initial commit
This commit is contained in:
Executable
+34
@@ -0,0 +1,34 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
event_name="${GITHUB_EVENT_NAME:-}"
|
||||
git_ref="${GITHUB_REF:-}"
|
||||
|
||||
if [[ "$event_name" != "push" || "$git_ref" != "refs/heads/main" ]]; then
|
||||
echo "Skipping bootstrap apply: only push events on main may apply"
|
||||
exit 0
|
||||
fi
|
||||
|
||||
if [[ ! -f bootstrap/config.yaml ]] || ! grep -Eq '^[[:space:]]*enabled:[[:space:]]*true[[:space:]]*$' bootstrap/config.yaml; then
|
||||
echo "Skipping bootstrap apply: bootstrap/config.yaml is not enabled"
|
||||
exit 0
|
||||
fi
|
||||
|
||||
if [[ -z "${KUBECONFIG_B64:-}" ]]; then
|
||||
echo "KUBECONFIG_B64 secret is required to apply bootstrap/applicationset.yaml"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
curl -fsSL "https://dl.k8s.io/release/$(curl -fsSL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" \
|
||||
-o /usr/local/bin/kubectl
|
||||
chmod +x /usr/local/bin/kubectl
|
||||
|
||||
mkdir -p "${HOME}/.kube"
|
||||
printf '%s' "$KUBECONFIG_B64" | base64 -d > "${HOME}/.kube/config"
|
||||
|
||||
if ! kubectl config current-context >/dev/null 2>&1; then
|
||||
echo "Skipping bootstrap apply: kubeconfig secret is not usable in this runner"
|
||||
exit 0
|
||||
fi
|
||||
|
||||
kubectl apply -f bootstrap/applicationset.yaml
|
||||
Executable
+38
@@ -0,0 +1,38 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
bootstrap_enabled=false
|
||||
if [ -f bootstrap/config.yaml ] && grep -Eq '^[[:space:]]*enabled:[[:space:]]*true[[:space:]]*$' bootstrap/config.yaml; then
|
||||
bootstrap_enabled=true
|
||||
fi
|
||||
|
||||
mapfile -t manifests < <(
|
||||
find . -type f -name '*.yaml' \
|
||||
! -path './.gitea/*' \
|
||||
! -path './manifest/components/example-component/*' \
|
||||
! -name '*kustomization.yaml' \
|
||||
! -path './bootstrap/config.yaml' \
|
||||
| sort
|
||||
)
|
||||
|
||||
if [ "$bootstrap_enabled" != "true" ]; then
|
||||
filtered=()
|
||||
for manifest in "${manifests[@]}"; do
|
||||
[ "$manifest" = "./bootstrap/applicationset.yaml" ] && continue
|
||||
filtered+=("$manifest")
|
||||
done
|
||||
manifests=("${filtered[@]}")
|
||||
fi
|
||||
|
||||
if [ "${#manifests[@]}" -eq 0 ]; then
|
||||
echo "No manifests found"
|
||||
exit 0
|
||||
fi
|
||||
|
||||
printf '%s\n' "${manifests[@]}" \
|
||||
| xargs kubeconform \
|
||||
-strict \
|
||||
-kubernetes-version 1.35.0 \
|
||||
-schema-location default \
|
||||
-schema-location 'http://gitea-ha-http.apps:3000/olb042/kubeconform/raw/branch/main/crdSchemas/{{ .ResourceKind }}_{{ .ResourceAPIVersion }}.json' \
|
||||
-summary
|
||||
Executable
+241
@@ -0,0 +1,241 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
usage() {
|
||||
cat <<'USAGE'
|
||||
Usage:
|
||||
scripts/init-template \
|
||||
--repo-name my-app
|
||||
|
||||
Optional:
|
||||
--dry-run
|
||||
--repo-url https://git.olb42.com/olb42/my-app.git
|
||||
--namespace my-app
|
||||
--release-name my-app
|
||||
--hostname my-app.example.com
|
||||
USAGE
|
||||
}
|
||||
|
||||
die() {
|
||||
echo "Error: $*" >&2
|
||||
exit 1
|
||||
}
|
||||
|
||||
add_error() {
|
||||
errors+=("$*")
|
||||
}
|
||||
|
||||
add_warning() {
|
||||
warnings+=("$*")
|
||||
}
|
||||
|
||||
validate_dns_label() {
|
||||
local value="$1"
|
||||
[[ ${#value} -le 63 && "$value" =~ ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ ]]
|
||||
}
|
||||
|
||||
validate_hostname() {
|
||||
local value="$1"
|
||||
[[ ${#value} -le 253 && "$value" != .* && "$value" != *. ]] || return 1
|
||||
|
||||
local old_ifs="$IFS"
|
||||
local labels=()
|
||||
IFS='.'
