mirror
/
drone-kubernetes
mirror of https://github.com/honestbee/drone-kubernetes.git
1
0
Fork 0
Code Issues Releases Wiki Activity

code-sanity

This commit is contained in:
hashfyre 2018-01-10 16:58:04 +05:30
parent ad2ec49271
commit d8eefee123
1 changed files with 45 additions and 43 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

88
update.sh
View File

@ -1,69 +1,71 @@
#!/bin/bash #!/bin/bash
set -euo pipefail set -euo pipefail
if [ ! -z ${PLUGIN_KUBERNETES_USER} ]; then # check optional params
KUBERNETES_USER=${PLUGIN_KUBERNETES_USER:-default} if [ ! -z ${PLUGIN_USER} ]; then
USER=${PLUGIN_USER:-default}
fi fi
if [ ! -z ${PLUGIN_KUBERNETES_ENV} ]; then if [ ! -z ${PLUGIN_NAMESPACE} ]; then
KUBERNETES_ENV=${PLUGIN_KUBERNETES_ENV} NAMESPACE=${PLUGIN_NAMESPACE:-default}
fi
KUBERNETES_SERVER_VAR=KUBERNETES_SERVER_${KUBERNETES_ENV} # check required params
KUBERNETES_CERT_VAR=KUBERNETES_SERVER_CERT_${KUBERNETES_ENV} if [ ! -z ${PLUGIN_CLUSTER} ]; then
CLUSTER=${PLUGIN_CLUSTER}
KUBERNETES_SERVER=${!KUBERNETES_SERVER_VAR} SERVER_URL_VAR=SERVER_URL_${CLUSTER}
KUBERNETES_CERT=${!KUBERNETES_CERT_VAR} SERVER_CERT_VAR=SERVER_CERT_${CLUSTER}
CLIENT_CERT_VAR=CLIENT_CERT_${CLUSTER}
CLIENT_KEY_VAR=CLIENT_KEY_${CLUSTER}
if [[ -z "${KUBERNETES_SERVER}" ]]; then SERVER_URL=${!SERVER_URL_VAR}
echo "ERROR: drone secret ${KUBERNETES_SERVER_VAR} not added!" SERVER_CERT=${!SERVER_CERT_VAR}
CLIENT_CERT=${!CLIENT_CERT_VAR}
CLIENT_KEY=${!CLIENT_KEY_VAR}
if [[ -z "${SERVER_URL}" ]]; then
echo "[ERROR] drone secret: ${SERVER_URL_VAR} not added!"
exit 1 exit 1
fi fi
if [[ -z "${KUBERNETES_CERT}" ]]; then if [[ ! -z "${SERVER_CERT}" ]]; then
echo "ERROR: drone secret ${KUBERNETES_CERT_VAR} not added!" echo "[INFO] Using secure connection with tls-certificate."
echo "Inscure connection to the cluster will be used." echo ${SERVER_CERT} | base64 -d > ca.crt
kubectl config set-cluster default --server=${SERVER_URL} --certificate-authority=ca.crt
if [[ ! -z "${CLIENT_CERT}" ]] && [[ ! -z "${CLIENT_KEY}" ]]; then
echo "[INFO] Setting client credentials with signed-certificate and key."
echo ${CLIENT_CERT} | base64 -d > client.crt
echo ${CLIENT_KEY} | base64 -d > client.key
kubectl config set-credentials ${USER} --client-certificate=client.crt --client-key=client.key
else
echo "[ERROR] Required plugin parameters:"
echo " - client_cert"
echo " - client_key"
echo "are not provided"
exit 1
fi fi
else else
echo "ERROR: kubernetes_env not provided" echo "[WARNING] Required plugin parameter: ${SERVER_CERT_VAR} not added!"
echo "[WARNING] Using insecure connection to cluster"
kubectl config set-cluster default --server=${SERVER_URL} --insecure-skip-tls-verify=true
fi
else
echo "[ERROR] Required pipeline parameter: cluster not provided"
exit 1 exit 1
fi fi
if [ -z ${PLUGIN_NAMESPACE} ]; then kubectl config set-context default --cluster=default --user=${USER}
PLUGIN_NAMESPACE="default"
fi
if [[ ! -z "${KUBERNETES_CLIENT_CERT}" ]] && [[ ! -z "${KUBERNETES_CLIENT_KEY}" ]]; then
echo "INFO: Setting client credentials with signed-certificate and key."
echo ${KUBERNETES_CLIENT_CERT} | base64 -d > client.crt
echo ${KUBERNETES_CLIENT_KEY} | base64 -d > client.key
kubectl config set-credentials ${KUBERNETES_USER} --client-certificate=client.crt --client-key=client.key
else
echo "ERROR: Provide the following authentication params:"
echo " - kubernetes_client_cert"
echo " - kubernetes_client_key"
echo "as drone secrets"
exit 1
fi
if [ ! -z "${KUBERNETES_CERT}" ]; then
echo "INFO: Using secure connection with tls-certificate."
echo ${KUBERNETES_CERT} | base64 -d > ca.crt
kubectl config set-cluster default --server=${KUBERNETES_SERVER} --certificate-authority=ca.crt
else
echo "WARNING: Using insecure connection to cluster"
kubectl config set-cluster default --server=${KUBERNETES_SERVER} --insecure-skip-tls-verify=true
fi
kubectl config set-context default --cluster=default --user=${KUBERNETES_USER}
kubectl config use-context default kubectl config use-context default
# kubectl version # kubectl version
IFS=',' read -r -a DEPLOYMENTS <<< "${PLUGIN_DEPLOYMENT}" IFS=',' read -r -a DEPLOYMENTS <<< "${PLUGIN_DEPLOYMENT}"
IFS=',' read -r -a CONTAINERS <<< "${PLUGIN_CONTAINER}" IFS=',' read -r -a CONTAINERS <<< "${PLUGIN_CONTAINER}"
for DEPLOY in ${DEPLOYMENTS[@]}; do for DEPLOY in ${DEPLOYMENTS[@]}; do
echo Deploying to ${KUBERNETES_ENV} echo Deploying to ${CLUSTER}
for CONTAINER in ${CONTAINERS[@]}; do for CONTAINER in ${CONTAINERS[@]}; do
kubectl -n ${PLUGIN_NAMESPACE} set image deployment/${DEPLOY} \ kubectl -n ${NAMESPACE} set image deployment/${DEPLOY} \
${CONTAINER}="${PLUGIN_REPO}:${PLUGIN_TAG}" --record ${CONTAINER}="${PLUGIN_REPO}:${PLUGIN_TAG}" --record
done done
done done