Initial commit.
This commit is contained in:
commit
840bd2e12a
GPG key ID:
821AEE0FD167FBDF
10 changed files with 322 additions and 0 deletions
37
bin/arkade-install.sh
Executable file
37
bin/arkade-install.sh
Executable file
|
|
@ -0,0 +1,37 @@
|
|||
#!/bin/sh
|
||||
|
||||
# TOOLS LIST
|
||||
ARKADE_APPS="kubectl vcluster"
|
||||
|
||||
# Add the arkade binary directory to the path if missing
|
||||
case ":${PATH}:" in
|
||||
*:"${HOME}/.arkade/bin":*) ;;
|
||||
*) export PATH="${PATH}:${HOME}/.arkade/bin" ;;
|
||||
esac
|
||||
|
||||
# Install or update arkade
|
||||
if command -v arkade >/dev/null; then
|
||||
echo "Trying to update the arkade application"
|
||||
sudo arkade update
|
||||
else
|
||||
echo "Installing the arkade application"
|
||||
curl -sLS https://get.arkade.dev | sudo sh
|
||||
fi
|
||||
|
||||
echo ""
|
||||
echo "Installing tools with arkade"
|
||||
echo ""
|
||||
for app in $ARKADE_APPS; do
|
||||
app_path="$(command -v $app)" || true
|
||||
if [ "$app_path" ]; then
|
||||
echo "The application '$app' already available on '$app_path'"
|
||||
else
|
||||
arkade get "$app"
|
||||
fi
|
||||
done
|
||||
|
||||
cat <<EOF
|
||||
|
||||
Add the ~/.arkade/bin directory to your PATH if tools have been installed there
|
||||
|
||||
EOF
|
||||
75
bin/create-vcluster.sh
Executable file
75
bin/create-vcluster.sh
Executable file
|
|
@ -0,0 +1,75 @@
|
|||
#!/bin/sh
|
||||
|
||||
set -e
|
||||
|
||||
# VARIABLES
|
||||
# Relative PATH to the workdir from the script directory
|
||||
WORK_DIR_RELPATH="../vcluster"
|
||||
|
||||
# Compute WORKDIR
|
||||
SCRIPT="$(readlink -f "$0")"
|
||||
SCRIPT_DIR="$(dirname "$SCRIPT")"
|
||||
WORK_DIR="$(readlink -f "$SCRIPT_DIR/$WORK_DIR_RELPATH")"
|
||||
|
||||
# Update the PATH to add the arkade bin directory
|
||||
# Add the arkade binary directory to the path if missing
|
||||
case ":${PATH}:" in
|
||||
*:"${HOME}/.arkade/bin":*) ;;
|
||||
*) export PATH="${PATH}:${HOME}/.arkade/bin" ;;
|
||||
esac
|
||||
|
||||
# Go to the working directory
|
||||
cd "$WORK_DIR" || exit 1
|
||||
|
||||
echo "=> Creating or updating the vcluster"
|
||||
vcluster create my-vcluster --namespace my-vcluster --upgrade --connect=false \
|
||||
--values vcluster.yaml
|
||||
|
||||
echo "=> Adding a traefik ingress route tcp to the vcluster api"
|
||||
kubectl apply -f ingress_route_tcp.yaml
|
||||
|
||||
echo "=> Exporting vcluster kubeconfig"
|
||||
tries="0"
|
||||
while true; do
|
||||
if kubectl get -n my-vcluster secret/my-vcluster-kubeconfig >/dev/null 2>&1; then
|
||||
# Dump the kubeconfig if available
|
||||
kubectl get -n my-vcluster secret/my-vcluster-kubeconfig \
|
||||
--template="{{.data.config}}" | base64 -d > ~/.kube/my-vcluster-config
|
||||
echo "KubeConfig dumped to '~/.kube/my-vcluster-config'"
|
||||
break
|
||||
fi
|
||||
tries="$((tries + 1))"
|
||||
echo "KubeConfig not avaliable after attempt '$tries'"
|
||||
if [ "$tries" -lt "10" ]; then
|
||||
sleep 5
|
||||
else
|
||||
break
|
||||
fi
|
||||
done
|
||||
|
||||
if [ "$tries" -eq "10" ]; then
|
||||
echo "=> Failed to get the vcluster kubeconfig, try again"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
cat <<EOF
|
||||
=> NOTE
|
||||
Overwrite the KUBECONFIG variable to access the vcluster with 'kubectl':
|
||||
|
||||
KUBECONFIG=~/.kube/my-vcluster-config kubectl
|
||||
|
||||
You can define the following 'vkubectl' alias to make it easier:
|
||||
|
||||
alias vkubectl="KUBECONFIG=~/.kube/my-vcluster-config kubectl"
|
||||
|
||||
Or you can merge it with the one on the KUBECONFIG variable and use 'kubectx' or
|
||||
a similar tool to change the context (for our vcluster the context will be
|
||||
'my-vcluster_k3d-argocd').