|
||||
read -r -a labels <<< "$value"
|
||||
IFS="$old_ifs"
|
||||
|
||||
local label
|
||||
for label in "${labels[@]}"; do
|
||||
validate_dns_label "$label" || return 1
|
||||
done
|
||||
}
|
||||
|
||||
print_preflight() {
|
||||
local status="$1"
|
||||
|
||||
echo "Preflight checks for $repo_name"
|
||||
echo " template: $template_dir_real"
|
||||
echo " target: $target_dir"
|
||||
echo " repo URL: $repo_url"
|
||||
echo " namespace: $namespace"
|
||||
echo " hostname: $hostname"
|
||||
echo
|
||||
|
||||
if [[ ${#warnings[@]} -gt 0 ]]; then
|
||||
echo "Warnings:"
|
||||
local warning
|
||||
for warning in "${warnings[@]}"; do
|
||||
echo " - $warning"
|
||||
done
|
||||
echo
|
||||
fi
|
||||
|
||||
if [[ ${#errors[@]} -gt 0 ]]; then
|
||||
echo "Failures:"
|
||||
local error
|
||||
for error in "${errors[@]}"; do
|
||||
echo " - $error"
|
||||
done
|
||||
echo
|
||||
echo "$status"
|
||||
return 1
|
||||
fi
|
||||
|
||||
echo "$status"
|
||||
}
|
||||
|
||||
run_preflight() {
|
||||
local include_remote_check="${1:-false}"
|
||||
errors=()
|
||||
warnings=()
|
||||
|
||||
command -v git >/dev/null 2>&1 || add_error "git is required"
|
||||
command -v python3 >/dev/null 2>&1 || add_error "python3 is required"
|
||||
command -v cp >/dev/null 2>&1 || add_error "cp is required"
|
||||
|
||||
if [[ -z "$repo_name" ]]; then
|
||||
add_error "--repo-name is required"
|
||||
elif [[ ! "$repo_name" =~ ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ ]]; then
|
||||
add_error "--repo-name must be kebab-case using lowercase letters, numbers, and hyphens"
|
||||
fi
|
||||
|
||||
if [[ -z "$template_dir_real" ]]; then
|
||||
add_error "template directory not found: $template_dir"
|
||||
elif [[ "$current_dir/" != "$template_dir_real"/* ]]; then
|
||||
add_error "run this script from $template_dir or one of its subdirectories"
|
||||
elif [[ ! -d "$template_dir_real/.git" ]]; then
|
||||
add_error "template directory is not a git repository: $template_dir_real"
|
||||
else
|
||||
local branch
|
||||
branch="$(git -C "$template_dir_real" branch --show-current 2>/dev/null || true)"
|
||||
[[ "$branch" == "init" ]] || add_warning "template branch is '$branch', expected 'init'"
|
||||
fi
|
||||
|
||||
if [[ -d "$apps_dir" ]]; then
|
||||
[[ -w "$apps_dir" ]] || add_error "apps directory is not writable: $apps_dir"
|
||||
else
|
||||
local apps_parent
|
||||
apps_parent="$(dirname "$apps_dir")"
|
||||
[[ -d "$apps_parent" && -w "$apps_parent" ]] || add_error "cannot create apps directory under: $apps_parent"
|
||||
fi
|
||||
[[ -e "$target_dir" ]] && add_error "target directory already exists: $target_dir"
|
||||
|
||||
validate_dns_label "$namespace" || add_error "--namespace must be a valid Kubernetes DNS label"
|
||||
validate_dns_label "$release_name" || add_error "--release-name must be a valid Helm release name"
|
||||
validate_hostname "$hostname" || add_error "--hostname must be a valid DNS hostname"
|
||||
[[ "$repo_url" == *$'\n'* || "$repo_url" == *$'\r'* ]] && add_error "--repo-url must not contain newlines"
|
||||
[[ "$repo_url" =~ ^https://git\.olb42\.com/olb42/[a-z0-9]([-a-z0-9]*[a-z0-9])?\.git$ ]] || add_error "--repo-url must match https://git.olb42.com/olb42/<kebab-repo>.git"
|
||||
[[ "$repo_url" == "https://git.olb42.com/olb42/$repo_name.git" ]] || add_warning "--repo-url does not match --repo-name"
|
||||
|
||||
if [[ "$include_remote_check" == true && ${#errors[@]} -eq 0 ]]; then
|
||||
local remote_output
|
||||
remote_output="$(GIT_TERMINAL_PROMPT=0 git ls-remote --heads "$repo_url" main init 2>&1 || true)"
|
||||
if printf '%s\n' "$remote_output" | grep -q 'refs/heads/'; then
|
||||
add_error "remote already has main/init branches at $repo_url"
|
||||
else
|
||||
local remote_check_output
|
||||
remote_check_output="$(GIT_TERMINAL_PROMPT=0 git ls-remote "$repo_url" 2>&1 || true)"
|
||||
