-
Notifications
You must be signed in to change notification settings - Fork 12
/
bootstrapSecrets.go
119 lines (109 loc) · 4.12 KB
/
bootstrapSecrets.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
/*
Copyright (C) 2021-2023, Kubefirst
This program is licensed under MIT.
See the LICENSE file for more details.
*/
package civo
import (
"context"
"fmt"
"os"
"strings"
"github.com/rs/zerolog/log"
"github.com/kubefirst/runtime/pkg/k8s"
"github.com/spf13/viper"
v1 "k8s.io/api/core/v1"
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
)
func BootstrapCivoMgmtCluster(kubeconfigPath string, gitProvider string, gitUser string) error {
clientset, err := k8s.GetClientSet(kubeconfigPath)
if err != nil {
log.Info().Msg("error getting kubernetes clientset")
}
// Create namespace
// Skip if it already exists
newNamespaces := []string{
"argocd",
"atlantis",
"external-dns",
"external-secrets-operator",
}
for i, s := range newNamespaces {
namespace := &v1.Namespace{ObjectMeta: metav1.ObjectMeta{Name: s}}
_, err := clientset.CoreV1().Namespaces().Get(context.TODO(), s, metav1.GetOptions{})
if err != nil {
_, err = clientset.CoreV1().Namespaces().Create(context.TODO(), namespace, metav1.CreateOptions{})
if err != nil {
log.Error().Err(err).Msg("")
return fmt.Errorf("error creating namespace")
}
log.Info().Msgf("%d, %s", i, s)
log.Info().Msgf("namespace created: %s", s)
} else {
log.Warn().Msgf("namespace %s already exists - skipping", s)
}
}
// Create secrets
createSecrets := []*v1.Secret{
// argocd
{
ObjectMeta: metav1.ObjectMeta{
Name: "repo-credentials-template",
Namespace: "argocd",
Annotations: map[string]string{"managed-by": "argocd.argoproj.io"},
Labels: map[string]string{"argocd.argoproj.io/secret-type": "repository"},
},
Data: map[string][]byte{
"type": []byte("git"),
"name": []byte(fmt.Sprintf("%s-gitops", viper.GetString(fmt.Sprintf("flags.%s-owner", gitProvider)))),
"url": []byte(viper.GetString(fmt.Sprintf("%s.repos.gitops.git-url", gitProvider))),
"sshPrivateKey": []byte(viper.GetString("kbot.private-key")),
},
},
{
ObjectMeta: metav1.ObjectMeta{Name: "civo-creds", Namespace: "external-dns"},
Data: map[string][]byte{
"civo-token": []byte(os.Getenv("CIVO_TOKEN")),
},
},
}
for _, secret := range createSecrets {
_, err := clientset.CoreV1().Secrets(secret.ObjectMeta.Namespace).Get(context.TODO(), secret.ObjectMeta.Name, metav1.GetOptions{})
if err == nil {
log.Info().Msgf("kubernetes secret %s/%s already created - skipping", secret.Namespace, secret.Name)
} else if strings.Contains(err.Error(), "not found") {
_, err = clientset.CoreV1().Secrets(secret.ObjectMeta.Namespace).Create(context.TODO(), secret, metav1.CreateOptions{})
if err != nil {
log.Fatal().Msgf("error creating kubernetes secret %s/%s: %s", secret.Namespace, secret.Name, err)
}
log.Info().Msgf("created kubernetes secret: %s/%s", secret.Namespace, secret.Name)
}
}
// Data used for service account creation
var automountServiceAccountToken bool = true
// Create service accounts
createServiceAccounts := []*v1.ServiceAccount{
// atlantis
{
ObjectMeta: metav1.ObjectMeta{Name: "atlantis", Namespace: "atlantis"},
AutomountServiceAccountToken: &automountServiceAccountToken,
},
// external-secrets-operator
{
ObjectMeta: metav1.ObjectMeta{Name: "external-secrets", Namespace: "external-secrets-operator"},
},
}
for _, serviceAccount := range createServiceAccounts {
_, err := clientset.CoreV1().ServiceAccounts(serviceAccount.ObjectMeta.Namespace).Get(context.TODO(), serviceAccount.ObjectMeta.Name, metav1.GetOptions{})
if err == nil {
log.Info().Msgf("kubernetes service account %s/%s already created - skipping", serviceAccount.Namespace, serviceAccount.Name)
} else if strings.Contains(err.Error(), "not found") {
_, err = clientset.CoreV1().ServiceAccounts(serviceAccount.ObjectMeta.Namespace).Create(context.TODO(), serviceAccount, metav1.CreateOptions{})
if err != nil {
log.Fatal().Msgf("error creating kubernetes service account %s/%s: %s", serviceAccount.Namespace, serviceAccount.Name, err)
}
log.Info().Msgf("created kubernetes service account: %s/%s", serviceAccount.Namespace, serviceAccount.Name)
}
}
return nil
}