Update tekton.py with prepareRestoreSecrets

Author: Sanjay Prabhakar

src/mas/devops/tekton.py

@@ -506,6 +506,45 @@ def prepareAiServicePipelinesNamespace(dynClient: DynamicClient, instanceId: str
         logger.info(f"Storage class {storageClass} uses volumeBindingMode={volumeBindingMode}, skipping PVC bind wait")
 
 
+def prepareRestoreSecrets(dynClient: DynamicClient, namespace: str, restoreConfigs: dict = None):
+    """
+    Create or update secret required for MAS Restore pipeline.
+
+    Creates secret in the specified namespace:
+        - pipeline-restore-configs
+
+    Parameters:
+        dynClient (DynamicClient): OpenShift Dynamic Client
+        namespace (str): The namespace to create secrets in
+        restoreConfigs (dict, optional): configuration data for restore. Defaults to None (empty secret).
+
+    Returns:
+        None
+
+    Raises:
+        NotFoundError: If secrets cannot be created
+    """
+    secretsAPI = dynClient.resources.get(api_version="v1", kind="Secret")
+
+    # 1. Secret/pipeline-restore-configs
+    # -------------------------------------------------------------------------
+    # Must exist, but can be empty
+    try:
+        secretsAPI.delete(name="pipeline-restore-configs", namespace=namespace)
+    except NotFoundError:
+        pass
+
+    if restoreConfigs is None:
+        restoreConfigs = {
+            "apiVersion": "v1",
+            "kind": "Secret",
+            "type": "Opaque",
+            "metadata": {
+                "name": "pipeline-restore-configs"
+            }
+        }
+    secretsAPI.create(body=restoreConfigs, namespace=namespace)
+
 def prepareInstallSecrets(dynClient: DynamicClient, namespace: str, slsLicenseFile: str = None, additionalConfigs: dict = None, certs: str = None, podTemplates: str = None) -> None:
     """
     Create or update secrets required for MAS installation pipelines.

src/mas/devops/templates/pipelinerun-restore.yml.j2

@@ -16,6 +16,9 @@ spec:
     - name: shared-backups
       persistentVolumeClaim:
         claimName: backup-pvc
+    - name: restore-configurations
+      secret:
+        secretName: pipeline-restore-configs
   params:
     # Common Parameters
     - name: image_pull_policy
@@ -175,4 +178,4 @@ spec:
     {% if artifactory_repository is defined and artifactory_repository != "" %}
     - name: artifactory_repository
       value: "{{ artifactory_repository }}"
-    {% endif %}
+    {% endif %}