react-gitops-release.yaml

apiVersion: openchoreo.dev/v1alpha1
kind: Workflow
metadata:
  name: react-gitops-release
  namespace: default
  annotations:
    openchoreo.dev/description: "React workflow that builds a web application container image and performs GitOps release in a single workflow"
spec:
  # Template Variable Reference (processed by controller):
  # ${metadata.workflowRunName}  - WorkflowRun CR name
  # ${metadata.namespace}    - Enforced workflow namespace (workflows-<namespaceName>)
  # ${parameters.*}              - Developer-provided values from parameters schema

  # Schema definition for component workflows
  parameters:
    openAPIV3Schema:
      type: object
      required:
        - componentName
        - projectName
        - repository
      properties:
        componentName:
          type: string
          description: "Component name"
        projectName:
          type: string
          description: "Project name"
        repository:
          type: object
          required:
            - url
          properties:
            url:
              type: string
              description: "Git repository URL"
            revision:
              type: object
              required:
                - commit
              properties:
                branch:
                  type: string
                  default: main
                  description: "Git branch to checkout"
                commit:
                  type: string
                  description: "Git commit SHA or reference (optional, defaults to latest)"
            appPath:
              type: string
              default: "."
              description: "Path to the React application directory within the repository"
        react:
          type: object
          properties:
            nodeVersion:
              type: string
              default: "18"
              enum:
                - "16"
                - "18"
                - "20"
                - "22"
              description: "Node.js version to use for building the React application"
            buildCommand:
              type: string
              default: "npm run build"
              description: "Command to build the React application"
            outputDir:
              type: string
              default: "build"
              description: "Build output directory (e.g., build, dist)"
        workloadDescriptorPath:
          type: string
          default: workload.yaml
          description: "Path to workload descriptor file relative to appPath"

  # Rendered workflow resource for WorkflowRun executions
  runTemplate:
    apiVersion: argoproj.io/v1alpha1
    kind: Workflow
    metadata:
      name: ${metadata.workflowRunName}
      namespace: ${metadata.namespace}
    spec:
      arguments:
        parameters:
          - name: component-name
            value: ${parameters.componentName}
          - name: project-name
            value: ${parameters.projectName}
          - name: namespace-name
            value: ${metadata.namespaceName}
          # Source repository parameters
          - name: git-repo
            value: ${parameters.repository.url}
          - name: branch
            value: ${parameters.repository.revision.branch}
          - name: commit
            value: ${parameters.repository.revision.commit}
          - name: app-path
            value: ${parameters.repository.appPath}
          # React parameters
          - name: node-version
            value: ${parameters.react.nodeVersion}
          - name: build-command
            value: ${parameters.react.buildCommand}
          - name: output-dir
            value: ${parameters.react.outputDir}
          # PE-controlled hardcoded parameters
          - name: gitops-repo-url
            value: https://github.com/openchoreo/sample-gitops # Replace with your gitops repository URL
          - name: gitops-branch
            value: main
          # GitOps git secret (for private repos and PR creation)
          - name: gitops-git-secret
            value: ${metadata.workflowRunName}-gitops-git-secret
          - name: workload-descriptor-path
            value: ${parameters.workloadDescriptorPath}
          # PE-controlled hardcoded parameters
          - name: registry-url
            value: host.k3d.internal:10082
          - name: image-name
            value: ${parameters.projectName}-${parameters.componentName}-image
          - name: image-tag
            value: v1
          # Source git secret (for private repos)
          - name: source-git-secret
            value: ${metadata.workflowRunName}-source-git-secret
      serviceAccountName: workflow-sa
      workflowTemplateRef:
        clusterScope: true
        name: react-gitops-release
  # External secrets for accessing private repositories
  resources:
    - id: source-git-secret
      template:
        apiVersion: external-secrets.io/v1
        kind: ExternalSecret
        metadata:
          name: ${metadata.workflowRunName}-source-git-secret
          namespace: ${metadata.namespace}
        spec:
          refreshInterval: 15s
          secretStoreRef:
            name: default
            kind: ClusterSecretStore
          target:
            name: ${metadata.workflowRunName}-source-git-secret
            creationPolicy: Owner
          data:
            - secretKey: git-token
              remoteRef:
                key: git-token
                property: git-token
    - id: gitops-git-secret
      template:
        apiVersion: external-secrets.io/v1
        kind: ExternalSecret
        metadata:
          name: ${metadata.workflowRunName}-gitops-git-secret
          namespace: ${metadata.namespace}
        spec:
          refreshInterval: 15s
          secretStoreRef:
            name: default
            kind: ClusterSecretStore
          target:
            name: ${metadata.workflowRunName}-gitops-git-secret
            creationPolicy: Owner
          data:
            - secretKey: git-token
              remoteRef:
                key: gitops-token
                property: git-token