Merge "Update versions of jump server components"
[icn.git] / deploy / kata / kata.sh
1 #!/usr/bin/env bash
2 set -eux -o pipefail
3
4 SCRIPTDIR="$(readlink -f $(dirname ${BASH_SOURCE[0]}))"
5 LIBDIR="$(dirname $(dirname ${SCRIPTDIR}))/env/lib"
6
7 source $LIBDIR/logging.sh
8 source $LIBDIR/common.sh
9
10 BUILDDIR=${SCRIPTDIR/deploy/build}
11 mkdir -p ${BUILDDIR}
12
13 KATA_DEPLOY_URL="https://raw.githubusercontent.com/kata-containers/kata-containers/${KATA_VERSION}/tools/packaging/kata-deploy"
14 KATA_WEBHOOK_URL="https://raw.githubusercontent.com/kata-containers/tests/${KATA_WEBHOOK_VERSION}/kata-webhook"
15 KATA_WEBHOOK_DIR="/opt/src/kata_webhook"
16 KATA_WEBHOOK_RUNTIMECLASS="kata-clh"
17
18 # This may be used to update the in-place Kata YAML files from the
19 # upstream project.
20 function build_source {
21     mkdir -p ${SCRIPTDIR}/base
22     curl -sL ${KATA_DEPLOY_URL}/kata-rbac/base/kata-rbac.yaml -o ${SCRIPTDIR}/base/kata-rbac.yaml
23     curl -sL ${KATA_DEPLOY_URL}/kata-deploy/base/kata-deploy.yaml -o ${SCRIPTDIR}/base/kata-deploy.yaml
24     curl -sL ${KATA_DEPLOY_URL}/runtimeclasses/kata-runtimeClasses.yaml -o ${SCRIPTDIR}/base/kata-runtimeClasses.yaml
25     rm -f ${SCRIPTDIR}/base/kustomization.yaml
26     pushd ${SCRIPTDIR}/base && kustomize create --autodetect && popd
27 }
28
29 function deploy_webhook {
30     local -r cluster_name=$1
31     local -r cluster_kubeconfig="${BUILDDIR}/${cluster_name}.conf"
32
33     # Note that the webhook-registration.yaml.tpl file is fetched here
34     # but webhook-registration.yaml is deployed: this is intentional,
35     # create-certs.sh takes care of converting the .yaml.tpl into the
36     # .yaml file
37     mkdir -p ${BUILDDIR}/webhook/base/deploy
38     curl -sL ${KATA_WEBHOOK_URL}/common.bash -o ${BUILDDIR}/webhook/base/common.bash
39     curl -sL ${KATA_WEBHOOK_URL}/create-certs.sh -o ${BUILDDIR}/webhook/base/create-certs.sh
40     curl -sL ${KATA_WEBHOOK_URL}/deploy/webhook-registration.yaml.tpl -o ${BUILDDIR}/webhook/base/deploy/webhook-registration.yaml.tpl
41     curl -sL ${KATA_WEBHOOK_URL}/deploy/webhook.yaml -o ${BUILDDIR}/webhook/base/deploy/webhook.yaml
42
43     chmod +x ${BUILDDIR}/webhook/base/create-certs.sh
44     sed 's/value: kata/value: ${KATA_WEBHOOK_RUNTIMECLASS}/g' ${BUILDDIR}/webhook/base/deploy/webhook.yaml | tee ${BUILDDIR}/webhook/base/deploy/webhook-${KATA_WEBHOOK_RUNTIMECLASS}.yaml
45     pushd ${BUILDDIR}/webhook/base && ./create-certs.sh && popd
46
47     cat <<EOF >${BUILDDIR}/webhook/base/kustomization.yaml
48 apiVersion: kustomize.config.k8s.io/v1beta1
49 kind: Kustomization
50 resources:
51 - deploy/webhook-certs.yaml
52 - deploy/webhook-registration.yaml
53 - deploy/webhook-${KATA_WEBHOOK_RUNTIMECLASS}.yaml
54 EOF
55
56     kustomize build ${BUILDDIR}/webhook/base | KUBECONFIG=${cluster_kubeconfig} kubectl apply -f -
57 }
58
59 function clean_webhook {
60     local -r cluster_name=$1
61     local -r cluster_kubeconfig="${BUILDDIR}/${cluster_name}.conf"
62
63     kustomize build ${BUILDDIR}/webhook/base | KUBECONFIG=${cluster_kubeconfig} kubectl delete -f -
64 }
65
66 function is_kata_deployed {
67     local -r cluster_name=${CLUSTER_NAME:-icn}
68     local -r cluster_kubeconfig="${BUILDDIR}/${cluster_name}.conf"
69     kubectl --kubeconfig=${cluster_kubeconfig} get runtimeclass/kata-qemu
70 }
71
72 function test_kata {
73     # Create a temporary kubeconfig file for the tests
74     local -r cluster_name=${CLUSTER_NAME:-icn}
75     local -r cluster_kubeconfig="${BUILDDIR}/${cluster_name}.conf"
76     clusterctl -n metal3 get kubeconfig ${cluster_name} >${cluster_kubeconfig}
77
78     # Ensure that Kata has been deployed first
79     WAIT_FOR_TRIES=30
80     wait_for is_kata_deployed
81
82     deploy_webhook ${cluster_name}
83     clone_kud_repository
84     pushd ${KUDPATH}/kud/tests
85     failed_kud_tests=""
86     KUBECONFIG=${cluster_kubeconfig} bash kata.sh || failed_kud_tests="${failed_kud_tests} kata"
87     popd
88     clean_webhook ${cluster_name}
89     if [[ ! -z "$failed_kud_tests" ]]; then
90         echo "Test cases failed:${failed_kud_tests}"
91         exit 1
92     fi
93     echo "All test cases passed"
94
95     rm ${cluster_kubeconfig}
96 }
97
98 case $1 in
99     "build-source") build_source ;;
100     "test") test_kata ;;
101     *) cat <<EOF
102 Usage: $(basename $0) COMMAND
103
104 The "test" command looks for the CLUSTER_NAME variable in the
105 environment (default: "icn").  This should be the name of the
106 Cluster resource to execute the tests in.
107
108 Commands:
109   build-source  - Rebuild the in-tree Kata YAML files
110   test          - Test Kata
111 EOF
112        ;;
113 esac