Taskfile.yml

# https://taskfile.dev

version: "3"

includes:
  ssh: Taskfile.ssh.yml
  argocd: Taskfile.argocd.yml
  ansible: Taskfile.ansible.yml

dotenv:
- .env

vars:
  TMP_PATH: ./tmp
  SSH_KEYS_NAME: demo
  SSH_KEYS_PATH: "{{ .TMP_PATH }}"
  SSH_PRIV_KEY_FILE: "{{ .SSH_KEYS_PATH }}/{{.SSH_KEYS_NAME}}"
  SSH_PUB_KEY_FILE: "{{ .SSH_PRIV_KEY_FILE }}.pub"

tasks:
  init:
    desc: "Create temp dirs"
    cmds:
      - mkdir -p {{ .TMP_PATH  }}
      - mkdir -p {{ .SSH_KEYS_PATH  }}

  ssh-gen:
    deps:
      - init
    desc: Generate ssh keys for VMs
    cmds:
      - echo "🚀 Generate ssh keys {{ .SSH_PRIV_KEY_FILE }}"
      - yes | ssh-keygen -t rsa -b 1024 -f "{{ .SSH_PRIV_KEY_FILE }}" -N "" -C "{{ .SSH_KEYS_NAME }}" -v
      - chmod 0600 {{ .SSH_PRIV_KEY_FILE }} {{ .SSH_PUB_KEY_FILE }}
    status:
      - test -f "{{ .SSH_PRIV_KEY_FILE }}"
      - test -f "{{ .SSH_PUB_KEY_FILE }}"

  check-ssh:
    desc: Validate SSH key pair
    cmds:
      - 'ssh-keygen -y -f "{{ .SSH_PRIV_KEY_FILE }}" 2>/dev/null | diff -q - "{{ .SSH_PUB_KEY_FILE }}" >/dev/null && echo "SSH key pair is valid" || (echo "Public key does not match private key" && exit 1)'

  update-ssh:
    vars:
      SSH_PUB_KEY:
        sh: cat "{{ .SSH_PUB_KEY_FILE }}"
    desc: Update public ssh keys in cloudinit
    deps:
      - ssh-gen
    cmds:
      - echo "🚀 Update ssh keys"
      - |
        SSH_PUB_KEY=$(cat "{{ .SSH_PUB_KEY_FILE }}")
        SSH_PUB_KEY_ESCAPED=$(echo "$SSH_PUB_KEY" | sed 's/[[\.*^$()+?{|]/\\&/g')
        if [[ "$(uname)" == "Darwin" ]]; then
          # macOS
          export LC_CTYPE=C  # Ensure sed handles text properly on macOS
          grep -rwl "demo" | xargs sed -i '' "s|ssh-rsa [^ ]* demo|${SSH_PUB_KEY_ESCAPED}|g"
          unset LC_CTYPE  # Clean up environment variable after execution
        else
          # Linux
          grep -rwl "demo" | xargs sed -i "s|ssh-rsa [^ ]* demo|${SSH_PUB_KEY_ESCAPED}|g"
        fi

  update-password:
    desc: Update password for users
    cmds:
    - echo "🚀 Generate password hash from >>${PASSWORD}<<"
    - |
      find . -name "*.yaml" -exec yq eval --inplace 'with(select(.kind == "User"); .spec.password="'$(echo "${PASSWORD}" | htpasswd -BinC 14 "" | cut -d: -f2 | base64 -w0)'")' '{}' \;

  update-fqdn:
    desc: Update FQDN for ingress and dexauthenticator
    cmds:
      - echo "🚀 Update FQDN"
      - |
          yq -i '(.spec.rules[]?.host |= env(FQDN)) | (.spec.tls[].hosts[] |= env(FQDN))' ./k8s/demo-app/ingress.yaml
          yq -i '(.spec.dnsNames[]? |= env(FQDN))' ./k8s/demo-app/cert.yaml
          yq -i '(.spec.applicationDomain |= env(FQDN))' ./k8s/demo-app/dex.yaml

  update:
    cmds:
      - task: init
      - task: ssh-gen
      - task: update-ssh
      - task: update-password
      - task: update-fqdn

  deploy:
    desc: Deploy demo APP infra
    vars:
      start_time:
        sh: date +%s
    cmds:
      - task: update
      - echo "🚀 Deploy APP"
      - kubectl apply -k ./k8s/projects
      - kubectl get project -o name | xargs kubectl wait --for='jsonpath={.status.state}=Deployed' --timeout=360s
      - kubectl apply -k ./k8s
      - kubectl -n demo-db get vm -o name | xargs kubectl -n demo-db wait --for='jsonpath={.status.phase}=Running' --timeout=360s
      - kubectl -n demo-app get vm -o name | xargs kubectl -n demo-app wait --for='jsonpath={.status.phase}=Running' --timeout=360s
      - |
        export end_time=$(date +%s)
        difference=$((end_time - {{.start_time}}))
        if [[ "$(uname)" == "Darwin" ]]; then
          # macOS
          date -ur "$difference" +'%H:%M:%S'
        else
          # Linux
          date -ud "@$difference" +'%H:%M:%S'
        fi
 
  undeploy:
    desc: Remove demo APP infra
    cmds:
      - kubectl delete -k ./k8s || true
      - kubectl delete -k ./k8s/projects || true

  kill-vms:
    desc: Kill VM
    cmds:
      - kubectl -n demo-app delete vm --all
      - kubectl -n demo-app delete vd --all
      - kubectl -n demo-db delete vm --all
      - kubectl -n demo-db delete vd --all