main.sh

#!/usr/bin/env bash

set -euo pipefail
eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"

# Set up some variables so we can reference the GitHub Action context
__dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
__file="${__dir}/$(basename "${BASH_SOURCE[0]}")"
__base="$(basename ${__file} .sh)"

_log() {
    local IFS=$' \n\t'
    printf '[%s] %s\n' "$(date '+%Y-%m-%d %H:%M:%S')" "$*" >&2;
}
cluster_info() {
    gcloud container --project "$host_project" clusters list --format json \
        | jq -r --arg 'key' "$1" '.[][$key]'
}
create_deployment() {
    local params
    params="$(jq -nc \
        --arg ref "$PASSED_SHA" \
        --arg environment "$environment" \
        '{
            "ref": $ref,
            "environment": $environment,
            "auto_merge": false,
            "required_contexts": [],
            "production_environment": $environment | startswith("prod")
        }')"

    gh api -X POST "/repos/:owner/:repo/deployments" \
        -H 'Accept: application/vnd.github.ant-man-preview+json' \
        --input - <<< "$params"
}

set_deployment_status() {
    if [[ -n "${deployment_id:-}" ]]; then
        local state="$1" \
            environment_url="${2:-}"
        gh api --silent -X POST "/repos/:owner/:repo/deployments/$deployment_id/statuses" \
            -H 'Accept: application/vnd.github.ant-man-preview+json' \
            -H 'Accept: application/vnd.github.flash-preview+json' \
            -F "state=$state" \
            -F "log_url=https://github.com/$GITHUB_REPOSITORY/commit/$PASSED_SHA/checks" \
            -F "environment_url=$environment_url" \
            -F 'auto_inactive=true'
    fi
}

export IFS=$'\n\t'

# Set helm url based on default, or use provided HELM_URL variable
helm_url="${HELM_URL:-https://helm.clevyr.cloud}"
host_project="${HOST_PROJECT:-momma-motus}"
# Set the project id based on the key file provided, or use the provided project id
project_id="${GCLOUD_GKE_PROJECT:-$(jq -r .project_id <<< "$GCLOUD_KEY_FILE")}"
region="us-central1"

_log "SHA: "$GITHUB_SHA
_log "Passed SHA: "$PASSED_SHA
_log "Ref: "$GITHUB_REF
prNum=$PR_NUMBER
environment="pr"$prNum
funNames="${USE_CLEVYR_NAMES:-false}"

_log Verify tempbuilds folder exists
if [ ! -d deployment/tempbuilds ]; then
    _log tempbuilds folder not found! Aborting.
    exit 1
fi

_log Activate gcloud auth
gcloud auth activate-service-account --key-file - <<< "$GCLOUD_KEY_FILE"
cluster_name="${GCLOUD_CLUSTER_NAME:-$(cluster_info name)}"
docker_repo="${REPO_URL:-us.gcr.io/$project_id}"
echo "$GCLOUD_KEY_FILE" > /tmp/serviceAccount.json
export GOOGLE_APPLICATION_CREDENTIALS=/tmp/serviceAccount.json

_log Install GKE auth plugin
echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" | sudo tee -a /etc/apt/sources.list.d/google-cloud-sdk.list
curl https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key --keyring /usr/share/keyrings/cloud.google.gpg add -
sudo apt-get update && sudo apt-get install google-cloud-sdk-gke-gcloud-auth-plugin

_log Select Kubernetes cluster
gcloud container clusters get-credentials  \
    "$cluster_name" \
    --region "$region" \
    --project "$host_project"

if [[ -n "${GITHUB_TOKEN:-}" ]]; then
    # Create the deployment
    github_deployment="$(create_deployment)"
    # Set the deployment status
    deployment_id="$(jq '.id' <<< "$github_deployment")"
    set_deployment_status in_progress
    trap 'set_deployment_status failure' ERR
fi

_log Starting Terragrunt and yq install...
brew install terragrunt yq sops --ignore-dependencies 2>&1 &
tg_install_pid="$!"

_log Add custom helm repo
helm repo add clevyr "$helm_url"
helm repo update

# Generate friendly URL
_log Generating names
if [ $funNames == "true" ]; then
    friendlyName=$(shuf -n 1 "$__dir/adjectives.txt")-$(shuf -n 1 "$__dir/names.txt")
else
    friendlyName=$(shuf -n 1 "$__dir/colors.txt")-$(shuf -n 1 "$__dir/animals.txt")
fi

_log Renaming folder and replacing URL values
cd deployment
mv tempbuilds $environment
cd $environment
sed -i "s/REPLACE/$friendlyName/g" helm.yaml
environment_url="https://"$(yq e '.static.ingress.hostname // .app.ingress.hostname' helm.yaml)

_log Wait for Terragrunt to finish installing...
wait "$tg_install_pid"

if [ -f secrets.yaml ]; then
    _log Decrypting secrets
    # Add a newline if there isn't one
    sed -i -e '$a\' helm.yaml
    # Decrypt the secret file via SOPSs then append to the values file
    sops -d secrets.yaml >> helm.yaml
fi

_log Initializing Terragrunt
cd ../setup
terragrunt init
cd ../$environment
terragrunt init
_log Running Terragrunt apply
terragrunt apply -var=app_image_tag=$PASSED_SHA -var=static_site_image_tag=$PASSED_SHA -auto-approve
_log Deployment complete: $environment_url
set_deployment_status success "$environment_url"