bootstrap.sh

#!/usr/bin/env bash
set -euo pipefail

echo "Installing required tools..."
sudo apt-get install -y snapd python3-openstackclient
export PATH=$PATH:/snap/bin
sudo snap install kubectl --classic
sudo snap install helm --classic
sudo snap install yq

echo "Updating system to apply latest security patches..."
export DEBIAN_FRONTEND=noninteractive
sudo apt-get update -qq
# Shut apt up, since it just blows up the logs
# On dialogues about config file updates, keep current config file and use default choices
sudo apt-get -o Dpkg::Options::="--force-confold" \
             -o Dpkg::Options::="--force-confdef" \
             -y -qq upgrade > /dev/null

# Check a clouds.yaml file exists in the same directory as the script
if [ ! -f clouds.yaml ]; then
    echo "A clouds.yaml file is required in the same directory as this script"
    exit 1
fi

echo "Installing clusterctl..."
curl --progress-bar -L "https://github.com/kubernetes-sigs/cluster-api/releases/download/${CLUSTER_API}/clusterctl-linux-amd64" -o clusterctl
chmod +x clusterctl
sudo mv clusterctl /usr/local/bin/clusterctl

# Check that application_credential_id existing in clouds.yaml
# This has to be done after yq is installed
if [ "$(yq -r '.clouds.openstack.auth.application_credential_id' clouds.yaml)" == "null" ]; then
    # Enforce the use of app creds
    echo "Error: An app cred clouds.yaml file is required in the clouds.yaml file, normal creds (i.e. those with passwords) are not supported"
    exit 1
fi

if [ "$(yq -r '.clouds.openstack.auth.project_id' clouds.yaml)" == "null" ]; then
    echo "Looking up project_id for clouds.yaml..."
    APP_CRED_ID=$(yq -r '.clouds.openstack.auth.application_credential_id' clouds.yaml)
    PROJECT_ID="$(openstack --os-cloud openstack application credential show "${APP_CRED_ID}" -c project_id -f value)"
    echo "Injecting project ID: '${PROJECT_ID}' into clouds.yaml..."
    injected_id=$PROJECT_ID yq e '.clouds.openstack.auth.project_id = env(injected_id)' -i clouds.yaml
fi

echo "Installing and starting microk8s..."
sudo snap install microk8s --classic
sudo microk8s status --wait-ready

echo "Exporting the kubeconfig file..."
mkdir -p ~/.kube/
echo "Backing up existing kubeconfig if it exists..."
if [ -f "$HOME/.kube/config" ]; then
    mv -v "$HOME/.kube/config" "$HOME/.kube/config.bak"
fi

sudo microk8s.config | sudo tee ~/.kube/config
sudo chown "$USER" ~/.kube/config
sudo chmod 600 ~/.kube/config
sudo microk8s enable dns

echo "Initialising cluster-api OpenStack provider..."
echo "If this fails you may need a GITHUB_TOKEN, see https://stfc.atlassian.net/wiki/spaces/CLOUDKB/pages/211878034/Cluster+API+Setup for details"
clusterctl init --infrastructure=openstack:"${CAPO_PROVIDER_VERSION}"

echo "Importing required helm repos and packages"
helm repo add capi https://azimuth-cloud.github.io/capi-helm-charts
helm repo add capi-addons https://azimuth-cloud.github.io/cluster-api-addon-provider
helm repo update
helm upgrade cluster-api-addon-provider capi-addons/cluster-api-addon-provider --create-namespace --install --wait -n clusters --version "${ADDON_VERSION}"
kubectl apply -f "https://github.com/k-orc/openstack-resource-controller/releases/download/v${KORC}/install.yaml"

echo ""
echo "=============================================================================="
echo "You are now ready to create a cluster following the remaining instructions..."
echo "https://stfc.atlassian.net/wiki/spaces/CLOUDKB/pages/211878034/Cluster+API+Setup"
echo "=============================================================================="