jaggar/iac-cljs-configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Revise to be functional? Does technically get the secrets... Need to look into why it doesn't actually create the Cloudflare entries

Browse Source
This commit is contained in:
GigiaJ
2025-11-16 13:07:33 -06:00
parent 05e1e5a8ca
commit 1dc966dc22
1 changed files with 28 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
iac/src/main/infra/dns.cljs
View File

@@ -1,10 +1,6 @@
(ns infra.dns (ns infra.dns
(:require (:require
[clojure.string :as str] [clojure.string :as str]
[utils.vault :as utils]
["@pulumi/pulumi" :as pulumi]
["@pulumi/kubernetes" :as k8s]
["@pulumi/vault" :as vault]
["@pulumi/cloudflare" :as cloudflare] ["@pulumi/cloudflare" :as cloudflare]
["@pulumi/command/local" :as local])) ["@pulumi/command/local" :as local]))
@@ -18,19 +14,15 @@
(defn- get-node-ips [] (defn- get-node-ips []
(str "kubectl get nodes -o jsonpath='{range .items[*]}{.status.addresses[?(@.type==\"ExternalIP\")].address}{\"\\n\"}{end}'")) (str "kubectl get nodes -o jsonpath='{range .items[*]}{.status.addresses[?(@.type==\"ExternalIP\")].address}{\"\\n\"}{end}'"))
(defn setup-dns [env] (defn setup-dns [{:keys [pulumi-cfg secrets]}]
(let [ (let [get-node-ips (local/Command.
{:keys [pulumi-cfg dns-secrets]} env
get-node-ips (local/Command.
"get-node-ips" "get-node-ips"
(clj->js {:create (get-node-ips) (clj->js {:create (get-node-ips)
:environment {:KUBECONFIG "./kubeconfig.yaml"}})) :environment {:KUBECONFIG "./kubeconfig.yaml"}}))
token (.requireSecret pulumi-cfg "apiToken") token (.requireSecret pulumi-cfg "apiToken")
cloudflare-provider (new cloudflare/Provider "cloudflare-provider" cloudflare-provider (new cloudflare/Provider "cloudflare-provider"
(clj->js {:apiToken token})) (clj->js {:apiToken token}))
node-ips-output (.-stdout get-node-ips) node-ips-output (.-stdout get-node-ips)]
_ (js/console.log env)
]
(.apply node-ips-output (.apply node-ips-output
@@ -38,13 +30,11 @@
(let [node-ips (-> command-output (let [node-ips (-> command-output
str/split-lines str/split-lines
(->> (map #(first (str/split % #" "))) (->> (map #(first (str/split % #" ")))
(filter seq))) (filter seq)))]
] (.apply secrets
(.apply dns-secrets
(fn [secret-data] (fn [secret-data]
(let [hostname-to-zone (-> (.-data secret-data) (let [hostname-to-zone (-> (.-data secret-data)
(js->clj :keywordize-keys true)) (js->clj :keywordize-keys true))]
_ (println "Ass ass")]
(vec (vec
(for [[hostname zone-id] hostname-to-zone (for [[hostname zone-id] hostname-to-zone
[index ip] (map-indexed vector node-ips) [index ip] (map-indexed vector node-ips)
@@ -55,15 +45,14 @@
:name hostname :name hostname
:content ip :content ip
:type (get-record-type ip) :type (get-record-type ip)
:ttl 300}) :ttl 300
:proxied true})
(clj->js {:provider cloudflare-provider})))))))))))) (clj->js {:provider cloudflare-provider}))))))))))))
(def config (def config
{:stack [:vault:prepare :k8s:secret :generic:execute] {:stack [:vault:prepare :generic:execute]
:app-name "dns" :app-name "dns"
:app-namespace "dns" :no-namespace true
:exec-fn setup-dns :exec-fn setup-dns})
:vault:prepare-opts {:app-name "dns"
:app-namespace "dns"}})