apiVersion: tekton.dev/v1beta1
kind: Pipeline
metadata:
  name: fetch-code-kaniko
spec:
  description: |
    fetch code and check vet .etc...
  params:
  - name: repo-url
    type: string
    description: The git repository URL to clone from.
  - name: branch-name
    type: string
    description: The git branch to clone.
  - name: version
    type: string
    description: version
  - name: image
    type: string
    description: build image
  workspaces:
  - name: shared-data
    description: |
      save code
  tasks:
  - name: fetch-repo
    taskRef:
      name: git-clone
    workspaces:
    - name: output
      workspace: shared-data
    params:
    - name: url
      value: $(params.repo-url)
    - name: revision
      value: $(params.branch-name)
  - name: kaniko
    taskRef:
      name: kaniko
    runAfter:
    - fetch-repo
    workspaces:
    - name: source
      workspace: shared-data
    params:
    - name: IMAGE
      value: $(params.image)
    - name: EXTRA_ARGS
      value:
        - --skip-tls-verify
        - --insecure
        - --skip-tls-verify-pull
        - --insecure-pull
  - name: verify-digest
    runAfter:
    - kaniko
    params:
    - name: digest
      value: $(tasks.kaniko.results.IMAGE_DIGEST)
    taskSpec:
      params:
      - name: digest
      steps:
      - name: bash
        image: ubuntu
        script: |
          echo $(params.digest)
          case .$(params.digest) in
            ".sha"*) exit 0 ;;
            *)       echo "Digest value is not correct" && exit 1 ;;
          esac
  - name: verify-url
    runAfter:
    - kaniko
    params:
    - name: url
      value: $(tasks.kaniko.results.IMAGE_URL)
    taskSpec:
      params:
      - name: url
      steps:
      - name: bash
        image: ubuntu
        script: |
          echo $(params.url)
          case .$(params.url) in
            *"/kaniko-nocode") exit 0 ;;
            *)       echo "URL value is not correct" && exit 1 ;;
          esac      
---
apiVersion: tekton.dev/v1beta1
kind: PipelineRun
metadata:
  name: fetch-code-kaniko
spec:
  serviceAccountName: build-bot
  pipelineRef:
    name: fetch-code-kaniko
  podTemplate:
    securityContext:
      fsGroup: 65532
  workspaces:
  - name: shared-data
    volumeClaimTemplate:
      spec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 1Gi
  params:
  - name: repo-url
    value: git@host.docker.internal:root/mashibing-deployment.git
  - name: branch-name
    value: master
  - name: version
    value: "v0.0.1"
  - name: image
    value: kind-registry:5000/msbdeployment-controller