65 lines
2.3 KiB
Bash
Executable File
65 lines
2.3 KiB
Bash
Executable File
#!/bin/bash
|
|
set -euo pipefail
|
|
|
|
if [ -z ${PLUGIN_NAMESPACE} ]; then
|
|
PLUGIN_NAMESPACE="default"
|
|
fi
|
|
|
|
if [ ! -z ${PLUGIN_KUBERNETES_SERVER} ]; then
|
|
KUBERNETES_SERVER=$PLUGIN_KUBERNETES_SERVER
|
|
else
|
|
echo "ERROR: kubernetes_server url not provided"
|
|
fi
|
|
|
|
if [ ! -z ${PLUGIN_KUBERNETES_CERT} ]; then
|
|
KUBERNETES_CERT=${PLUGIN_KUBERNETES_CERT}
|
|
else
|
|
echo "WARNING: kubernetes_server_cert not provided"
|
|
echo "Inscure connection to the cluster will be used."
|
|
fi
|
|
|
|
if [ ! -z ${PLUGIN_KUBERNETES_USER} ]; then
|
|
KUBERNETES_USER=${PLUGIN_KUBERNETES_USER:-default}
|
|
fi
|
|
|
|
if [ ! -z ${PLUGIN_KUBERNETES_CLIENT_CERT} ] && [ ! -z ${PLUGIN_KUBERNETES_CLIENT_KEY} ]; then
|
|
KUBERNETES_CLIENT_CERT=$PLUGIN_KUBERNETES_CLIENT_CERT
|
|
KUBERNETES_CLIENT_KEY=$PLUGIN_KUBERNETES_CLIENT_KEY
|
|
echo "INFO: Setting client credentials with signed-certificate and key."
|
|
echo ${KUBERNETES_CLIENT_CERT} | base64 -d > client.crt
|
|
echo ${KUBERNETES_CLIENT_KEY} | base64 -d > client.key
|
|
kubectl config set-credentials ${KUBERNETES_USER} --client-certificate=client.crt --client-key=client.key
|
|
elif [ ! -z ${PLUGIN_KUBERNETES_TOKEN} ]; then
|
|
KUBERNETES_TOKEN=$PLUGIN_KUBERNETES_TOKEN
|
|
echo "INFO: Setting client credentials with token."
|
|
kubectl config set-credentials ${KUBERNETES_USER} --token=${KUBERNETES_TOKEN}
|
|
else
|
|
echo "ERROR: Provide either of the following authentication params:"
|
|
echo "[1] kubernetes_token"
|
|
echo "[2] kubernetes_client_cert and kubernetes_client_key"
|
|
exit 1
|
|
fi
|
|
|
|
if [ ! -z ${KUBERNETES_CERT} ]; then
|
|
echo "INFO: Using secure connection with tls-certificate."
|
|
echo ${KUBERNETES_CERT} | base64 -d > ca.crt
|
|
kubectl config set-cluster default --server=${KUBERNETES_SERVER} --certificate-authority=ca.crt
|
|
else
|
|
echo "WARNING: Using insecure connection to cluster"
|
|
kubectl config set-cluster default --server=${KUBERNETES_SERVER} --insecure-skip-tls-verify=true
|
|
fi
|
|
|
|
kubectl config set-context default --cluster=default --user=default
|
|
kubectl config use-context default
|
|
|
|
# kubectl version
|
|
IFS=',' read -r -a DEPLOYMENTS <<< "${PLUGIN_DEPLOYMENT}"
|
|
IFS=',' read -r -a CONTAINERS <<< "${PLUGIN_CONTAINER}"
|
|
for DEPLOY in ${DEPLOYMENTS[@]}; do
|
|
echo Deploying to $KUBERNETES_SERVER
|
|
for CONTAINER in ${CONTAINERS[@]}; do
|
|
kubectl -n ${PLUGIN_NAMESPACE} set image deployment/${DEPLOY} \
|
|
${CONTAINER}=${PLUGIN_REPO}:${PLUGIN_TAG} --record
|
|
done
|
|
done
|