You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
189 lines
7.8 KiB
Clojure
189 lines
7.8 KiB
Clojure
(ns dda.c4k-website.website
|
|
(:require
|
|
[clojure.spec.alpha :as s]
|
|
[clojure.string :as st]
|
|
#?(:cljs [shadow.resource :as rc])
|
|
#?(:clj [orchestra.core :refer [defn-spec]]
|
|
:cljs [orchestra.core :refer-macros [defn-spec]])
|
|
#?(:clj [clojure.edn :as edn]
|
|
:cljs [cljs.reader :as edn])
|
|
[dda.c4k-common.yaml :as yaml]
|
|
[dda.c4k-common.common :as cm]
|
|
[dda.c4k-common.base64 :as b64]
|
|
[dda.c4k-common.predicate :as pred]
|
|
[clojure.string :as str]))
|
|
|
|
(defn keyword-string?
|
|
[input]
|
|
(str/starts-with? input "fqdn"))
|
|
|
|
(defn keyword-string-list?
|
|
[input]
|
|
(every? true? (map keyword-string? input)))
|
|
|
|
(s/def ::fqdn pred/fqdn-string?)
|
|
(s/def ::fqdn1 pred/fqdn-string?)
|
|
(s/def ::fqdn2 pred/fqdn-string?)
|
|
(s/def ::single keyword-string?)
|
|
(s/def ::multi keyword-string-list?)
|
|
(s/def ::issuer pred/letsencrypt-issuer?)
|
|
(s/def ::authtoken pred/bash-env-string?)
|
|
(s/def ::gitrepourl pred/bash-env-string?)
|
|
|
|
(def config? (s/keys :req-un [::fqdn ::single ::multi ::fqdn1 ::fqdn2]
|
|
:opt-un [::issuer]))
|
|
|
|
(def auth? (s/keys :req-un [::authtoken ::gitrepourl ::singlegitrepourl]))
|
|
|
|
(def volume-size 3)
|
|
|
|
(defn unique-name-from-fqdn
|
|
[fqdn]
|
|
(st/replace fqdn #"\." "-"))
|
|
|
|
; ToDo: Move to common?
|
|
(defn-spec replace-all-matching-subvalues-in-string-start pred/map-or-seq?
|
|
[col string? ;ToDo richtig spec-en
|
|
value-to-partly-match string?
|
|
value-to-inplace string?]
|
|
(clojure.walk/postwalk #(if (and (= (type value-to-partly-match) (type %))
|
|
(re-matches (re-pattern (str value-to-partly-match ".*")) %))
|
|
(st/replace % value-to-partly-match value-to-inplace) %)
|
|
col))
|
|
|
|
#?(:cljs
|
|
(defmethod yaml/load-resource :website [resource-name]
|
|
(case resource-name
|
|
"website/single-certificate.yaml" (rc/inline "website/single-certificate.yaml")
|
|
"website/multi-certificate.yaml" (rc/inline "website/multi-certificate.yaml")
|
|
"website/single-ingress.yaml" (rc/inline "website/single-ingress.yaml")
|
|
"website/multi-ingress.yaml" (rc/inline "website/multi-ingress.yaml")
|
|
"website/single-nginx-configmap.yaml" (rc/inline "website/single-nginx-configmap.yaml")
|
|
"website/multi-nginx-configmap.yaml" (rc/inline "website/multi-nginx-configmap.yaml")
|
|
"website/nginx-deployment.yaml" (rc/inline "website/nginx-deployment.yaml")
|
|
"website/nginx-service.yaml" (rc/inline "website/nginx-service.yaml")
|
|
"website/website-content-volume.yaml" (rc/inline "website/website-content-volume.yaml")
|
|
"website/website-build-cron.yaml" (rc/inline "website/website-build-cron.yaml")
|
|
"website/website-build-deployment.yaml" (rc/inline "website/website-build-deployment.yaml")
|
|
"website/website-build-secret.yaml" (rc/inline "website/website-build-secret.yaml")
|
|
(throw (js/Error. "Undefined Resource!")))))
|
|
|
|
#?(:cljs
|
|
(defmethod yaml/load-as-edn :website [resource-name]
|
|
(yaml/from-string (yaml/load-resource resource-name))))
|
|
|
|
(defn-spec generate-single-certificate pred/map-or-seq?
|
|
[config config?]
|
|
(let [{:keys [issuer single]
|
|
:or {issuer "staging"}} config
|
|
fqdn ((keyword single) config)
|
|
letsencrypt-issuer (name issuer)]
|
|
(->
|
|
(yaml/load-as-edn "website/single-certificate.yaml")
|
|
(assoc-in [:spec :issuerRef :name] letsencrypt-issuer)
|
|
(replace-all-matching-subvalues-in-string-start "NAME" (unique-name-from-fqdn fqdn))
|
|
(cm/replace-all-matching-values-by-new-value "FQDN" fqdn))))
|
|
|
|
(defn-spec generate-single-ingress pred/map-or-seq?
|
|
[config config?]
|
|
(let [{:keys [single]} config
|
|
fqdn ((keyword single) config)]
|
|
(->
|
|
(yaml/load-as-edn "website/single-ingress.yaml")
|
|
(replace-all-matching-subvalues-in-string-start "NAME" (unique-name-from-fqdn fqdn))
|
|
(cm/replace-all-matching-values-by-new-value "FQDN" fqdn))))
|
|
|
|
(defn-spec generate-single-nginx-configmap pred/map-or-seq?
|
|
[config config?]
