Merge pull request #1961 from runzexia/devops-refactor

add test for s2i controller & devops CRD

Makefile

@@ -84,6 +84,7 @@ openapi:
 	go run ./vendor/k8s.io/kube-openapi/cmd/openapi-gen/openapi-gen.go -O openapi_generated -i ./vendor/k8s.io/api/networking/v1,./vendor/k8s.io/apimachinery/pkg/apis/meta/v1,./vendor/k8s.io/apimachinery/pkg/util/intstr,./pkg/apis/network/v1alpha1 -p kubesphere.io/kubesphere/pkg/apis/network/v1alpha1 -h ./hack/boilerplate.go.txt --report-filename ./api/api-rules/violation_exceptions.list
 	go run ./vendor/k8s.io/kube-openapi/cmd/openapi-gen/openapi-gen.go -O openapi_generated -i ./vendor/k8s.io/apimachinery/pkg/apis/meta/v1,./pkg/apis/devops/v1alpha1,./vendor/k8s.io/apimachinery/pkg/runtime,./vendor/k8s.io/api/core/v1 -p kubesphere.io/kubesphere/pkg/apis/devops/v1alpha1 -h ./hack/boilerplate.go.txt --report-filename ./api/api-rules/violation_exceptions.list
 	go run ./vendor/k8s.io/kube-openapi/cmd/openapi-gen/openapi-gen.go -O openapi_generated -i ./vendor/k8s.io/apimachinery/pkg/apis/meta/v1,./pkg/apis/cluster/v1alpha1,./vendor/k8s.io/apimachinery/pkg/runtime,./vendor/k8s.io/api/core/v1 -p kubesphere.io/kubesphere/pkg/apis/cluster/v1alpha1 -h ./hack/boilerplate.go.txt --report-filename ./api/api-rules/violation_exceptions.list
+	go run ./vendor/k8s.io/kube-openapi/cmd/openapi-gen/openapi-gen.go -O openapi_generated -i ./vendor/k8s.io/apimachinery/pkg/apis/meta/v1,./pkg/apis/devops/v1alpha3,./vendor/k8s.io/apimachinery/pkg/runtime -p kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3 -h ./hack/boilerplate.go.txt --report-filename ./api/api-rules/violation_exceptions.list
 	go run ./tools/cmd/crd-doc-gen/main.go
 # Build the docker image
 docker-build: all