if printf '%s\n' "$remote_check_output" | grep -qi '^fatal:'; then
|
||||
add_error "remote repository is not reachable without prompting: $repo_url ($remote_check_output)"
|
||||
fi
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
repo_name=""
|
||||
repo_url=""
|
||||
namespace=""
|
||||
release_name=""
|
||||
hostname=""
|
||||
dry_run=false
|
||||
errors=()
|
||||
warnings=()
|
||||
|
||||
while [[ $# -gt 0 ]]; do
|
||||
case "$1" in
|
||||
--repo-name) [[ $# -ge 2 ]] || die "--repo-name requires a value"; repo_name="$2"; shift 2 ;;
|
||||
--repo-url) [[ $# -ge 2 ]] || die "--repo-url requires a value"; repo_url="$2"; shift 2 ;;
|
||||
--namespace) [[ $# -ge 2 ]] || die "--namespace requires a value"; namespace="$2"; shift 2 ;;
|
||||
--release-name) [[ $# -ge 2 ]] || die "--release-name requires a value"; release_name="$2"; shift 2 ;;
|
||||
--hostname) [[ $# -ge 2 ]] || die "--hostname requires a value"; hostname="$2"; shift 2 ;;
|
||||
--dry-run) dry_run=true; shift ;;
|
||||
-h|--help) usage; exit 0 ;;
|
||||
*) echo "Unknown argument: $1"; usage; exit 1 ;;
|
||||
esac
|
||||
done
|
||||
|
||||
template_dir="$HOME/devops/infra/templates/template"
|
||||
apps_dir="$HOME/devops/apps"
|
||||
target_dir="$apps_dir/$repo_name"
|
||||
|
||||
current_dir="$(pwd -P)"
|
||||
template_dir_real="$(cd "$template_dir" 2>/dev/null && pwd -P || true)"
|
||||
|
||||
repo_url="${repo_url:-https://git.olb42.com/olb42/$repo_name.git}"
|
||||
release_name="${release_name:-$repo_name}"
|
||||
hostname="${hostname:-$repo_name.olb42.com}"
|
||||
namespace="${namespace:-$repo_name}"
|
||||
|
||||
run_preflight "$dry_run"
|
||||
|
||||
if [[ "$dry_run" == true ]]; then
|
||||
if [[ ${#errors[@]} -gt 0 ]]; then
|
||||
print_preflight "Dry run failed. No files were copied."
|
||||
exit 1
|
||||
fi
|
||||
print_preflight "Dry run passed. No files were copied."
|
||||
exit 0
|
||||
fi
|
||||
|
||||
if [[ ${#errors[@]} -gt 0 ]]; then
|
||||
usage
|
||||
print_preflight "Template initialization failed before copying files." >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
mkdir -p "$apps_dir"
|
||||
cp -a "$template_dir_real" "$target_dir"
|
||||
|
||||
cd "$target_dir"
|
||||
|
||||
git reset --mixed >/dev/null
|
||||
|
||||
python3 - "$repo_name" "$repo_url" "$namespace" "$release_name" "$hostname" <<'PY'
|
||||
from pathlib import Path
|
||||
import sys
|
||||
|
||||
repo_name, repo_url, namespace, release_name, hostname = sys.argv[1:]
|
||||
replacements = {
|
||||
"${REPO_NAME_KEBAB}": repo_name,
|
||||
"${REPO_HTTPS_URL}": repo_url,
|
||||
"${APP_NAMESPACE}": namespace,
|
||||
"${HELM_RELEASE_NAME}": release_name,
|
||||
"${APP_HOSTNAME}": hostname,
|
||||
}
|
||||
|
||||
for path in Path(".").rglob("*"):
|
||||
if not path.is_file():
|
||||
continue
|
||||
if ".git" in path.parts or path.name == "init-template":
|
||||
continue
|
||||
try:
|
||||
text = path.read_text()
|
||||
except UnicodeDecodeError:
|
||||
continue
|
||||
original = text
|
||||
for old, new in replacements.items():
|
||||
text = text.replace(old, new)
|
||||
if text != original:
|
||||
path.write_text(text)
|
||||
PY
|
||||
|
||||
git branch -M main
|
||||
while IFS= read -r remote; do
|
||||
git remote remove "$remote"
|
||||
done < <(git remote)
|
||||
git remote add origin "$repo_url"
|
||||
|
||||
echo "Template initialized for $repo_name"
|
||||
echo "Created $target_dir"
|
||||
echo "Remote origin: $repo_url"
|
||||
echo "Next: review manifest/overlays/production and push main"
|
||||
@@ -0,0 +1,8 @@
|
||||
replace_repo_name_kebab() {
|
||||
local replacement="$1"
|
||||
if [[ -z "$replacement" ]]; then
|
||||
echo "Usage: replace_repo_name_kebab <replacement>"
|
||||
return 1
|
||||
fi
|
||||
find . -type f ! -path './.git/*' -exec perl -pi -e 's/\$\{REPO_NAME_KEBAB}/$ARGV[0]/g' "$replacement" {} +
|
||||
}
|
||||
Reference in New Issue
Block a user