|
||||
|
||||
If your KUBECONFIG variable is defined and only has the path to a single file
|
||||
you can merge it with the vcluster config running the following:
|
||||
|
||||
KUBECONFIG="\$KUBECONFIG:~/.kube/my-vcluster-config" \\
|
||||
kubectl config view --flatten > "\$KUBECONFIG.new";
|
||||
mv "\$KUBECONFIG.new" "\$KUBECONFIG"
|
||||
EOF
|
||||
30
bin/install-vcluster-apps.sh
Executable file
30
bin/install-vcluster-apps.sh
Executable file
|
|
@ -0,0 +1,30 @@
|
|||
#!/bin/sh
|
||||
|
||||
set -e
|
||||
|
||||
# Applications to install
|
||||
APPS="dummyhttp reloader"
|
||||
|
||||
# Relative PATH to the workdir from the script directory
|
||||
WORK_DIR_RELPATH="../apps"
|
||||
|
||||
# Compute WORKDIR
|
||||
SCRIPT="$(readlink -f "$0")"
|
||||
SCRIPT_DIR="$(dirname "$SCRIPT")"
|
||||
WORK_DIR="$(readlink -f "$SCRIPT_DIR/$WORK_DIR_RELPATH")"
|
||||
|
||||
# Update the PATH to add the arkade bin directory
|
||||
# Add the arkade binary directory to the path if missing
|
||||
case ":${PATH}:" in
|
||||
*:"${HOME}/.arkade/bin":*) ;;
|
||||
*) export PATH="${PATH}:${HOME}/.arkade/bin" ;;
|
||||
esac
|
||||
|
||||
# Go to the working directory
|
||||
cd "$WORK_DIR" || exit 1
|
||||
|
||||
for app in $APPS; do
|
||||
echo "=> Deploying the '$app' application"
|
||||
kustomize build "$app" | \
|
||||
KUBECONFIG=~/.kube/my-vcluster-config kubectl apply -f -
|
||||
done
|
||||
78
bin/vcluster-dummyhttp-secret.sh
Executable file
78
bin/vcluster-dummyhttp-secret.sh
Executable file
|
|
@ -0,0 +1,78 @@
|
|||
#!/bin/sh
|
||||
|
||||
set -e
|
||||
|
||||
# VARIABLES
|
||||
SECRET_VALUE="${*:-Vcluster Boo}"
|
||||
SECRET_CONTEXT="k3d-argocd"
|
||||
SECRET_NAME="dummyhttp-secret"
|
||||
SECRET_NAMESPACE="my-vcluster-default"
|
||||
|
||||
# Relative PATH to the workdir from the script directory
|
||||
WORK_DIR_RELPATH="../"
|
||||
|
||||
# Compute WORKDIR
|
||||
SCRIPT="$(readlink -f "$0")"
|
||||
SCRIPT_DIR="$(dirname "$SCRIPT")"
|
||||
WORK_DIR="$(readlink -f "$SCRIPT_DIR/$WORK_DIR_RELPATH")"
|
||||
|
||||
# Update the PATH to add the arkade bin directory
|
||||
# Add the arkade binary directory to the path if missing
|
||||
case ":${PATH}:" in
|
||||
*:"${HOME}/.arkade/bin":*) ;;
|
||||
*) export PATH="${PATH}:${HOME}/.arkade/bin" ;;
|
||||
esac
|
||||
|
||||
# Go to the working directory
|
||||
cd "$WORK_DIR" || exit 1
|
||||
|
||||
echo "=> Checking if the '$SECRET_NAMESPACE' is available"
|
||||
if kubectl get namespace "$SECRET_NAMESPACE" >/dev/null 2>&1; then
|
||||
echo "The '$SECRET_NAMESPACE' namespace already exists"
|
||||
else
|
||||
kubectl create namespace "$SECRET_NAMESPACE"
|
||||
fi
|
||||
|
||||
echo "=> Creating secret file with SECRET_VAR = '$SECRET_VALUE'"
|
||||
echo -n "$SECRET_VALUE" | \
|
||||
kubectl create secret generic "$SECRET_NAME" --namespace "$SECRET_NAMESPACE" \
|
||||
--dry-run=client --from-file=SECRET_VAR=/dev/stdin -o yaml \
|
||||
>dummyhttp-secret.yaml
|
||||
|
||||
echo "=> Creating sealed secret on file"
|
||||
kubeseal --context "$SECRET_CONTEXT" -f dummyhttp-secret.yaml \
|
||||
-w dummyhttp-sealed-secret.yaml
|
||||
|
||||
rm -f dummyhttp-secret.yaml
|
||||
|
||||
echo "=> Adding or updating sealed secret on '$SECRET_NAMESPACE' namespace"
|
||||
kubectl apply --context "$SECRET_CONTEXT" -f dummyhttp-sealed-secret.yaml
|
||||
|
||||
rm -f dummyhttp-sealed-secret.yaml
|
||||
|
||||
tries="0"
|
||||
while true; do
|
||||
if kubectl get --context "$SECRET_CONTEXT" --namespace "$SECRET_NAMESPACE" \
|
||||
secret/dummyhttp-secret >/dev/null 2>&1; then
|
||||
break
|
||||
fi
|
||||
tries="$((tries+1))"
|
||||
echo "Secret not avaliable after attempt '$tries'"
|
||||
if [ "$tries" -lt "10" ]; then
|
||||
sleep 2
|
||||
else
|
||||
break
|
||||
fi
|
||||
done
|
||||
|
||||
if [ "$tries" -eq "10" ]; then
|
||||
echo "Failed to get 'dummyhttp-secret', something dind't work as expected"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
SECRET_VAR="$(
|
||||
kubectl get --context "$SECRET_CONTEXT" --namespace "$SECRET_NAMESPACE" \
|
||||
secret/dummyhttp-secret --template="{{.data.SECRET_VAR}}" | base64 -d
|
||||
)"
|
||||
|
||||
echo "=> Found secret/dummyhttp-secret: SECRET_VAR = '$SECRET_VAR'"
|
||||
Loading…
Add table
Add a link
Reference in a new issue