@leverege/build-tools 2.23.4 → 2.23.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leverege/build-tools",
-  "version": "2.23.4",
+  "version": "2.23.6",
   "description": "A collection of build / support tools for Leverege developers",
   "main": "index.js",
   "repository": {
@@ -63,7 +63,7 @@
     "parse-gitignore": "^2.0.0",
     "readline-sync": "^1.4.10",
     "semver": "^7.3.8",
-    "simple-git": "^3.15.1",
+    "simple-git": "^3.16.0",
     "zx": "^7.1.1"
   },
   "devDependencies": {
@@ -71,6 +71,6 @@
     "@babel/core": "^7.20.12",
     "@leverege/babel-preset-leverege-node": "^2.0.0",
     "@leverege/eslint-config-leverege": "^3.0.1",
-    "npm": "^9.3.0"
+    "npm": "^9.3.1"
   }
 }

package/src/helmup

@@ -669,7 +669,7 @@ function doInstall() {
         ;;
 
       "cert-manager")
-        #installCertManager
+        installCertManager
         bootstrapLocalSetup cert-manager
         ;;
 
@@ -735,6 +735,10 @@ function doInstall() {
         installTraefikEnvironment
         bootstrapLocalSetup traefik
         ;;
+      "traefik-canary")
+        # only valid if traefik is already installed
+        bootstrapLocalSetup traefik-canary
+        ;;
 
       "velero")
         installVeleroEnvironment

package/src/pkgck

@@ -134,7 +134,7 @@ check_repo() {
   local license=$(check_license)
   local scoped=$(check_scope)
   [ $(( $repos % 15)) -eq 0 ] && printf "\n%35s pkg      git  cln scop cir lic ESM bl7\n"
-  printf "%32s: %-8s %-16s %s  %8s  %s   %s   %s   %s  %s\n" $dir $pkgver $(check_git_version $gitver $pkgver) $localmods $scoped $circle $license $esmlib $babel7 "$needspush"
+  printf "%32s: %-8s %-16s %s  %8s  %s   %s   %s   %s  %s\n" ${dir:0:32} $pkgver $(check_git_version $gitver $pkgver) $localmods $scoped $circle $license $esmlib $babel7 "$needspush"
   let "repos++"
   cd - &> /dev/null
 }

package/src/system-charts/cert-manager.hup

@@ -1,5 +1,37 @@
 #!/bin/bash
 #
-# cert-manager is skipped for now - we may not really need it
+# cert-manager may be skipped for now?
 #
-skipInstalling cert-manager
+skipInstalling cert-manager && exit 0
+#
+addHelmRepo jetstack https://charts.jetstack.io
+[ -z "$CERT_MANAGER_HELM_CHART" ] && CERT_MANAGER_HELM_CHART="v1.10"
+helm upgrade --install cert-manager jetstack/cert-manager \
+  --namespace cert-manager --set installCRDs=true \
+  --version $CERT_MANAGER_HELM_CHART
+
+cat<<DELAY
+
+  `color y "20 second delay to allow cert-manager to stabilize before proceeding...\n"`
+
+DELAY
+
+sleep 20
+kubectl -n cert-manager apply -f cert-manager
+
+if [[ $? -eq 1 ]];
+then
+
+  `color y "***WARNING: cert-manager components still coming up"`
+
+  Try rerunning this apply again in 30 seconds:
+  `color g "kubectl -n cert-manager apply -f cert-manager"`
+fi
+
+cat<<HINTS
+
+  fetch certs: `color g "kubectl -n cert-manager get certificate"`
+  check certs: `color g "kubectl -n cert-manager describe certificate"`
+
+HINTS
+removeHelmRepo jetstack

package/src/system-charts/traefik-canary-local.yaml

@@ -0,0 +1,14 @@
+additionalArguments:
+  - "--accesslog=true"
+  - "--accesslog.format=json"
+  - "--api.debug=true"
+  - "--log.level=WARN"
+  - "--metrics.prometheus=true"
+  - "--api.dashboard=true"
+
+deployment:
+  replicas: 1
+
+#service:
+#  spec:
+#    loadBalancerIP: xx.xx.xx.xx

