fix: 恢复 production PaC 源制品

.tekton/hwlab-nc01-production-pac.yaml

@@ -0,0 +1,86 @@
+apiVersion: tekton.dev/v1
+kind: PipelineRun
+metadata:
+  generateName: hwlab-nc01-production-ci-poll-
+  namespace: hwlab-ci
+  annotations:
+    pipelinesascode.tekton.dev/on-event: "[push]"
+    pipelinesascode.tekton.dev/on-target-branch: "[release]"
+    pipelinesascode.tekton.dev/on-cel-expression: "event == 'push' && target_branch == 'release' && node == 'NC01'"
+    pipelinesascode.tekton.dev/max-keep-runs: "8"
+    unidesk.ai/owning-config-ref: "config/hwlab-node-lanes.yaml#lanes.production.targets.NC01"
+    unidesk.ai/effective-config-sha256: sha256:a71f183931dc6eb1d70d20cf1db157ba969b59853ed58917142d98dae2477fbf
+    unidesk.ai/source-artifact-renderer: hwlab-runtime-lane
+    unidesk.ai/source-artifact-mode: remote-pipeline-annotation
+    pipelinesascode.tekton.dev/pipeline: ci/pipelines/hwlab-nc01-production-ci-image-publish.yaml
+    hwlab.pikastech.local/ci-contract: tekton-native-primitive-tasks
+    hwlab.pikastech.local/download-profile: jd01-node-default
+    hwlab.pikastech.local/gitops-branch: release-gitops
+    hwlab.pikastech.local/network-profile: jd01-node-ci-egress
+    hwlab.pikastech.local/node: NC01
+    hwlab.pikastech.local/policy: native-per-service-taskrun-image-publish
+    hwlab.pikastech.local/runtime-path: deploy/gitops/node/nc01/runtime-production
+    hwlab.pikastech.local/source-branch: release
+    hwlab.pikastech.local/source-config: .tekton/hwlab-nc01-production-pac.yaml
+  labels:
+    app.kubernetes.io/name: hwlab-nc01-production-pac
+    app.kubernetes.io/part-of: hwlab
+    unidesk.ai/source-commit: "{{ revision }}"
+    hwlab.pikastech.local/gitops-target: production
+    hwlab.pikastech.local/source-commit: "{{ revision }}"
+    hwlab.pikastech.local/trigger: pipelines-as-code
+spec:
+  timeouts:
+    pipeline: 1h0m0s
+  taskRunTemplate:
+    serviceAccountName: "{{ service_account }}"
+    podTemplate:
+      hostNetwork: true
+      dnsPolicy: ClusterFirstWithHostNet
+      securityContext:
+        fsGroup: 1000
+  pipelineRef:
+    name: hwlab-nc01-production-ci-image-publish
+  workspaces:
+    - name: source
+      volumeClaimTemplate:
+        spec:
+          accessModes:
+            - ReadWriteOnce
+          resources:
+            requests:
+              storage: 8Gi
+    - name: git-ssh
+      secret:
+        secretName: hwlab-git-ssh
+  params:
+    - name: git-url
+      value: "{{ repo_url }}"
+    - name: git-read-url
+      value: "{{ git_read_url }}"
+    - name: git-write-url
+      value: "{{ git_write_url }}"
+    - name: source-branch
+      value: "{{ source_branch }}"
+    - name: gitops-branch
+      value: "{{ gitops_branch }}"
+    - name: lane
+      value: "{{ lane }}"
+    - name: catalog-path
+      value: deploy/artifact-catalog.nc01-production.json
+    - name: image-tag-mode
+      value: full
+    - name: runtime-path
+      value: deploy/gitops/node/nc01/runtime-production
+    - name: revision
+      value: "{{ revision }}"
+    - name: registry-prefix
+      value: 127.0.0.1:5000/hwlab
+    - name: services
+      value: "hwlab-cloud-api,hwlab-workbench-runtime,hwlab-user-billing,hwlab-project-management,hwlab-cloud-web,hwlab-gateway,hwlab-edge-proxy,hwlab-agent-skills"
+    - name: base-image
+      value: 127.0.0.1:5000/hwlab/hwlab-node20-base:20-bookworm-slim
+    - name: build-cache-mode
+      value: registry
+    - name: runtime-ready-timeout-ms
+      value: "60000"