54 lines
1.3 KiB
Bash
Executable File
54 lines
1.3 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
if [ "$IMAGE_TAG" == "" ]; then
|
|
echo "Make sure IMAGE_TAG is set"
|
|
exit 1
|
|
fi
|
|
if [ "$GPG_PASSPHRASE" == "" ]; then
|
|
echo "Make sure GPG_PASSPHRASE is set"
|
|
exit 1
|
|
fi
|
|
|
|
IMAGE_NAME=gitea.hottis.de/wn/jupyter-scipy-database-extension
|
|
NAMESPACE=jupyter
|
|
DEPLOYMENT_DIR=$PWD/deployment
|
|
|
|
pushd $DEPLOYMENT_DIR > /dev/null
|
|
SECRETS_FILE=`mktemp`
|
|
pwd
|
|
id
|
|
gpg --decrypt --passphrase $GPG_PASSPHRASE --yes --batch --output $SECRETS_FILE secrets.asc
|
|
. $SECRETS_FILE
|
|
rm $SECRETS_FILE
|
|
|
|
kubectl create namespace $NAMESPACE \
|
|
--dry-run=client \
|
|
-o yaml | \
|
|
kubectl -f - apply
|
|
|
|
kubectl create secret generic traefik-forward-auth \
|
|
--dry-run=client \
|
|
-o yaml \
|
|
--save-config \
|
|
--from-literal=PROVIDERS_OIDC_CLIENT_SECRET="$PROVIDERS_OIDC_CLIENT_SECRET" \
|
|
--from-literal=SECRET="$SECRET" | \
|
|
kubectl apply -f - -n $NAMESPACE
|
|
|
|
kubectl create secret generic jupyter \
|
|
--dry-run=client \
|
|
-o yaml \
|
|
--save-config \
|
|
--from-literal=PGHOST="$PGHOST" | \
|
|
--from-literal=PGUSER="$PGUSER" | \
|
|
--from-literal=PGPASSWORD="$PGPASSWORD" | \
|
|
--from-literal=PGSSLMODE="$PGSSLMODE" | \
|
|
kubectl apply -f - -n $NAMESPACE
|
|
|
|
cat $DEPLOYMENT_DIR/deploy-yml.tmpl | \
|
|
sed -e 's,%IMAGE%,'$IMAGE_NAME':'$IMAGE_TAG','g | \
|
|
kubectl apply -f - -n $NAMESPACE
|
|
|
|
popd > /dev/null
|
|
|
|
|