Merge pull request #61 from rackerlabs/bootstrap

feat: template the ArgoCD ingress
rackerlabs · Apr 23, 2024 · f02e319 · f02e319
2 parents 173bfc1 + 07cbabc
commit f02e319
Show file tree

Hide file tree

Showing 18 changed files with 27 additions and 16 deletions.
diff --git a/apps/operators/ingress-nginx.yaml b/apps/operators/ingress-nginx.yaml
@@ -11,7 +11,7 @@ spec:
       helm:
         releaseName: ingress-nginx
         valueFiles:
-          - $values/bootstrap/phase_2/ingress-nginx/values.yaml
+          - $values/bootstrap/ingress-nginx/values.yaml
           - $secrets/helm-configs/${DEPLOY_NAME}/ingress-nginx.yaml
     - repoURL: https://github.com/rackerlabs/understack.git
       targetRevision: ${UC_REPO_REF}

diff --git a/bootstrap/phase_2/argocd/ingress.yaml → bootstrap/argocd/ingress.yaml b/bootstrap/phase_2/argocd/ingress.yaml → bootstrap/argocd/ingress.yaml
@@ -4,7 +4,7 @@ metadata:
   name: argocd
   namespace: argocd
   annotations:
-    cert-manager.io/cluster-issuer: selfsigned-cluster-issuer
+    cert-manager.io/cluster-issuer: ${DEPLOY_NAME}-cluster-issuer
     nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
     nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
 spec:
@@ -19,8 +19,8 @@ spec:
             name: argo-cd-argocd-server
             port:
               name: http
-    host: argocd.local
+    host: argocd.${DNS_ZONE}
   tls:
   - hosts:
-    - argocd.local
+    - argocd.${DNS_ZONE}
     secretName: argocd-ingress-tls
diff --git a/bootstrap/phase_2/argocd/kustomization.yaml → bootstrap/argocd/kustomization.yaml b/bootstrap/phase_2/argocd/kustomization.yaml → bootstrap/argocd/kustomization.yaml
@@ -4,7 +4,6 @@ kind: Kustomization
 
 resources:
 - namespace.yaml
-- ingress.yaml
 
 helmGlobals:
   chartHome: ../../charts/

diff --git a/bootstrap/phase_2/argocd/namespace.yaml → bootstrap/argocd/namespace.yaml b/bootstrap/phase_2/argocd/namespace.yaml → bootstrap/argocd/namespace.yaml
diff --git a/bootstrap/phase_2/argocd/values.yaml → bootstrap/argocd/values.yaml b/bootstrap/phase_2/argocd/values.yaml → bootstrap/argocd/values.yaml
diff --git a/bootstrap/bootstrap.sh b/bootstrap/bootstrap.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 
 wait_for_cert_manager() {
-  local cmd="kubectl apply -f bootstrap/phase_1/cert-manager/cmchecker.yaml --dry-run=server"
+  local cmd="kubectl apply -f bootstrap/cert-manager/cmchecker.yaml --dry-run=server"
   max_tries=10
   current_retry=1
 
