[kots]: configure werft build command

.werft/build.ts

@@ -11,6 +11,7 @@ import { deployToPreviewEnvironment } from './jobs/build/deploy-to-preview-envir
 import { triggerIntegrationTests } from './jobs/build/trigger-integration-tests';
 import { jobConfig } from './jobs/build/job-config';
 import { typecheckWerftJobs } from './jobs/build/typecheck-werft-jobs';
+import { publishKotsUnstable } from './jobs/build/publish-kots-unstable'
 
 // Will be set once tracing has been initialized
 let werft: Werft
@@ -59,4 +60,5 @@ async function run(context: any) {
 
     await deployToPreviewEnvironment(werft, config)
     await triggerIntegrationTests(werft, config, context.Owner)
+    await publishKotsUnstable(werft, config)
 }

.werft/build.yaml

@@ -183,6 +183,16 @@ pod:
           key: segmentIOToken
     - name: JAVA_HOME
       value: /home/gitpod/.sdkman/candidates/java/current
+    - name: REPLICATED_APP
+      valueFrom:
+        secretKeyRef:
+          name: replicated
+          key: app
+    - name: REPLICATED_API_TOKEN
+      valueFrom:
+        secretKeyRef:
+          name: replicated
+          key: token
     command:
       - bash
       - -c

.werft/jobs/build/build-and-publish.ts

@@ -34,7 +34,7 @@ export async function buildAndPublish(werft: Werft, jobConfig: JobConfig) {
     if (withContrib || publishRelease) {
         exec(`leeway build --docker-build-options network=host --werft=true -c remote ${dontTest ? '--dont-test' : ''} -Dversion=${version} -DimageRepoBase=${imageRepo} contrib:all`);
     }
-    exec(`leeway build --docker-build-options network=host --werft=true -c remote ${dontTest ? '--dont-test' : ''} ${retag} --coverage-output-path=${coverageOutput} -Dversion=${version} -DremoveSources=false -DimageRepoBase=${imageRepo} -DlocalAppVersion=${localAppVersion} -DSEGMENT_IO_TOKEN=${process.env.SEGMENT_IO_TOKEN} -DnpmPublishTrigger=${publishToNpm ? Date.now() : 'false'} -DjbMarketplacePublishTrigger=${publishToJBMarketplace ? Date.now() : 'false'}`);
+    exec(`leeway build --docker-build-options network=host --werft=true -c remote ${dontTest ? '--dont-test' : ''} ${retag} --coverage-output-path=${coverageOutput} -Dversion=${version} -DremoveSources=false -DimageRepoBase=${imageRepo} -DlocalAppVersion=${localAppVersion} -DSEGMENT_IO_TOKEN=${process.env.SEGMENT_IO_TOKEN} -DREPLICATED_API_TOKEN=${process.env.REPLICATED_API_TOKEN} -DREPLICATED_APP=${process.env.REPLICATED_APP} -DnpmPublishTrigger=${publishToNpm ? Date.now() : 'false'} -DjbMarketplacePublishTrigger=${publishToJBMarketplace ? Date.now() : 'false'}`);
     if (publishRelease) {
         try {
             werft.phase("publish", "checking version semver compliance...");