api/api-rules/violation_exceptions.list

-API rule violation: list_type_missing,k8s.io/api/core/v1,AvoidPods,PreferAvoidPods
-API rule violation: list_type_missing,k8s.io/api/core/v1,Capabilities,Add
-API rule violation: list_type_missing,k8s.io/api/core/v1,Capabilities,Drop
-API rule violation: list_type_missing,k8s.io/api/core/v1,CephFSPersistentVolumeSource,Monitors
-API rule violation: list_type_missing,k8s.io/api/core/v1,CephFSVolumeSource,Monitors
-API rule violation: list_type_missing,k8s.io/api/core/v1,ComponentStatus,Conditions
-API rule violation: list_type_missing,k8s.io/api/core/v1,ComponentStatusList,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,ConfigMapList,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,ConfigMapProjection,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,ConfigMapVolumeSource,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,Container,Args
-API rule violation: list_type_missing,k8s.io/api/core/v1,Container,Command
-API rule violation: list_type_missing,k8s.io/api/core/v1,Container,Env
-API rule violation: list_type_missing,k8s.io/api/core/v1,Container,EnvFrom
-API rule violation: list_type_missing,k8s.io/api/core/v1,Container,VolumeDevices
-API rule violation: list_type_missing,k8s.io/api/core/v1,Container,VolumeMounts
-API rule violation: list_type_missing,k8s.io/api/core/v1,ContainerImage,Names
-API rule violation: list_type_missing,k8s.io/api/core/v1,DownwardAPIProjection,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,DownwardAPIVolumeSource,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,EndpointSubset,Addresses
-API rule violation: list_type_missing,k8s.io/api/core/v1,EndpointSubset,NotReadyAddresses
-API rule violation: list_type_missing,k8s.io/api/core/v1,EndpointSubset,Ports
-API rule violation: list_type_missing,k8s.io/api/core/v1,Endpoints,Subsets
-API rule violation: list_type_missing,k8s.io/api/core/v1,EndpointsList,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,EphemeralContainerCommon,Args
-API rule violation: list_type_missing,k8s.io/api/core/v1,EphemeralContainerCommon,Command
-API rule violation: list_type_missing,k8s.io/api/core/v1,EphemeralContainerCommon,Env
-API rule violation: list_type_missing,k8s.io/api/core/v1,EphemeralContainerCommon,EnvFrom
-API rule violation: list_type_missing,k8s.io/api/core/v1,EphemeralContainerCommon,Ports
-API rule violation: list_type_missing,k8s.io/api/core/v1,EphemeralContainerCommon,VolumeDevices
-API rule violation: list_type_missing,k8s.io/api/core/v1,EphemeralContainerCommon,VolumeMounts
-API rule violation: list_type_missing,k8s.io/api/core/v1,EphemeralContainers,EphemeralContainers
-API rule violation: list_type_missing,k8s.io/api/core/v1,EventList,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,ExecAction,Command
-API rule violation: list_type_missing,k8s.io/api/core/v1,FCVolumeSource,TargetWWNs
-API rule violation: list_type_missing,k8s.io/api/core/v1,FCVolumeSource,WWIDs
-API rule violation: list_type_missing,k8s.io/api/core/v1,HTTPGetAction,HTTPHeaders
-API rule violation: list_type_missing,k8s.io/api/core/v1,HostAlias,Hostnames
-API rule violation: list_type_missing,k8s.io/api/core/v1,ISCSIPersistentVolumeSource,Portals
-API rule violation: list_type_missing,k8s.io/api/core/v1,ISCSIVolumeSource,Portals
-API rule violation: list_type_missing,k8s.io/api/core/v1,LimitRangeList,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,LimitRangeSpec,Limits
-API rule violation: list_type_missing,k8s.io/api/core/v1,List,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,LoadBalancerStatus,Ingress
-API rule violation: list_type_missing,k8s.io/api/core/v1,NamespaceList,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,NamespaceSpec,Finalizers
-API rule violation: list_type_missing,k8s.io/api/core/v1,NamespaceStatus,Conditions
-API rule violation: list_type_missing,k8s.io/api/core/v1,NodeAffinity,PreferredDuringSchedulingIgnoredDuringExecution
-API rule violation: list_type_missing,k8s.io/api/core/v1,NodeList,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,NodeSelector,NodeSelectorTerms
-API rule violation: list_type_missing,k8s.io/api/core/v1,NodeSelectorRequirement,Values
-API rule violation: list_type_missing,k8s.io/api/core/v1,NodeSelectorTerm,MatchExpressions
-API rule violation: list_type_missing,k8s.io/api/core/v1,NodeSelectorTerm,MatchFields
-API rule violation: list_type_missing,k8s.io/api/core/v1,NodeSpec,PodCIDRs
-API rule violation: list_type_missing,k8s.io/api/core/v1,NodeSpec,Taints
-API rule violation: list_type_missing,k8s.io/api/core/v1,NodeStatus,Addresses
-API rule violation: list_type_missing,k8s.io/api/core/v1,NodeStatus,Conditions
-API rule violation: list_type_missing,k8s.io/api/core/v1,NodeStatus,Images
-API rule violation: list_type_missing,k8s.io/api/core/v1,NodeStatus,VolumesAttached
-API rule violation: list_type_missing,k8s.io/api/core/v1,NodeStatus,VolumesInUse
-API rule violation: list_type_missing,k8s.io/api/core/v1,PersistentVolumeClaimList,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,PersistentVolumeClaimSpec,AccessModes
-API rule violation: list_type_missing,k8s.io/api/core/v1,PersistentVolumeClaimStatus,AccessModes
-API rule violation: list_type_missing,k8s.io/api/core/v1,PersistentVolumeClaimStatus,Conditions
-API rule violation: list_type_missing,k8s.io/api/core/v1,PersistentVolumeList,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,PersistentVolumeSpec,AccessModes
-API rule violation: list_type_missing,k8s.io/api/core/v1,PersistentVolumeSpec,MountOptions
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodAffinity,PreferredDuringSchedulingIgnoredDuringExecution
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodAffinity,RequiredDuringSchedulingIgnoredDuringExecution
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodAffinityTerm,Namespaces
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodAntiAffinity,PreferredDuringSchedulingIgnoredDuringExecution
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodAntiAffinity,RequiredDuringSchedulingIgnoredDuringExecution
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodDNSConfig,Nameservers
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodDNSConfig,Options
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodDNSConfig,Searches
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodExecOptions,Command
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodList,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodPortForwardOptions,Ports
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodSecurityContext,SupplementalGroups
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodSecurityContext,Sysctls
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodSpec,Containers
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodSpec,EphemeralContainers
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodSpec,HostAliases
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodSpec,ImagePullSecrets
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodSpec,InitContainers
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodSpec,ReadinessGates
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodSpec,Tolerations
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodSpec,Volumes
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodStatus,Conditions
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodStatus,ContainerStatuses
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodStatus,EphemeralContainerStatuses
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodStatus,InitContainerStatuses
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodStatus,PodIPs
-API rule violation: list_type_missing,k8s.io/api/core/v1,PodTemplateList,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,ProjectedVolumeSource,Sources
-API rule violation: list_type_missing,k8s.io/api/core/v1,RBDPersistentVolumeSource,CephMonitors
-API rule violation: list_type_missing,k8s.io/api/core/v1,RBDVolumeSource,CephMonitors
-API rule violation: list_type_missing,k8s.io/api/core/v1,RangeAllocation,Data
-API rule violation: list_type_missing,k8s.io/api/core/v1,ReplicationControllerList,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,ReplicationControllerStatus,Conditions
-API rule violation: list_type_missing,k8s.io/api/core/v1,ResourceQuotaList,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,ResourceQuotaSpec,Scopes
-API rule violation: list_type_missing,k8s.io/api/core/v1,ScopeSelector,MatchExpressions
-API rule violation: list_type_missing,k8s.io/api/core/v1,ScopedResourceSelectorRequirement,Values
-API rule violation: list_type_missing,k8s.io/api/core/v1,SecretList,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,SecretProjection,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,SecretVolumeSource,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,ServiceAccount,ImagePullSecrets
-API rule violation: list_type_missing,k8s.io/api/core/v1,ServiceAccount,Secrets
-API rule violation: list_type_missing,k8s.io/api/core/v1,ServiceAccountList,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,ServiceList,Items
-API rule violation: list_type_missing,k8s.io/api/core/v1,ServiceSpec,ExternalIPs
-API rule violation: list_type_missing,k8s.io/api/core/v1,ServiceSpec,LoadBalancerSourceRanges
-API rule violation: list_type_missing,k8s.io/api/core/v1,TopologySelectorLabelRequirement,Values
-API rule violation: list_type_missing,k8s.io/api/core/v1,TopologySelectorTerm,MatchLabelExpressions
 API rule violation: list_type_missing,k8s.io/apimachinery/pkg/apis/meta/v1,APIGroup,ServerAddressByClientCIDRs
 API rule violation: list_type_missing,k8s.io/apimachinery/pkg/apis/meta/v1,APIGroup,Versions
 API rule violation: list_type_missing,k8s.io/apimachinery/pkg/apis/meta/v1,APIGroupList,Groups
@@ -141,36 +26,9 @@ API rule violation: list_type_missing,k8s.io/apimachinery/pkg/apis/meta/v1,Table
 API rule violation: list_type_missing,k8s.io/apimachinery/pkg/apis/meta/v1,UpdateOptions,DryRun
 API rule violation: list_type_missing,k8s.io/apimachinery/pkg/runtime,RawExtension,Raw
 API rule violation: list_type_missing,k8s.io/apimachinery/pkg/runtime,Unknown,Raw
-API rule violation: list_type_missing,kubesphere.io/kubesphere/pkg/apis/cluster/v1alpha1,AgentList,Items
-API rule violation: list_type_missing,kubesphere.io/kubesphere/pkg/apis/cluster/v1alpha1,AgentStatus,Conditions
-API rule violation: list_type_missing,kubesphere.io/kubesphere/pkg/apis/cluster/v1alpha1,AgentStatus,KubeConfig
-API rule violation: list_type_missing,kubesphere.io/kubesphere/pkg/apis/cluster/v1alpha1,ClusterList,Items
-API rule violation: names_match,k8s.io/api/core/v1,AzureDiskVolumeSource,DataDiskURI
-API rule violation: names_match,k8s.io/api/core/v1,ContainerStatus,LastTerminationState
-API rule violation: names_match,k8s.io/api/core/v1,DaemonEndpoint,Port
-API rule violation: names_match,k8s.io/api/core/v1,Event,ReportingController
-API rule violation: names_match,k8s.io/api/core/v1,FCVolumeSource,WWIDs
-API rule violation: names_match,k8s.io/api/core/v1,GlusterfsPersistentVolumeSource,EndpointsName
-API rule violation: names_match,k8s.io/api/core/v1,GlusterfsVolumeSource,EndpointsName
-API rule violation: names_match,k8s.io/api/core/v1,ISCSIPersistentVolumeSource,DiscoveryCHAPAuth
-API rule violation: names_match,k8s.io/api/core/v1,ISCSIPersistentVolumeSource,SessionCHAPAuth
-API rule violation: names_match,k8s.io/api/core/v1,ISCSIVolumeSource,DiscoveryCHAPAuth
-API rule violation: names_match,k8s.io/api/core/v1,ISCSIVolumeSource,SessionCHAPAuth
-API rule violation: names_match,k8s.io/api/core/v1,NodeResources,Capacity
-API rule violation: names_match,k8s.io/api/core/v1,NodeSpec,DoNotUse_ExternalID
-API rule violation: names_match,k8s.io/api/core/v1,PersistentVolumeSource,CephFS
-API rule violation: names_match,k8s.io/api/core/v1,PersistentVolumeSource,StorageOS
-API rule violation: names_match,k8s.io/api/core/v1,PodSpec,DeprecatedServiceAccount
-API rule violation: names_match,k8s.io/api/core/v1,RBDPersistentVolumeSource,CephMonitors
-API rule violation: names_match,k8s.io/api/core/v1,RBDPersistentVolumeSource,RBDImage
-API rule violation: names_match,k8s.io/api/core/v1,RBDPersistentVolumeSource,RBDPool
-API rule violation: names_match,k8s.io/api/core/v1,RBDPersistentVolumeSource,RadosUser
-API rule violation: names_match,k8s.io/api/core/v1,RBDVolumeSource,CephMonitors
-API rule violation: names_match,k8s.io/api/core/v1,RBDVolumeSource,RBDImage
-API rule violation: names_match,k8s.io/api/core/v1,RBDVolumeSource,RBDPool
-API rule violation: names_match,k8s.io/api/core/v1,RBDVolumeSource,RadosUser
-API rule violation: names_match,k8s.io/api/core/v1,VolumeSource,CephFS
-API rule violation: names_match,k8s.io/api/core/v1,VolumeSource,StorageOS
+API rule violation: list_type_missing,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,DevOpsProjectList,Items
+API rule violation: list_type_missing,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,NoScmPipeline,Parameters
+API rule violation: list_type_missing,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,PipelineList,Items
 API rule violation: names_match,k8s.io/apimachinery/pkg/apis/meta/v1,APIResourceList,APIResources
 API rule violation: names_match,k8s.io/apimachinery/pkg/apis/meta/v1,Duration,Duration
 API rule violation: names_match,k8s.io/apimachinery/pkg/apis/meta/v1,InternalEvent,Object
@@ -181,6 +39,48 @@ API rule violation: names_match,k8s.io/apimachinery/pkg/apis/meta/v1,Time,Time
 API rule violation: names_match,k8s.io/apimachinery/pkg/runtime,Unknown,ContentEncoding
 API rule violation: names_match,k8s.io/apimachinery/pkg/runtime,Unknown,ContentType
 API rule violation: names_match,k8s.io/apimachinery/pkg/runtime,Unknown,Raw
-API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/cluster/v1alpha1,AgentSpec,KubeSphereAPIServerPort
-API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/cluster/v1alpha1,AgentSpec,Paused
-API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/cluster/v1alpha1,AgentStatus,KubeConfig
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,BitbucketServerSource,ApiUri
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,BitbucketServerSource,CloneOption
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,BitbucketServerSource,CredentialId
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,BitbucketServerSource,DiscoverBranches
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,BitbucketServerSource,DiscoverPRFromForks
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,BitbucketServerSource,DiscoverPRFromOrigin
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,BitbucketServerSource,RegexFilter
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,BitbucketServerSource,ScmId
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,DiscarderProperty,DaysToKeep
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,DiscarderProperty,NumToKeep
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,GitSource,CloneOption
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,GitSource,CredentialId
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,GitSource,DiscoverBranches
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,GitSource,RegexFilter
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,GitSource,ScmId
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,GithubSource,ApiUri
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,GithubSource,CloneOption
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,GithubSource,CredentialId
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,GithubSource,DiscoverBranches
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,GithubSource,DiscoverPRFromForks
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,GithubSource,DiscoverPRFromOrigin
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,GithubSource,RegexFilter
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,GithubSource,ScmId
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,MultiBranchJobTrigger,CreateActionJobsToTrigger
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,MultiBranchJobTrigger,DeleteActionJobsToTrigger
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,MultiBranchPipeline,BitbucketServerSource
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,MultiBranchPipeline,Description
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,MultiBranchPipeline,GitHubSource
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,MultiBranchPipeline,GitSource
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,MultiBranchPipeline,MultiBranchJobTrigger
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,MultiBranchPipeline,ScriptPath
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,MultiBranchPipeline,SingleSvnSource
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,MultiBranchPipeline,SourceType
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,MultiBranchPipeline,SvnSource
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,MultiBranchPipeline,TimerTrigger
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,NoScmPipeline,Description
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,NoScmPipeline,DisableConcurrent
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,NoScmPipeline,RemoteTrigger
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,NoScmPipeline,TimerTrigger
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,Parameter,DefaultValue
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,PipelineSpec,MultiBranchPipeline
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,SingleSvnSource,CredentialId
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,SingleSvnSource,ScmId
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,SvnSource,CredentialId
+API rule violation: names_match,kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3,SvnSource,ScmId

