-
Notifications
You must be signed in to change notification settings - Fork 0
/
kubebuild
executable file
·173 lines (141 loc) · 7.15 KB
/
kubebuild
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
#!/usr/bin/env bash
set -e
# cd 'ctxswh' dir
cd "$(dirname "$0")"
# check protobuf version
# go get -u google.golang.org/grpc
# go get -u github.com/golang/protobuf/{proto,protoc-gen-go}
if [[ $(protoc --version) < "libprotoc 3.0.0" ]]; then
echo "could not find protoc version > 3.0.0, is it installed + in PATH?"
exit 1
fi
# check cfssl
command -v cfssl >/dev/null 2>&1 || { echo "cfssl not installed. (https://github.com/cloudflare/cfssl#installation)" >&2; exit 1; }
# check minikube
command -v minikube >/dev/null 2>&1 || { echo "minikube not installed. (https://github.com/kubernetes/minikube)" >&2; exit 1; }
# check govendor
# modify github.com/golang/glog/glog.go first for custom the time format
command -v govendor >/dev/null 2>&1 || { echo "govendor not installed. (go get -u github.com/kardianos/govendor)" >&2; exit 1; }
govendor init
govendor add +external
CTXSWH_ROOT="${GOPATH}/src/github.com/williammuji"
CTXSWH_PATH="${CTXSWH_ROOT}/ctxswh"
# goimports
goimports -w ${CTXSWH_PATH}
# directories containing protos to be built
DIRS="./gatewaypb ./authpb ./gamepb ./chatpb"
for dir in ${DIRS}; do
pushd ${dir}
protoc --go_out=plugins=grpc,import_prefix=github.com/williammuji/:. -I=.:"${CTXSWH_ROOT}" *.proto
sed -i.bak -E "s/github\.com\/williammuji\/(github\.com|golang\.org|google\.golang\.org)/\1/g" *.pb.go
sed -i.bak -E 's/github\.com\/williammuji\/(errors|fmt|io)/\1/g' *.pb.go
sed -i.bak -E 's/import fmt \"fmt\"//g' *.pb.go
sed -i.bak -E 's/import _ \"github\.com\/williammuji\/google\/api\"//g' *.pb.go
rm -f *.bak
goimports -w *.pb.go
popd
done
# kubernetes cluster must be started
# create gatewaytls mysqltls secret
CERTS_DIRS="./gatewaytls ./mysqltls"
for dir in ${CERTS_DIRS}; do
pushd ${dir}
# Create CA
cfssl gencert -initca config/cacsr.json | cfssljson -bare ca
# Generate server certs
cfssl gencert \
-ca=ca.pem \
-ca-key=ca-key.pem \
-config=config/caconfig.json \
-profile=server \
config/servercsr.json | cfssljson -bare server
# Generate client certs
cfssl gencert \
-ca=ca.pem \
-ca-key=ca-key.pem \
-config=config/caconfig.json \
-profile=client \
config/clientcsr.json | cfssljson -bare client
CERTS_DIR_NAME=$(echo ${dir} | cut -d'/' -f 2)
# delete secret ${CERTS_DIR_NAME}
kubectl delete secrets ${CERTS_DIR_NAME} || true
# require go get github.com/kelseyhightower/conf2kube
# create ${CERTS_DIR_NAME} Kubernetes secret
if [[ ${CERTS_DIR_NAME} == mysqltls ]]; then
conf2kube -n ${CERTS_DIR_NAME} -f client-key.pem -k client-key.pem | kubectl create -f -
kubectl patch secret ${CERTS_DIR_NAME} -p `conf2kube -n ${CERTS_DIR_NAME} -f client.pem -k client.pem`
kubectl patch secret ${CERTS_DIR_NAME} -p `conf2kube -n ${CERTS_DIR_NAME} -f ca.pem -k ca.pem`
# enable _mysql can read server-key.pem
chmod a+r server-key.pem
elif [[ ${CERTS_DIR_NAME} == gatewaytls ]]; then
conf2kube -n ${CERTS_DIR_NAME} -f server-key.pem -k server-key.pem | kubectl create -f -
kubectl patch secret ${CERTS_DIR_NAME} -p `conf2kube -n ${CERTS_DIR_NAME} -f server.pem -k server.pem`
kubectl patch secret ${CERTS_DIR_NAME} -p `conf2kube -n ${CERTS_DIR_NAME} -f ca.pem -k ca.pem`
kubectl patch secret ${CERTS_DIR_NAME} -p `conf2kube -n ${CERTS_DIR_NAME} -f client.pem -k client.pem`
kubectl patch secret ${CERTS_DIR_NAME} -p `conf2kube -n ${CERTS_DIR_NAME} -f client-key.pem -k client-key.pem`
# enable container gateway can read server-key.pem
chmod a+r server-key.pem
chmod a+r client-key.pem
fi
popd
done
