entrypoint.sh

#!/bin/bash

CLOUD_PROVIDER=${1:-$CLOUD_PROVIDER}
CRI_RUNTIME_ENDPOINT=${CRI_RUNTIME_ENDPOINT:-/run/cri-runtime.sock}
optionals+=""

# Ensure you add a space before the closing quote (") when updating the optionals
# example:
# following is the correct method: optionals+="-option val "
# following is the incorrect method: optionals+="-option val"

[[ -S ${CRI_RUNTIME_ENDPOINT} ]] && optionals+="-cri-runtime-endpoint ${CRI_RUNTIME_ENDPOINT} "
[[ "${PAUSE_IMAGE}" ]] && optionals+="-pause-image ${PAUSE_IMAGE} "
[[ "${VXLAN_PORT}" ]] && optionals+="-vxlan-port ${VXLAN_PORT} "
[[ "${CACERT_FILE}" ]] && optionals+="-ca-cert-file ${CACERT_FILE} "
[[ "${CERT_FILE}" ]] && [[ "${CERT_KEY}" ]] && optionals+="-cert-file ${CERT_FILE} -cert-key ${CERT_KEY} "
[[ "${TLS_SKIP_VERIFY}" ]] && optionals+="-tls-skip-verify "
[[ "${PROXY_TIMEOUT}" ]] && optionals+="-proxy-timeout ${PROXY_TIMEOUT} "

test_vars() {
        for i in "$@"; do
                [ -z "${!i}" ] && echo "\$$i is NOT set" && EXT=1
        done
        [[ -n $EXT ]] && exit 1
}

one_of() {
        for i in "$@"; do
                [ -n "${!i}" ] && echo "\$$i is SET" && EXIST=1
        done
        [[ -z $EXIST ]] && echo "At least one of these must be SET: $*" && exit 1
}

aws() {
test_vars AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY

[[ "${PODVM_LAUNCHTEMPLATE_NAME}" ]] && optionals+="-use-lt -aws-lt-name ${PODVM_LAUNCHTEMPLATE_NAME} " # has precedence if set
[[ "${AWS_SG_IDS}" ]] && optionals+="-securitygroupids ${AWS_SG_IDS} " # MUST if template is not used
[[ "${PODVM_AMI_ID}" ]] && optionals+="-imageid ${PODVM_AMI_ID} " # MUST if template is not used
[[ "${PODVM_INSTANCE_TYPE}" ]] && optionals+="-instance-type ${PODVM_INSTANCE_TYPE} " # default t3.small
[[ "${PODVM_INSTANCE_TYPES}" ]] && optionals+="-instance-types ${PODVM_INSTANCE_TYPES} "
[[ "${SSH_KP_NAME}" ]] && optionals+="-keyname ${SSH_KP_NAME} " # if not retrieved from IMDS
[[ "${AWS_SUBNET_ID}" ]] && optionals+="-subnetid ${AWS_SUBNET_ID} " # if not set retrieved from IMDS
[[ "${AWS_REGION}" ]] && optionals+="-aws-region ${AWS_REGION} " # if not set retrieved from IMDS

set -x
exec cloud-api-adaptor aws \
	-aws-region "${AWS_REGION}" \
	-pods-dir /run/peerpod/pods \
	${optionals} \
	-socket /run/peerpod/hypervisor.sock
}

azure() {
test_vars AZURE_CLIENT_ID AZURE_CLIENT_SECRET AZURE_TENANT_ID AZURE_SUBSCRIPTION_ID AZURE_RESOURCE_GROUP AZURE_SUBNET_ID AZURE_IMAGE_ID

[[ "${SSH_USERNAME}" ]] && optionals+="-ssh-username ${SSH_USERNAME} "
[[ "${DISABLECVM}" ]] && optionals+="-disable-cvm "

set -x
exec cloud-api-adaptor azure \
  -subscriptionid "${AZURE_SUBSCRIPTION_ID}" \
  -region "${AZURE_REGION}" \
  -instance-size "${AZURE_INSTANCE_SIZE}" \
  -resourcegroup "${AZURE_RESOURCE_GROUP}" \
  -vxlan-port 8472 \
  -subnetid "${AZURE_SUBNET_ID}" \
  -securitygroupid "${AZURE_NSG_ID}" \
  -imageid "${AZURE_IMAGE_ID}" \
  ${optionals}
}