cmd/controller-manager/app/controllers.go

@@ -22,14 +22,19 @@ import (
 	"kubesphere.io/kubesphere/pkg/controller/application"
 	"kubesphere.io/kubesphere/pkg/controller/cluster"
 	"kubesphere.io/kubesphere/pkg/controller/destinationrule"
+	"kubesphere.io/kubesphere/pkg/controller/devopscredential"
+	"kubesphere.io/kubesphere/pkg/controller/devopsproject"
 	"kubesphere.io/kubesphere/pkg/controller/job"
+	"kubesphere.io/kubesphere/pkg/controller/pipeline"
 	"kubesphere.io/kubesphere/pkg/controller/s2ibinary"
 	"kubesphere.io/kubesphere/pkg/controller/s2irun"
 	"kubesphere.io/kubesphere/pkg/controller/storage/expansion"
 	"kubesphere.io/kubesphere/pkg/controller/user"
 	"kubesphere.io/kubesphere/pkg/controller/virtualservice"
 	"kubesphere.io/kubesphere/pkg/informers"
+	"kubesphere.io/kubesphere/pkg/simple/client/devops"
 	"kubesphere.io/kubesphere/pkg/simple/client/k8s"
+	"kubesphere.io/kubesphere/pkg/simple/client/s3"
 	"sigs.k8s.io/controller-runtime/pkg/manager"
 )
 
