110 lines
3.8 KiB
Bash
Executable File
110 lines
3.8 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# Copyright 2018 The Jetstack cert-manager contributors.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# This script will provision an end-to-end testing environment using 'kind'
|
|
# (kubernetes-in-docker).
|
|
#
|
|
# It requires 'kind', 'helm', 'kubectl' and 'docker' to be installed.
|
|
|
|
set -o errexit
|
|
set -o nounset
|
|
set -o pipefail
|
|
|
|
SCRIPT_ROOT=$(dirname "${BASH_SOURCE}")
|
|
REPO_ROOT="${SCRIPT_ROOT}/../.."
|
|
|
|
KIND_CLUSTER_NAME="cm-e2e"
|
|
# TODO: can we rely on this being fixed as such?
|
|
KIND_CONTAINER_NAME="kind-${KIND_CLUSTER_NAME}-control-plane"
|
|
KIND_IMAGE=${KIND_IMAGE:-eu.gcr.io/jetstack-build-infra-images/kind:1.11.2-0}
|
|
|
|
# cleanup will call kind delete - it will absorb errors
|
|
cleanup() {
|
|
# Ignore errors here
|
|
kind delete --name="${KIND_CLUSTER_NAME}" || true
|
|
}
|
|
trap cleanup EXIT
|
|
|
|
# deploy_kind will deploy a kubernetes-in-docker cluster
|
|
deploy_kind() {
|
|
|
|
local KIND_CONFIG="kind-config.yaml"
|
|
if [ ! -z "${KIND_KUBEADM_1_11_FORCE:-}" ]; then
|
|
KIND_CONFIG="kind-config-force.yaml"
|
|
fi
|
|
|
|
# create the kind cluster
|
|
kind create \
|
|
--name="${KIND_CLUSTER_NAME}" \
|
|
--image="${KIND_IMAGE}" \
|
|
--config "${REPO_ROOT}"/test/fixtures/"${KIND_CONFIG}"
|
|
|
|
export KUBECONFIG="${HOME}/.kube/kind-config-${KIND_CLUSTER_NAME}"
|
|
|
|
# copy kubectl out of the kind container if kubectl is not installed on the
|
|
# host machine. This will *only* work on Linux :this_is_fine:
|
|
if ! which kubectl; then
|
|
tmp_path=$(mktemp -d)
|
|
export PATH="${tmp_path}:${PATH}"
|
|
docker cp "${KIND_CONTAINER_NAME}":"$(docker exec "${KIND_CONTAINER_NAME}" which kubectl)" "${tmp_path}/kubectl"
|
|
fi
|
|
|
|
# Ensure the apiserver is responding
|
|
kubectl get nodes
|
|
}
|
|
|
|
# install_tiller will install tiller with the cluster-admin role bound to its
|
|
# service account
|
|
install_tiller() {
|
|
# Install tiller with admin permissions
|
|
kubectl create serviceaccount -n kube-system tiller
|
|
# Bind the tiller service account to the cluster-admin role
|
|
kubectl create clusterrolebinding tiller-binding --clusterrole=cluster-admin --serviceaccount kube-system:tiller
|
|
# Deploy tiller
|
|
helm init --service-account tiller --wait
|
|
}
|
|
|
|
# install_nginx will install nginx-ingress in the cluster and expose it on the
|
|
# fixed cluster IP of 10.0.0.15
|
|
install_nginx() {
|
|
# Install nginx-ingress with fixed IP
|
|
helm install stable/nginx-ingress \
|
|
--name nginx-ingress \
|
|
--namespace kube-system \
|
|
--set controller.service.clusterIP=10.0.0.15 \
|
|
--set controller.service.type=ClusterIP \
|
|
--wait
|
|
}
|
|
|
|
# build_images will build cert-manager docker images and copy them across to the
|
|
# kind docker container running the cluster, so they are available to the
|
|
# cluster's docker daemon.
|
|
build_images() {
|
|
# Build cert-manager binaries & docker image
|
|
make build APP_VERSION=build
|
|
|
|
docker save quay.io/jetstack/cert-manager-controller:build quay.io/jetstack/cert-manager-acmesolver:build quay.io/jetstack/cert-manager-webhook:build -o cmbundle.tar.gz
|
|
docker cp cmbundle.tar.gz "${KIND_CONTAINER_NAME}":/cmbundle.tar.gz
|
|
docker exec "${KIND_CONTAINER_NAME}" docker load -i /cmbundle.tar.gz
|
|
}
|
|
|
|
deploy_kind
|
|
install_tiller
|
|
install_nginx
|
|
build_images
|
|
|
|
make e2e_test E2E_NGINX_CERTIFICATE_DOMAIN=certmanager.kubernetes.network KUBECONFIG=${KUBECONFIG}
|