deploy-ci.sh

#!/bin/bash

set +x

eval "$(minikube docker-env)"

GITTAG="$(git describe --tag --long --dirty)"
DOCKER_DIR_HASH="$(git rev-parse --short=12 HEAD:curiefense)"
export DOCKER_TAG="${DOCKER_TAG:-$GITTAG-$DOCKER_DIR_HASH}"

ROOT_DIR=$(git rev-parse --show-toplevel)
WORKDIR=$(mktemp -d -t ci-XXXXXXXXXX)
LOGS_DIR="$WORKDIR/logs"

mkdir -p "$LOGS_DIR"

# Let's run the script from the root directory
pushd "$ROOT_DIR" || exit

pushd curiefense/images || exit
./build-docker-images.sh
popd || exit

# curieconfctl will try to write to this
# path during the tests. This is currently
# not configurable.
mkdir -p "$WORKDIR/bucket"
chmod 777 "$WORKDIR/bucket"

# Make sure the *local* bucket directory is mounted on minikube's
# VM. This will make sure that the `/bucket` hostPath mounted in the
# PODs is also shared locally
nohup minikube mount "$WORKDIR/bucket":/bucket > "$LOGS_DIR/minikube-mount.log" &

# Create a tunnel so we can guarantee that the gateway's LoadBalancer will
# get an IP from the host. We could use a different service type for the
# gateway but let's try to keep it as close to production-like as possible.
nohup minikube tunnel > "$LOGS_DIR/minikube-tunnel.log" &

pushd deploy/istio-helm || exit
./deploy.sh -f charts/use-local-bucket.yaml -f charts/values-istio-ci.yaml
sleep 10
popd || exit

PARAMS=()

if [ -n "$USE_FLUENTD" ]; then
    PARAMS+=("-f" "curiefense/use-es-fluentd.yaml")
fi

pushd deploy/curiefense-helm || exit
./deploy.sh -f curiefense/use-local-bucket.yaml -f curiefense/e2e-ci.yaml "${PARAMS[@]}" "$@"

# Expose services
# No need to pass the namespace as it's already
# specified in the k8s manifest itself. Two namespaces
# are used in this manifest: istio-system, and curiefense
kubectl create -f expose-services.yaml
popd || exit

echo "-- Deploy echoserver (test app) --"
kubectl -n echoserver create -f deploy/echo-server.yaml

runtime="5 minute"
endtime=$(date -ud "$runtime" +%s)

INGRESS_HOST=$(minikube ip)
INGRESS_PORT=$(kubectl -n istio-system get service istio-ingressgateway -o jsonpath='{.spec.ports[?(@.name=="http2")].nodePort}')
URL=$INGRESS_HOST:$INGRESS_PORT

while ! curl -fsS "http://$URL/productpage" | grep -q "command=GET";
do
    if [[ $(date -u +%s) -ge $endtime ]];
    then
        echo "URL $URL"
        kubectl --namespace echoserver describe pods
        kubectl --namespace echoserver get pods
        kubectl get --all-namespaces gateways -o yaml
        kubectl get --all-namespaces services -o yaml
        kubectl get --all-namespaces endpoints -o yaml
        echo "---- ingressgateway logs ----"
        kubectl logs -n istio-system -l app=istio-ingressgateway --all-containers --tail=-1
        echo "---- istiod logs ----"
        kubectl logs -n istio-system -l app=istiod --all-containers --tail=-1
        echo "Time out waiting for echoserver to respond"
        exit 1
    fi

    echo "Waiting for echoserver: sleeping for 20s"
    sleep 20
done