kubes 0.4.7 → 0.6.2

data/lib/kubes/hooks/concern.rb

@@ -2,7 +2,7 @@ module Kubes::Hooks
   module Concern
     # options example: {:name=>"apply", :file=>".kubes/output/web/service.yaml"}
     def run_hooks(file, options={}, &block)
-      hooks = Kubes::Hooks::Builder.new("#{Kubes.root}/.kubes/config/hooks/#{file}", options)
+      hooks = Kubes::Hooks::Builder.new(file, options)
       hooks.build # build hooks
       hooks.run_hooks(&block)
     end

data/lib/kubes/kubectl/batch.rb

@@ -22,10 +22,17 @@ class Kubes::Kubectl
               Kubes::Kubectl.run(@name, @options.merge(file: file))
             end
           end
+          prune # important to call within run_hooks for case of GKE IP whitelisting
         end
       end
     end
 
+    def prune
+      return unless @name == "apply" # only run for apply
+      return unless Kubes.config.auto_prune # prune old secrets and config maps
+      Kubes::CLI::Prune.new(@options.merge(yes: true, quiet: true)).run
+    end
+
     def switch_context(&block)
       kubectl = Kubes.config.kubectl
       context = kubectl.context
@@ -49,38 +56,5 @@ class Kubes::Kubectl
       end
       result
     end
-
-    # kubes apply                   # {role: nil, resource: nil}
-    # kubes apply clock             # {role: "clock", resource: nil}
-    # kubes apply clock deployment  # {role: "clock", resource: "deployment"}
-    def search_expr
-      role, resource = @options[:role], @options[:resource]
-      if role && resource
-        "#{Kubes.root}/.kubes/output/#{role}/#{resource}.yaml"
-      elsif role
-        "#{Kubes.root}/.kubes/output/#{role}/*.yaml"
-      else
-        "#{Kubes.root}/.kubes/output/**/*.yaml"
-      end
-    end
-
-    def files
-      files = []
-      Dir.glob(search_expr).each do |path|
-        next unless process?(path)
-        file = path.sub("#{Kubes.root}/", '')
-        files << file
-      end
-      files
-    end
-
-    def process?(path)
-      consider?(path) && two_levels_deep?(path)
-    end
-
-    def two_levels_deep?(path)
-      rel_path = path.sub(%r{.*\.kubes/output/},'')
-      rel_path.split('/').size == 2
-    end
   end
 end

data/lib/kubes/kubectl/ordering.rb

@@ -35,5 +35,47 @@ class Kubes::Kubectl
       i = index.to_s.rjust(3, "0") # pad with 0
       "#{i}-#{value}" # append name so that terms with same index get order alphabetically
     end
+
+    # kubes apply                   # {role: nil, resource: nil}
+    # kubes apply clock             # {role: "clock", resource: nil}
+    # kubes apply clock deployment  # {role: "clock", resource: "deployment"}
+    def search_expr
+      role, resource = @options[:role], @options[:resource]
+      if role && resource
+        "#{Kubes.root}/.kubes/output/#{role}/#{resource}.yaml"
+      elsif role
+        "#{Kubes.root}/.kubes/output/#{role}/*.yaml"
+      else
+        "#{Kubes.root}/.kubes/output/**/*.yaml"
+      end
+    end
+
+    def files
+      files = []
+      Dir.glob(search_expr).each do |path|
+        next unless process?(path)
+        file = path.sub("#{Kubes.root}/", '')
+        files << file
+      end
+      files
+    end
+
+    # Only considering files 2 layers deep. So:
+    #
+    #    Yes = web/deployment.yaml
+    #    No = web/deployment/dev.yaml
+    #
+    def process?(path)
+      if Kubes.kustomize?
+        File.file?(path)
+      else
+        consider?(path) && two_levels_deep?(path)
+      end
+    end
+
+    def two_levels_deep?(path)
+      rel_path = path.sub(%r{.*\.kubes/(resources|output)/},'')
+      rel_path.split('/').size == 2
+    end
   end
 end

data/lib/kubes/plugin.rb

@@ -0,0 +1,14 @@
+module Kubes
+  module Plugin
+    @@plugins = []
+    def plugins
+      @@plugins
+    end
+
+    def register(klass)
+      @@plugins << klass
+    end
+
+    extend self
+  end
+end

data/lib/kubes/util/sh.rb

@@ -32,7 +32,7 @@ module Kubes::Util
 
     def sh_capture(command, options={})
       exit_on_fail = options[:exit_on_fail].nil? ? true : options[:exit_on_fail]
-      logger.info "=> #{command}" if options[:show_command]
+      logger.debug "=> #{command}"
       out = `#{command}`.strip
       unless $?.success?
         logger.error "ERROR: running #{command}".color(:red)

