update-recipe-tokens.sh

#!/bin/bash

#
# © 2025 Cloud Software Group, Inc.
# All Rights Reserved. Confidential & Proprietary.
#

#######################################
# update-recipe-tokens.sh: this script will update the tokens for TIBCO Platform recipes.
# Globals:
#   GITHUB_TOKEN: the GitHub token
#   GUI_CP_CONTAINER_REGISTRY: the JFrog Container Registry
#   GUI_CP_CONTAINER_REGISTRY_REPOSITORY: the JFrog Container Registry Repository
#   GUI_CP_CONTAINER_REGISTRY_USERNAME: the JFrog Container Registry Username
#   GUI_CP_CONTAINER_REGISTRY_PASSWORD: the JFrog Container Registry Password
#   GUI_TP_TLS_CERT: the SSL Certificate
#   GUI_TP_TLS_KEY: the SSL Certificate Key
# Arguments:
#   token as input (optional)
# Returns:
#   None
# Notes:
#   We can use the token environment variables to update the recipe files.
# Samples:
#   ./update-recipe-tokens.sh
#######################################

export CURRENT_PATH=$(pwd)

# set_github_token sets the GitHub token for TP private repo
function set_github_token() {
  if [ -z "$GITHUB_TOKEN" ]; then
    read -rp "Do you want to set a GitHub token for TP private repo? (Press Enter to skip): " GITHUB_TOKEN
  fi

  if [ -z "$GITHUB_TOKEN" ]; then
    echo "No GitHub token provided. Skipping..."
  else
    export GITHUB_TOKEN
    echo "Setting GitHub token..."
    local _recipe_file_name="02-tp-cp-on-prem.yaml"
    if [[ -f "${CURRENT_PATH}/${_recipe_file_name}" ]]; then
      echo "Update GitHub token for ${_recipe_file_name}..."
      yq eval -i '(.meta.guiEnv.GUI_CP_CHART_REPO_TOKEN = env(GITHUB_TOKEN)) |
      (.meta.guiEnv.GUI_DP_CHART_REPO_TOKEN = env(GITHUB_TOKEN))' ${_recipe_file_name}
    fi
    local _recipe_file_name="05-tp-auto-deploy-dp.yaml"
    if [[ -f "${CURRENT_PATH}/${_recipe_file_name}" ]]; then
      echo "Update GitHub token for ${_recipe_file_name}..."
      yq eval -i '(.meta.guiEnv.GUI_GITHUB_TOKEN = env(GITHUB_TOKEN))' ${_recipe_file_name}
    fi
    local _recipe_file_name="07-tp-bw5-stack.yaml"
    if [[ -f "${CURRENT_PATH}/${_recipe_file_name}" ]]; then
      echo "Update GitHub token for ${_recipe_file_name}..."
      yq eval -i '(.meta.guiEnv.GUI_BW5_CHART_REPO_TOKEN = env(GITHUB_TOKEN))' ${_recipe_file_name}
    fi
  fi
}

# set_jfrog_token sets the JFrog token for CP private repo
function set_jfrog_token() {
  # Ask for JFrog variables one by one
  local _recipe_file_name="02-tp-cp-on-prem.yaml"
  if [[ ! -f "${CURRENT_PATH}/${_recipe_file_name}" ]]; then
    echo "Recipe file ${_recipe_file_name} not found."
    return 0
  fi

  if [ -z "$GUI_CP_CONTAINER_REGISTRY" ]; then
    read -rp "Enter JFrog Container Registry for CP (Press Enter to skip): " GUI_CP_CONTAINER_REGISTRY
  fi
  if [ -n "$GUI_CP_CONTAINER_REGISTRY" ]; then
    echo "Update jFrog token for ${_recipe_file_name}..."
    export GUI_CP_CONTAINER_REGISTRY
    yq eval -i '(.meta.guiEnv.GUI_CP_CONTAINER_REGISTRY = env(GUI_CP_CONTAINER_REGISTRY))' "$_recipe_file_name"
  fi

  if [ -z "$GUI_CP_CONTAINER_REGISTRY_REPOSITORY" ]; then
    read -rp "Enter JFrog Container Registry Repository for CP (Press Enter to skip): " GUI_CP_CONTAINER_REGISTRY_REPOSITORY
  fi
  if [ -n "$GUI_CP_CONTAINER_REGISTRY_REPOSITORY" ]; then
    echo "Update jFrog token for ${_recipe_file_name}..."
    export GUI_CP_CONTAINER_REGISTRY_REPOSITORY
    yq eval -i '(.meta.guiEnv.GUI_CP_CONTAINER_REGISTRY_REPOSITORY = env(GUI_CP_CONTAINER_REGISTRY_REPOSITORY))' "$_recipe_file_name"
  fi

  if [ -z "$GUI_CP_CONTAINER_REGISTRY_USERNAME" ]; then
    read -rp "Enter JFrog Container Registry Username for CP (Press Enter to skip): " GUI_CP_CONTAINER_REGISTRY_USERNAME
  fi
  if [ -n "$GUI_CP_CONTAINER_REGISTRY_USERNAME" ]; then
    echo "Update jFrog token for ${_recipe_file_name}..."
    export GUI_CP_CONTAINER_REGISTRY_USERNAME
    yq eval -i '(.meta.guiEnv.GUI_CP_CONTAINER_REGISTRY_USERNAME = env(GUI_CP_CONTAINER_REGISTRY_USERNAME))' "$_recipe_file_name"
  fi

  if [ -z "$GUI_CP_CONTAINER_REGISTRY_PASSWORD" ]; then
    read -rp "Enter JFrog Container Registry Password for CP (Press Enter to skip): " GUI_CP_CONTAINER_REGISTRY_PASSWORD
  fi
  if [ -n "$GUI_CP_CONTAINER_REGISTRY_PASSWORD" ]; then
    echo "Update jFrog token for ${_recipe_file_name}..."
    export GUI_CP_CONTAINER_REGISTRY_PASSWORD
    yq eval -i '(.meta.guiEnv.GUI_CP_CONTAINER_REGISTRY_PASSWORD = env(GUI_CP_CONTAINER_REGISTRY_PASSWORD))' "$_recipe_file_name"
  fi

