177 строки
6.3 KiB
Bash
177 строки
6.3 KiB
Bash
#!/bin/bash
|
|
|
|
function print_usage() {
|
|
cat <<EOF
|
|
Command
|
|
$0
|
|
|
|
Arguments
|
|
--app_id|-ai [Required]: Service principal app id used by Spinnaker to dynamically manage resources
|
|
--app_key|-ak [Required]: Service principal app key used by Spinnaker to dynamically manage resources
|
|
--username|-u [Required]: vm username
|
|
--tenant_id|-ti [Required]: Tenant id
|
|
--subscription_id|-si [Required]: Subscription id
|
|
--resource_group|-rg [Required]: Resource group containing your key vault and packer storage account
|
|
--vault_name|-vn [Required]: Vault used to store default Username/Password for deployed VMSS
|
|
--storage_account_name|-san [Required]: Storage account name used for front50
|
|
--storage_account_key|-sak [Required]: Storage account key used for front50
|
|
--aks_cluster_name|-acn [Required]: AKS Cluster Name for deploy spinnaker
|
|
--aks_resource_group|-arg [Required]: Resource group containing your aks
|
|
--use_ssh_public_key|-uspk [Required]: Use ssh public key
|
|
--region|-r : Region for VMSS created by Spinnaker, defaulted to westus
|
|
--artifacts_location|-al : Url used to reference other scripts/artifacts.
|
|
--sas_token|-st : A sas token needed if the artifacts location is private.
|
|
EOF
|
|
}
|
|
|
|
function throw_if_empty() {
|
|
local name="$1"
|
|
local value="$2"
|
|
if [ -z "$value" ]; then
|
|
echo "Parameter '$name' cannot be empty." 1>&2
|
|
print_usage
|
|
exit -1
|
|
fi
|
|
}
|
|
|
|
function run_util_script() {
|
|
local script_path="$1"
|
|
shift
|
|
curl --silent "${artifacts_location}${script_path}${artifacts_location_sas_token}" | sudo bash -s -- "$@"
|
|
local return_value=$?
|
|
if [ $return_value -ne 0 ]; then
|
|
>&2 echo "Failed while executing script '$script_path'."
|
|
exit $return_value
|
|
fi
|
|
}
|
|
|
|
function install_az() {
|
|
if !(command -v az >/dev/null); then
|
|
sudo apt-get update
|
|
sudo apt-get install curl apt-transport-https lsb-release gnupg -y
|
|
curl -sL https://packages.microsoft.com/keys/microsoft.asc | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/microsoft.asc.gpg > /dev/null
|
|
AZ_REPO=$(lsb_release -cs)
|
|
echo "deb [arch=amd64] https://packages.microsoft.com/repos/azure-cli/ $AZ_REPO main" | sudo tee /etc/apt/sources.list.d/azure-cli.list
|
|
sudo apt-get update
|
|
sudo apt-get install azure-cli
|
|
fi
|
|
}
|
|
|
|
# Set defaults
|
|
artifacts_location="https://raw.githubusercontent.com/azure/azure-devops-utils/master/"
|
|
artifacts_location_sas_token=""
|
|
|
|
while [[ $# > 0 ]]
|
|
do
|
|
key="$1"
|
|
shift
|
|
case $key in
|
|
--app_id|-ai)
|
|
app_id="$1";;
|
|
--app_key|-ak)
|
|
app_key="$1";;
|
|
--username|-u)
|
|
username="$1";;
|
|
--tenant_id|-ti)
|
|
tenant_id="$1";;
|
|
--subscription_id|-si)
|
|
subscription_id="$1";;
|
|
--resource_group|-rg)
|
|
resource_group="$1";;
|
|
--vault_name|-vn)
|
|
vault_name="$1";;
|
|
--storage_account_name|-san)
|
|
storage_account_name="$1";;
|
|
--storage_account_key|-sak)
|
|
storage_account_key="$1";;
|
|
--aks_cluster_name|-acn)
|
|
aks_cluster_name="$1";;
|
|
--aks_resource_group|-arg)
|
|
aks_resource_group="$1";;
|
|
