fix(apps/prod/tekton): fix issue of event listener issue

Also refactored the ingress to a special dir `ingress`.
Ref: https://fluxcd.io/flux/components/kustomize/kustomization/#post-build-variable-substitution

Signed-off-by: wuhuizuo <wuhuizuo@126.com>

apps/prod/tekton/configs.yaml

@@ -24,8 +24,3 @@ spec:
           value:
             scheduler.alpha.kubernetes.io/defaultTolerations: '[{"operator": "Equal", "effect": "NoSchedule", "key": "dedicated", "value": "test-infra"}]'
             scheduler.alpha.kubernetes.io/node-selector: enable-ci=true
-  postBuild:
-    substituteFrom:
-      - kind: Secret
-        name: tekton-ingress # should manual created in namespace `apps`
-        optional: true

apps/prod/tekton/configs/triggers/event-listeners/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - rbac.yaml
+  - event-listener.yaml

apps/prod/tekton/configs/triggers/rbac.yaml → apps/prod/tekton/configs/triggers/event-listeners/rbac.yaml

@@ -27,31 +27,4 @@ roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: tekton-triggers-eventlistener-clusterroles # created by tekton operator
----
-# custom rights
-kind: Role
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: k8s-pod-full
-rules:
-  - apiGroups:
-      - ""
-    resources:
-      - pods
-    verbs:
-      - delete
-      - list
-      - get
-      - watch
-      - create
-      - patch
 
----
-kind: RoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: k8s-pod-full
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: k8s-pod-full

apps/prod/tekton/configs/triggers/kustomization.yaml

@@ -6,5 +6,4 @@ resources:
   - bindings
   - triggers
   - rbac.yaml
-  - event-listener.yaml
-  - ingress-event-listener.yaml
+  - event-listeners

apps/prod/tekton/configs/triggers/templates/public.yaml

@@ -8,7 +8,7 @@ spec:
       description: The git repository full url
     - name: git-revision
       description: The git revision
-      default: main  
+      default: main
   resourcetemplates:
     - apiVersion: tekton.dev/v1beta1
       kind: PipelineRun
@@ -18,7 +18,7 @@ spec:
           "tekton.dev/git-status": "true"
           "tekton.dev/status-context": "demo-pipeline1"
           "tekton.dev/status-description": "demo pipeline forwarded by prow"
-          "tekton.dev/status-target-url": "https://dashboard.tekton.pingcap.net/#/namespaces/{{ .Namespace }}/pipelineruns/{{ .Name }}"
+          "tekton.dev/status-target-url": "https://do.pingcap.net/tekton/#/namespaces/{{ .Namespace }}/pipelineruns/{{ .Name }}"
           "tekton.dev/git-repo": $(tt.params.git-url)
           "tekton.dev/git-revision": $(tt.params.git-revision)
       spec:

apps/prod/tekton/ingress.yaml

@@ -0,0 +1,24 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: tekton-ingress
+  namespace: apps
+spec:
+  interval: 1m0s
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+    namespace: flux-system
+  path: ./apps/prod/tekton/ingress
+  dependsOn:
+    - name: tekton-setup
+      namespace: apps
+    - name: tekton-configs
+      namespace: apps
+  prune: true
+  postBuild:
+    substituteFrom:
+      - kind: Secret
+        name: tekton-ingress # should manual created in namespace `apps`
+        optional: true

apps/prod/tekton/setup/ingress-dashboard.yaml → apps/prod/tekton/ingress/ingress-dashboard.yaml

@@ -25,3 +25,4 @@ spec:
                 name: tekton-dashboard
                 port:
                   name: http
+

apps/prod/tekton/configs/triggers/ingress-event-listener.yaml → apps/prod/tekton/ingress/ingress-event-listener.yaml

@@ -3,6 +3,7 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: trigger-groups-listener
+  namespace: ee-cd
   annotations:
     nginx.ingress.kubernetes.io/rewrite-target: /$2
 spec:
@@ -12,7 +13,7 @@ spec:
       http:
         paths:
           - pathType: Prefix
-            path: "(/|$)(.*)"
+            path: "${path_for_hook}(/|$)(.*)"
             backend:
               service:
                 name: el-trigger-groups-listener

apps/prod/tekton/ingress/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ingress-dashboard.yaml
+- ingress-event-listener.yaml

apps/prod/tekton/kustomization.yaml

@@ -3,3 +3,4 @@ kind: Kustomization
 resources:
   - setup.yaml
   - configs.yaml
+  - ingress.yaml

apps/prod/tekton/setup.yaml

@@ -55,9 +55,4 @@ spec:
       kind: Deployment
       name: tekton-dashboard
       namespace: tekton-pipelines
-  postBuild:
-    substituteFrom:
-      - kind: Secret
-        name: tekton-ingress # should manual created in namespace `apps`
-        optional: true
   timeout: 5m0s

apps/prod/tekton/setup/kustomization.yaml

@@ -8,4 +8,3 @@ resources:
   #   gcr.io/tekton-releases/dogfooding/tkn
   - operator-release.yaml 
   - operator-config.yaml
-  - ingress-dashboard.yaml