Cr 1885 inst contr (#598)

andrii-codefresh · web-flow · commit f6136661d1b3 · 2020-12-07T12:57:56.000+02:00
* install argocd, change service type to LoadBalancer

* update default password, install argocd-agent

* use LoadBalancer service type anyway
diff --git a/.eslintrc.js b/.eslintrc.js
@@ -10,7 +10,8 @@ module.exports = {
             'code': 140,
             'ignoreComments': true
         }],
-        'no-console': 0
+        'no-console': 0,
+        'object-curly-newline': 0,
     },
     'env': {
         'jest': true,
diff --git a/lib/interface/cli/commands/gitops/install-argocd.js b/lib/interface/cli/commands/gitops/install-argocd.js
@@ -0,0 +1,114 @@
+const cp = require('child_process');
+const rp = require('request-promise');
+const promiseRetry = require('promise-retry');
+
+const getExternalIp = namespace => async (retry) => {
+    process.stdout.write('.');
+    const ip = cp.execSync(
+        `kubectl get svc argocd-server -n ${namespace} -o=jsonpath='{.status.loadBalancer.ingress[0].ip}'`,
+        { encoding: 'utf-8' },
+    );
+    if (ip) {
+        return ip;
+    }
+
+    return retry(new Error('Can\'t get argocd external-ip address'));
+};
+
+async function install({ installManifest, kubeNamespace, setArgoPassword }) {
+    // sanitizing
+    const namespace = kubeNamespace.replace('"', '');
+    const manifest = installManifest.replace('"', '');
+    const password = setArgoPassword.replace('"', '');
+
+    try {
+        console.log(`Creating namespace ${namespace}...`);
+        cp.execSync(`kubectl create ns "${namespace}"`);
+        console.log(`\u2705 Created namespace ${namespace}`);
+    } catch (err) {
+        if (!err.message.match(/AlreadyExists/)) {
+            process.exit(err.status);
+        }
+    }
+
+    try {
+        console.log('Creating argocd resources...');
+        cp.execSync(`kubectl apply -n "${namespace}" -f "${manifest}"`, { stdio: 'inherit' });
+        console.log('\u2705 Created argocd resources');
+    } catch (err) {
+        process.exit(err.status);
+    }
+
+    let host;
+    try {
+        console.log('Changing service type to "LoadBalancer"...');
+        cp.execSync(
+            `kubectl patch svc argocd-server -n "${namespace}" -p '{"spec": {"type": "LoadBalancer"}}'`,
+            { stdio: 'inherit' },
+        );
+        console.log('\u2705 Changed service type to "LoadBalancer"');
+
+        process.stdout.write('Getting argocd ip address...');
+        host = `https://${await promiseRetry(getExternalIp(namespace), { retries: 100, factor: 1, minTimeout: 5000 })}`;
+        console.log(`\n\u2705 Argocd ip address is ${host}`);
+    } catch (err) {
+        console.error(err.message);
+        process.exit(err.status);
+    }
+
+    // get autogenerated password
+    let autogenerated;
+    try {
+        console.log('Getting autogenerated password...');
+        autogenerated = cp.execSync(
+            `kubectl get pods -n "${namespace}" -l app.kubernetes.io/name=argocd-server -o name | cut -d'/' -f 2 | xargs echo -n`,
+            { encoding: 'utf-8' },
+        );
+        console.log('\u2705 Got autogenerated password');
+    } catch (err) {
+        console.error(err.message);
+        process.exit(err.status);
+    }
+
+    // update password
+    try {
+        console.log('Getting argocd token...');
+        const argocdToken = await rp({
+            method: 'POST',
+            uri: `${host}/api/v1/session`,
+            body: {
+                username: 'admin',
+                password: autogenerated,
+            },
+            json: true,
+        });
+        console.log('\u2705 Got argocd token');
+
+        console.log('Updating admin password...');
+        await rp({
+            method: 'PUT',
+            uri: `${host}/api/v1/account/password`,
+            headers: {
+                Authorization: `Bearer ${argocdToken.token}`,
+            },
+            body: {
+                currentPassword: autogenerated,
+                name: 'admin',
+                newPassword: password,
+            },
+            json: true,
+        });
+        console.log('\u2705 Updated admin password');
+    } catch (err) {
+        console.error(err.message);
+        process.exit(err.status);
+    }
+
+    return {
+        host,
+    };
+}
+
+module.exports = {
+    install,
+};
diff --git a/lib/interface/cli/commands/gitops/install.cmd.js b/lib/interface/cli/commands/gitops/install.cmd.js
@@ -5,6 +5,7 @@ const installRoot = require('../root/install.cmd');
 const { detectProxy } = require('../../helpers/general');
 const { downloadProvider } = require('../hybrid/helper');
 const { Runner, components } = require('../../../../binary');
+const { install: installArgocd } = require('./install-argocd');
 