--use_ssh_public_key|-uspk)
|
|
use_ssh_public_key="$1";;
|
|
--region|-r)
|
|
region="$1";;
|
|
--artifacts_location|-al)
|
|
artifacts_location="$1";;
|
|
--sas_token|-st)
|
|
artifacts_location_sas_token="$1";;
|
|
--help|-help|-h)
|
|
print_usage
|
|
exit 13;;
|
|
*)
|
|
echo "ERROR: Unknown argument '$key' to script '$0'" 1>&2
|
|
exit -1
|
|
esac
|
|
shift
|
|
done
|
|
|
|
throw_if_empty app_id $app_id
|
|
throw_if_empty app_key $app_key
|
|
throw_if_empty username $username
|
|
throw_if_empty tenant_id $tenant_id
|
|
throw_if_empty subscription_id $subscription_id
|
|
throw_if_empty resource_group $resource_group
|
|
throw_if_empty vault_name $vault_name
|
|
throw_if_empty storage_account_name $storage_account_name
|
|
throw_if_empty storage_account_key $storage_account_key
|
|
throw_if_empty region $region
|
|
throw_if_empty aks_cluster_name $aks_cluster_name
|
|
throw_if_empty aks_resource_group $aks_resource_group
|
|
throw_if_empty use_ssh_public_key $use_ssh_public_key
|
|
|
|
#install az and hal
|
|
install_az
|
|
run_util_script "spinnaker/install_halyard/install_halyard.sh" -san "$storage_account_name" -sak "$storage_account_key" -u "$username"
|
|
|
|
#get-credentials from aks
|
|
az login --service-principal -u $app_id -p $app_key -t $tenant_id
|
|
az aks get-credentials --resource-group $aks_resource_group --name $aks_cluster_name -f /home/$username/.kube/config
|
|
chmod 777 /home/$username/.kube/config
|
|
|
|
#install kubectl
|
|
curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl
|
|
chmod +x ./kubectl
|
|
sudo mv ./kubectl /usr/local/bin/kubectl
|
|
|
|
# Configure Azure provider for Spinnaker
|
|
echo "$app_key" | hal config provider azure account add my-azure-account \
|
|
--client-id "$app_id" \
|
|
--tenant-id "$tenant_id" \
|
|
--subscription-id "$subscription_id" \
|
|
--default-key-vault "$vault_name" \
|
|
--default-resource-group "$resource_group" \
|
|
--packer-resource-group "$resource_group" \
|
|
--useSshPublicKey "$use_ssh_public_key" \
|
|
--app-key
|
|
|
|
#change region if region not in eastus or westus
|
|
if [ "$region" != eastus ] && [ "$region" != westus ]; then
|
|
hal config provider azure account edit my-azure-account \
|
|
--regions "eastus","westus","$region"
|
|
fi
|
|
hal config provider azure enable
|
|
|
|
# Configure kubernetes provider for Spinnaker
|
|
echo "$app_key" | hal config provider kubernetes account add my-k8s-v2-account \
|
|
--provider-version v2 \
|
|
--context $aks_cluster_name
|
|
hal config provider kubernetes account edit my-k8s-v2-account --kubeconfig-file /home/$username/.kube/config
|
|
hal config provider kubernetes enable
|
|
hal config features edit --artifacts true
|
|
hal config deploy edit --type distributed --account-name my-k8s-v2-account
|
|
|
|
# Deploy Spinnaker to aks
|
|
sudo hal deploy apply
|
|
|
|
# Connect to Spinnaker
|
|
echo "Connecting to Spinnaker..."
|
|
hal deploy connect &>/dev/null &
|
|
# Wait for connection
|
|
echo "while !(nc -z localhost 8084) || !(nc -z localhost 9000); do sleep 1; done" | timeout 20 bash
|
|
if [ $? -ne 0 ]; then
|
|
echo "Failed to connect to Spinnaker."
|
|
else
|
|
echo "Successfully connected to Spinnaker."
|
|
fi
|