@@ -19,6 +19,10 @@ wait_for_cert_manager() {
   echo " done."
 }
 
-kubectl kustomize --enable-helm bootstrap/phase_1 | kubectl apply --server-side -f -
+kubectl kustomize --enable-helm bootstrap/cert-manager/ | kubectl apply --server-side -f -
 wait_for_cert_manager
-kubectl kustomize --enable-helm bootstrap/phase_2 | kubectl apply --server-side -f -
+kubectl kustomize --enable-helm bootstrap | kubectl apply --server-side -f -
+kubectl apply -f bootstrap/cert-manager/issuer-kube-system-self-signed.yaml
+export DEPLOY_NAME=selfsigned
+export DNS_ZONE=local
+cat bootstrap/argocd/ingress.yaml | envsubst | kubectl apply -f -
diff --git a/...strap/phase_1/cert-manager/cmchecker.yaml → bootstrap/cert-manager/cmchecker.yaml b/...strap/phase_1/cert-manager/cmchecker.yaml → bootstrap/cert-manager/cmchecker.yaml
diff --git a/...ase_2/issuer-kube-system-self-signed.yaml → ...nager/issuer-kube-system-self-signed.yaml b/...ase_2/issuer-kube-system-self-signed.yaml → ...nager/issuer-kube-system-self-signed.yaml
diff --git a/...p/phase_1/cert-manager/kustomization.yaml → bootstrap/cert-manager/kustomization.yaml b/...p/phase_1/cert-manager/kustomization.yaml → bootstrap/cert-manager/kustomization.yaml
diff --git a/.../phase_2/ingress-nginx/kustomization.yaml → bootstrap/ingress-nginx/kustomization.yaml b/.../phase_2/ingress-nginx/kustomization.yaml → bootstrap/ingress-nginx/kustomization.yaml
diff --git a/...trap/phase_2/ingress-nginx/namespace.yaml → bootstrap/ingress-nginx/namespace.yaml b/...trap/phase_2/ingress-nginx/namespace.yaml → bootstrap/ingress-nginx/namespace.yaml
diff --git a/bootstrap/phase_2/ingress-nginx/values.yaml → bootstrap/ingress-nginx/values.yaml b/bootstrap/phase_2/ingress-nginx/values.yaml → bootstrap/ingress-nginx/values.yaml
diff --git a/bootstrap/phase_2/kustomization.yaml → bootstrap/kustomization.yaml b/bootstrap/phase_2/kustomization.yaml → bootstrap/kustomization.yaml
@@ -3,7 +3,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-- issuer-kube-system-self-signed.yaml
+- cert-manager/issuer-kube-system-self-signed.yaml
 - ingress-nginx/
 - sealed-secrets/
 - argocd/
diff --git a/bootstrap/phase_1/kustomization.yaml b/bootstrap/phase_1/kustomization.yaml
diff --git a/...phase_2/sealed-secrets/kustomization.yaml → bootstrap/sealed-secrets/kustomization.yaml b/...phase_2/sealed-secrets/kustomization.yaml → bootstrap/sealed-secrets/kustomization.yaml
diff --git a/bootstrap/phase_2/sealed-secrets/values.yaml → bootstrap/sealed-secrets/values.yaml b/bootstrap/phase_2/sealed-secrets/values.yaml → bootstrap/sealed-secrets/values.yaml
diff --git a/docs/gitops-install.md b/docs/gitops-install.md
@@ -154,7 +154,7 @@ If you do not have ArgoCD deployed then you can use the following:
 
 ```bash
 kubectl kustomize --enable-helm \
-    https://github.com/rackerlabs/understack/bootstrap/phase_2/argocd/ \
+    https://github.com/rackerlabs/understack/bootstrap/argocd/ \
     | kubectl apply -f -
 ```
 

diff --git a/scripts/gitops-deploy.sh b/scripts/gitops-deploy.sh
@@ -75,5 +75,19 @@ for component in keystone dexidp ingress-nginx ironic nautobot; do
     fi
 done
 
+for cfg in bootstrap/argocd/ingress.yaml; do
+    basefile=$(basename "${cfg}")
+    component=$(basename "$(dirname "${cfg}")")
+    outfile="${UC_DEPLOY_CLUSTER}/${component}/${basefile}"
+
+    mkdir -p "${UC_DEPLOY_CLUSTER}/${component}"
+    if [ ! -f "${outfile}" ]; then
+        template "${UC_REPO}/${cfg}" "${outfile}"
+    else
+        echo "You have ${outfile} already, not overwriting"
+    fi
+done
+
+
 echo "Creating app-of-apps config"
 template "${UC_REPO_APPS}/app-of-apps.yaml" "${UC_DEPLOY_CLUSTER}/app-of-apps.yaml"