Typed supply chains (ClusterSourceSupplyChain, ClusterImageSupplyChain, ClusterConfigSupplyChain)

00-gitops-sc.yml

apiVersion: carto.run/v1alpha1
kind: ClusterSourceSupplyChain
metadata:
  name: gitops-supply-chain
spec:
  selector:
    matchLabels:
      workload-type: web
    matchFields:
    - {key: ".spec.target", operation: In, value: ["gitops"]}

    - name: configure
      templateRef:
        kind: ClusterConfigSupplyChain
        name: configure-builder

    - name: gitops
      templateRef:
        kind: ClusterSourceTemplate
        name: git-pusher
      configs:
        - resource: configure
          name: config

00-regops-sc.yml

apiVersion: carto.run/v1alpha1
kind: ClusterImageSupplyChain
metadata:
  name: regops-supply-chain
spec:
  selector:
    matchLabels:
      workload-type: web
    matchFields:
    - {key: ".spec.target", operation: In, value: ["regops"]}

    - name: configure
      templateRef:
        kind: ClusterConfigSupplyChain
        name: configure-builder

    - name: regops
      templateRef:
        kind: ClusterImageTemplate
        name: registry-pusher
      configs:
        - resource: configure
          name: config

02-config-sc.yml

apiVersion: carto.run/v1alpha1
kind: ClusterConfigSupplyChain
metadata:
  name: config-builder
spec:
  selector:
    matchLabels:
      workload-type: web
      
  configPath: configure.config

  resources:
    - name: image-provider
      options:
        - name: build-from-source
          templateRef:
            kind: ClusterImageSupplyChain
            name: image-builder
          selector:
            matchFields:
            - { key: "spec.source", operation: exists }
        - name: prebuilt
          templateRef:
            kind: ClusterImageTemplate
            name: image-source
          selector:
            matchFields:
            - { key: "spec.image", operation: exists }


    - name: configure
      templateRef:
        kind: ClusterConfigTemplate
        name: configure
      images:
        - resource: image-provider
          name: image

03-image-sc.yml

apiVersion: carto.run/v1alpha1
kind: ClusterImageSupplyChain
metadata:
  name: image-builder
spec:
  params:
    - name: image_prefix
      default: some-default-prefix-

  imagePath: build-image.image

  resources:
  - name: git-source
    options:
    - name: from-source-and-test
      templateRef:
        kind: ClusterSourceSupplyChain
        name: source-and-test
      selector:
        matchFields:
        - {key: "metadata.labels.has-tests", operation: In, value: ["true"]}

    - name: from-source
      templateRef:
        kind: ClusterSourceTemplate
        name: source
      selector:
        matchFields:
        - {key: "metadata.labels.has-tests", operation: In, value: ["true"]}

  - name: build-image
    templateRef:
        kind: ClusterImageTemplate
        name: image

04-source-sc.yml

apiVersion: carto.run/v1alpha1
kind: ClusterSourceSupplyChain
metadata:
  name: source-and-test
spec:
  urlPath: source-tester.status.artifact.url
  revisionPath: source-tester.status.artifact.revision

  resources:
  - name: git-source
      templateRef:
        kind: ClusterSourceTemplate
        name: source

  - name: source-tester
      templateRef:
        kind: ClusterSourceTemplate
        name: source-test

05-source-tmpl.yml

apiVersion: carto.run/v1alpha1
kind: ClusterSourceTemplate
metadata:
  name: source
spec:
  urlPath: .status.artifact.url
  revisionPath: .status.artifact.revision

  template:
    apiVersion: source.toolkit.fluxcd.io/v1beta1
    kind: GitRepository
    metadata:
      name: $(workload.metadata.name)$
    spec:
      interval: 1m0s
      url: $(workload.spec.source.git.url)$
      ref: $(workload.spec.source.git.ref)$
      gitImplementation: libgit2
      ignore: ""

06-test-tmpl.yml

apiVersion: carto.run/v1alpha1
kind: ClusterSourceTemplate
metadata:
  name: source-test
spec:
  urlPath: .status.outputs.url
  revisionPath: .status.outputs.revision

  ytt:
      #@ load("@ytt:data", "data")

      apiVersion: carto.run/v1alpha1
      kind: Runnable
      metadata:
        name: #@ data.values.workload.metadata.name
      spec:
        #@ if/end hasattr(data.values.workload.spec, "serviceAccountName"):
        serviceAccountName: #@ data.values.workload.spec.serviceAccountName

        runTemplateRef:
          name: tekton-source-pipelinerun
          kind: ClusterRunTemplate

        selector:
          resource:
            apiVersion: tekton.dev/v1beta1
            kind: Pipeline
          matchingLabels:
            apps.tanzu.vmware.com/pipeline: test

        inputs:
          source-url: #@ data.values.source.url
          source-revision: #@ data.values.source.revision

07-image-tmpl.yml

apiVersion: carto.run/v1alpha1
kind: ClusterImageTemplate
metadata:
  name: image
spec:
  imagePath: .status.latestImage

  template:
      apiVersion: kpack.io/v1alpha2
      kind: Image
      metadata:
        name: $(workload.metadata.name)$
      spec:
        tag: $(params.image_prefix)$$(workload.metadata.name)$
        serviceAccountName: cartographer-example-registry-creds-sa
        builder:
          kind: ClusterBuilder
          name: go-builder
        source:
          blob:
            url: $(sources.source.url)$
        build:
          env: $(workload.spec.build.env)$