# delete deployments
DEPLOY_YAML="gateway/gatewaycontroller.yaml gateway/gateway.yaml auth/authcontroller.yaml auth/authservice.yaml game/gamecontroller.yaml game/gameservice.yaml chat/chatcontroller.yaml chat/chatservice.yaml account/accountcontroller.yaml client/clientpod.yaml"
for f in ${DEPLOY_YAML}; do
kubectl delete -f ${f} || true
done
# start mysql server with SSL
if [ "$(uname)" == "Darwin" ]; then
# sudo vi /Library/LaunchDaemons/com.oracle.oss.mysql.mysqld.plist
# <string>--ssl-ca=${CTXSWH_PATH}/mysqltls/ca.pem</string>
# <string>--ssl-cert=${CTXSWH_PATH}/mysqltls/server.pem</string>
# <string>--ssl-key=${CTXSWH_PATH}/mysqltls/server-key.pem</string>
sudo launchctl unload -F /Library/LaunchDaemons/com.oracle.oss.mysql.mysqld.plist
sudo launchctl load -F /Library/LaunchDaemons/com.oracle.oss.mysql.mysqld.plist
# sudo /usr/local/mysql/bin/mysqld --user=_mysql --basedir=/usr/local/mysql --datadir=/usr/local/mysql/data --plugin-dir=/usr/local/mysql/lib/plugin --log-error=/usr/local/mysql/data/mysqld.local.err --ssl-ca=${CTXSWH_PATH}/mysqltls/ca.pem --ssl-cert=${CTXSWH_PATH}/mysqltls/server.pem --ssl-key=${CTXSWH_PATH}/mysqltls/server-key.pem &
elif [ "$(expr substr $(uname -s) 1 5)" == "Linux" ]; then
# sudo vi /etc/mysql/mysql.conf.d/mysqld.cnf
# [mysqld]
# ssl-ca=mysql-ca.pem
# ssl-cert=mysql-server-cert.pem
# ssl-key=mysql-server-key.pem
sudo cp ${CTXSWH_PATH}/mysqltls/ca.pem /var/lib/mysql/mysql-ca.pem
sudo cp ${CTXSWH_PATH}/mysqltls/server.pem /var/lib/mysql/mysql-server-cert.pem
sudo cp ${CTXSWH_PATH}/mysqltls/server-key.pem /var/lib/mysql/mysql-server-key.pem
sudo service mysql restart
fi
# build docker image
docker rmi -f localhost:32000/ctxswh/account:1.0.0 localhost:32000/ctxswh/client:1.0.0 localhost:32000/ctxswh/game:1.0.0 localhost:32000/ctxswh/gateway:1.0.0 localhost:32000/ctxswh/auth:1.0.0 localhost:32000/ctxswh/chat:1.0.0 || true
# go build
CGO_ENABLED=0 GOOS=linux go build -a -v -o gateway/gateway --ldflags '-extldflags "-static"' -tags netgo -installsuffix netgo ./gateway
CGO_ENABLED=0 GOOS=linux go build -a -v -work -o auth/auth --ldflags '-extldflags "-static"' -tags netgo -installsuffix netgo ./auth
CGO_ENABLED=0 GOOS=linux go build -a -v -o game/game --ldflags '-extldflags "-static"' -tags netgo -installsuffix netgo ./game
CGO_ENABLED=0 GOOS=linux go build -a -v -o chat/chat --ldflags '-extldflags "-static"' -tags netgo -installsuffix netgo ./chat
CGO_ENABLED=0 GOOS=linux go build -a -v -o account/account --ldflags '-extldflags "-static"' -tags netgo -installsuffix netgo ./account
CGO_ENABLED=0 GOOS=linux go build -a -v -o client/client --ldflags '-extldflags "-static"' -tags netgo -installsuffix netgo ./client
docker build --no-cache --rm -f auth/Dockerfile \
-t localhost:32000/ctxswh/auth:1.0.0 \
auth/
docker push localhost:32000/ctxswh/auth:1.0.0
docker build --no-cache --rm -f gateway/Dockerfile \
-t localhost:32000/ctxswh/gateway:1.0.0 \
gateway/
docker push localhost:32000/ctxswh/gateway:1.0.0
docker build --no-cache --rm -f game/Dockerfile \
-t localhost:32000/ctxswh/game:1.0.0 \
game/
docker push localhost:32000/ctxswh/game:1.0.0
docker build --no-cache --rm -f chat/Dockerfile \
-t localhost:32000/ctxswh/chat:1.0.0 \
chat/
docker push localhost:32000/ctxswh/chat:1.0.0
docker build --no-cache --rm -f client/Dockerfile \
-t localhost:32000/ctxswh/client:1.0.0 \
client/
docker push localhost:32000/ctxswh/client:1.0.0
# enable account container can read client-key.pem
chmod a+r mysqltls/client-key.pem
docker build --no-cache --rm -f account/Dockerfile \
-t localhost:32000/ctxswh/account:1.0.0 \
account/
docker push localhost:32000/ctxswh/account:1.0.0