etcd backup and tekton

Author: fmeng

etcd/install-ha-etcd.MD

@@ -39,3 +39,16 @@ mv certs /tmp/etcd-certs
 ./start-infra1.sh
 ./start-infra0.sh
 ```
+### backup
+```
+etcdctl --endpoints https://127.0.0.1:3379 --cert /tmp/etcd-certs/certs/127.0.0.1.pem --key /tmp/etcd-certs/certs/127.0.0.1-key.pem --cacert /tmp/etcd-certs/certs/ca.pem snapshot save snapshot.db
+```
+### delete data
+```
+kill process of infra0 infra1 infra2
+```
+```
+rm -rf /tmp/etcd
+```
+### restore
+

etcd/restore.sh

@@ -0,0 +1,21 @@
+export ETCDCTL_API=3
+etcdctl snapshot restore snapshot.db \
+  --name infra0 \
+  --data-dir=/tmp/etcd/infra0 \
+  --initial-cluster infra0=http://127.0.0.1:3380,infra1=http://127.0.0.1:4380,infra2=http://127.0.0.1:5380 \
+  --initial-cluster-token etcd-cluster-1 \
+  --initial-advertise-peer-urls http://127.0.0.1:3380
+
+etcdctl snapshot restore snapshot.db \
+  --name infra1 \
+  --data-dir=/tmp/etcd/infra1 \
+  --initial-cluster infra0=http://127.0.0.1:3380,infra1=http://127.0.0.1:4380,infra2=http://127.0.0.1:5380 \
+  --initial-cluster-token etcd-cluster-1 \
+  --initial-advertise-peer-urls http://127.0.0.1:4380
+
+etcdctl snapshot restore snapshot.db \
+  --name infra2 \
+  --data-dir=/tmp/etcd/infra2 \
+  --initial-cluster infra0=http://127.0.0.1:3380,infra1=http://127.0.0.1:4380,infra2=http://127.0.0.1:5380 \
+  --initial-cluster-token etcd-cluster-1 \
+  --initial-advertise-peer-urls http://127.0.0.1:5380

tekton/git-tasks.yaml

@@ -0,0 +1,47 @@
+apiVersion: tekton.dev/v1beta1
+kind: Task
+metadata:
+  name: github-build
+spec:
+  params:
+  - name: IMAGE
+    description: Name (reference) of the image to build.
+    default: cncamp/httpserver:v1.0
+  - name: DOCKERFILE
+    description: Path to the Dockerfile to build.
+    default: ./httpserver/Dockerfile
+  resources:
+    inputs:
+    - name: repo
+      type: git
+  steps:
+  - name: gthub-build
+    image: cncamp/executor
+    workingDir: /workspace/repo
+    args:
+    - "--dockerfile=./httpserver/Dockerfile"
+    - "--context=./httpserver"
+    - "--destination=cncamp/httpserver:v1.0"
+  workspaces:
+  - name: dockerconfig
+    description: Includes a docker `config.json`
+    optional: true
+    mountPath: /kaniko/.docker
+---
+apiVersion: tekton.dev/v1beta1
+kind: TaskRun
+metadata:
+  name: github-build
+spec:
+  serviceAccountName: cncamp-sa
+  taskRef:
+    name: github-build
+  resources:
+    inputs:
+    - name: repo
+      resourceRef:
+        name: cncamp-golang
+  workspaces:
+  - name: dockerconfig
+    secret:
+      secretName: docker-auth

tekton/github-resource.yaml

@@ -0,0 +1,74 @@
+apiVersion: tekton.dev/v1alpha1
+kind: PipelineResource
+metadata:
+  name: cncamp-golang
+spec:
+  type: git
+  params:
+    - name: url
+      value: https://github.com/cncamp/golang.git
+    - name: revision
+      value: master
+  secrets:
+    - fieldName: authToken
+      secretName: github-secrets
+      secretKey: token
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: github-secrets
+type: Opaque
+data:
+  token: changeme # in base64 encoded form
+---
+apiVersion: tekton.dev/v1alpha1
+kind: PipelineResource
+metadata:
+  name: cncamp-test-image
+spec:
+  type: image
+  params:
+    - name: url
+      value: cncamp/test
+---
+apiVersion: tekton.dev/v1alpha1
+kind: PipelineResource
+metadata:
+  name: test-cluster
+spec:
+  type: cluster
+  params:
+    - name: url
+      value: https://192.168.34.2:6443
+    - name: username
+      value: kubernetes-admin
+  secrets:
+    - fieldName: token
+      secretKey: tokenKey
+      secretName: target-cluster-secrets
+    - fieldName: cadata
+      secretKey: cadataKey
+      secretName: target-cluster-secrets
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: docker-auth
+type: Opaque
+stringData: 
+  config.json: |-
+    {
+      "auths": {
+        "https://index.docker.io/v1/": {
+          "auth": "changeme"
+        }
+      }
+    }
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: cncamp-sa
+secrets:
+- name: docker-auth

tekton/readme.MD

@@ -0,0 +1,10 @@
+### setup tekton
+```
+kubectl apply --filename https://github.com/cncamp/mirror/blob/master/tekton-spec/release.yaml
+```
+### setup tekton cli tkn
+```
+curl -LO https://github.com/tektoncd/cli/releases/download/v0.20.0/tektoncd-cli-0.20.0_Linux-64bit.deb
+sudo dpkg -i ./tektoncd-cli-0.20.0_Linux-64bit.deb
+which tkn
+```

tekton/task-hello.yaml

@@ -0,0 +1,15 @@
+apiVersion: tekton.dev/v1beta1
+kind: Task
+metadata:
+  name: hello
+spec:
+  steps:
+    - name: hello
+      image: ubuntu
+      command:
+        - echo
+      args:
+        - "Hello $(params.username)!"
+  params:
+  - name: username
+    type: string

tekton/taskrun-hello.yaml

@@ -0,0 +1,10 @@
+apiVersion: tekton.dev/v1beta1
+kind: TaskRun
+metadata:
+  generateName: hello-run-
+spec:
+  taskRef:
+    name: hello
+  params:
+  - name: "username"
+    value: "jesse"