mirror of https://github.com/fluxcd/flux2.git
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
126 lines
4.6 KiB
Go
126 lines
4.6 KiB
Go
/*
|
|
Copyright 2021 The Flux authors
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package test
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
tfjson "github.com/hashicorp/terraform-json"
|
|
corev1 "k8s.io/api/core/v1"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"sigs.k8s.io/controller-runtime/pkg/client"
|
|
"sigs.k8s.io/controller-runtime/pkg/controller/controllerutil"
|
|
|
|
"github.com/fluxcd/test-infra/tftestenv"
|
|
)
|
|
|
|
const (
|
|
azureDevOpsKnownHosts = "ssh.dev.azure.com ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7Hr1oTWqNqOlzGJOfGJ4NakVyIzf1rXYd4d7wo6jBlkLvCA4odBlL0mDUyZ0/QUfTTqeu+tm22gOsv+VrVTMk6vwRU75gY/y9ut5Mb3bR5BV58dKXyq9A9UeB5Cakehn5Zgm6x1mKoVyf+FFn26iYqXJRgzIZZcZ5V6hrE0Qg39kZm4az48o0AUbf6Sp4SLdvnuMa2sVNwHBboS7EJkm57XQPVU3/QpyNLHbWDdzwtrlS+ez30S3AdYhLKEOxAG8weOnyrtLJAUen9mTkol8oII1edf7mWWbWVf0nBmly21+nZcmCTISQBtdcyPaEno7fFQMDD26/s0lfKob4Kw8H"
|
|
)
|
|
|
|
// createKubeConfigAKS constructs kubeconfig for an AKS cluster from the
|
|
// terraform state output at the given kubeconfig path.
|
|
func createKubeConfigAKS(ctx context.Context, state map[string]*tfjson.StateOutput, kcPath string) error {
|
|
kubeconfigYaml, ok := state["aks_kube_config"].Value.(string)
|
|
if !ok || kubeconfigYaml == "" {
|
|
return fmt.Errorf("failed to obtain kubeconfig from tf output")
|
|
}
|
|
return tftestenv.CreateKubeconfigAKS(ctx, kubeconfigYaml, kcPath)
|
|
}
|
|
|
|
func createAzureSPSecret(ctx context.Context, state map[string]*tfjson.StateOutput) (map[client.Object]controllerutil.MutateFn, string, error) {
|
|
objMap := make(map[client.Object]controllerutil.MutateFn)
|
|
fluxAzureSp := state["flux_azure_sp"].Value.(map[string]interface{})
|
|
|
|
azureSp := &corev1.Secret{ObjectMeta: metav1.ObjectMeta{Name: "azure-sp", Namespace: "flux-system"}}
|
|
mutateFn := func() error {
|
|
azureSp.StringData = map[string]string{
|
|
// "AZURE_TENANT_ID": fluxAzureSp["tenant_id"].(string),
|
|
"AZURE_CLIENT_ID": fluxAzureSp["client_id"].(string),
|
|
}
|
|
return nil
|
|
}
|
|
objMap[azureSp] = mutateFn
|
|
|
|
tmpl := map[string]string{
|
|
"secretName": azureSp.Name,
|
|
}
|
|
kustomizeYaml, err := executeTemplate("testdata/azure-kustomization.yaml", tmpl)
|
|
if err != nil {
|
|
return nil, "", err
|
|
}
|
|
|
|
return objMap, kustomizeYaml, nil
|
|
}
|
|
|
|
func getTestConfigAKS(ctx context.Context, outputs map[string]*tfjson.StateOutput) (*testConfig, error) {
|
|
fluxAzureSp := outputs["flux_azure_sp"].Value.(map[string]interface{})
|
|
|
|
fleetInfraRepository := outputs["fleet_infra_repository"].Value.(map[string]interface{})
|
|
applicationRepository := outputs["application_repository"].Value.(map[string]interface{})
|
|
|
|
acr := outputs["acr"].Value.(map[string]interface{})
|
|
eventHubSas := outputs["event_hub_sas"].Value.(string)
|
|
|
|
sharedSopsId := outputs["sops_id"].Value.(string)
|
|
|
|
config := &testConfig{
|
|
pat: outputs["shared_pat"].Value.(string),
|
|
idRsa: outputs["shared_id_rsa"].Value.(string),
|
|
idRsaPub: outputs["shared_id_rsa_pub"].Value.(string),
|
|
knownHosts: azureDevOpsKnownHosts,
|
|
fleetInfraRepository: repoConfig{
|
|
http: fleetInfraRepository["http"].(string),
|
|
ssh: fleetInfraRepository["ssh"].(string),
|
|
},
|
|
applicationRepository: repoConfig{
|
|
http: applicationRepository["http"].(string),
|
|
ssh: applicationRepository["ssh"].(string),
|
|
},
|
|
dockerCred: dockerCred{
|
|
url: acr["url"].(string),
|
|
username: acr["username"].(string),
|
|
password: acr["password"].(string),
|
|
},
|
|
eventHubSas: eventHubSas,
|
|
sopsArgs: fmt.Sprintf("--azure-kv %s", sharedSopsId),
|
|
sopsSecretData: map[string]string{
|
|
"sops.azure-kv": fmt.Sprintf(`clientId: %s`, fluxAzureSp["client_id"].(string)),
|
|
},
|
|
}
|
|
|
|
return config, nil
|
|
}
|
|
|
|
// registryLoginACR logs into the container/artifact registries using the
|
|
// provider's CLI tools and returns a list of test repositories.
|
|
func registryLoginACR(ctx context.Context, output map[string]*tfjson.StateOutput) (map[string]string, error) {
|
|
// NOTE: ACR registry accept dynamic repository creation by just pushing a
|
|
// new image with a new repository name.
|
|
testRepos := map[string]string{}
|
|
|
|
acr := output["acr"].Value.(map[string]interface{})
|
|
registryURL := acr["url"].(string)
|
|
if err := tftestenv.RegistryLoginACR(ctx, registryURL); err != nil {
|
|
return nil, err
|
|
}
|
|
testRepos["acr"] = registryURL
|
|
|
|
return testRepos, nil
|
|
}
|