DIR" ]; then
|
||
|
|
echo ""
|
||
|
|
echo "Validating kustomization..."
|
||
|
|
if kustomize build "$KUSTOMIZE_DIR" > /dev/null 2>&1; then
|
||
|
|
echo " ✓ Kustomization is valid"
|
||
|
|
else
|
||
|
|
echo " ✗ Kustomization validation failed"
|
||
|
|
echo "failed" > $(results.validation-status.path)
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Additional validation checks can be added here
|
||
|
|
# - Schema validation
|
||
|
|
# - Policy checks (OPA/Gatekeeper)
|
||
|
|
# - Security scanning
|
||
|
|
|
||
|
|
echo ""
|
||
|
|
echo "============================================"
|
||
|
|
echo "All validations passed"
|
||
|
|
echo "============================================"
|
||
|
|
echo "passed" > $(results.validation-status.path)
|
||
|
|
resources:
|
||
|
|
limits:
|
||
|
|
cpu: 500m
|
||
|
|
memory: 256Mi
|
||
|
|
requests:
|
||
|
|
cpu: 100m
|
||
|
|
memory: 128Mi
|