@@ -37,6 +42,8 @@ func AddControllers(
 	mgr manager.Manager,
 	client k8s.Client,
 	informerFactory informers.InformerFactory,
+	devopsClient devops.Interface,
+	s3Client s3.Interface,
 	stopCh <-chan struct{}) error {
 
 	kubernetesInformer := informerFactory.KubernetesSharedInformerFactory()
@@ -71,14 +78,31 @@ func AddControllers(
 
 	jobController := job.NewJobController(kubernetesInformer.Batch().V1().Jobs(), client.Kubernetes())
 
-	s2iBinaryController := s2ibinary.NewController(client.KubeSphere(),
-		client.Kubernetes(),
-		kubesphereInformer.Devops().V1alpha1().S2iBinaries())
+	s2iBinaryController := s2ibinary.NewController(client.Kubernetes(),
+		client.KubeSphere(),
+		kubesphereInformer.Devops().V1alpha1().S2iBinaries(),
+		s3Client,
+	)
 
-	s2iRunController := s2irun.NewS2iRunController(client.KubeSphere(),
-		client.Kubernetes(),
+	s2iRunController := s2irun.NewS2iRunController(client.Kubernetes(),
+		client.KubeSphere(),
 		kubesphereInformer.Devops().V1alpha1().S2iBinaries(),
 		kubesphereInformer.Devops().V1alpha1().S2iRuns())
+	devopsProjectController := devopsproject.NewController(client.Kubernetes(),
+		client.KubeSphere(), devopsClient,
+		informerFactory.KubernetesSharedInformerFactory().Core().V1().Namespaces(),
+		informerFactory.KubeSphereSharedInformerFactory().Devops().V1alpha3().DevOpsProjects(),
+	)
+	devopsPipelineController := pipeline.NewController(client.Kubernetes(),
+		client.KubeSphere(),
+		devopsClient,
+		informerFactory.KubernetesSharedInformerFactory().Core().V1().Namespaces(),
+		informerFactory.KubeSphereSharedInformerFactory().Devops().V1alpha3().Pipelines())
+
+	devopsCredentialController := devopscredential.NewController(client.Kubernetes(),
+		devopsClient,
+		informerFactory.KubernetesSharedInformerFactory().Core().V1().Namespaces(),
+		informerFactory.KubernetesSharedInformerFactory().Core().V1().Secrets())
 
 	volumeExpansionController := expansion.NewVolumeExpansionController(
 		client.Kubernetes(),
@@ -102,15 +126,18 @@ func AddControllers(
 		client.KubeSphere().ClusterV1alpha1().Clusters())
 
 	controllers := map[string]manager.Runnable{
-		"virtualservice-controller":  vsController,
-		"destinationrule-controller": drController,
-		"application-controller":     apController,
-		"job-controller":             jobController,
-		"s2ibinary-controller":       s2iBinaryController,
-		"s2irun-controller":          s2iRunController,
-		"volumeexpansion-controller": volumeExpansionController,
-		"user-controller":            userController,
-		"cluster-controller":         clusterController,
+		"virtualservice-controller":   vsController,
+		"destinationrule-controller":  drController,
+		"application-controller":      apController,
+		"job-controller":              jobController,
+		"s2ibinary-controller":        s2iBinaryController,
+		"s2irun-controller":           s2iRunController,
+		"volumeexpansion-controller":  volumeExpansionController,
+		"devopsprojects-controller":   devopsProjectController,
+		"pipeline-controller":         devopsPipelineController,
+		"devopscredential-controller": devopsCredentialController,
+		"cluster-controller":          clusterController,
+		"user-controller":             userController,
 	}
 
 	for name, ctrl := range controllers {

cmd/controller-manager/app/server.go

@@ -38,8 +38,10 @@ import (
 	"kubesphere.io/kubesphere/pkg/controller/user"
 	"kubesphere.io/kubesphere/pkg/controller/workspace"
 	"kubesphere.io/kubesphere/pkg/informers"
+	"kubesphere.io/kubesphere/pkg/simple/client/devops/jenkins"
 	"kubesphere.io/kubesphere/pkg/simple/client/k8s"
 	"kubesphere.io/kubesphere/pkg/simple/client/openpitrix"
+	"kubesphere.io/kubesphere/pkg/simple/client/s3"
 	"kubesphere.io/kubesphere/pkg/utils/term"
 	"os"
 	"sigs.k8s.io/controller-runtime/pkg/manager"
@@ -104,22 +106,18 @@ func Run(s *options.KubeSphereControllerManagerOptions, stopCh <-chan struct{})
 		klog.Errorf("Failed to create openpitrix client %v", err)
 		return err
 	}
-	/*
-		devopsClient, err := jenkins.NewDevopsClient(s.DevopsOptions)
-		if err != nil {
-			klog.Errorf("Failed to create devops client %v", err)
-			return err
-		}
-
-		s3Client, err := s3.NewS3Client(s.S3Options)
-		if err != nil {
-			klog.Errorf("Failed to create s3 client", err)
-			return err
-		}
-
 
+	devopsClient, err := jenkins.NewDevopsClient(s.DevopsOptions)
+	if err != nil {
+		klog.Errorf("Failed to create devops client %v", err)
+		return err
+	}
 
-	*/
+	s3Client, err := s3.NewS3Client(s.S3Options)
+	if err != nil {
+		klog.Errorf("Failed to create s3 client %v", err)
+		return err
+	}
 
 	informerFactory := informers.NewInformerFactories(kubernetesClient.Kubernetes(), kubernetesClient.KubeSphere(), kubernetesClient.Istio(), kubernetesClient.Application())
 
@@ -146,7 +144,7 @@ func Run(s *options.KubeSphereControllerManagerOptions, stopCh <-chan struct{})
 			klog.Fatal("Unable to create namespace controller")
 		}
 
