forked from pixie-io/pixie
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Summary: Slight change to deployment scripts. Triggered by bug in namespace not existing. Test Plan: Manual testing Reviewers: zasgar, #engineering Reviewed By: zasgar, #engineering Differential Revision: https://phab.corp.pixielabs.ai/D1310 GitOrigin-RevId: 002d0c1
- Loading branch information
Showing
5 changed files
with
102 additions
and
74 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,25 @@ | ||
| #!/usr/bin/env bash | ||
|
|
||
| # Assume pl namespace by default. | ||
| namespace=pl | ||
| if [ "$#" -eq 1 ]; then | ||
| namespace=$1 | ||
| fi | ||
|
|
||
| workspace=$(bazel info workspace 2> /dev/null) | ||
|
|
||
| source ${workspace}/scripts/script_utils.sh | ||
|
|
||
| nats_deploy() { | ||
| kubectl apply -n ${namespace} -f ${workspace}/src/services/nats | ||
| } | ||
|
|
||
| etcd_deploy() { | ||
| kubectl apply -n ${namespace} -f ${workspace}/src/services/etcd | ||
| } | ||
|
|
||
| # Load nats and etcd, we need to run our services. | ||
| # These commands might fail waiting for the operator to come up, so we | ||
| # retry them a few times. | ||
| retry nats_deploy 5 30 | ||
| retry etcd_deploy 5 30 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,30 +1,15 @@ | ||
| #!/usr/bin/env bash | ||
|
|
||
| workspace=$(bazel info workspace 2> /dev/null) | ||
|
|
||
| source ${workspace}/scripts/script_utils.sh | ||
|
|
||
| ############################# | ||
| # Deploy NATS and etcd | ||
| ############################# | ||
|
|
||
| namespace=pl | ||
|
|
||
| kubectl get namespaces ${namespace} 2> /dev/null | ||
| if [ $? -ne 0 ]; then | ||
| kubectl create namespace ${namespace} | ||
| fi | ||
|
|
||
| nats_deploy() { | ||
| kubectl apply --namespace=${namespace} -f ${workspace}/src/services/nats | ||
| create_namespace() { | ||
| kubectl get namespaces ${namespace} 2> /dev/null | ||
| if [ $? -ne 0 ]; then | ||
| kubectl create namespace ${namespace} | ||
| fi | ||
| } | ||
|
|
||
| etcd_deploy() { | ||
| kubectl apply --namespace=${namespace} -f ${workspace}/src/services/etcd | ||
| } | ||
| create_namespace | ||
| ./load_secrets.sh ${namespace} | ||
| ./deploy_cluster_operators.sh ${namespace} | ||
|
|
||
| # Load nats and etcd, we need to run our services. | ||
| # These commands might fail waiting for the operator to come up, so we | ||
| # retry them a few times. | ||
| retry nats_deploy 5 30 | ||
| retry etcd_deploy 5 30 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,56 @@ | ||
| #!/usr/bin/env bash | ||
|
|
||
| # Assume pl namespace by default. | ||
| namespace=pl | ||
| if [ "$#" -eq 1 ]; then | ||
| namespace=$1 | ||
| fi | ||
|
|
||
| workspace=$(bazel info workspace 2> /dev/null) | ||
|
|
||
| load_certs() { | ||
| kubectl -n ${namespace} delete secret proxy-tls-certs 2> /dev/null || true | ||
| kubectl -n ${namespace} delete secret service-tls-certs 2> /dev/null || true | ||
| kubectl -n ${namespace} delete secret etcd-peer-tls-certs 2> /dev/null || true | ||
| kubectl -n ${namespace} delete secret etcd-client-tls-certs 2> /dev/null || true | ||
| kubectl -n ${namespace} delete secret etcd-server-tls-certs 2> /dev/null || true | ||
|
|
||
| kubectl -n ${namespace} create secret tls proxy-tls-certs \ | ||
| --key ${workspace}/src/services/certs/server.key \ | ||
| --cert ${workspace}/src/services/certs/server.crt | ||
|
|
||
| kubectl -n ${namespace} create secret generic service-tls-certs \ | ||
| --from-file=server.key=${workspace}/src/services/certs/server.key \ | ||
| --from-file=server.crt=${workspace}/src/services/certs/server.crt \ | ||
| --from-file=ca.crt=${workspace}/src/services/certs/ca.crt \ | ||
| --from-file=client.key=${workspace}/src/services/certs/client.key \ | ||
| --from-file=client.crt=${workspace}/src/services/certs/client.crt | ||
|
|
||
| kubectl -n ${namespace} create secret generic etcd-peer-tls-certs \ | ||
| --from-file=peer.key=${workspace}/src/services/certs/server.key \ | ||
| --from-file=peer.crt=${workspace}/src/services/certs/server.crt \ | ||
| --from-file=peer-ca.crt=${workspace}/src/services/certs/ca.crt | ||
|
|
||
| kubectl -n ${namespace} create secret generic etcd-client-tls-certs \ | ||
| --from-file=etcd-client.key=${workspace}/src/services/certs/client.key \ | ||
| --from-file=etcd-client.crt=${workspace}/src/services/certs/client.crt \ | ||
| --from-file=etcd-client-ca.crt=${workspace}/src/services/certs/ca.crt | ||
|
|
||
| kubectl -n ${namespace} create secret generic etcd-server-tls-certs \ | ||
| --from-file=server.key=${workspace}/src/services/certs/server.key \ | ||
| --from-file=server.crt=${workspace}/src/services/certs/server.crt \ | ||
| --from-file=server-ca.crt=${workspace}/src/services/certs/ca.crt | ||
| } | ||
|
|
||
| #Loads the secrets used by the dev environment. | ||
| load_dev_secrets() { | ||
| kubectl -n ${namespace} delete secret pl-app-secrets 2> /dev/null || true | ||
| kubectl -n ${namespace} create secret generic pl-app-secrets \ | ||
| --from-literal=jwt-signing-key=ABCDEFG \ | ||
| --from-literal=session-key=test-session-key \ | ||
| --from-literal=auth0-client-id=qaAfEHQT7mRt6W0gMd9mcQwNANz9kRup \ | ||
| --from-literal=auth0-client-secret=_rY9isTWtKgx2saBXNKZmzAf1y9pnKvlm-WdmSVZOFHb9OQtWHEX4Nrh3nWE5NNt | ||
| } | ||
|
|
||
| load_certs | ||
| load_dev_secrets |