K8S-16 gitlab integration

Author: dfateyev

addons/create-admin.yaml renamed to addons/admin-account.yaml

@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: gitlab-admin
+  namespace: kube-system
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRoleBinding
+metadata:
+  name: gitlab-admin
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: gitlab-admin
+  namespace: kube-system

addons/gitlab-service-account.yaml

@@ -223,7 +223,7 @@ actions:
         kubectl create -f ${baseUrl}/addons/metrics-server/metrics-server-deployment.yaml
         kubectl create -f ${baseUrl}/addons/metrics-server/metrics-server-service.yaml
         kubectl create -f ${baseUrl}/addons/metrics-server/resource-reader.yaml
-        kubectl create -f ${baseUrl}/addons/create-admin.yaml
+        kubectl create -f ${baseUrl}/addons/admin-account.yaml
         /root/wait-deployment.sh metrics-server kube-system 1 720
 
     - if ('${settings.dashboard}' == 'version1'):
@@ -525,6 +525,87 @@ addons:
         settings:
             version: ${this.next}
 
+  - id: gitlab-k8s-addon
+    type: update
+    baseUrl: https://raw.githubusercontent.com/jelastic-jps/kubernetes/v1.16.3
+    name: Kubernetes GitLab Integration
+    description: Add Kubernetes GitLab integrations
+    logo: /images/k8s-logo.png
+    settings:
+      fields:
+        - type: displayfield
+          hideLabel: true
+          markup: This addon provides Kubernetes and GitLab integration. Please select the Gitlab environment from the list, and specify Gitlab 'root' password.
+        - type: displayfield
+          hideLabel: true
+        - type: envlist
+          name: envlist
+          caption: GitLab environment
+        - type: string
+          caption: Root password
+          name: gitlab_pass
+
+    buttons:
+      - caption: Configure
+        settings: gitlab
+        action: addon-gitlab-config
+        loadingText: Configuration...
+        confirmText: Are you sure?
+        successText: Gitlab environment successfully configured!
+
+    actions:
+      addon-gitlab-config:
+      - log: '${settings.envlist}'
+      - log: '${user.email}'
+      - cmd[${nodes.k8sm.master.id}]: |-
+          api_url=$(kubectl cluster-info | sed -r "s/\x1B\[([0-9]{1,3}((;[0-9]{1,3})*)?)?[m|K]//g" | grep 'Kubernetes master' | awk '/http/ {print $NF}')
+          ca_cert=$(kubectl get secret $(kubectl get secrets | grep default-token | cut -d " " -f 1) -o jsonpath="{['data']['ca\.crt']}" | base64 --decode)
+          kubectl apply -f ${baseUrl}/addons/gitlab-service-account.yaml
+          gitlab_token=$(kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep gitlab-admin | awk '{print $1}') | grep '^token:' | awk '{print $2}')
+          page_content=$(curl -sk -c gitlab-jar.txt  'https://${settings.envlist}:4848/users/sign_in')
+          csrf_token=$(echo ${page_content} | perl -ne 'print "$1\n" if /new_user.*?authenticity_token"[[:blank:]]value="(.+?)"/' | sed -n 1p)
+          echo "Sign-in CSRF token: ${csrf_token}"
+          [ -n "${csrf_token}" ] || exit 1
+          curl -X POST -sk -b gitlab-jar.txt -c gitlab-jar.txt -f -d "user[login]=root&user[password]=${settings.gitlab_pass}" --data-urlencode "authenticity_token=${csrf_token}" 'https://${settings.envlist}:4848/users/sign_in' || exit 1
+          page_content=$(curl -sk -b gitlab-jar.txt -c gitlab-jar.txt 'https://${settings.envlist}:4848/admin/application_settings/network')
+          csrf_token=$(echo ${page_content} | perl -ne 'print "$1\n" if /meta[[:blank:]]name="csrf-token"[[:blank:]]content="(.+?)"/' | sed -n 1p)
+          echo "Application settings CSRF token: ${csrf_token}"
+          [ -n "${csrf_token}" ] || exit 2
+          curl -X POST -sk -b gitlab-jar.txt -c gitlab-jar.txt -f -d "_method=patch&application_setting[allow_local_requests_from_web_hooks_and_services]=1&application_setting[allow_local_requests_from_system_hooks]=1&application_setting[dns_rebinding_protection_enabled]=1" --data-urlencode "authenticity_token=${csrf_token}" 'https://${settings.envlist}:4848/admin/application_settings/network' || exit 2
