Revise to be functional? Does technically get the secrets... Need to look into why it doesn't actually create the Cloudflare entries
This commit is contained in:
@@ -1,10 +1,6 @@
|
||||
(ns infra.dns
|
||||
(:require
|
||||
[clojure.string :as str]
|
||||
[utils.vault :as utils]
|
||||
["@pulumi/pulumi" :as pulumi]
|
||||
["@pulumi/kubernetes" :as k8s]
|
||||
["@pulumi/vault" :as vault]
|
||||
["@pulumi/cloudflare" :as cloudflare]
|
||||
["@pulumi/command/local" :as local]))
|
||||
|
||||
@@ -18,19 +14,15 @@
|
||||
(defn- get-node-ips []
|
||||
(str "kubectl get nodes -o jsonpath='{range .items[*]}{.status.addresses[?(@.type==\"ExternalIP\")].address}{\"\\n\"}{end}'"))
|
||||
|
||||
(defn setup-dns [env]
|
||||
(let [
|
||||
{:keys [pulumi-cfg dns-secrets]} env
|
||||
get-node-ips (local/Command.
|
||||
(defn setup-dns [{:keys [pulumi-cfg secrets]}]
|
||||
(let [get-node-ips (local/Command.
|
||||
"get-node-ips"
|
||||
(clj->js {:create (get-node-ips)
|
||||
:environment {:KUBECONFIG "./kubeconfig.yaml"}}))
|
||||
token (.requireSecret pulumi-cfg "apiToken")
|
||||
cloudflare-provider (new cloudflare/Provider "cloudflare-provider"
|
||||
(clj->js {:apiToken token}))
|
||||
node-ips-output (.-stdout get-node-ips)
|
||||
_ (js/console.log env)
|
||||
]
|
||||
node-ips-output (.-stdout get-node-ips)]
|
||||
|
||||
|
||||
(.apply node-ips-output
|
||||
@@ -38,13 +30,11 @@
|
||||
(let [node-ips (-> command-output
|
||||
str/split-lines
|
||||
(->> (map #(first (str/split % #" ")))
|
||||
(filter seq)))
|
||||
]
|
||||
(.apply dns-secrets
|
||||
(filter seq)))]
|
||||
(.apply secrets
|
||||
(fn [secret-data]
|
||||
(let [hostname-to-zone (-> (.-data secret-data)
|
||||
(js->clj :keywordize-keys true))
|
||||
_ (println "Ass ass")]
|
||||
(js->clj :keywordize-keys true))]
|
||||
(vec
|
||||
(for [[hostname zone-id] hostname-to-zone
|
||||
[index ip] (map-indexed vector node-ips)
|
||||
@@ -55,15 +45,14 @@
|
||||
:name hostname
|
||||
:content ip
|
||||
:type (get-record-type ip)
|
||||
:ttl 300})
|
||||
:ttl 300
|
||||
:proxied true})
|
||||
(clj->js {:provider cloudflare-provider}))))))))))))
|
||||
|
||||
(def config
|
||||
{:stack [:vault:prepare :k8s:secret :generic:execute]
|
||||
{:stack [:vault:prepare :generic:execute]
|
||||
:app-name "dns"
|
||||
:app-namespace "dns"
|
||||
:exec-fn setup-dns
|
||||
:vault:prepare-opts {:app-name "dns"
|
||||
:app-namespace "dns"}})
|
||||
:no-namespace true
|
||||
:exec-fn setup-dns})
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user