bug-automation: add automation to redeploy on changes in github

Dockerfiles/Dockerfile.bug-automation

@@ -0,0 +1,23 @@
+FROM registry.access.redhat.com/ubi8/go-toolset AS builder
+ENV CMD=bug-automation
+ENV GOPATH=/go
+ENV PROJECT=${GOPATH}/src/github.com/openshift/bugzilla-tools/
+ENV CMDBASE=cmd/${CMD}/
+ENV CMDDIR=${PROJECT}/${CMDBASE}/
+
+COPY . ${PROJECT}
+WORKDIR ${CMDDIR}
+RUN make build
+
+FROM registry.access.redhat.com/ubi8/ubi-minimal
+ENV CMD=bug-automation
+ENV GOPATH=/go
+ENV PROJECT=${GOPATH}/src/github.com/openshift/bugzilla-tools/
+ENV CMDBASE=cmd/${CMD}/
+ENV CMDDIR=${PROJECT}/${CMDBASE}/
+
+RUN microdnf update -y && microdnf clean all
+COPY --from=builder ${CMDDIR}/${CMD} /${CMD}
+RUN chmod +x /${CMD}
+COPY --from=builder ${CMDDIR}/operations/ operations/
+CMD /${CMD} --bugzilla-key=/etc/bugzilla/bugzillaKey

README.md

@@ -2,6 +2,27 @@
 
 Assorted tooling for monitoring and manipulating [Bugzilla](https://bugzilla.redhat.com) bugs for the OpenShift project.
 
+### Repo Layout
+
+The repo is a collection of tools and shared libraries. Each tool lives in cmd/* and shared code in pkg/*
+
+Most tools have 2 Dockerfiles.
+1 in cmd/*/Dockerfile
+1 in Dockerfiles/Dockerfile.*
+
+The one in cmd/*/Dockerfile is just for local testing and building.
+The one in Dockerfiles/Dockerfile.* is used to build on cluster - the reason it isn't used for local building is because it does a cp of the whole repo into the build container, which is slow.
+
+Most tools have a cmd/*/manifests/   (or cmd/*/deploment if it is old) which have the kube objects which run the tool on top of OpenShift. These are applied manually using oc apply -f. There is no automation to apply these changes.
+
+### Adding automation to automatically run new tools
+
+A reasonable example of adding new automation so that changes to a command are automatically applied when updated in github can be found here https://github.com/openshift/bugzilla-tools/pull/42/files
+
+This adds an imagestream, a buildconfig, and a 'git-build-watcher'. The git-build-watcher is the magic. Since the cluster is not reachable by github we need to poll instead of get notification froma webhook. That magic polls github and forced a buildconfig to run when github has changed since the last successful build.
+
+Most tools are deployments, not cronjobs, and thus they need a trigger to restart after a build. Pull 42 is using a cronjob so that is not present.
+
 License
 -------
 

cmd/bug-automation/manifests/bug-automation.buildconfig.yml

@@ -0,0 +1,39 @@
+kind: BuildConfig
+apiVersion: build.openshift.io/v1
+metadata:
+  annotations:
+    app.openshift.io/vcs-ref: main
+    app.openshift.io/vcs-uri: 'https://github.com/openshift/bugzilla-tools.git'
+  name: bug-automation
+  labels:
+    app: bug-automation
+    app.kubernetes.io/component: bug-automation
+    app.kubernetes.io/instance: bug-automation
+    app.kubernetes.io/part-of: openshift-bugzilla-tools
+spec:
+  output:
+    to:
+      kind: ImageStreamTag
+      name: 'bug-automation:latest'
+  strategy:
+    type: Docker
+    dockerStrategy:
+      dockerfilePath: Dockerfiles/Dockerfile.bug-automation
+  source:
+    type: Git
+    git:
+      uri: 'https://github.com/openshift/bugzilla-tools.git'
+      ref: main
+    contextDir: /
+  triggers:
+    - type: ConfigChange
+  resources:
+    requests:
+      cpu: '1'
+      memory: 2G
+    limits:
+      cpu: '1.5'
+      memory: 2G
+  runPolicy: Serial
+  successfulBuildsHistoryLimit: 1
+  failedBuildsHistoryLimit: 1

cmd/bug-automation/deployment/bug-automation.cronjob.yml → cmd/bug-automation/manifests/bug-automation.cronjob.yml

@@ -20,7 +20,7 @@ spec:
                 defaultMode: 420
           containers:
             - name: bug-automation
-              image: 'quay.io/eparis/bug-automation:latest'
+              image: image-registry.openshift-image-registry.svc:5000/ocp-eng-architects/bug-automation:latest
               resources: {}
               volumeMounts:
                 - name: bugzilla-api-key

cmd/bug-automation/manifests/bug-automation.imagestream.yml

@@ -0,0 +1,9 @@
+apiVersion: image.openshift.io/v1
+kind: ImageStream
+metadata:
+  name: bug-automation
+  labels:
+    app: bug-automation
+    app.kubernetes.io/component: bug-automation
+    app.kubernetes.io/instance: bug-automation
+    app.kubernetes.io/part-of: openshift-bugzilla-tools

cmd/bug-automation/manifests/git-build-watcher.cronjob.yml

@@ -0,0 +1,50 @@
+kind: CronJob
+apiVersion: batch/v1beta1
+metadata:
+  name: bug-automation-git-build-watcher
+  annotations:
+    app.openshift.io/vcs-ref: master
+    app.openshift.io/vcs-uri: 'https://github.com/openshift/bugzilla-tools.git'
+    image.openshift.io/triggers: >-
+      [{"from":{"kind":"ImageStreamTag","name":"git-build-watcher:latest","namespace":"ocp-eng-architects"},"fieldPath":"spec.template.spec.containers[?(@.name==\"bug-automation-git-build-watcher\")].image","pause":"false"}]
+  labels:
+    app: bug-automation-git-build-watcher
+    app.kubernetes.io/component: bug-automation-git-build-watcher
+    app.kubernetes.io/instance: bug-automation-git-build-watcher
+    app.kubernetes.io/part-of: openshift-bugzilla-tools
+spec:
+  concurrencyPolicy: Forbid
+  schedule: '*/5 * * * *'
+  startingDeadlineSeconds: 3600
+  jobTemplate:
+    metadata:
+      labels:
+        app: bug-automation-git-build-watcher
+        app.kubernetes.io/component: bug-automation-git-build-watcher
+        app.kubernetes.io/instance: bug-automation-git-build-watcher
+        app.kubernetes.io/part-of: openshift-bugzilla-tools
+    spec:
+      template:
+        spec:
+          containers:
+            - name: bug-automation-git-build-watcher
+              image: image-registry.openshift-image-registry.svc:5000/ocp-eng-architects/git-build-watcher:latest
+              command:
+                - /git-build-watcher
+                - -v=2
+                - bug-automation
+              resources:
+                requests:
+                  memory: "50Mi"
+                  cpu: "10m"
+                limits:
+                  memory: "50Mi"
+                  cpu: "10m"
+              resources: {}
+              terminationMessagePath: /dev/termination-log
+              terminationMessagePolicy: File
+              imagePullPolicy: Always
+          restartPolicy: OnFailure
+          serviceAccountName: git-build-watcher
+  successfulJobsHistoryLimit: 1
+  failedJobsHistoryLimit: 1

cmd/bug-automation/manifests/git-build-watcher.role.yml

@@ -0,0 +1 @@
+../../../manifests/git-build-watcher.role.yml