.werft/jobs/build/publish-kots-unstable.ts

@@ -0,0 +1,39 @@
+import { exec } from '../../util/shell';
+import { Werft } from "../../util/werft";
+import { JobConfig } from "./job-config";
+
+const phases = {
+    PUBLISH_KOTS_UNSTABLE: 'publish kots unstable',
+};
+
+const REPLICATED_SECRET = 'replicated';
+const REPLICATED_CHANNEL = 'Unstable';
+const REPLICATED_YAML_DIR = './install/kots/manifests';
+const INSTALLER_JOB_IMAGE = 'spec.template.spec.containers[0].image';
+
+export async function publishKotsUnstable(werft: Werft, config: JobConfig) {
+    if (config.mainBuild) {
+        werft.phase(phases.PUBLISH_KOTS_UNSTABLE, 'Publish unstable release to KOTS');
+
+        const imageAndTag = exec(`yq r ${REPLICATED_YAML_DIR}/gitpod-installer-job.yaml ${INSTALLER_JOB_IMAGE}`);
+        const [image] = imageAndTag.split(':');
+
+        // Set the tag to the current version
+        exec(`yq w -i ${REPLICATED_YAML_DIR}/gitpod-installer-job.yaml ${INSTALLER_JOB_IMAGE} ${image}:${config.version}`);
+
+        const app = exec(`kubectl get secret ${REPLICATED_SECRET} --namespace werft -o jsonpath='{.data.app}' | base64 -d`);
+        const token = exec(`kubectl get secret ${REPLICATED_SECRET} --namespace werft -o jsonpath='{.data.token}' | base64 -d`);
+
+        exec(`replicated release create \
+            --lint \
+            --ensure-channel \
+            --app ${app} \
+            --token ${token} \
+            --yaml-dir ${REPLICATED_YAML_DIR} \
+            --version ${config.version} \
+            --release-notes "# ${config.version}\n\nSee [Werft job](https://werft.gitpod-dev.com/job/gitpod-build-${config.version}/logs) for notes" \
+            --promote ${REPLICATED_CHANNEL}`);
+
+        werft.done(phases.PUBLISH_KOTS_UNSTABLE);
+    }
+}

components/BUILD.yaml

@@ -13,6 +13,7 @@ packages:
       - :publish-api
       - dev:all-app
       - install/installer:docker
+      - install/kots:lint
       - components/gitpod-protocol:all
       - operations/observability/mixins:lint
   - name: docker-versions

install/kots/BUILD.yaml

@@ -0,0 +1,14 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
+packages:
+  - name: lint
+    type: generic
+    srcs:
+      - "**/*"
+    argdeps:
+      - REPLICATED_API_TOKEN
+      - REPLICATED_APP
+    config:
+      commands:
+        - ["make", "lint"]

install/kots/manifests/gitpod-certificate-secret.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: v1
 kind: Secret
 metadata:

install/kots/manifests/gitpod-certificate.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:

install/kots/manifests/gitpod-cloudsql-secret.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: v1
 kind: Secret
 metadata:

install/kots/manifests/gitpod-clusterrolebinding.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:

install/kots/manifests/gitpod-config-patch.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: v1
 kind: ConfigMap
 metadata:

install/kots/manifests/gitpod-database-secret.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: v1
 kind: Secret
 metadata:

install/kots/manifests/gitpod-installation.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 # This exists as debug information for the support bundle
 apiVersion: v1
 kind: ConfigMap

install/kots/manifests/gitpod-installer-job.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 # The installer job is where the magic happens. It generates
 # the config, installs Gitpod and then deletes itself when
 # it's finished

install/kots/manifests/gitpod-license.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: v1
 kind: Secret
 metadata:

install/kots/manifests/gitpod-registry-s3-backend.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: v1
 kind: Secret
 metadata:

install/kots/manifests/gitpod-registry-secret.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: v1
 kind: Secret
 metadata:

install/kots/manifests/gitpod-serviceaccount.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: v1
 kind: ServiceAccount
 metadata:

install/kots/manifests/gitpod-storage-azure-secret.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: v1
 kind: Secret
 metadata:

install/kots/manifests/gitpod-storage-gcp-secret.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: v1
 kind: Secret
 metadata:

install/kots/manifests/gitpod-storage-s3-secret.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: v1
 kind: Secret
 metadata:

install/kots/manifests/kots-app.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: kots.io/v1beta1
 kind: Application
 metadata:

install/kots/manifests/kots-config.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: kots.io/v1beta1
 kind: Config
 metadata:

install/kots/manifests/kots-preflight.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: troubleshoot.sh/v1beta2
 kind: Preflight
 metadata:

install/kots/manifests/kots-support-bundle.yaml

@@ -1,3 +1,6 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
 apiVersion: troubleshoot.replicated.com/v1beta1
 kind: SupportBundle
 metadata: