Use bazel to run deploy-gen scripts

Signed-off-by: James Munnelly <james@munnelly.eu>

BUILD.bazel

@@ -35,6 +35,7 @@ filegroup(
         "//cmd/acmesolver:all-srcs",
         "//cmd/controller:all-srcs",
         "//cmd/webhook:all-srcs",
+        "//contrib:all-srcs",
         "//docs/generated/reference:all-srcs",
         "//hack:all-srcs",
         "//pkg/acme:all-srcs",

contrib/BUILD.bazel

@@ -0,0 +1,14 @@
+filegroup(
+    name = "package-srcs",
+    srcs = glob(["**"]),
+    tags = ["automanaged"],
+    visibility = ["//visibility:private"],
+)
+
+filegroup(
+    name = "all-srcs",
+    srcs = glob(["**/*"]) + [
+        ":package-srcs",
+    ],
+    visibility = ["//visibility:public"],
+)

hack/BUILD.bazel

@@ -92,6 +92,26 @@ sh_test(
     ],
 )
 
+# Static deployment manifests rules
+
+sh_binary(
+    name = "update-deploy-gen",
+    srcs = ["update-deploy-gen.sh"],
+    data = [
+        "//hack/bin:helm",
+    ],
+)
+
+sh_test(
+    name = "verify-deploy-gen",
+    srcs = ["verify-deploy-gen.sh"],
+    data = [
+        ":update-deploy-gen",
+        "//contrib:all-srcs",
+        "//hack/deploy:all-srcs",
+    ],
+)
+
 filegroup(
     name = "package-srcs",
     srcs = glob(["**"]),
@@ -105,6 +125,7 @@ filegroup(
         ":package-srcs",
         "//hack/bin:all-srcs",
         "//hack/boilerplate:all-srcs",
+        "//hack/deploy:all-srcs",
     ],
     tags = ["automanaged"],
     visibility = ["//visibility:public"],

hack/deploy/BUILD.bazel

@@ -0,0 +1,13 @@
+filegroup(
+    name = "package-srcs",
+    srcs = glob(["**"]),
+    tags = ["automanaged"],
+    visibility = ["//visibility:private"],
+)
+
+filegroup(
+    name = "all-srcs",
+    srcs = [":package-srcs"],
+    tags = ["automanaged"],
+    visibility = ["//visibility:public"],
+)

hack/update-deploy-gen.sh

@@ -18,8 +18,12 @@ set -o errexit
 set -o nounset
 set -o pipefail
 
-SCRIPT_ROOT=$(dirname "${BASH_SOURCE}")
-REPO_ROOT="${SCRIPT_ROOT}/.."
+# This script should be run via `bazel run //hack:update-deploy-gen`
+REPO_ROOT=${BUILD_WORKSPACE_DIRECTORY:-"$(cd "$(dirname "$0")" && pwd -P)"/..}
+runfiles="$(pwd)"
+export PATH="${runfiles}/hack/bin:${PATH}"
+cd "${REPO_ROOT}"
+
 # This will set Capabilities.KubeVersion.Major/Minor when generating manifests
 KUBE_VERSION=1.9
 
@@ -31,7 +35,7 @@ gen() {
 	mkdir -p "$(dirname ${OUTPUT})"
 	helm template \
 		"${REPO_ROOT}/contrib/charts/cert-manager" \
-		--values "${SCRIPT_ROOT}/deploy/${VALUES}.yaml" \
+		--values "${REPO_ROOT}/hack/deploy/${VALUES}.yaml" \
 		--kube-version "${KUBE_VERSION}" \
 		--namespace "cert-manager" \
 		--name "cert-manager" \
@@ -39,7 +43,7 @@ gen() {
 		--set "createNamespaceResource=true" > "${TMP_OUTPUT}"
 	helm template \
 		"${REPO_ROOT}/contrib/charts/cert-manager/webhook" \
-		--values "${SCRIPT_ROOT}/deploy/${VALUES}.yaml" \
+		--values "${REPO_ROOT}/hack/deploy/${VALUES}.yaml" \
 		--kube-version "${KUBE_VERSION}" \
 		--namespace "cert-manager" \
 		--name "webhook" > "${TMP_OUTPUT_WEBHOOK}"
@@ -47,6 +51,7 @@ gen() {
 	mv "${TMP_OUTPUT_WEBHOOK}" "${OUTPUT}-webhook.yaml"
 }
 
+export HELM_HOME="$(mktemp -d)"
 helm init --client-only
 helm dep update "${REPO_ROOT}/contrib/charts/cert-manager"
 gen rbac-values "${REPO_ROOT}/contrib/manifests/cert-manager/with-rbac"

hack/verify-deploy-gen.sh

@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
 # Copyright 2018 The Jetstack cert-manager contributors.
 #
@@ -18,31 +18,38 @@ set -o errexit
 set -o nounset
 set -o pipefail
 
+RULE_NAME="deploy-gen"
+
 SCRIPT_ROOT=$(dirname "${BASH_SOURCE}")/..
 
-DIFFROOT="${SCRIPT_ROOT}/contrib/manifests"
-TMP_DIFFROOT="${SCRIPT_ROOT}/_tmp/contrib/manifests"
-_tmp="${SCRIPT_ROOT}/_tmp"
+_tmp="$(mktemp -d)"
+DIFFROOT="${SCRIPT_ROOT}/"
 
 cleanup() {
   rm -rf "${_tmp}"
 }
 trap "cleanup" EXIT SIGINT
 
-cleanup
+# Create a fake GOPATH
+export GOPATH="${_tmp}"
+TMP_DIFFROOT="${GOPATH}/src/github.com/jetstack/cert-manager"
 
 mkdir -p "${TMP_DIFFROOT}"
-cp -a "${DIFFROOT}"/* "${TMP_DIFFROOT}"
+rsync -avvL "${DIFFROOT}"/ "${TMP_DIFFROOT}" >/dev/null
+# remove __main__ directory copied to tmp
+rm -Rf "${TMP_DIFFROOT}/__main__"
 
-"${SCRIPT_ROOT}/hack/update-deploy-gen.sh"
-echo "diffing ${DIFFROOT} against freshly deploy-gen"
+cd "${TMP_DIFFROOT}"
+export BUILD_WORKSPACE_DIRECTORY="$(pwd)"
+"hack/update-${RULE_NAME}.sh"
+
+echo "diffing ${DIFFROOT} against freshly generated deploy-gen"
 ret=0
-diff -Naupr "${DIFFROOT}" "${TMP_DIFFROOT}" || ret=$?
-cp -a "${TMP_DIFFROOT}"/* "${DIFFROOT}"
+diff --exclude=__main__ -Naupr "${DIFFROOT}/contrib/manifests" "${TMP_DIFFROOT}/contrib/manifests" || ret=$?
 if [[ $ret -eq 0 ]]
 then
   echo "${DIFFROOT} up to date."
 else
-  echo "${DIFFROOT} is out of date. Please run hack/update-deploy-gen.sh"
+  echo "${DIFFROOT} is out of date. Please run 'bazel run //hack:update-${RULE_NAME}'"
   exit 1
 fi