@leverege/build-tools 2.28.1 → 2.29.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leverege/build-tools",
-  "version": "2.28.1",
+  "version": "2.29.1",
   "description": "A collection of build / support tools for Leverege developers",
   "main": "index.js",
   "repository": {

package/src/helm-charts/cert-manager/cert-manager-local.yaml.ovh

@@ -0,0 +1,47 @@
+#
+# cluster-issuer.yaml.ovh
+#
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-prd
+spec:
+  acme:
+    # production
+    #server: https://acme-v02.api.letsencrypt.org/directory
+    # staging
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    #
+    # You must replace this email address with your own.
+    # Let's Encrypt will use this to contact you about expiring
+    # certificates, and issues related to your account.
+    email: devops@leverege.com
+    privateKeySecretRef:
+      # Secret resource used to store the account's private key.
+      name: issuer-account-key
+    # Add a single challenge solver, HTTP01 using nginx
+    solvers:
+    - dns01:
+        cloudflare:
+          email: devops@leverege.com
+          apiTokenSecretRef:
+            name: cloudflare
+            key: dns-token
+      selector:
+        dnsZones:
+        - 'OVH:<HOST>.com'
+---
+#
+# this-service.yaml.ovh
+#
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: OVH:<PROJECT_ID>
+spec:
+  secretName: OVH:<PROJECT_ID>-cert
+  dnsNames:
+    - '*.OVH:<HOST>.com'
+  issuerRef:
+    name: letsencrypt-prd
+    kind: ClusterIssuer

package/src/helm-charts/cert-manager/gitignore

@@ -0,0 +1 @@
+cert-manager-local.yaml

package/src/helm-charts/cert-manager/helmup.plugin

@@ -0,0 +1,35 @@
+#!/bin/bash
+#
+addHelmRepo jetstack https://charts.jetstack.io
+[ -z "$CERT_MANAGER_CHART_VERSION" ] && CERT_MANAGER_CHART_VERSION="v1.10"
+helm upgrade --install cert-manager jetstack/cert-manager \
+  --namespace cert-manager --set installCRDs=true \
+  --version $CERT_MANAGER_CHART_VERSION $HELM_WHAT
+
+[ ! -z "$HELM_WHAT" ] && exit 0
+
+cat<<DELAY
+
+  `color y "20 second delay to allow cert-manager to stabilize before proceeding...\n"`
+
+DELAY
+
+sleep 20
+kubectl -n cert-manager apply -f cert-manager
+
+if [[ $? -eq 1 ]];
+then
+
+  `color y "***WARNING: cert-manager components still coming up"`
+
+  Try rerunning this apply again in 30 seconds:
+  `color g "kubectl -n cert-manager apply -f cert-manager"`
+fi
+
+cat<<HINTS
+
+  fetch certs: `color g "kubectl -n cert-manager get certificate"`
+  check certs: `color g "kubectl -n cert-manager describe certificate"`
+
+HINTS
+removeHelmRepo jetstack

package/src/helmup

@@ -391,6 +391,33 @@ OLDER_GKE
   fi
 }
 
+function installCertManagerSecret() {
+  showInstalling "Cert Managment"
+  createNamespaceIfNeeded cert-manager
+
+  kubectl get secret cloudflare --namespace cert-manager &>/dev/null
+  if [[ $? -eq 1 ]];
+  then
+    cat<<NEED_MANAGED_SECRET
+   $RED_ERROR missing secret: `color y cloudflare` namespace: `color y cert-manager`
+
+   This secret will be fetched from the leverege-docker-images cluster and
+   injected into this cluster.
+NEED_MANAGED_SECRET
+    #yesToContinue "to copy and inject the cloudflare secret"
+    TOKEN=$(getManagedSecret "CLOUDFLARE_API_TOKEN")
+    if [ $? -ne 0 ];
+    then
+      printf "$RED_ERROR getManagedSecret reponse=>[$TOKEN]"
+      exitOnError 1 "Failed to fetch the secret from leverege-docker-images"
+    fi
+    printf "\nInjecting=[$TOKEN] into cloudflare secret\n"
+    kubectl create secret generic cloudflare \
+      --namespace cert-manager \
+      --from-literal=dns-token=$TOKEN
+  fi
+}
+
 function installTraefikEnvironment() {
   showInstalling "Traefik Namespace and Cloudflare Secret"
   createNamespaceIfNeeded traefik
@@ -615,6 +642,11 @@ function doInstall() {
         doInstall "${SYSTEM[@]}"
         ;;
 
+      "cert-manager")
+        installCertManagerSecret
+        bootstrapLocalSetup $SERVICE
+        ;;
+
       "cronZombieKiller"|"zombie-killer")
         installCronZombieKiller # eradicate the gke 1.20+ zombies
         ;;