ibmcloud() {
one_of IBMCLOUD_API_KEY IBMCLOUD_IAM_PROFILE_ID

set -x
exec cloud-api-adaptor ibmcloud \
        -iam-service-url "${IBMCLOUD_IAM_ENDPOINT}" \
        -vpc-service-url  "${IBMCLOUD_VPC_ENDPOINT}" \
        -resource-group-id "${IBMCLOUD_RESOURCE_GROUP_ID}" \
        -key-id "${IBMCLOUD_SSH_KEY_ID}" \
        -image-id "${IBMCLOUD_PODVM_IMAGE_ID}" \
        -profile-name "${IBMCLOUD_PODVM_INSTANCE_PROFILE_NAME}" \
        -zone-name "${IBMCLOUD_ZONE}" \
        -primary-subnet-id "${IBMCLOUD_VPC_SUBNET_ID}" \
        -primary-security-group-id "${IBMCLOUD_VPC_SG_ID}" \
        -vpc-id "${IBMCLOUD_VPC_ID}" \
        -pods-dir /run/peerpod/pods \
	${optionals} \
        -socket /run/peerpod/hypervisor.sock
}


ibmcloud_powervs() {
test_vars IBMCLOUD_API_KEY

[[ "${POWERVS_MEMORY}" ]] && optionals+="-memory ${POWERVS_MEMORY} "
[[ "${POWERVS_PROCESSORS}" ]] && optionals+="-cpu ${POWERVS_PROCESSORS} "
[[ "${POWERVS_PROCESSOR_TYPE}" ]] && optionals+="-proc-type ${POWERVS_PROCESSOR_TYPE} "
[[ "${POWERVS_SYSTEM_TYPE}" ]] && optionals+="-sys-type ${POWERVS_SYSTEM_TYPE} "

set -x
exec cloud-api-adaptor ibmcloud-powervs \
        -service-instance-id ${POWERVS_SERVICE_INSTANCE_ID} \
        -zone ${POWERVS_ZONE} \
        -image-id ${POWERVS_IMAGE_ID} \
        -network-id ${POWERVS_NETWORK_ID} \
        -ssh-key ${POWERVS_SSH_KEY_NAME} \
        -pods-dir /run/peerpod/pods \
 	${optionals} \
 	-socket /run/peerpod/hypervisor.sock
}

libvirt() {
test_vars LIBVIRT_URI

set -x
exec cloud-api-adaptor libvirt \
	-uri "${LIBVIRT_URI}" \
	-data-dir /opt/data-dir \
	-pods-dir /run/peerpod/pods \
	-network-name "${LIBVIRT_NET:-default}" \
	-pool-name "${LIBVIRT_POOL:-default}" \
	${optionals} \
	-socket /run/peerpod/hypervisor.sock
}

vsphere() {
test_vars GOVC_USERNAME GOVC_PASSWORD GOVC_URL GOVC_DATACENTER

[[ "${GOVC_TEMPLATE}" ]] && optionals+="-template ${GOVC_TEMPLATE} "
[[ "${GOVC_VCLUSTER}" ]] && optionals+="-cluster ${GOVC_VCLUSTER} "
[[ "${GOVC_FOLDER}" ]] && optionals+="-deploy-folder ${GOVC_FOLDER} "
[[ "${GOVC_HOST}" ]] && optionals+="-host ${GOVC_HOST} "
[[ "${GOVC_DRS}" ]] && optionals+="-drs ${GOVC_DRS} "
[[ "${GOVC_DATASTORE}" ]] && optionals+="-data-store ${GOVC_DATASTORE} "

set -x
exec cloud-api-adaptor vsphere \
	-vcenter-url ${GOVC_URL}  \
	-data-center ${GOVC_DATACENTER} \
	${optionals} \
	-socket /run/peerpod/hypervisor.sock
}

help_msg() {
	cat <<EOF
Usage:
	CLOUD_PROVIDER=aws|azure|ibmcloud|ibmcloud-powervs|libvirt|vsphere $0
or
	$0 aws|azure|ibmcloud|ibmcloud-powervs|libvirt|vsphere
in addition all cloud provider specific env variables must be set and valid
(CLOUD_PROVIDER is currently set to "$CLOUD_PROVIDER")
EOF
}

if [[ "$CLOUD_PROVIDER" == "aws" ]]; then
	aws
elif [[ "$CLOUD_PROVIDER" == "azure" ]]; then
	azure
elif [[ "$CLOUD_PROVIDER" == "ibmcloud" ]]; then
	ibmcloud
elif [[ "$CLOUD_PROVIDER" == "ibmcloud-powervs" ]]; then
 	ibmcloud_powervs
elif [[ "$CLOUD_PROVIDER" == "libvirt" ]]; then
	libvirt
elif [[ "$CLOUD_PROVIDER" == "vsphere" ]]; then
	vsphere
else
	help_msg
fi