 const installArgoCmd = new Command({
     root: false,
@@ -20,7 +21,7 @@ const installArgoCmd = new Command({
         .env('CF_ARG_')
         .positional('provider', {
             describe: 'Gitops provider',
-            choices: ['argocd-agent'],
+            choices: ['argocd', 'argocd-agent'],
             required: true,
         })
         .option('git-integration', {
@@ -36,10 +37,11 @@ const installArgoCmd = new Command({
             describe: 'Token of argocd installation. Preferred auth method',
         })
         .option('argo-username', {
-            describe: 'Username of argocd installation. Should be used with argo-password',
+            default: 'admin',
+            describe: 'Username of existing argocd installation. Should be used with argo-password',
         })
         .option('argo-password', {
-            describe: 'Username of argocd installation. Should be used with argo-username',
+            describe: 'Password of existing argocd installation. Should be used with argo-username',
         })
         .option('update', {
             describe: 'Update argocd integration if exists',
@@ -70,16 +72,44 @@ const installArgoCmd = new Command({
         })
         .option('https-proxy', {
             describe: 'https proxy to be used in the runner',
+        })
+        // argocd options
+        .option('install-manifest', {
+            describe: 'url of argocd install manifest',
+            default: 'https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml',
+        })
+        .option('set-argo-password', {
+            required: true,
+            describe: 'set password for admin user of new argocd installation',
         }),
     handler: async (argv) => {
         let {
-            // eslint-disable-next-line prefer-const
-            'kube-config-path': kubeConfigPath,
-            // eslint-disable-next-line prefer-const
             provider,
             'http-proxy': httpProxy,
             'https-proxy': httpsProxy,
+            'argo-host': argoHost,
+            'argo-username': argoUsername,
+            'argo-password': argoPassword,
         } = argv;
+        const {
+            'kube-config-path': kubeConfigPath,
+            'install-manifest': installManifest,
+            'kube-namespace': kubeNamespace,
+            'set-argo-password': setArgoPassword,
+        } = argv;
+
+        if (provider === 'argocd') {
+            const result = await installArgocd({
+                installManifest,
+                kubeNamespace,
+                setArgoPassword,
+            });
+
+            provider = 'argocd-agent';
+            argoHost = result.host;
+            argoUsername = 'admin';
+            argoPassword = setArgoPassword;
+        }
 
         const binLocation = await downloadProvider({ provider });
         const componentRunner = new Runner(binLocation);
@@ -93,8 +123,11 @@ const installArgoCmd = new Command({
             commands.push(kubeConfigPath);
         }
 
-        const installOptions = _.pick(argv, ['git-integration', 'codefresh-integration', 'argo-host', 'argo-token', 'output',
-            'argo-username', 'argo-password', 'update', 'kube-context-name', 'kube-namespace', 'sync-mode', 'sync-apps']);
+        const installOptions = _.pick(argv, ['git-integration', 'codefresh-integration', 'argo-token', 'output',
+            'update', 'kube-context-name', 'kube-namespace', 'sync-mode', 'sync-apps']);
+        installOptions['argo-host'] = argoHost;
+        installOptions['argo-username'] = argoUsername;
+        installOptions['argo-password'] = argoPassword;
 