|
|
(let [{:keys [single]} config
|
|
fqdn ((keyword single) config)
|
|
configmap (yaml/load-as-edn "website/single-nginx-configmap.yaml")]
|
|
(->
|
|
configmap
|
|
(assoc-in [:data :website.conf] (st/replace (-> configmap :data :website.conf) #"FQDN" (str fqdn ";")))
|
|
(replace-all-matching-subvalues-in-string-start "NAME" (unique-name-from-fqdn fqdn)))))
|
|
|
|
(defn-spec generate-multi-certificate pred/map-or-seq?
|
|
[config config?]
|
|
(let [{:keys [issuer multi]
|
|
:or {issuer "staging"}} config
|
|
fqdn ((keyword (first multi)) config)
|
|
fqdn1 ((keyword (second multi)) config)
|
|
letsencrypt-issuer (name issuer)]
|
|
(->
|
|
(yaml/load-as-edn "website/multi-certificate.yaml")
|
|
(assoc-in [:spec :issuerRef :name] letsencrypt-issuer)
|
|
(replace-all-matching-subvalues-in-string-start "NAME" (unique-name-from-fqdn fqdn))
|
|
(cm/replace-all-matching-values-by-new-value "FQDN" fqdn)
|
|
(cm/replace-all-matching-values-by-new-value "FQDN1" fqdn1))))
|
|
|
|
(defn-spec generate-multi-ingress pred/map-or-seq?
|
|
[config config?]
|
|
(let [{:keys [multi]} config
|
|
fqdn ((keyword (first multi)) config)
|
|
fqdn1 ((keyword (second multi)) config)]
|
|
(->
|
|
(yaml/load-as-edn "website/multi-ingress.yaml")
|
|
(replace-all-matching-subvalues-in-string-start "NAME" (unique-name-from-fqdn fqdn))
|
|
(cm/replace-all-matching-values-by-new-value "FQDN" fqdn)
|
|
(cm/replace-all-matching-values-by-new-value "FQDN1" fqdn1))))
|
|
|
|
(defn-spec generate-multi-nginx-configmap pred/map-or-seq?
|
|
[config config?]
|
|
(let [{:keys [multi]} config
|
|
fqdn ((keyword (first multi)) config)
|
|
fqdn1 ((keyword (second multi)) config)
|
|
configmap (yaml/load-as-edn "website/multi-nginx-configmap.yaml")]
|
|
(->
|
|
configmap
|
|
(assoc-in [:data :website.conf] (st/replace (-> configmap :data :website.conf) #"FQDN\ FQDN1" (str fqdn " " fqdn1 ";")))
|
|
(replace-all-matching-subvalues-in-string-start "NAME" (unique-name-from-fqdn fqdn)))))
|
|
|
|
(defn-spec generate-nginx-deployment pred/map-or-seq?
|
|
[config config?]
|
|
(let [{:keys [fqdn]} config]
|
|
(->
|
|
(yaml/load-as-edn "website/nginx-deployment.yaml")
|
|
(replace-all-matching-subvalues-in-string-start "NAME" (unique-name-from-fqdn fqdn)))))
|
|
|
|
(defn-spec generate-nginx-service pred/map-or-seq?
|
|
[config config?]
|
|
(let [{:keys [fqdn]} config]
|
|
(->
|
|
(yaml/load-as-edn "website/nginx-service.yaml")
|
|
(replace-all-matching-subvalues-in-string-start "NAME" (unique-name-from-fqdn fqdn)))))
|
|
|
|
(defn-spec generate-website-content-volume pred/map-or-seq?
|
|
[config config?]
|
|
(let [{:keys [fqdn]} config]
|
|
(->
|
|
(yaml/load-as-edn "website/website-content-volume.yaml")
|
|
(replace-all-matching-subvalues-in-string-start "NAME" (unique-name-from-fqdn fqdn))
|
|
(cm/replace-all-matching-values-by-new-value "WEBSITESTORAGESIZE" (str (str volume-size) "Gi")))))
|
|
|
|
(defn-spec generate-website-build-cron pred/map-or-seq?
|
|
[config config?]
|
|
(let [{:keys [fqdn]} config]
|
|
(->
|
|
(yaml/load-as-edn "website/website-build-cron.yaml")
|
|
(replace-all-matching-subvalues-in-string-start "NAME" (unique-name-from-fqdn fqdn))
|
|
(cm/replace-all-matching-values-by-new-value "FQDN" fqdn))))
|
|
|
|
(defn-spec generate-website-build-deployment pred/map-or-seq?
|
|
[config config?]
|
|
(let [{:keys [fqdn]} config]
|
|
(->
|
|
(yaml/load-as-edn "website/website-build-deployment.yaml")
|
|
(replace-all-matching-subvalues-in-string-start "NAME" (unique-name-from-fqdn fqdn))
|
|
(cm/replace-all-matching-values-by-new-value "FQDN" fqdn))))
|
|
|
|
(defn-spec generate-website-build-secret pred/map-or-seq?
|
|
[auth auth?]
|
|
(let [{:keys [fqdn
|
|
authtoken
|
|
gitrepourl]} auth]
|
|
(->
|
|
(yaml/load-as-edn "website/website-build-secret.yaml")
|
|
(replace-all-matching-subvalues-in-string-start "NAME" (unique-name-from-fqdn fqdn))
|
|
(cm/replace-all-matching-values-by-new-value "TOKEN" (b64/encode authtoken))
|
|
(cm/replace-all-matching-values-by-new-value "URL" (b64/encode gitrepourl))))) |