feat: add PipelineRun for Cloudflare Pages deployment

Added a new PipelineRun configuration to automate documentation
deployments to Cloudflare Pages using Hugo, ensuring updates are
triggered on push to the main branch or when a new tag is created.

Signed-off-by: Chmouel Boudjnah <chmouel@redhat.com>

Signed-off-by: Chmouel Boudjnah <chmouel@redhat.com>

Author: chmouel

.tekton/doc-cloudflare-deploy.yaml

@@ -0,0 +1,131 @@
+---
+apiVersion: tekton.dev/v1beta1
+kind: PipelineRun
+metadata:
+  name: doc-cloudflare-deploy
+  annotations:
+    pipelinesascode.tekton.dev/max-keep-runs: "2"
+    pipelinesascode.tekton.dev/cancel-in-progress: "true"
+    pipelinesascode.tekton.dev/on-cel-expression: |
+      event == "push" && (
+        (target_branch == "main" && "docs/***".pathChanged()) ||
+        git_tag != ""
+      )
+spec:
+  params:
+    - name: repo_url
+      value: "{{repo_url}}"
+    - name: revision
+      value: "{{revision}}"
+    - name: hugo_version
+      value: "0.146.0"
+    - name: wrangler_version
+      value: "4.72.0"
+  pipelineSpec:
+    params:
+      - name: repo_url
+      - name: revision
+      - name: hugo_version
+      - name: wrangler_version
+    tasks:
+      - name: deploy-doc
+        taskSpec:
+          workspaces:
+            - name: source
+          steps:
+            - name: fetch-repo
+              ref:
+                resolver: http
+                params:
+                  - name: url
+                    value: https://raw.githubusercontent.com/openshift-pipelines/pipelines-as-code/refs/heads/main/.tekton/stepactions/git-clone.yaml
+              params:
+                - name: output-path
+                  value: $(workspaces.source.path)
+                - name: url
+                  value: "$(params.repo_url)"
+                - name: revision
+                  value: "$(params.revision)"
+            - name: cache-fetch
+              ref:
+                resolver: http
+                params:
+                  - name: url
+                    value: https://raw.githubusercontent.com/openshift-pipelines/pipelines-as-code/refs/heads/main/.tekton/tasks/cache-fetch.yaml
+              params:
+                - name: patterns
+                  value: ["$(workspaces.source.path)/README.md"]
+                - name: source
+                  value: oci://image-registry.openshift-image-registry.svc:5000/$(context.pipelineRun.namespace)/cache-hugo:v$(params.hugo_version)
+                - name: cachePath
+                  value: $(workspaces.source.path)/tmp/hugo
+                - name: workingdir
+                  value: $(workspaces.source.path)
+            - name: hugo-build
+              image: docker.io/golang:1.25
+              workingDir: $(workspaces.source.path)
+              script: |
+                #!/usr/bin/env bash
+                set -xeuo pipefail
+                git config --global --add safe.directory $(workspaces.source.path)
+                make download-hugo HUGO_VERSION=$(params.hugo_version)
+                hugobin=$(git rev-parse --show-toplevel)/tmp/hugo/hugo
+                [[ -x ${hugobin} ]] || {
+                  echo "Hugo was not downloaded properly" && exit 1
+                }
+                cd $(git rev-parse --show-toplevel)/docs
+                ${hugobin} build --gc --minify
+            - name: cloudflare-deploy
+              image: docker.io/node:20-slim
+              workingDir: $(workspaces.source.path)
+              env:
+                - name: CLOUDFLARE_API_TOKEN
+                  valueFrom:
+                    secretKeyRef:
+                      name: cloudflare-creds
+                      key: api-token
+                - name: CLOUDFLARE_ACCOUNT_ID
+                  valueFrom:
+                    secretKeyRef:
+                      name: cloudflare-creds
+                      key: account-id
+              script: |
+                #!/usr/bin/env bash
+                set -euo pipefail
+                git_tag="{{git_tag}}"
+                if [[ -n "${git_tag}" ]]; then
+                  branch="${git_tag}"
+                else
+                  branch="main"
+                fi
+                cd docs/public
+                npx --yes "wrangler@$(params.wrangler_version)" pages deploy . \
+                  --project-name='pipelines-as-code' \
+                  --branch="${branch}"
+            - name: cache-upload
+              ref:
+                resolver: http
+                params:
+                  - name: url
+                    value: https://raw.githubusercontent.com/openshift-pipelines/pipelines-as-code/refs/heads/main/.tekton/tasks/cache-upload.yaml
+              params:
+                - name: patterns
+                  value: ["$(workspaces.source.path)/README.md"]
+                - name: target
+                  value: oci://image-registry.openshift-image-registry.svc:5000/$(context.pipelineRun.namespace)/cache-hugo:v$(params.hugo_version)
+                - name: fetched
+                  value: $(steps.cache-fetch.results.fetched)
+                - name: cachePath
+                  value: $(workspaces.source.path)/tmp/hugo
+                - name: workingdir
+                  value: $(workspaces.source.path)
+                - name: force-cache-upload
+                  value: "false"
+        workspaces:
+          - name: source
+            workspace: source
+    workspaces:
+      - name: source
+  workspaces:
+    - name: source
+      emptyDir: {}