-		if err := AddControllers(mgr, kubernetesClient, informerFactory, stopCh); err != nil {
+		if err := AddControllers(mgr, kubernetesClient, informerFactory, devopsClient, s3Client, stopCh); err != nil {
 			klog.Fatalf("unable to register controllers to the manager: %v", err)
 		}
 

cmd/ks-apiserver/app/options/options.go

@@ -17,10 +17,9 @@ import (
 	"kubesphere.io/kubesphere/pkg/simple/client/ldap"
 	esclient "kubesphere.io/kubesphere/pkg/simple/client/logging/elasticsearch"
 	"kubesphere.io/kubesphere/pkg/simple/client/monitoring/prometheus"
-	"kubesphere.io/kubesphere/pkg/simple/client/mysql"
 	"kubesphere.io/kubesphere/pkg/simple/client/openpitrix"
 	"kubesphere.io/kubesphere/pkg/simple/client/s3"
-	fakeS3 "kubesphere.io/kubesphere/pkg/simple/client/s3/fake"
+	fakes3 "kubesphere.io/kubesphere/pkg/simple/client/s3/fake"
 	"kubesphere.io/kubesphere/pkg/simple/client/servicemesh"
 	"kubesphere.io/kubesphere/pkg/simple/client/sonarqube"
 	"net/http"
@@ -44,7 +43,6 @@ func NewServerRunOptions() *ServerRunOptions {
 			DevopsOptions:         jenkins.NewDevopsOptions(),
 			SonarQubeOptions:      sonarqube.NewSonarQubeOptions(),
 			ServiceMeshOptions:    servicemesh.NewServiceMeshOptions(),
-			MySQLOptions:          mysql.NewMySQLOptions(),
 			MonitoringOptions:     prometheus.NewPrometheusOptions(),
 			S3Options:             s3.NewS3Options(),
 			OpenPitrixOptions:     openpitrix.NewOptions(),
@@ -64,7 +62,6 @@ func (s *ServerRunOptions) Flags() (fss cliflag.NamedFlagSets) {
 	s.GenericServerRunOptions.AddFlags(fs, s.GenericServerRunOptions)
 	s.KubernetesOptions.AddFlags(fss.FlagSet("kubernetes"), s.KubernetesOptions)
 	s.AuthenticationOptions.AddFlags(fss.FlagSet("authentication"), s.AuthenticationOptions)
-	s.MySQLOptions.AddFlags(fss.FlagSet("mysql"), s.MySQLOptions)
 	s.DevopsOptions.AddFlags(fss.FlagSet("devops"), s.DevopsOptions)
 	s.SonarQubeOptions.AddFlags(fss.FlagSet("sonarqube"), s.SonarQubeOptions)
 	s.LdapOptions.AddFlags(fss.FlagSet("ldap"), s.LdapOptions)
@@ -121,7 +118,7 @@ func (s *ServerRunOptions) NewAPIServer(stopCh <-chan struct{}) (*apiserver.APIS
 
 	if s.S3Options.Endpoint != "" {
 		if s.S3Options.Endpoint == fakeInterface && s.DebugMode {
-			apiServer.S3Client = fakeS3.NewFakeS3()
+			apiServer.S3Client = fakes3.NewFakeS3()
 		} else {
 			s3Client, err := s3.NewS3Client(s.S3Options)
 			if err != nil {
@@ -139,6 +136,14 @@ func (s *ServerRunOptions) NewAPIServer(stopCh <-chan struct{}) (*apiserver.APIS
 		apiServer.DevopsClient = devopsClient
 	}
 
+	if s.SonarQubeOptions.Host != "" {
+		sonarClient, err := sonarqube.NewSonarQubeClient(s.SonarQubeOptions)
+		if err != nil {
+			return nil, err
+		}
+		apiServer.SonarClient = sonarqube.NewSonar(sonarClient.SonarQube())
+	}
+
 	if s.LdapOptions.Host != "" {
 		if s.LdapOptions.Host == fakeInterface && s.DebugMode {
 			apiServer.LdapClient = ldap.NewSimpleLdap()
@@ -164,14 +169,6 @@ func (s *ServerRunOptions) NewAPIServer(stopCh <-chan struct{}) (*apiserver.APIS
 		}
 	}
 
-	if s.MySQLOptions.Host != "" {
-		dbClient, err := mysql.NewMySQLClient(s.MySQLOptions, stopCh)
-		if err != nil {
-			return nil, err
-		}
-		apiServer.DBClient = dbClient
-	}
-
 	server := &http.Server{
 		Addr: fmt.Sprintf(":%d", s.GenericServerRunOptions.InsecurePort),
 	}

cmd/ks-apiserver/app/options/validation.go

@@ -8,7 +8,6 @@ func (s *ServerRunOptions) Validate() []error {
 	errors = append(errors, s.GenericServerRunOptions.Validate()...)
 	errors = append(errors, s.DevopsOptions.Validate()...)
 	errors = append(errors, s.KubernetesOptions.Validate()...)
-	errors = append(errors, s.MySQLOptions.Validate()...)
 	errors = append(errors, s.ServiceMeshOptions.Validate()...)
 	errors = append(errors, s.MonitoringOptions.Validate()...)
 	errors = append(errors, s.SonarQubeOptions.Validate()...)

config/crds/devops.kubesphere.io_devopsprojects.yaml

+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: (unknown)
+  creationTimestamp: null
+  name: devopsprojects.devops.kubesphere.io
+spec:
+  group: devops.kubesphere.io
+  names:
+    categories:
+    - devops
+    kind: DevOpsProject
+    listKind: DevOpsProjectList
+    plural: devopsprojects
+    singular: devopsproject
+  scope: Cluster
+  validation:
+    openAPIV3Schema:
+      description: DevOpsProject is the Schema for the devopsprojects API
+      properties:
+        apiVersion:
+          description: 'APIVersion defines the versioned schema of this representation
+            of an object. Servers should convert recognized schemas to the latest
+            internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+          type: string
+        kind:
+          description: 'Kind is a string value representing the REST resource this
+            object represents. Servers may infer this from the endpoint the client
+            submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+          type: string
+        metadata:
+          type: object
+        spec:
+          description: DevOpsProjectSpec defines the desired state of DevOpsProject
+          type: object
+        status:
+          description: DevOpsProjectStatus defines the observed state of DevOpsProject
+          properties:
+            adminNamespace:
+              description: 'INSERT ADDITIONAL STATUS FIELD - define observed state
+                of cluster Important: Run "make" to regenerate code after modifying
+                this file'
+              type: string
+          type: object
+      type: object
+  version: v1alpha3
+  versions:
+  - name: v1alpha3
+    served: true
+    storage: true
+status:
+  acceptedNames:
+    kind: ""
+    plural: ""
+  conditions: []
+  storedVersions: []

