113 lines
3.6 KiB
Bash
113 lines
3.6 KiB
Bash
#!/bin/bash
|
||
set -e
|
||
|
||
# 📦 Install required tools (run via Woodpecker .woodpecker.yml)
|
||
apk add --no-cache git bash curl yq jq
|
||
|
||
echo "🔍 Scanning for apps with cname.yaml..."
|
||
|
||
mkdir -p generated-values
|
||
rm -rf .tmp-repos
|
||
mkdir -p .tmp-repos
|
||
|
||
# === REPO CONFIG ===
|
||
SANDBOX_REPO_URL="https://git.dvirlabs.com/dvirlabs/sandbox.git"
|
||
INFRA_REPO_URL="https://${GIT_TOKEN}@git.dvirlabs.com/dvirlabs/infra.git"
|
||
SANDBOX_CLONE=".tmp-repos/sandbox"
|
||
INFRA_CLONE=".tmp-repos/infra"
|
||
GENERATED_FILE="generated-values/cloudflared-values.yaml"
|
||
ORIGINAL_FILE="$INFRA_CLONE/manifests/cloudflared/values.yaml"
|
||
MERGED_FILE="$INFRA_CLONE/manifests/cloudflared/values.yaml"
|
||
|
||
# === STEP 1: Clone Repos ===
|
||
echo "📦 Cloning sandbox-apps..."
|
||
git clone --depth=1 "$SANDBOX_REPO_URL" "$SANDBOX_CLONE"
|
||
|
||
echo "📦 Cloning infra..."
|
||
git clone --depth=1 "$INFRA_REPO_URL" "$INFRA_CLONE"
|
||
|
||
ls -l .tmp-repos/
|
||
|
||
# === STEP 2: Extract Generated CNAMEs from sandbox ===
|
||
echo "⚙️ Generating sandbox ingress list..."
|
||
cat <<EOF > "$GENERATED_FILE"
|
||
ingress: []
|
||
EOF
|
||
|
||
find "$SANDBOX_CLONE/manifests" -name cname.yaml | while read -r cname_file; do
|
||
app_name=$(basename "$(dirname "$cname_file")")
|
||
enabled=$(yq '.enabled' "$cname_file")
|
||
|
||
if [[ "$enabled" == "true" ]]; then
|
||
hostname=$(yq '.hostname' "$cname_file")
|
||
service="http://${app_name}.sandbox.svc.cluster.local:80"
|
||
|
||
echo "✅ Found $hostname → $service"
|
||
|
||
# Append new entry to generated ingress list
|
||
yq eval ".ingress += [{\"hostname\": \"$hostname\", \"service\": \"$service\"}]" -i "$GENERATED_FILE"
|
||
fi
|
||
done
|
||
|
||
echo "📄 Generated Ingress:"
|
||
cat "$GENERATED_FILE"
|
||
|
||
# === STEP 3: Merge with existing cloudflared values ===
|
||
echo "🔁 Merging new entries into: $ORIGINAL_FILE"
|
||
|
||
TEMP_FILE=$(mktemp)
|
||
|
||
# Extract original ingress
|
||
yq eval '.cloudflare.ingress' "$ORIGINAL_FILE" > "$TEMP_FILE"
|
||
|
||
# Append new unique entries
|
||
yq eval '.ingress' "$GENERATED_FILE" | yq eval -o=json '.' - | jq -c '.[]' | while read -r new_entry; do
|
||
hostname=$(echo "$new_entry" | jq -r '.hostname')
|
||
service=$(echo "$new_entry" | jq -r '.service')
|
||
|
||
exists=$(yq e ".cloudflare.ingress[] | select(.hostname == \"$hostname\")" "$ORIGINAL_FILE")
|
||
|
||
if [ -z "$exists" ]; then
|
||
echo "➕ Adding $hostname → $service"
|
||
yq eval ". += [{\"hostname\": \"$hostname\", \"service\": \"$service\"}]" -i "$TEMP_FILE"
|
||
else
|
||
echo "⚠️ $hostname already exists, skipping"
|
||
fi
|
||
done
|
||
|
||
# === STEP 4: Load preserved values ===
|
||
TUNNEL_NAME=$(yq e '.cloudflare.tunnelName' "$ORIGINAL_FILE")
|
||
ENABLE_WARP=$(yq e '.cloudflare.enableWarp' "$ORIGINAL_FILE")
|
||
SECRET_NAME=$(yq e '.cloudflare.secretName' "$ORIGINAL_FILE")
|
||
CLOUDFLARED_BLOCK=$(yq e '.cloudflared' "$ORIGINAL_FILE")
|
||
|
||
# === STEP 5: Write final merged values ===
|
||
echo "📝 Writing merged file to $MERGED_FILE"
|
||
yq eval "
|
||
.cloudflare.ingress = load(\"$TEMP_FILE\") |
|
||
.cloudflare.tunnelName = \"$TUNNEL_NAME\" |
|
||
.cloudflare.enableWarp = \"$ENABLE_WARP\" |
|
||
.cloudflare.secretName = \"$SECRET_NAME\" |
|
||
.cloudflared = $CLOUDFLARED_BLOCK
|
||
" "$ORIGINAL_FILE" > "$MERGED_FILE"
|
||
|
||
echo "✅ Final merged values.yaml:"
|
||
cat "$MERGED_FILE"
|
||
|
||
# === STEP 6: Optional Git push ===
|
||
echo "📤 Pushing updated values.yaml to infra repo..."
|
||
|
||
cd "$INFRA_CLONE"
|
||
git config user.name "woodpecker-bot"
|
||
git config user.email "ci@dvirlabs.com"
|
||
git remote set-url origin "https://${GIT_TOKEN}@git.dvirlabs.com/dvirlabs/infra.git"
|
||
|
||
if ! git diff --quiet manifests/cloudflared/values.yaml; then
|
||
git add manifests/cloudflared/values.yaml
|
||
git commit -m "chore(cloudflared): auto-merge CNAME entries from sandbox"
|
||
git push origin HEAD
|
||
echo "✅ Changes pushed successfully."
|
||
else
|
||
echo "ℹ️ No changes to commit."
|
||
fi
|