31 lines
1.9 KiB
Cheetah
31 lines
1.9 KiB
Cheetah
{{- if (and (stat (joinPath .host.home ".config" "age" "chezmoi.txt")) (stat (joinPath .chezmoi.sourceDir ".chezmoitemplates" "secrets" "DIGITALOCEAN_ACCESS_TOKEN")) (env "DIGITALOCEAN_ACCESS_TOKEN")) -}}
|
|
#!/usr/bin/env bash
|
|
# @file DigitalOcean Kubernetes
|
|
# @brief Connects to DigitalOcean Kubernetes cluster
|
|
# @description
|
|
# This script runs when `DIGITALOCEAN_ACCESS_TOKEN` is defined as an environment variable or as an encrypted key (see
|
|
# [Secrets documentation](https://install.doctor/docs/customization/secrets#encrypted-secrets)). If the check passes,
|
|
# then the script ensures the DigitalOcean CLI is installed (i.e. `doctl`). Then, it uses `doctl` to connect to the Kubernetes
|
|
# cluster defined by the the configuration stored under `.user.digitalOceanClusterId` in `home/.chezmoi.yaml.tmpl`.
|
|
|
|
{{ includeTemplate "universal/profile" }}
|
|
{{ includeTemplate "universal/logg" }}
|
|
|
|
### Ensure `DIGITALOCEAN_ACCESS_TOKEN` is defined (used for headlessly connecting to the k8s cluster)
|
|
export DIGITALOCEAN_ACCESS_TOKEN="{{ if (stat (joinPath .chezmoi.sourceDir ".chezmoitemplates" "secrets" "DIGITALOCEAN_ACCESS_TOKEN")) }}{{ includeTemplate "secrets/DIGITALOCEAN_ACCESS_TOKEN" | decrypt | trim }}{{ else }}{{ env "DIGITALOCEAN_ACCESS_TOKEN" }}{{ end }}"
|
|
|
|
if [ -n "$DIGITALOCEAN_ACCESS_TOKEN" ] && [ -n '{{ .user.digitalOceanClusterId }}' ]; then
|
|
### Ensure DigitalOcean CLI is instaled
|
|
if ! command -v doctl > /dev/null; then
|
|
logg info '`doctl` is missing - installing via Homebrew'
|
|
brew install doctl
|
|
fi
|
|
|
|
### Connect to the k8s cluster with `doctl`
|
|
logg info 'Connecting to the DigitalOcean k8s cluster with `doctl`'
|
|
doctl kubernetes cluster kubeconfig save {{ .user.digitalOceanClusterId }}
|
|
else
|
|
logg info 'Skipping connecting to the DigitalOcean k8s cluster because either the `DIGITALOCEAN_ACCESS_TOKEN` or the `.user.digitalOceanClusterId` is not defined'
|
|
fi
|
|
|
|
{{ end -}}
|