config/crds/devops.kubesphere.io_pipelines.yaml

+
+---
+apiVersion: apiextensions.k8s.io/v1beta1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: (unknown)
+  creationTimestamp: null
+  name: pipelines.devops.kubesphere.io
+spec:
+  group: devops.kubesphere.io
+  names:
+    kind: Pipeline
+    listKind: PipelineList
+    plural: pipelines
+    singular: pipeline
+  scope: Namespaced
+  validation:
+    openAPIV3Schema:
+      description: Pipeline is the Schema for the pipelines API
+      properties:
+        apiVersion:
+          description: 'APIVersion defines the versioned schema of this representation
+            of an object. Servers should convert recognized schemas to the latest
+            internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+          type: string
+        kind:
+          description: 'Kind is a string value representing the REST resource this
+            object represents. Servers may infer this from the endpoint the client
+            submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+          type: string
+        metadata:
+          type: object
+        spec:
+          description: PipelineSpec defines the desired state of Pipeline
+          properties:
+            multi_branch_pipeline:
+              properties:
+                bitbucket_server_source:
+                  properties:
+                    api_uri:
+                      type: string
+                    credential_id:
+                      type: string
+                    discover_branches:
+                      type: integer
+                    discover_pr_from_forks:
+                      properties:
+                        strategy:
+                          type: integer
+                        trust:
+                          type: integer
+                      type: object
+                    discover_pr_from_origin:
+                      type: integer
+                    git_clone_option:
+                      properties:
+                        depth:
+                          type: integer
+                        shallow:
+                          type: boolean
+                        timeout:
+                          type: integer
+                      type: object
+                    owner:
+                      type: string
+                    regex_filter:
+                      type: string
+                    repo:
+                      type: string
+                    scm_id:
+                      type: string
+                  type: object
+                descriptio:
+                  type: string
+                discarder:
+                  properties:
+                    days_to_keep:
+                      type: string
+                    num_to_keep:
+                      type: string
+                  type: object
+                git_source:
+                  properties:
+                    credential_id:
+                      type: string
+                    discover_branches:
+                      type: boolean
+                    git_clone_option:
+                      properties:
+                        depth:
+                          type: integer
+                        shallow:
+                          type: boolean
+                        timeout:
+                          type: integer
+                      type: object
+                    regex_filter:
+                      type: string
+                    scm_id:
+                      type: string
+                    url:
+                      type: string
+                  type: object
+                github_source:
+                  properties:
+                    api_uri:
+                      type: string
+                    credential_id:
+                      type: string
+                    discover_branches:
+                      type: integer
+                    discover_pr_from_forks:
+                      properties:
+                        strategy:
+                          type: integer
+                        trust:
+                          type: integer
+                      type: object
+                    discover_pr_from_origin:
+                      type: integer
+                    git_clone_option:
+                      properties:
+                        depth:
+                          type: integer
+                        shallow:
+                          type: boolean
+                        timeout:
+                          type: integer
+                      type: object
+                    owner:
+                      type: string
+                    regex_filter:
+                      type: string
+                    repo:
+                      type: string
+                    scm_id:
+                      type: string
+                  type: object
+                multibranch_job_trigger:
+                  properties:
+                    create_action_job_to_trigger:
+                      type: string
+                    delete_action_job_to_trigger:
+                      type: string
+                  type: object
+                name:
+                  type: string
+                script_path:
+                  type: string
+                single_svn_source:
+                  properties:
+                    credential_id:
+                      type: string
+                    remote:
+                      type: string
+                    scm_id:
+                      type: string
+                  type: object
+                source_type:
+                  type: string
+                svn_source:
+                  properties:
+                    credential_id:
+                      type: string
+                    excludes:
+                      type: string
+                    includes:
+                      type: string
+                    remote:
+                      type: string
+                    scm_id:
+                      type: string
+                  type: object
+                timer_trigger:
+                  properties:
+                    cron:
+                      description: user in no scm job
+                      type: string
+                    interval:
+                      description: use in multi-branch job
+                      type: string
+                  type: object
+              required:
+              - name
+              - script_path
+              - source_type
+              type: object
+            pipeline:
+              properties:
+                descriptio:
+                  type: string
+                disable_concurrent:
+                  type: boolean
+                discarder:
+                  properties:
+                    days_to_keep:
+                      type: string
+                    num_to_keep:
+                      type: string
+                  type: object
+                jenkinsfile:
+                  type: string
+                name:
+                  type: string
+                parameters:
+                  items:
+                    properties:
+                      default_value:
+                        type: string
+                      description:
+                        type: string
+                      name:
+                        type: string
+                      type:
+                        type: string
+                    required:
+                    - name
+                    - type
+                    type: object
+                  type: array
+                remote_trigger:
+                  properties:
+                    token:
+                      type: string
+                  type: object
+                timer_trigger:
+                  properties:
+                    cron:
+                      description: user in no scm job
+                      type: string
+                    interval:
+                      description: use in multi-branch job
+                      type: string
+                  type: object
+              required:
+              - name
+              type: object
+            type:
+              description: 'INSERT ADDITIONAL SPEC FIELDS - desired state of cluster
+                Important: Run "make" to regenerate code after modifying this file'
+              type: string
+          required:
+          - type
+          type: object
+        status:
+          description: PipelineStatus defines the observed state of Pipeline
+          type: object
+      type: object
+  version: v1alpha3
+  versions:
+  - name: v1alpha3
+    served: true
+    storage: true
+status:
+  acceptedNames:
+    kind: ""
+    plural: ""
+  conditions: []
+  storedVersions: []

config/crds/devops_v1alpha1_s2ibinary.yaml → config/crds/devops.kubesphere.io_s2ibinaries.yaml

+
+---
 apiVersion: apiextensions.k8s.io/v1beta1
 kind: CustomResourceDefinition
 metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: (unknown)
   creationTimestamp: null
-  labels:
-    controller-tools.k8s.io: "1.0"
   name: s2ibinaries.devops.kubesphere.io
 spec:
   additionalPrinterColumns:
@@ -22,24 +24,29 @@ spec:
   group: devops.kubesphere.io
   names:
     kind: S2iBinary
+    listKind: S2iBinaryList
     plural: s2ibinaries
+    singular: s2ibinary
   scope: Namespaced
+  subresources: {}
   validation:
     openAPIV3Schema:
+      description: S2iBinary is the Schema for the s2ibinaries API
       properties:
         apiVersion:
           description: 'APIVersion defines the versioned schema of this representation
             of an object. Servers should convert recognized schemas to the latest
-            internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources'
+            internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
           type: string
         kind:
           description: 'Kind is a string value representing the REST resource this
             object represents. Servers may infer this from the endpoint the client
-            submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds'
+            submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
           type: string
         metadata:
           type: object
         spec:
+          description: S2iBinarySpec defines the desired state of S2iBinary
           properties:
             downloadURL:
               description: DownloadURL in KubeSphere
@@ -59,12 +66,18 @@ spec:
               type: string
           type: object
         status:
+          description: S2iBinaryStatus defines the observed state of S2iBinary
           properties:
             phase:
               description: Phase is status of S2iBinary . Possible value is "Ready","UnableToDownload"
               type: string
           type: object
+      type: object
   version: v1alpha1
+  versions:
+  - name: v1alpha1
+    served: true
+    storage: true
 status:
   acceptedNames:
     kind: ""