+          page_content=$(curl -sk -b gitlab-jar.txt -c gitlab-jar.txt  'https://${settings.envlist}:4848/admin/clusters/new')
+          csrf_token=$(echo ${page_content} | perl -ne 'print "$1\n" if /new_cluster.*?authenticity_token"[[:blank:]]value="(.+?)"/' | sed -n 1p)
+          echo "Add cluster CSRF token: ${csrf_token}"
+          [ -n "${csrf_token}" ] || exit 3
+          page_content=$(curl -X POST -sk -b gitlab-jar.txt -c gitlab-jar.txt -d "cluster[name]=Kubernetes&cluster[platform_kubernetes_attributes][authorization_type]=rbac&cluster[managed]=1" --data-urlencode "cluster[platform_kubernetes_attributes][api_url]=${api_url}" --data-urlencode "cluster[platform_kubernetes_attributes][ca_cert]=${ca_cert}" --data-urlencode "cluster[platform_kubernetes_attributes][token]=${gitlab_token}" --data-urlencode "authenticity_token=${csrf_token}" 'https://${settings.envlist}:4848/admin/clusters/create_user')
+          echo "${page_content}"
+          cluster_url=$(echo ${page_content} | perl -ne 'print "$1\n" if /You[[:blank:]]are[[:blank:]]being[[:blank:]]\<a[[:blank:]]href="(.+?)"\>redirected/' | sed -n 1p)
+          echo "Kubernetes GitLab cluster: ${cluster_url}"
+          [ -n "${cluster_url}" ] || exit 4
+          sleep 5
+          page_content=$(curl -sk -b gitlab-jar.txt -c gitlab-jar.txt  "${cluster_url}")
+          csrf_token=$(echo ${page_content} | perl -ne 'print "$1\n" if /csrf-param.*?csrf-token"[[:blank:]]content="(.+?)"/' | sed -n 1p)
+          echo "Helm CSRF token: ${csrf_token}"
+          [ -n "${csrf_token}" ] || exit 5
+          curl -X POST -sk -b gitlab-jar.txt -c gitlab-jar.txt -f -H "X-CSRF-Token: ${csrf_token}" "${cluster_url}/applications/helm" || exit 5
+          /root/wait-deployment.sh tiller-deploy gitlab-managed-apps 1 720
+          page_content=$(curl -sk -b gitlab-jar.txt -c gitlab-jar.txt "${cluster_url}")
+          csrf_token=$(echo ${page_content} | perl -ne 'print "$1\n" if /csrf-param.*?csrf-token"[[:blank:]]content="(.+?)"/' | sed -n 1p)
+          echo "Ingress CSRF token: ${csrf_token}"
+          [ -n "${csrf_token}" ] || exit 5
+          curl -X POST -sk -b gitlab-jar.txt -c gitlab-jar.txt -f -H "X-CSRF-Token: ${csrf_token}" "${cluster_url}/applications/ingress" || exit 5
+          /root/wait-deployment.sh ingress-nginx-ingress-controller gitlab-managed-apps 1 720
+          page_content=$(curl -sk -b gitlab-jar.txt -c gitlab-jar.txt "${cluster_url}")
+          csrf_token=$(echo ${page_content} | perl -ne 'print "$1\n" if /csrf-param.*?csrf-token"[[:blank:]]content="(.+?)"/' | sed -n 1p)
+          echo "Cert-manager CSRF token: ${csrf_token}"
+          [ -n "${csrf_token}" ] || exit 5
+          curl -X POST -sk -b gitlab-jar.txt -c gitlab-jar.txt -f -H "Content-Type: application/json" -H "X-CSRF-Token: ${csrf_token}" -d '{"email":"${user.email}"}' "${cluster_url}/applications/cert_manager" || exit 5
+          /root/wait-deployment.sh certmanager-webhook gitlab-managed-apps 1 720
+          page_content=$(curl -sk -b gitlab-jar.txt -c gitlab-jar.txt "${cluster_url}")
+          csrf_token=$(echo ${page_content} | perl -ne 'print "$1\n" if /csrf-param.*?csrf-token"[[:blank:]]content="(.+?)"/' | sed -n 1p)
+          echo "Runner CSRF token: ${csrf_token}"
+          [ -n "${csrf_token}" ] || exit 5
+          curl -X POST -sk -b gitlab-jar.txt -c gitlab-jar.txt -f -H "X-CSRF-Token: ${csrf_token}" "${cluster_url}/applications/runner" || exit 5
+          /root/wait-deployment.sh runner-gitlab-runner gitlab-managed-apps 1 720
 
 success: |
   ${globals.default_success:}

manifest.jps

@@ -11,7 +11,7 @@ var resp = {
     tag: tag,
     scalingMode: "stateless",
     nodeGroup: "k8sm",
-    addons: ["conf-k8s-addon", "upgrade-k8s-addon"],
+    addons: ["conf-k8s-addon", "upgrade-k8s-addon", "gitlab-k8s-addon"],
     displayName: "Master",
     extip: false,
     env: {