secrets.sh

#!/bin/bash
# ES_EXTERNAL=1 - use external ES address
# KIBANA_INTERNAL=1 - use internal Kibana address
if  [ -z "$1" ]
then
  echo "$0: you need to specify env: test, dev, stg, prod"
  exit 1
fi
. env.sh "$1" || exit 1
# FIXME: why do we need seed_env?
seed_env_short=dev
seed_env_long=develop
env_short=$1
if [ -z "$ES_EXTERNAL" ]
then
  es_url="http://elasticsearch-master.dev-analytics-elasticsearch:9200"
else
  es_url="https://elastic.${TF_DIR}.lfanalytics.io"
fi
if [ -z "$KIBANA_INTERNAL" ]
then
  kibana_url="https://kibana.${TF_DIR}.lfanalytics.io"
else
  kibana_url="http://dev-analytics-kibana-elb.kibana"
fi
function finish {
  change_namespace.sh $env_short default
}
trap finish EXIT
cd ~/dev/dev-analytics-api || exit 1
"${1}k.sh" create -f "./.circleci/deployments/$API_DIR/namespace.json"
change_namespace.sh $1 "dev-analytics-api-$ENV_NS"
export PUBLIC_KEY_VALUE=$(cat .circleci/deployments/$API_DIR/secrets.ejson | jq -r '._public_key')
# FIXME: here seeding private key from 'develop' env, we need to be able to get that value without needing any other envs setup.
export PRIVATE_KEY_VALUE=$(${seed_env_short}k.sh get secret ejson-keys --namespace=dev-analytics-api-$seed_env_long -o json | jq -rc '.data.'$PUBLIC_KEY_VALUE | base64 --decode)
"${1}k.sh" create secret generic ejson-keys --from-literal=$PUBLIC_KEY_VALUE=$PRIVATE_KEY_VALUE --namespace=dev-analytics-api-$ENV_NS
cd .circleci/deployments || exit 2
./update-secret.sh $ENV_NS DATABASE_HOST "`cat ~/dev/da-patroni/da-patroni/secrets/PG_HOST.secret`" > /dev/null
./update-secret.sh $ENV_NS DATABASE_PASSWORD "`cat ~/dev/da-patroni/da-patroni/secrets/PG_PASS.$1.secret`" > /dev/null
./update-secret.sh $ENV_NS DATABASE_USERNAME "`cat ~/dev/da-patroni/da-patroni/secrets/PG_USER.secret`" > /dev/null
./update-secret.sh $ENV_NS ELASTICSEARCH_URL "$es_url" > /dev/null
./update-secret.sh $ENV_NS RAILS_ENV $RAILS_ENV > /dev/null
./update-secret.sh $ENV_NS REDIS_URL "redis://redis-master.redis" > /dev/null
./update-secret.sh $ENV_NS REDIS_URL_ROOT "redis://redis-master.redis" > /dev/null
./update-secret.sh $ENV_NS DEVSTATS_DB_HOST "`cat ~/dev/da-patroni/da-patroni/secrets/PG_HOST.secret`" > /dev/null
./update-secret.sh $ENV_NS SORTINGHAT_HOST "`cat ~/dev/darst/mariadb/secrets/HOST.secret`" > /dev/null
./update-secret.sh $ENV_NS KIBANA_BASE_URL "$kibana_url" > /dev/null
# FIXME: we should have those keys
./update-secret.sh $ENV_NS SORTINGHAT_DATABASE "`cat ~/dev/darst/mariadb/secrets/DB.secret`" > /dev/null
./update-secret.sh $ENV_NS SORTINGHAT_USER "`cat ~/dev/darst/mariadb/secrets/USER.secret`" > /dev/null
./update-secret.sh $ENV_NS SORTINGHAT_PASSWORD "`cat ~/dev/darst/mariadb/secrets/PASS.$1.secret`" > /dev/null
./update-secret.sh $ENV_NS
rm -rf "$API_DIR/temp-key/" 2>/dev/null
git status