config/crds/devops.kubesphere.io_s2ibuilders.yaml

@@ -4,7 +4,7 @@ apiVersion: apiextensions.k8s.io/v1beta1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: (devel)
+    controller-gen.kubebuilder.io/version: (unknown)
   creationTimestamp: null
   name: s2ibuilders.devops.kubesphere.io
 spec:

config/crds/devops.kubesphere.io_s2ibuildertemplates.yaml

@@ -4,7 +4,7 @@ apiVersion: apiextensions.k8s.io/v1beta1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: (devel)
+    controller-gen.kubebuilder.io/version: (unknown)
   creationTimestamp: null
   name: s2ibuildertemplates.devops.kubesphere.io
 spec:

config/crds/devops.kubesphere.io_s2iruns.yaml

@@ -4,7 +4,7 @@ apiVersion: apiextensions.k8s.io/v1beta1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: (devel)
+    controller-gen.kubebuilder.io/version: (unknown)
   creationTimestamp: null
   name: s2iruns.devops.kubesphere.io
 spec:

config/rbac/role.yaml

+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  creationTimestamp: null
+  name: manager-role
+rules:
+- apiGroups:
+  - crd.projectcalico.org
+  resources:
+  - clusterinformations
+  - felixconfigurations
+  - globalfelixconfigs
+  - globalnetworkpolicies
+  - globalnetworksets
+  - hostendpoints
+  - ipamblocks
+  - ippools
+  - networkpolicies
+  - networksets
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - network.kubesphere.io
+  resources:
+  - namespacenetworkpolicies
+  - workspacenetworkpolicies
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - tenant.kubesphere.io
+  resources:
+  - workspaces
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch

config/samples/devops_v1alpha3_devopsproject.yaml

+apiVersion: devops.kubesphere.io/v1alpha3
+kind: DevOpsProject
+metadata:
+  labels:
+    controller-tools.k8s.io: "1.0"
+  name: devopsproject-sample
+spec:
+  # Add fields here
+  foo: bar

config/samples/devops_v1alpha3_pipeline.yaml

+apiVersion: devops.kubesphere.io/v1alpha3
+kind: Pipeline
+metadata:
+  labels:
+    controller-tools.k8s.io: "1.0"
+  name: pipeline-sample
+spec:
+  # Add fields here
+  foo: bar

hack/generate_client.sh

 #!/bin/bash
 set -e
 
-GV="network:v1alpha1 servicemesh:v1alpha2 tenant:v1alpha1 devops:v1alpha1 iam:v1alpha2 cluster:v1alpha1"
+GV="network:v1alpha1 servicemesh:v1alpha2 tenant:v1alpha1 devops:v1alpha1 iam:v1alpha2 devops:v1alpha3 cluster:v1alpha1"
 
 rm -rf ./pkg/client
 ./hack/generate_group.sh "client,lister,informer" kubesphere.io/kubesphere/pkg/client kubesphere.io/kubesphere/pkg/apis "$GV" --output-base=./  -h "$PWD/hack/boilerplate.go.txt"

pkg/models/devops/membership.go → pkg/apis/addtoscheme_devops_v1alpha3.go

 /*
-Copyright 2019 The KubeSphere Authors.
+Copyright 2019 The KubeSphere authors.
+
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
 You may obtain a copy of the License at
+
     http://www.apache.org/licenses/LICENSE-2.0
+
 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -11,25 +14,13 @@ See the License for the specific language governing permissions and
 limitations under the License.
 */
 
-package devops
+package apis
 
-import "kubesphere.io/kubesphere/pkg/simple/client/devops"
-
-const (
-	ProjectMembershipTableName       = "project_membership"
-	ProjectMembershipUsernameColumn  = "project_membership.username"
-	ProjectMembershipProjectIdColumn = "project_membership.project_id"
-	ProjectMembershipRoleColumn      = "project_membership.role"
+import (
+	api "kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3"
 )
 
-var ProjectMembershipColumns = GetColumnsFromStruct(&devops.ProjectMembership{})
-
-func NewDevOpsProjectMemberShip(username, projectId, role, grantBy string) *devops.ProjectMembership {
-	return &devops.ProjectMembership{
-		Username:  username,
-		ProjectId: projectId,
-		Role:      role,
-		Status:    StatusActive,
-		GrantBy:   grantBy,
-	}
+func init() {
+	// Register the types with the Scheme so the components can map objects to GroupVersionKinds and back
+	AddToSchemes = append(AddToSchemes, api.SchemeBuilder.AddToScheme)
 }

pkg/apis/devops/crdinstall/install.go

@@ -22,9 +22,11 @@ import (
 	k8sruntime "k8s.io/apimachinery/pkg/runtime"
 	urlruntime "k8s.io/apimachinery/pkg/util/runtime"
 	devopsv1alpha1 "kubesphere.io/kubesphere/pkg/apis/devops/v1alpha1"
+	devopsv1alpha3 "kubesphere.io/kubesphere/pkg/apis/devops/v1alpha3"
 )
 
 func Install(scheme *k8sruntime.Scheme) {
 	urlruntime.Must(devopsv1alpha1.AddToScheme(scheme))
-	urlruntime.Must(scheme.SetVersionPriority(devopsv1alpha1.SchemeGroupVersion))
+	urlruntime.Must(devopsv1alpha3.AddToScheme(scheme))
+	urlruntime.Must(scheme.SetVersionPriority(devopsv1alpha3.SchemeGroupVersion, devopsv1alpha1.SchemeGroupVersion))
 }

