Merge pull request #18 from wangkuiyi/add_service_account

Add class Secret and function service_account

Author: wangkuiyi

examples/build_docker.py

@@ -29,7 +29,8 @@ def build_docker_image_from_git_source(
     url="dockerhub.com/cxwangyi/leeroy-web")
 
 
-build_docker_image_from_git_source(
-    SKAFFOLD_GIT,
-    SKAFFOLD_IMAGE_LEEROY_WEB,
-    "Dockerfile")
+with fluid.Secret(fluid.service_account("regcred")):
+    build_docker_image_from_git_source(
+        SKAFFOLD_GIT,
+        SKAFFOLD_IMAGE_LEEROY_WEB,
+        "Dockerfile")

fluid.py

@@ -104,3 +104,34 @@ def image_resource(url):
     name = _loc(2)
     dump_yaml(tekton.image_resource(name, url))
     return name
+
+
+class Secret:
+    '''Use with Python with statement to set and unset
+    tekton.SERVICE_ACCOUNT_NAME'''
+
+    def __init__(self, name):
+        self._name = name
+
+    def __enter__(self):
+        tekton.SERVICE_ACCOUNT_NAME = self._name
+        return tekton.SERVICE_ACCOUNT_NAME
+
+    def __exit__(self, typ, value, traceback):
+        tekton.SERVICE_ACCOUNT_NAME = None
+
+
+def service_account(secret):
+    '''Return a Kubernetes ServiceAccount'''
+    name = _loc(2)
+    dump_yaml({
+        "apiVersion": "v1",
+        "kind": "ServiceAccount",
+        "metadata": {
+            "name": name
+        },
+        "secrets": {
+            "name": secret
+        }
+    })
+    return name

tekton.py

@@ -86,11 +86,14 @@ def task_resource(name, typ):
     }
 
 
+SERVICE_ACCOUNT_NAME = None
+
+
 def task_run(func, args):
     '''Return a TaskRun'''
     argspec = inspect.getfullargspec(func)
     _ps, _ir, _or = task_run_params_resources(argspec, args)
-    return _obj(
+    _r = _obj(
         kind="TaskRun",
         name=k8s.safe_name(func.__name__ + "-run"),
         spec={
@@ -104,6 +107,10 @@ def task_run(func, args):
             "outputs": {
                 "resources": _or,
             }})
+    global SERVICE_ACCOUNT_NAME
+    if SERVICE_ACCOUNT_NAME is not None:
+        _r["spec"]["serviceAccountName"] = SERVICE_ACCOUNT_NAME
+    return _r
 
 
 def _obj(kind, name, spec):
@@ -169,8 +176,8 @@ def __init__(self, io, arg):
         self.url = f"$({io}s.resources.{k8s.safe_name(arg)}.url)"
 
 
-def _fake_resource(io, typ, arg):
-    return FakeGitResource(io, arg) if typ == "git" else FakeImageResource(io, arg)
+def _fake_resource(_io, _typ, arg):
+    return FakeGitResource(_io, arg) if _typ == "git" else FakeImageResource(_io, arg)
 
 
 STEPS = []  # For holding steps of a Task.
@@ -236,7 +243,3 @@ def image_resource(name, url):
     '''Return a PipelineResource of type image'''
     return _resource(name, "image", {
         "url": url})
-
-
-INPUT_RESOURCES = []
-OUTPUT_RESOURCES = []