data/lib/kubes/version.rb

@@ -1,3 +1,3 @@
 module Kubes
-  VERSION = "0.4.7"
+  VERSION = "0.6.2"
 end

data/lib/templates/base/.kubes/config.rb.tt

@@ -2,7 +2,7 @@ Kubes.configure do |config|
   config.repo = "<%= @options[:repo] %>"
   config.logger.level = "info"
   # auto-switching
-  # config.kubectl.context = "dev-services"
+  # config.kubectl.context = "dev-cluster"
   # config.kubectl.context_keep = true # keep context after switching
   # config.kubectl.exit_on_fail_for_apply  = true # whether or not continue if the kubectl command fails
   # config.kubectl.exit_on_fail_for_delete = false # whether or not continue if the kubectl command fails

data/lib/templates/base/.kubes/config/env/dev.rb

@@ -2,5 +2,5 @@
 #
 # Example:
 # Kubes.configure do |config|
-#   config.kubectl.context = "dev-services"
+#   config.kubectl.context = "dev-cluster"
 # end

data/lib/templates/base/.kubes/config/env/prod.rb

@@ -2,5 +2,5 @@
 #
 # Example:
 # Kubes.configure do |config|
-#   config.kubectl.context = "prod-services"
+#   config.kubectl.context = "prod-cluster"
 # end

data/lib/templates/dsl/.kubes/resources/web/deployment.rb

@@ -2,7 +2,7 @@ name "web"
 labels(role: "web")
 
 replicas 1 # overridden on a env basis
-image built_image # IE: user/<%= app %>:kubes-2020-06-13T19-55-16-43afc6e
+image docker_image # IE: user/<%= app %>:kubes-2020-06-13T19-55-16-43afc6e
 
 # revisionHistoryLimit 1 # uncomment to reduce old ReplicaSets, default is 10 https://bit.ly/3hqrzyP
 # maxUnavailable 25

data/lib/templates/new/helper/file.rb

@@ -0,0 +1,2 @@
+module <%= underscored_name.camelize %>
+end

data/lib/templates/new/resource/dsl/backend_config.rb

@@ -0,0 +1,10 @@
+name "<%= app %>"
+spec(
+  timeoutSec: 40,
+  connectionDraining: {
+    drainingTimeoutSec: 60,
+  },
+  sessionAffinity: {
+    affinityType: "CLIENT_IP",
+  }
+)

data/lib/templates/new/resource/dsl/config_map.rb

@@ -0,0 +1,5 @@
+name "<%= app %>"
+data(
+  KEY1: "value1",
+  KEY2: "value2",
+)

data/lib/templates/new/resource/dsl/daemon_set.rb

@@ -0,0 +1,11 @@
+name "<%= app %>"
+labels("app": "<%= app %>")
+updateStrategy(
+  type: "RollingUpdate",
+  rollingUpdate: {
+    maxUnavailable: 1
+  }
+)
+# annotations(
+#   "*scheduler**.alpha.kubernetes.io/critical-pod": '*'
+# )

data/lib/templates/new/resource/dsl/deployment.rb

@@ -0,0 +1,4 @@
+name "<%= role %>"
+labels(role: "<%= role %>")
+replicas 2
+image "<%%= docker_image %>"

data/lib/templates/new/resource/dsl/ingress.rb

@@ -0,0 +1,3 @@
+name "<%= app %>"
+serviceName "<%= app %>"
+servicePort 80

data/lib/templates/new/resource/dsl/job.rb

@@ -0,0 +1,2 @@
+name "<%= app %>"
+image(docker_image)

data/lib/templates/new/resource/dsl/managed_certificate.rb

@@ -0,0 +1,2 @@
+name "cert1"
+domains(["cert1.example.com"])

data/lib/templates/new/resource/dsl/namespace.rb

@@ -0,0 +1,2 @@
+name "<%= app %>"
+labels(app: "<%= app %>") # useful with NetworkPolicy

data/lib/templates/new/resource/dsl/network_policy.rb

@@ -0,0 +1,7 @@
+name "web"
+labels(app: "<%= app %>") # IE: backend
+namespace "<%= app %>"    # IE: backend
+
+matchLabels(app: "<%= app %>", role: "<%= role %>") # IE: app: backend
+fromNamespace(app: "<%= app %>") # IE: app: frontend
+fromPod(app: "<%= app %>")       # IE: backend

data/lib/templates/new/resource/dsl/pod.rb

@@ -0,0 +1,6 @@
+name "<%= app %>"
+containers([
+  image: docker_image,
+  command: ["sleep", "3600"],
+  name: "<%= app %>",
+])