pkg/apis/devops/v1alpha3/credential_types.go

+package v1alpha3
+
+import v1 "k8s.io/api/core/v1"
+
+/**
+We use a special type of secret as a credential for DevOps.
+This file will not contain CRD, but the credential type constants and their fields.
+*/
+const (
+	CredentialFinalizerName = "credential.finalizers.kubesphere.io"
+	DevOpsCredentialPrefix  = "credential.devops.kubesphere.io/"
+	// SecretTypeBasicAuth contains data needed for basic authentication.
+	//
+	// Required at least one of fields:
+	// - Secret.Data["username"] - username used for authentication
+	// - Secret.Data["password"] - password or token needed for authentication
+	SecretTypeBasicAuth v1.SecretType = DevOpsCredentialPrefix + "basic-auth"
+	// BasicAuthUsernameKey is the key of the username for SecretTypeBasicAuth secrets
+	BasicAuthUsernameKey = "username"
+	// BasicAuthPasswordKey is the key of the password or token for SecretTypeBasicAuth secrets
+	BasicAuthPasswordKey = "password"
+
+	// SecretTypeSSHAuth contains data needed for ssh authentication.
+	//
+	// Required at least one of fields:
+	// - Secret.Data["username"] - username used for authentication
+	// - Secret.Data["passphrase"] - passphrase needed for authentication
+	// - Secret.Data["privatekey"] - privatekey needed for authentication
+	SecretTypeSSHAuth v1.SecretType = DevOpsCredentialPrefix + "ssh-auth"
+	// SSHAuthUsernameKey is the key of the username for SecretTypeSSHAuth secrets
+	SSHAuthUsernameKey = "username"
+	// SSHAuthPrivateKey is the key of the passphrase for SecretTypeSSHAuth secrets
+	SSHAuthPassphraseKey = "passphrase"
+	// SSHAuthPrivateKey is the key of the privatekey for SecretTypeSSHAuth secrets
+	SSHAuthPrivateKey = "privatekey"
+
+	// SecretTypeSecretText contains data.
+	//
+	// Required at least one of fields:
+	// - Secret.Data["secret"] - secret
+	SecretTypeSecretText v1.SecretType = DevOpsCredentialPrefix + "secret-text"
+	// SecretTextSecretKey is the key of the secret for SecretTypeSecretText secrets
+	SecretTextSecretKey = "secret"
+
+	// SecretTypeKubeConfig contains data.
+	//
+	// Required at least one of fields:
+	// - Secret.Data["secret"] - secret
+	SecretTypeKubeConfig v1.SecretType = DevOpsCredentialPrefix + "kubeconfig"
+	// KubeConfigSecretKey is the key of the secret for SecretTypeKubeConfig secrets
+	KubeConfigSecretKey = "secret"
+	//	CredentialAutoSyncAnnoKey is used to indicate whether the secret is automatically synchronized to devops.
+	//	In the old version, the credential is stored in jenkins and cannot be obtained.
+	//	This field is set to ensure that the secret is not overwritten by a nil value.
+	CredentialAutoSyncAnnoKey = DevOpsCredentialPrefix + "autosync"
+)

pkg/apis/devops/v1alpha3/devopsproject_types.go

+/*
+Copyright 2019 The KubeSphere authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package v1alpha3
+
+import (
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+)
+
+// EDIT THIS FILE!  THIS IS SCAFFOLDING FOR YOU TO OWN!
+// NOTE: json tags are required.  Any new fields you add must have json tags for the fields to be serialized.
+
+const DevOpsProjectFinalizerName = "devopsproject.finalizers.kubesphere.io"
+
+const (
+	ResourceKindDevOpsProject     = "DevOpsProject"
+	ResourceSingularDevOpsProject = "devopsproject"
+	ResourcePluralDevOpsProject   = "devopsprojects"
+)
+
+// DevOpsProjectSpec defines the desired state of DevOpsProject
+type DevOpsProjectSpec struct {
+	// INSERT ADDITIONAL SPEC FIELDS - desired state of cluster
+	// Important: Run "make" to regenerate code after modifying this file
+
+}
+
+// DevOpsProjectStatus defines the observed state of DevOpsProject
+type DevOpsProjectStatus struct {
+	// INSERT ADDITIONAL STATUS FIELD - define observed state of cluster
+	// Important: Run "make" to regenerate code after modifying this file
+	AdminNamespace string `json:"adminNamespace,omitempty"`
+}
+
+// +genclient
+// +genclient:nonNamespaced
+// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
+
+// DevOpsProject is the Schema for the devopsprojects API
+// +kubebuilder:resource:categories="devops",scope="Cluster"
+// +k8s:openapi-gen=true
+type DevOpsProject struct {
+	metav1.TypeMeta   `json:",inline"`
+	metav1.ObjectMeta `json:"metadata,omitempty"`
+
+	Spec   DevOpsProjectSpec   `json:"spec,omitempty"`
+	Status DevOpsProjectStatus `json:"status,omitempty"`
+}
+
+// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
+
+// DevOpsProjectList contains a list of DevOpsProject
+type DevOpsProjectList struct {
+	metav1.TypeMeta `json:",inline"`
+	metav1.ListMeta `json:"metadata,omitempty"`
+	Items           []DevOpsProject `json:"items"`
+}
+
+func init() {
+	SchemeBuilder.Register(&DevOpsProject{}, &DevOpsProjectList{})
+}

pkg/apis/devops/v1alpha3/devopsproject_types_test.go

+/*
+Copyright 2019 The KubeSphere authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package v1alpha3
+
+import (
+	"testing"
+
+	"github.com/onsi/gomega"
+	"golang.org/x/net/context"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	"k8s.io/apimachinery/pkg/types"
+)
+
+func TestStorageDevOpsProject(t *testing.T) {
+	key := types.NamespacedName{
+		Name: "foo",
+	}
+	created := &DevOpsProject{
+		ObjectMeta: metav1.ObjectMeta{
+			Name: "foo",
+		}}
+	g := gomega.NewGomegaWithT(t)
+
+	// Test Create
+	fetched := &DevOpsProject{}
+	g.Expect(c.Create(context.TODO(), created)).To(gomega.Succeed())
+
+	g.Expect(c.Get(context.TODO(), key, fetched)).To(gomega.Succeed())
+	g.Expect(fetched).To(gomega.Equal(created))
+
+	// Test Updating the Labels
+	updated := fetched.DeepCopy()
+	updated.Labels = map[string]string{"hello": "world"}
+	g.Expect(c.Update(context.TODO(), updated)).To(gomega.Succeed())
+
+	g.Expect(c.Get(context.TODO(), key, fetched)).To(gomega.Succeed())
+	g.Expect(fetched).To(gomega.Equal(updated))
+
+	// Test Delete
+	g.Expect(c.Delete(context.TODO(), fetched)).To(gomega.Succeed())
+	g.Expect(c.Get(context.TODO(), key, fetched)).ToNot(gomega.Succeed())
+}

pkg/apis/devops/v1alpha3/doc.go

+/*
+Copyright 2019 The KubeSphere authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Package v1alpha3 contains API Schema definitions for the devops v1alpha3 API group
+// +k8s:openapi-gen=true
+// +k8s:deepcopy-gen=package,register
+// +k8s:conversion-gen=kubesphere.io/kubesphere/pkg/apis/devops
+// +k8s:defaulter-gen=TypeMeta
+// +groupName=devops.kubesphere.io
+package v1alpha3

pkg/apiserver/authorization/path/doc.go

@@ -15,4 +15,4 @@ limitations under the License.
 */
 
 // Package path contains an authorizer that allows certain paths and path prefixes.
-package path // import "k8s.io/apiserver/pkg/authorization/path"
+package path