         _.forEach(installOptions, (value, key) => {
             if (_.isArray(value)) {
diff --git a/package.json b/package.json
@@ -64,6 +64,7 @@
     "mongodb": "^3.0.1",
     "ora": "^3.0.0",
     "prettyjson": "^1.2.1",
+    "promise-retry": "^2.0.1",
     "recursive-readdir": "^2.2.1",
     "request": "^2.88.0",
     "request-promise": "^4.2.2",
diff --git a/yarn.lock b/yarn.lock
@@ -1924,6 +1924,11 @@ end-of-stream@^1.0.0, end-of-stream@^1.1.0:
   dependencies:
     once "^1.4.0"
 
+err-code@^2.0.2:
+  version "2.0.3"
+  resolved "https://registry.yarnpkg.com/err-code/-/err-code-2.0.3.tgz#23c2f3b756ffdfc608d30e27c9a941024807e7f9"
+  integrity sha512-2bmlRpNKBxT/CRmPOlyISQpNj+qSeYvcym/uT0Jx2bMOlKLtSy1ZmLuVxSEKKyor/N5yhvp/ZiG1oE3DEYMSFA==
+
 error-ex@^1.2.0:
   version "1.3.2"
   resolved "https://registry.yarnpkg.com/error-ex/-/error-ex-1.3.2.tgz#b4ac40648107fdcdcfae242f428bea8a14d4f1bf"
@@ -5462,6 +5467,14 @@ progress@2.0.3, progress@^2.0.0, progress@~2.0.0:
   resolved "https://registry.yarnpkg.com/progress/-/progress-2.0.3.tgz#7e8cf8d8f5b8f239c1bc68beb4eb78567d572ef8"
   integrity sha512-7PiHtLll5LdnKIMw100I+8xJXR5gW2QwWYkT6iJva0bXitZKa/XMrSbdmg3r2Xnaidz9Qumd0VPaMrZlF9V9sA==
 
+promise-retry@^2.0.1:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/promise-retry/-/promise-retry-2.0.1.tgz#ff747a13620ab57ba688f5fc67855410c370da22"
+  integrity sha512-y+WKFlBR8BGXnsNlIHFGPZmyDf3DFMoLhaflAnyZgV6rG6xu+JwesTo2Q9R6XwYmtmwAFCkAk3e35jEdoeh/3g==
+  dependencies:
+    err-code "^2.0.2"
+    retry "^0.12.0"
+
 prompts@^0.1.9:
   version "0.1.14"
   resolved "https://registry.yarnpkg.com/prompts/-/prompts-0.1.14.tgz#a8e15c612c5c9ec8f8111847df3337c9cbd443b2"
@@ -5971,6 +5984,11 @@ retry@^0.10.0:
   resolved "https://registry.yarnpkg.com/retry/-/retry-0.10.1.tgz#e76388d217992c252750241d3d3956fed98d8ff4"
   integrity sha1-52OI0heZLCUnUCQdPTlW/tmNj/Q=
 
+retry@^0.12.0:
+  version "0.12.0"
+  resolved "https://registry.yarnpkg.com/retry/-/retry-0.12.0.tgz#1b42a6266a21f07421d1b0b54b7dc167b01c013b"
+  integrity sha1-G0KmJmoh8HQh0bC1S33BZ7AcATs=
+
 rimraf@^2.2.8, rimraf@^2.5.4, rimraf@^2.6.1, rimraf@^2.6.2:
   version "2.7.1"
   resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-2.7.1.tgz#35797f13a7fdadc566142c29d4f07ccad483e3ec"
