More sophisticated automation of image set generation

imagesets/README.md

@@ -147,14 +147,19 @@ complete:
    pip3 install -e .
    which tc-admin
    pass git pull
-   TASKCLUSTER_ROOT_URL=https://community-tc.services.mozilla.com tc-admin diff || true
+   TASKCLUSTER_ROOT_URL=https://community-tc.services.mozilla.com
+   TASKCLUSTER_CLIENT_ID=static/taskcluster/root
+   TASKCLUSTER_ACCESS_TOKEN="$(pass show community-tc/root)"
+   unset TASKCLUSTER_CERTIFICATE
+   tc-admin diff || true
+   tc-admin diff --ids-only || true
    echo
    echo 'Applying in 60 seconds (Ctrl-C to abort)....'
    echo
    sleep 60
    echo 'Applying!'
    echo
-   TASKCLUSTER_ROOT_URL=https://community-tc.services.mozilla.com tc-admin apply
+   tc-admin apply
    cd ../..
    rm -rf tc-admin
    ```

run-tc-admin.sh

@@ -0,0 +1,71 @@
+#!/usr/bin/env bash
+
+set -eu
+set -o pipefail
+
+function tc_admin {
+  apt update
+  apt install -y python3-pip python3.8-venv
+  pip install --upgrade pip
+
+  export TEMP_DIR="$(mktemp -d -t password-store.XXXXXXXXXX)"
+  export PASSWORD_STORE_DIR="${TEMP_DIR}/.password-store"
+  cd "${TEMP_DIR}"
+  python3 -m venv tc-admin-venv
+  source tc-admin-venv/bin/activate
+  pip3 install pytest
+  pip3 install --upgrade pip
+  git clone https://github.com/mozilla/community-tc-config
+  cd community-tc-config
+  pip3 install -e .
+  which tc-admin
+  git clone ssh://[email protected]/taskcluster/secrets.git "${PASSWORD_STORE_DIR}"
+  TASKCLUSTER_ROOT_URL=https://community-tc.services.mozilla.com
+  TASKCLUSTER_CLIENT_ID=static/taskcluster/root
+  TASKCLUSTER_ACCESS_TOKEN="$(pass show community-tc/root | head -n 1)"
+  unset TASKCLUSTER_CERTIFICATE
+  tc-admin diff || true
+  tc-admin diff --ids-only || true
+  echo
+  echo 'Applying in 60 seconds (Ctrl-C to abort)....'
+  echo
+  done=false
+  while ! ${done}; do
+    read -p "Apply changes (yes/no)? " choice
+    case "$choice" in
+      yes)
+        echo
+        echo 'Applying!'
+        echo
+        tc-admin apply
+        done=true;;
+      no)
+        echo "Ok ok 🐥"
+        done=true;;
+      *)
+        echo "Invalid response: '${choice}'. Please answer 'yes' or 'no'.";;
+    esac
+  done
+  cd /
+  rm -rf "${TEMP_DIR}"
+}
+
+################## Entry point ##################
+
+cd "$(dirname "${0}")"
+
+if [ "${1-}" == "native" ]; then
+  tc_admin
+else
+  TAG="$(cat docker/TAG)"
+  echo docker run \
+    --rm \
+    -ti \
+    -v "$(pwd):/community-tc-config" \
+    -v ~/.config:/root/.config \
+    -v ~/.gitconfig:/root/.gitconfig \
+    -v ~/.gnupg:/root/.gnupg \
+    -v ~/.ssh:/root/.ssh \
+    "${TAG}" \
+    /community-tc-config/run-tc-admin.sh native
+fi