Merge branch 'feature/deploy-from-ghcr'

Author: adb-sh

package-lock.json

@@ -16,6 +16,8 @@
     "@auth/prisma-adapter": "^2.5.2",
     "@deploy-cat/heroicons-solid": "^2.1.1",
     "@kubernetes/client-node": "^0.18.1",
+    "@octokit/rest": "^21.0.2",
+    "@octokit/webhooks": "^13.3.0",
     "@prisma/client": "^5.19.1",
     "@solid-mediakit/auth": "^2.1.3",
     "@solidjs/router": "^0.13.1",

package.json

@@ -4,15 +4,86 @@ import { knative } from "~/lib/k8s";
 import { EnvVarsInput } from "../EnvVarsInput";
 import { ScalingInput } from "../ScalingInput";
 import { ResourcesInput } from "../ResourcesInput";
-import { getUser } from "~/lib/auth";
+import { getUser, getAccount } from "~/lib/auth";
 import type { Service } from "~/lib/knative";
 import { toNumber } from "~/lib/knative";
+import { SourceInput } from "./service/SourceInput";
+import { k8sCore } from "~/lib/k8s";
+import { Octokit } from "@octokit/rest";
+import * as crypto from "crypto";
+import { config } from "~/lib/config";
+
+const ensureGithubPullSecret = async (namespace: string) => {
+  "use server";
+  const secretName = "pull-secret-ghcr";
+  try {
+    await k8sCore.readNamespacedSecret(secretName, namespace);
+  } catch (e) {
+    const user = await getUser();
+    const accout = await getAccount();
+
+    const username = user.name;
+    const token = accout.access_token;
+    const email = user.email;
+
+    await k8sCore.createNamespacedSecret(namespace, {
+      apiVersion: "v1",
+      kind: "Secret",
+      metadata: {
+        name: secretName,
+        labels: {
+          "app.kubernetes.io/managed-by": "deploycat",
+        },
+      },
+      type: "kubernetes.io/dockerconfigjson",
+      data: {
+        ".dockerconfigjson": Buffer.from(
+          JSON.stringify({
+            auths: {
+              "ghcr.io": {
+                username: username,
+                password: token,
+                email: email,
+                auth: Buffer.from(`${username}:${token}`).toString("base64"),
+              },
+            },
+          })
+        ).toString("base64"),
+      },
+    });
+  }
+};
+
+const createGithubWebhook = async (namespace: string, service) => {
+  "use server";
+  const account = await getAccount();
+  const ok = new Octokit({
+    auth: account.access_token,
+  });
+  ok.repos.createWebhook({
+    owner: service.ghPackageOwner,
+    repo: service.ghPackageRepo,
+    config: {
+      url: `${config?.publicurl}/api/webhooks/github/apps/${namespace}/${service.name}/package`,
+      content_type: "json",
+      secret: service.webhookSecret,
+    },
+    events: ["package"],
+    active: true,
+  });
+};
 
 const createServiceFromForm = async (form: FormData) => {
   "use server";
   const service = {
     name: form.get("name") as string,
+    source: form.get("source") as string,
     image: form.get("image") as string,
+    ghPackage: form.get("ghPackage") as string,
+    ghPackageTag: form.get("ghPackageTag") as string,
+    ghPackageName: form.get("ghPackageName") as string,
+    ghPackageOwner: form.get("ghPackageOwner") as string,
+    ghPackageRepo: form.get("ghPackageRepo") as string,
     port: Number(form.get("port")) as number,
     resources: {
       cpuLimit: toNumber(form.get("cpuLimit")),
@@ -24,8 +95,24 @@ const createServiceFromForm = async (form: FormData) => {
     },
     envVars: JSON.parse(form.get("env") as string) as { [key: string]: string },
   } as Service;
+
   const user = await getUser();
-  await knative.createService(service, user.name);
+  if (service?.source === "ghcr") {
+    try {
+      service.webhookSecret = crypto.randomBytes(16).toString("hex");
+      await ensureGithubPullSecret(user.name);
+      await createGithubWebhook(user.name, service);
+    } catch (e) {
+      console.error(e);
+    }
+    service.image = `ghcr.io/${service.ghPackageOwner}/${service.ghPackageName}:${service.ghPackageTag}`;
+    service.pullSecret = "pull-secret-ghcr";
+  }
+  try {
+    await knative.createService(service, user.name, service.source);
+  } catch (e) {
+    console.error(e);
+  }
 };
 
 const createServiceAction = action(createServiceFromForm, "createService");
@@ -54,18 +141,8 @@ export const CreateServiceForm = () => {
                   class="input input-bordered w-full"
                 />
               </label>
-              <label class="form-control w-full">
-                <div class="label">
-                  <span class="label-text">Image</span>
-                </div>
-                <input
-                  type="text"
-                  name="image"
-                  required
-                  placeholder="traefik/whoami"
-                  class="input input-bordered w-full"
-                />
-              </label>
+              <SourceInput />
+
               <label class="form-control w-full">
                 <div class="label">
                   <span class="label-text">Port</span>