data/lib/templates/new/resource/dsl/role.rb

@@ -0,0 +1,4 @@
+name "<%= app %>"
+apiGroups([""])
+resources(["pods"])
+verbs(["get", "watch", "list"])

data/lib/templates/new/resource/dsl/role_binding.rb

@@ -0,0 +1,7 @@
+name "<%= app %>"
+
+subjects([
+  {kind: "User", name: "me@email.com"},
+])
+
+roleName "<%= app %>"

data/lib/templates/new/resource/dsl/secret.rb

@@ -0,0 +1,5 @@
+name "<%= app %>"
+data(
+  username: base64("user"),
+  password: base64("pass"),
+)

data/lib/templates/new/resource/dsl/service.rb

@@ -0,0 +1,2 @@
+name "<%= app %>"
+labels(role: "<%= role %>")

data/lib/templates/new/resource/dsl/service_account.rb

@@ -0,0 +1 @@
+name "<%= app %>"

data/lib/templates/new/resource/yaml/backend_config.yaml

@@ -0,0 +1,10 @@
+apiVersion: cloud.google.com/v1
+kind: BackendConfig
+metadata:
+  name: <%= app %>
+spec:
+  timeoutSec: 40
+  connectionDraining:
+    drainingTimeoutSec: 60
+  sessionAffinity:
+    affinityType: CLIENT_IP

data/lib/templates/new/resource/yaml/config_map.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: <%= app %>
+  labels:
+    app: <%= app %>
+data:
+  KEY1: value1
+  KEY2: value2

data/lib/templates/new/resource/yaml/daemon_set.yaml

@@ -0,0 +1,11 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: <%= app %>
+  labels:
+    app: <%= app %>
+spec:
+  updateStrategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxUnavailable: 1

data/lib/templates/new/resource/yaml/deployment.yaml

@@ -0,0 +1,19 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: <%= role %>
+  labels:
+    role: <%= role %>
+spec:
+  replicas: 1  # overridden on a env basis
+  selector:
+    matchLabels:
+      role: <%= role %>
+  template:
+    metadata:
+      labels:
+        role: <%= role %>
+    spec:
+      containers:
+      - name: <%= role %>
+        image: <%%= docker_image %>

data/lib/templates/new/resource/yaml/ingress.yaml

@@ -0,0 +1,12 @@
+apiVersion: networking.k8s.io/v1beta1
+kind: Ingress
+metadata:
+  name: <%= role %>
+spec:
+  rules:
+  - http:
+      paths:
+      - path: "/*"
+        backend:
+          serviceName: <%= role %>
+          servicePort: 80

data/lib/templates/new/resource/yaml/job.yaml

@@ -0,0 +1,19 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: <%= app %>
+spec:
+  template:
+    spec:
+      restartPolicy: Never
+      serviceAccountName: <%= app %>
+      containers:
+      - name: <%= app %>
+        image: <%%= docker_image %>
+        command: ["uptime"] # IE: ["bin/job/migrate.sh"]
+        # envFrom:
+        # - secretRef:
+        #     name: <%= app %>
+        # - configMapRef:
+        #     name: <%= app %>
+  backoffLimit: 1

data/lib/templates/new/resource/yaml/managed_certificate.yaml

@@ -0,0 +1,7 @@
+apiVersion: networking.gke.io/v1beta2
+kind: ManagedCertificate
+metadata:
+  name: cert1
+spec:
+  domains:
+  - cert1.example.com

data/lib/templates/new/resource/yaml/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: <%= app %>-<%%= Kubes.env %>
+  labels:
+    app: <%= app %>

data/lib/templates/new/resource/yaml/network_policy.yaml

@@ -0,0 +1,20 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: <%= role %>
+  labels:
+    app: <%= app %> # IE: backend
+  namespace: <%= app %> # IE: backend
+spec:
+  podSelector:
+    matchLabels:
+      app: <%= app %> # IE: backend
+      role: <%= role %>
+  ingress:
+  - from:
+    - namespaceSelector:
+        matchLabels:
+          app: <%= app %> # IE: frontend
+    - podSelector:
+        matchLabels:
+          app: <%= app %> # IE: backend

data/lib/templates/new/resource/yaml/pod.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: <%= app %>
+spec:
+  containers:
+  - image: <%%= docker_image %>
+    command:
+    - sleep
+    - '3600'
+    name: <%= app %>

data/lib/templates/new/resource/yaml/role.yaml

@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: <%= app %>
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - pods
+  verbs:
+  - get
+  - watch
+  - list

data/lib/templates/new/resource/yaml/role_binding.yaml

@@ -0,0 +1,11 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: <%= app %>
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: <%= app %>
+subjects:
+- kind: User
+  name: me@email.com