package/src/system-charts/traefik-canary.hup

@@ -0,0 +1,16 @@
+#!/bin/bash
+
+showInstalling "Traefik Canary Load Balancer / Router"
+
+TRAEFIK_CANARY="traefik-canary"
+
+createNamespaceIfNeeded $TRAEFIK_CANARY
+
+addHelmRepo traefik https://helm.traefik.io/traefik
+
+[ -z "$TRAEFIK_HELM_CHART" ] && TRAEFIK_HELM_CHART="16"
+helm upgrade --install $TRAEFIK_CANARY traefik/traefik --namespace $TRAEFIK_CANARY \
+             --values  $TRAEFIK_CANARY/traefik-canary-local.yaml \
+             --version $TRAEFIK_HELM_CHART $HELM_WHAT
+
+removeHelmRepo traefik

package/src/system-charts/traefik-local.yaml

@@ -1,6 +1,7 @@
 additionalArguments:
   - "--accesslog=true"
   - "--accesslog.format=json"
+  - "--api.debug=true"
   - "--log.level=WARN"
   - "--metrics.prometheus=true"
   - "--api.dashboard=true"
@@ -10,4 +11,4 @@ deployment:
 
 #service:
 #  spec:
-#   loadBalancerIP: xx.xx.xx.xx
+#    loadBalancerIP: xx.xx.xx.xx

package/src/system-charts/traefik.hup

@@ -2,7 +2,6 @@
 
 showInstalling "Traefik Load Balancer / Router"
 
-#TRAEFIK_NAMESPACE="traefik-canary"
 TRAEFIK_NAMESPACE="traefik"
 createNamespaceIfNeeded $TRAEFIK_NAMESPACE
 

package/src/system-charts/velero-local.yaml

@@ -1,3 +1,4 @@
+#
 # Backup schedules to create.
 #
 schedules:
@@ -23,6 +24,17 @@ schedules:
           release: "timescale-db"
           app: "postgresql"
 
+  mysql:
+    disabled: true
+    schedule: "0 4 * * *"
+    template:
+      ttl: "720h"
+      snapshotVolumes: true
+      labelSelector:
+        matchLabels:
+          release: "mysql"
+          app: "mysql"
+
   redis:
     disabled: true
     schedule: "*/30 * * * *"
@@ -98,8 +110,29 @@ serviceAccount:
     create: false
     name: velero
 
-# Info about the secret to be used by the Velero deployment, which
-# should contain credentials for the cloud provider IAM account you've
-# set up for Velero.
+# Workload Identity Federation (WIF) uses service accounts and IAM roles to
+# define a service's permissions - the useSecret setting will be set to false
+# for WIF enabled clusters.
+#
+# In order to use velero in a non WIF legacy cluster, ensure the k8s context
+# by running from the root of the git repository:
+#    $ overwhelm
+#
+# Create and download a key file for the existing velero SA:
+#    $ gcloud iam service-accounts keys create velero-credentials \
+#           --iam-account velero@<project id>.iam.gserviceaccount.com
+#
+# Create the velero namespace if it does not already exist:
+#    $ kubectl create ns velero
+#
+# Inject the secret into the cluster's velero namespace:
+#    $ kubectl create secret generic velero-credentials  \
+#           --namespace velero --from-file cloud=velero-credentials
+#      
+# Clean up the secret now that it is injected:
+#    $ rm velero-credentials
+#
+# Comment out the useSecret - uncomment existingSecret - helmup velero
 credentials:
-  useSecret: false
+  useSecret: false # comment out for non WIF
+# existingSecret: velero-credentials # uncomment for non WIF

package/src/system-charts/velero.hup

@@ -2,6 +2,8 @@
 
 addHelmRepo vmware-tanzu https://vmware-tanzu.github.io/helm-charts
 
+createNamespaceIfNeeded
+
 [ -z "$VELERO_HELM_CHART" ] && VELERO_HELM_CHART="3"
 #
 # Build the bucket, region and SA email variables and use --set to mod the