  # update JFrog tokens for 07-tp-bw5-stack.yaml again to cover all fields
  local _recipe_file_name="07-tp-bw5-stack.yaml"
  if [[ ! -f "${CURRENT_PATH}/${_recipe_file_name}" ]]; then
    echo "Recipe file ${_recipe_file_name} not found."
    return 0
  fi

  if [ -z "$GUI_CP_CONTAINER_REGISTRY" ]; then
    read -rp "Enter JFrog Container Registry for BW5 (Press Enter to skip): " GUI_CP_CONTAINER_REGISTRY
  fi
  if [ -n "$GUI_CP_CONTAINER_REGISTRY" ]; then
    echo "Update jFrog token for ${_recipe_file_name}..."
    export GUI_CP_CONTAINER_REGISTRY
    yq eval -i '(.meta.guiEnv.GUI_BW5_CONTAINER_REGISTRY = env(GUI_CP_CONTAINER_REGISTRY))' "$_recipe_file_name"
  fi

  if [ -z "$GUI_CP_CONTAINER_REGISTRY_REPOSITORY" ]; then
    read -rp "Enter JFrog Container Registry Repository for BW5 (Press Enter to skip): " GUI_CP_CONTAINER_REGISTRY_REPOSITORY
  fi
  if [ -n "$GUI_CP_CONTAINER_REGISTRY_REPOSITORY" ]; then
    echo "Update jFrog token for ${_recipe_file_name}..."
    export GUI_CP_CONTAINER_REGISTRY_REPOSITORY
    yq eval -i '(.meta.guiEnv.GUI_BW5_CONTAINER_REGISTRY_REPOSITORY = env(GUI_CP_CONTAINER_REGISTRY_REPOSITORY))' "$_recipe_file_name"
  fi

  if [ -z "$GUI_CP_CONTAINER_REGISTRY_USERNAME" ]; then
    read -rp "Enter JFrog Container Registry Username for BW5 (Press Enter to skip): " GUI_CP_CONTAINER_REGISTRY_USERNAME
  fi
  if [ -n "$GUI_CP_CONTAINER_REGISTRY_USERNAME" ]; then
    echo "Update jFrog token for ${_recipe_file_name}..."
    export GUI_CP_CONTAINER_REGISTRY_USERNAME
    yq eval -i '(.meta.guiEnv.GUI_BW5_CONTAINER_REGISTRY_USERNAME = env(GUI_CP_CONTAINER_REGISTRY_USERNAME))' "$_recipe_file_name"
  fi

  if [ -z "$GUI_CP_CONTAINER_REGISTRY_PASSWORD" ]; then
    read -rp "Enter JFrog Container Registry Password for BW5 (Press Enter to skip): " GUI_CP_CONTAINER_REGISTRY_PASSWORD
  fi
  if [ -n "$GUI_CP_CONTAINER_REGISTRY_PASSWORD" ]; then
    echo "Update jFrog token for ${_recipe_file_name}..."
    export GUI_CP_CONTAINER_REGISTRY_PASSWORD
    yq eval -i '(.meta.guiEnv.GUI_BW5_CONTAINER_REGISTRY_PASSWORD = env(GUI_CP_CONTAINER_REGISTRY_PASSWORD))' "$_recipe_file_name"
  fi
}

# set_ssl_cert sets the SSL certificate for TP
function set_ssl_cert() {
  # Ask for SSL cert variables one by one
  local _recipe_file_name="01-tp-on-prem.yaml"
  if [[ ! -f "${CURRENT_PATH}/${_recipe_file_name}" ]]; then
    echo "Recipe file ${_recipe_file_name} not found."
    return 0
  fi

  if [ -z "$GUI_TP_TLS_CERT" ]; then
    read -rp "Enter SSL Certificate (Press Enter to skip): " GUI_TP_TLS_CERT
  fi
  if [ -n "$GUI_TP_TLS_CERT" ]; then
    echo "Update SSL Certificate for ${_recipe_file_name}..."
    export GUI_TP_TLS_CERT
    yq eval -i '(.meta.guiEnv.GUI_TP_TLS_CERT = env(GUI_TP_TLS_CERT))' "$_recipe_file_name"
  fi

  if [ -z "$GUI_TP_TLS_KEY" ]; then
    read -rp "Enter SSL Certificate Key (Press Enter to skip): " GUI_TP_TLS_KEY
  fi
  if [ -n "$GUI_TP_TLS_KEY" ]; then
    echo "Update SSL Certificate for ${_recipe_file_name}..."
    export GUI_TP_TLS_KEY
    yq eval -i '(.meta.guiEnv.GUI_TP_TLS_KEY = env(GUI_TP_TLS_KEY))' "$_recipe_file_name"
  fi
}

# main function
function main() {
  set_github_token
  set_ssl_cert
  set_jfrog_token
}

main "$@"