deploy.sh

#!/bin/bash

# Deploy builds to Kubernetes!
#
# This script can be used to deploy builds to Kubernetes using Helm.
#
# Params:
# - chart name (not including repository name)
# - namespace (used to select other env vars, see below)
#
# Pre-requisites:
# - Must have already provisioned an SA for Tiller, and initialized the Tiller
#   service in the target namespace.
# - Must have already provisioned an SA for Travis in the target namespace.
#   The following env vars should be set, e.g. in the Travis-CI interface:
#   - USER_SA_{namespace} = the service account name
#   - USER_TOKEN_{namespace} = base64-encoded bearer token for the Travis SA.
# - In addition, the following env vars must be set to configure access to
#   the Kubernetes API server:
#   - CLUSTER_ENDPOINT = URI of the K8s API server
#   - CA_CERT = base64 encoded root CA of the K8s cluster
#   - CLUSTER_NAME = the name of the cluster
# - The following env vars must be set for Helm to work:
#   - HELM_REPOSITORY = the location of the arXiv helm repository,
#     e.g. s3://...
# - DEPLOYMENT_DOMAIN_{namespace}

CHART_NAME=$1
ENVIRONMENT=$2
SITE_NAME="docs"
TOKEN_NAME=USER_TOKEN_$(echo $ENVIRONMENT | awk '{print toupper($0)}')
SA_NAME=USER_SA_$(echo $ENVIRONMENT | awk '{print toupper($0)}')
DEPLOYMENT_HOSTNAME_VAR=DEPLOYMENT_DOMAIN_$(echo $ENVIRONMENT | awk '{print toupper($0)}')
USER_TOKEN=${!TOKEN_NAME}
USER_SA=${!SA_NAME}
HELM_RELEASE=${CHART_NAME}-${SITE_NAME}-${ENVIRONMENT}
DEPLOYMENT_HOSTNAME=${!DEPLOYMENT_HOSTNAME_VAR}

if [ -z "${TRAVIS_TAG}" ]; then
    IMAGE_TAG=${TRAVIS_COMMIT}
else
    IMAGE_TAG=${TRAVIS_TAG}
fi
IMAGE_NAME=arxiv/${SITE_NAME}

if [[ ! $TRAVIS_BRANCH =~ "^develop|master$" ]]; then
    SLUG_BRANCHNAME=$(echo $TRAVIS_BRANCH | iconv -t ascii//TRANSLIT | sed -E 's/[~\^]+//g' | sed -E 's/[^a-zA-Z0-9]+/-/g' | sed -E 's/^-+\|-+$//g' | sed -E 's/^-+//g' | sed -E 's/-+$//g' | tr A-Z a-z);
    HELM_RELEASE=$CHART_NAME"-"$SITE_NAME"-"$SLUG_BRANCHNAME
    DEPLOYMENT_HOSTNAME=$CHART_NAME"-"$SLUG_BRANCHNAME"."$DEPLOYMENT_HOSTNAME
else
    DEPLOYMENT_HOSTNAME=$CHART_NAME"."$DEPLOYMENT_HOSTNAME
fi

echo "Deploying ${CHART_NAME} in ${ENVIRONMENT}"

# Install kubectl & Helm
curl -LO https://storage.googleapis.com/kubernetes-release/release/v1.9.2/bin/linux/amd64/kubectl
chmod +x ./kubectl
sudo mv ./kubectl /usr/local/bin/kubectl
echo "Intalled kubectl"

curl https://raw.githubusercontent.com/kubernetes/helm/master/scripts/get > get_helm.sh
chmod 700 get_helm.sh
sudo ./get_helm.sh -v v2.8.0 || echo "Helm already installed"
echo "Intalled Helm"

# Configure Kubernetes & Helm
echo $CA_CERT | base64 --decode > ${HOME}/ca.crt

kubectl config set-cluster $CLUSTER_NAME --embed-certs=true --server=$CLUSTER_ENDPOINT --certificate-authority=${HOME}/ca.crt
kubectl config set-credentials $USER_SA --token=$(echo $USER_TOKEN | base64 --decode)
kubectl config set-context travis --cluster=$CLUSTER_NAME --user=$USER_SA --namespace=$ENVIRONMENT
kubectl config use-context travis
kubectl config current-context
echo "Configured kubectl"

helm init --client-only --tiller-namespace $ENVIRONMENT
echo "Set up helm client"

# Add S3 repo. Requires AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY to be set
# in the environment.
helm plugin install https://github.com/hypnoglow/helm-s3.git || echo "Helm S3 already installed"
helm repo add arxiv $HELM_REPOSITORY
helm repo update
echo "Updated Helm repo"

# Deploy to Kubernetes.
helm get $HELM_RELEASE --tiller-namespace $ENVIRONMENT 2> /dev/null \
    && helm upgrade $HELM_RELEASE arxiv/$CHART_NAME \
        --set=imageName=$IMAGE_NAME \
        --set=imageTag=$TRAVIS_COMMIT \
        --set=deploymentName=$HELM_RELEASE \
        --set=serviceName=$HELM_RELEASE \
        --set=ingressName=$HELM_RELEASE \
        --set=host=$DEPLOYMENT_HOSTNAME \
        --set=namespace=$ENVIRONMENT \
        --values=deploy/values.yaml \
        --tiller-namespace $ENVIRONMENT \
        --namespace $ENVIRONMENT 2> /dev/null \
    || helm install arxiv/$CHART_NAME \
        --name=$HELM_RELEASE \
        --set=imageName=$IMAGE_NAME \
        --set=imageTag=$TRAVIS_COMMIT \
        --set=deploymentName=$HELM_RELEASE \
        --set=serviceName=$HELM_RELEASE \
        --set=ingressName=$HELM_RELEASE \
        --set=host=$DEPLOYMENT_HOSTNAME \
        --set=namespace=$ENVIRONMENT \
        --values=deploy/values.yaml \
        --tiller-namespace $ENVIRONMENT \
        --namespace $ENVIRONMENT 2> /dev/null
DEPLOY_EXIT=$?

# Send the result back to GitHub.
if [ $DEPLOY_EXIT -ne 0 ]; then
    DEPLOY_STATE="failure"
    echo "Deployment failed"
else
    DEPLOY_STATE="success"
    echo "Deployed!"
fi

if [ "$TRAVIS_PULL_REQUEST_SHA" = "" ];  then SHA=$TRAVIS_COMMIT; else SHA=$TRAVIS_PULL_REQUEST_SHA; fi
curl -u $USERNAME:$GITHUB_TOKEN \
    -d '{"state": "'$DEPLOY_STATE'", "target_url": "https://'$DEPLOYMENT_HOSTNAME'", "description": "Deploy '$DEPLOY_STATE' for '$DEPLOYMENT_HOSTNAME'/'$SITE_NAME'", "context": "deploy/'$SITE_NAME'"}' \
    -XPOST https://api.github.com/repos/$TRAVIS_REPO_SLUG/statuses/$SHA > /dev/null 2>&1 && \
    echo "Sent result to GitHub"

function cleanup {
    printf "Cleaning up...\n"
    rm -vf "${HOME}/ca.crt"
    printf "Cleaning done."
}

trap cleanup EXIT