Draft: feat: migration EF runner

Migration Docs project to Eclipse foundation Gitlab runner.

Top issue: eclipse-wg/oniro-wg/products-services-oniro-wg/it-services-oniro-wg/pipelines-architecture-oniro-wg#5 (closed)

Related issues:

• Oniro Migration : build docker image with kaniko! (root user at EF) eclipse-wg/oniro-wg/products-services-oniro-wg/it-services-oniro-wg/pipelines-architecture-oniro-wg#10 (closed)
• Docs migration: Project/Group tokens usage: eclipse-wg/oniro-wg/products-services-oniro-wg/it-services-oniro-wg/pipelines-architecture-oniro-wg#38 (closed)

Signed-off-by: sebastien.heurtematte sebastien.heurtematte@eclipse-foundation.org

.gitlab-ci.yml

@@ -7,9 +7,14 @@ stages:
   - build
   - deploy
 
+default:
+  tags:
+    - origin:eclipse
+    - ctx:oniro-group
+
 include:
  - project: eclipse/oniro-core/oniro
-   ref: kirkstone
+   ref: feat/ef-runner
    file:
     - .oniro-ci/dco.yaml
     - .oniro-ci/reuse.yaml
@@ -52,7 +57,7 @@ reuse:
 .oniro-repo-workspace:
   interruptible: true
   image:
-    name: registry.ostc-eu.org/ostc/oniro/bitbake-builder:latest
+    name: docker.io/onirocore/bitbake-builder:latest
   variables:
     # URL and branch or revision of the oniro.git repository which contains a
     # repo manifest file.
@@ -99,6 +104,8 @@ reuse:
     # that modify oniro.git in any way (e.g. a branch, a pull request or merge
     # train).
     GIT_STRATEGY: none
+    CI_GITLAB_USER_ID: "oniro-core-bot"
+    CI_GITLAB_USER_EMAIL: "oniro-core-bot@eclipse.org"
   cache:
     - key:
         prefix: repo-mirror-$CI_ONIRO_MANIFEST_MIRROR_REPO_REV
@@ -138,8 +145,8 @@ reuse:
     # create and send commits.
     - gl_section_open_collapsed setup_git "Setting up git"
     - git config --global --add safe.directory "$CI_PROJECT_DIR"
-    - git config --global user.name "Oniro Core Project Bot"
-    - git config --global user.email "oniro-core-bot@eclipse.org"
+    - git config --global user.email "$CI_GITLAB_USER_EMAIL"
+    - git config --global user.name "$CI_GITLAB_USER_ID"
     - gl_section_close setup_git
 
     # Since CI_PROJECT_DIR is set to 'none', GitLab runner does not perform any
@@ -188,7 +195,7 @@ build-docs:
   extends: [.oniro-repo-workspace]
   interruptible: true
   image:
-    name: registry.ostc-eu.org/ostc/oniro/docs-builder:latest
+    name: docker.io/onirocore/docs-builder:latest
   script:
     - make -C docs
     - mv docs/build "$CI_PROJECT_DIR"
@@ -231,19 +238,24 @@ build-docs:
           </manifest>
           __EOM__
     # Or when things land.
-    - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
+    # - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
 
 deploy:
   extends: .oniro-repo-workspace
   image:
-    name: registry.ostc-eu.org/ostc/oniro/docs-builder:latest
+    name: docker.io/onirocore/docs-builder:latest
   stage: deploy
+  variables:
+    CI_DOC_DEPLOY_REPO: "gitlab.eclipse.org/eclipse/oniro-core/oniro-readthedocs-aggregated.git"
+    CI_DOC_DEPLOY_REPO_BRANCH: "main"
+    CI_GITLAB_USERNAME: "oniro-core-bot"
+    CI_GITLAB_TOKEN: "<api token from gitlab"
   script:
     # We are in the root of the git-repo workspace. Because
     # .oniro-repo-workspace uses GIT_STRATEGY=none, the workspace is not
     # cleaned automatically.
     - rm -rf aggregated
-    - git clone https://user:$CI_ONIRO_AGGREGATED_DOCS_TOKEN@gitlab.eclipse.org/eclipse/oniro-core/oniro-readthedocs-aggregated.git aggregated
+    - git clone https://$CI_GITLAB_USERNAME:$CI_GITLAB_TOKEN@$CI_DOC_DEPLOY_REPO aggregated
     - find aggregated -maxdepth 1 -not -path aggregated/.git -not -path aggregated -exec rm -rvf {} \;
     - tar -c --dereference -C docs --exclude ./.git --exclude ./.gitlab-ci.yml . | tar -x -C aggregated
     # Commit and push back, if something changed.
@@ -253,9 +265,9 @@ deploy:
         msg="docs repository snapshot - $CI_COMMIT_BRANCH:$CI_COMMIT_SHA";
         git add -A;
         git commit -sm "$msg";
-        git push origin HEAD:main;
+        git push origin HEAD:$CI_DOC_DEPLOY_REPO_BRANCH;
       else
         echo "Nothing new to commit.";
       fi
-  rules:
-    - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
+  # rules:
+  #   - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'