Make global lock ConfigMap removable (#1530)

In the current setup the `nativelink-image-tags` configmap acts as a
global lock for the nativelink kustomization. This means that it's not
possible to change toolchain configurations after the fact.

This change makes the config map name configurable to allow for setups
that need more flexibility, such as multi-toolchain setups or setups
where worker types change over time.

kubernetes/components/operator/flux-config.yaml

@@ -34,6 +34,7 @@ spec:
     name: nativelink-webhook
   eventMetadata:
     flakeOutput: github:TraceMachina/nativelink#image
+    configMapName: nativelink-image-tags
 ---
 apiVersion: notification.toolkit.fluxcd.io/v1beta3
 kind: Alert
@@ -50,6 +51,7 @@ spec:
     name: nativelink-webhook
   eventMetadata:
     flakeOutput: github:TraceMachina/nativelink#nativelink-worker-init
+    configMapName: nativelink-image-tags
 ---
 apiVersion: notification.toolkit.fluxcd.io/v1beta3
 kind: Alert
@@ -66,6 +68,7 @@ spec:
     name: nativelink-webhook
   eventMetadata:
     flakeOutput: "PLACEHOLDER_NATIVELINK_WORKER"
+    configMapName: nativelink-image-tags
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -117,7 +120,7 @@ metadata:
   namespace: default
 spec:
   interval: 2m
-  path: "./kubernetes/components/tekton-resources"
+  path: "./kubernetes/resources/tekton"
   prune: true
   force: true
   retryInterval: 20s

kubernetes/components/tekton-resources/kustomization.yaml → kubernetes/resources/tekton/kustomization.yaml

@@ -1,6 +1,6 @@
 ---
-apiVersion: kustomize.config.k8s.io/v1alpha1
-kind: Component
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
 
 resources:
   - cosign-verify.yaml

kubernetes/components/tekton-resources/rebuild-nativelink.yaml → kubernetes/resources/tekton/rebuild-nativelink.yaml

@@ -26,6 +26,13 @@ spec:
             image.
           - "github:<user>/<repo>?ref=pull/<PR_NUMBER>/head#<PACKAGE>" to use
             an image from a pull request of a repository on GitHub.
+    - name: configMapName
+      type: string
+      description: |
+        The name of the ConfigMap that we write the image tag to.
+
+        Other parts of the cluster may refer to this configmap to get the
+        pre-evaluated tag of the image.
     - name: registry
       type: string
       description: |
@@ -172,6 +179,8 @@ spec:
           value: "$(tasks.get-image-info.results.imageName)"
         - name: imageTag
           value: "$(tasks.get-image-info.results.imageTag)"
+        - name: configMapName
+          value: "$(params.configMapName)"
       runAfter:
         - copy-verified-prebuilt-image
         - copy-nix-built-image

kubernetes/components/tekton-resources/trigger.yaml → kubernetes/resources/tekton/trigger.yaml

@@ -53,6 +53,12 @@ spec:
             image.
           - "github:<user>/<repo>?ref=pull/<PR_NUMBER>/head#<PACKAGE>" to use
             an image from a pull request of a repository on GitHub.
+    - name: configMapName
+      description: |
+        The name of the ConfigMap that we write the image tag to.
+
+        Other parts of the cluster may refer to this configmap to get the
+        pre-evaluated tag of the image.
   resourcetemplates:
     - apiVersion: tekton.dev/v1beta1
       kind: PipelineRun
@@ -76,6 +82,8 @@ spec:
         params:
           - name: flakeOutput
             value: "$(tt.params.flakeOutput)"
+          - name: configMapName
+            value: "$(tt.params.configMapName)"
           - name: registry
             value: "kind-registry:5000"
           - name: destTLSverify
@@ -91,6 +99,8 @@ spec:
   params:
     - name: flakeOutput
       value: "$(body.metadata.flakeOutput)"
+    - name: configMapName
+      value: "$(body.metadata.configMapName)"
 ---
 apiVersion: v1
 kind: ServiceAccount

kubernetes/components/tekton-resources/update-image-tags.yaml → kubernetes/resources/tekton/update-image-tags.yaml

@@ -14,12 +14,13 @@ spec:
   params:
     - name: imageName
     - name: imageTag
+    - name: configMapName
   steps:
     - name: update-configmap
       image: bitnami/kubectl
       env:
         - name: CM_NAME
-          value: "nativelink-image-tags"
+          value: "$(params.configMapName)"
       script: |
         #!/bin/bash
         set -e