-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Adding setting up DNS and argocd admin password stup
- Loading branch information
1 parent
5794739
commit 6aa8954
Showing
1 changed file
with
73 additions
and
62 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,87 +1,98 @@ | ||
| name: "Bootstrap Argo CD" | ||
|
|
||
| on: | ||
| workflow_run: | ||
| workflows: ["Terraform Apply"] | ||
| types: | ||
| - completed | ||
| workflow_dispatch: | ||
|
|
||
| permissions: write-all | ||
|
|
||
| jobs: | ||
| argo_cd: | ||
| runs-on: ubuntu-latest | ||
| environment: prod | ||
| steps: | ||
| - name: configure aws credentials | ||
| uses: aws-actions/[email protected] | ||
| with: | ||
| role-to-assume: ${{ secrets.AWS_ROLE_ARN }} | ||
| role-session-name: GitHub_to_AWS_via_FederatedOIDC | ||
| aws-region: ${{ secrets.AWS_REGION }} | ||
| - name: configure aws credentials | ||
| uses: aws-actions/[email protected] | ||
| with: | ||
| role-to-assume: ${{ secrets.AWS_ROLE_ARN }} | ||
| role-session-name: GitHub_to_AWS_via_FederatedOIDC | ||
| aws-region: ${{ secrets.AWS_REGION }} | ||
| argocd-admin-password: ${{ secrets.ARGOCD_ADMIN_PASSWORD }} | ||
|
|
||
| - id: install-aws-cli | ||
| uses: unfor19/install-aws-cli-action@v1 | ||
| with: | ||
| version: 2 # default | ||
| verbose: false # default | ||
| arch: amd64 # allowed values: amd64, arm64 | ||
| - id: install-aws-cli | ||
| uses: unfor19/install-aws-cli-action@v1 | ||
| with: | ||
| version: 2 # default | ||
| verbose: false # default | ||
| arch: amd64 # allowed values: amd64, arm64 | ||
|
|
||
| - name: verify aws profile | ||
| run: | | ||
| aws sts get-caller-identity | ||
| aws configure list | ||
| - name: verify aws profile | ||
| run: | | ||
| aws sts get-caller-identity | ||
| aws configure list | ||
| - name: install kubectl | ||
| uses: azure/setup-kubectl@v1 | ||
| with: | ||
| version: 'v1.29.0' | ||
| - name: install kubectl | ||
| uses: azure/setup-kubectl@v1 | ||
| with: | ||
| version: 'v1.29.0' | ||
|
|
||
| - name: configure kubectl | ||
| run: | | ||
| aws eks update-kubeconfig --name ${{ secrets.EKS_CLUSTER_NAME }} --region ${{ secrets.AWS_REGION }} | ||
| - name: configure kubectl | ||
| run: | | ||
| aws eks update-kubeconfig --name ${{ secrets.EKS_CLUSTER_NAME }} --region ${{ secrets.AWS_REGION }} | ||
| - name: verify argocd namespace | ||
| id: verify-argocd-namespace | ||
| run: echo "ns=$(kubectl get ns argocd -o=jsonpath="{.metadata.name}")" >> "$GITHUB_OUTPUT" | ||
| - name: verify argocd namespace | ||
| id: verify-argocd-namespace | ||
| run: echo "ns=$(kubectl get ns argocd -o=jsonpath="{.metadata.name}")" >> "$GITHUB_OUTPUT" | ||
|
|
||
| - name: install argocd | ||
| if: ${{ (steps.verify-argocd-namespace.outputs.ns != 'argocd') }} | ||
| run: | | ||
| kubectl create namespace argocd | ||
| kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.9.3/manifests/install.yaml | ||
| - name: install argocd | ||
| if: ${{ (steps.verify-argocd-namespace.outputs.ns != 'argocd') }} | ||
| run: | | ||
| kubectl create namespace argocd | ||
| kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.9.3/manifests/install.yaml | ||
| - name: checkout code | ||
| uses: actions/checkout@v4 | ||
| - name: checkout code | ||
| uses: actions/checkout@v4 | ||
|
|
||
| - name: install cluster app of apps | ||
| run: kubectl apply -f kubernetes/app-of-apps.yaml | ||
| - name: install cluster app of apps | ||
| run: kubectl apply -f kubernetes/app-of-apps.yaml | ||
|
|
||
| - name: verify if all apps are synced | ||
| run: | | ||
| while true; do | ||
| sync_status=`(kubectl -n argocd get Application -o=jsonpath='{.items[*].status.sync.status}')` | ||
| for status in $sync_status; do | ||
| if [ "$status" != "Synced" ]; then | ||
| echo "Not all apps are synced, waiting 10 seconds" | ||
| sleep 10 | ||
| continue 2 | ||
| fi | ||
| break 2 | ||
| - name: verify if all apps are synced | ||
| run: | | ||
| while true; do | ||
| sync_status=`(kubectl -n argocd get Application -o=jsonpath='{.items[*].status.sync.status}')` | ||
| for status in $sync_status; do | ||
| if [ "$status" != "Synced" ]; then | ||
| echo "Not all apps are synced, waiting 10 seconds" | ||
| sleep 10 | ||
| continue 2 | ||
| fi | ||
| break 2 | ||
| done | ||
| done | ||
| done | ||
| - name: verify if all apps are healthy | ||
| run: | | ||
| while true; do | ||
| health_status=`(kubectl -n argocd get Application -o=jsonpath='{.items[*].status.health.status}')` | ||
| for status in $health_status; do | ||
| if [ "$status" != "Healthy" ]; then | ||
| echo "Not all apps are healthy, waiting 10 seconds" | ||
| sleep 10 | ||
| continue 2 | ||
| fi | ||
| break 2 | ||
| - name: verify if all apps are healthy | ||
| run: | | ||
| while true; do | ||
| health_status=`(kubectl -n argocd get Application -o=jsonpath='{.items[*].status.health.status}')` | ||
| for status in $health_status; do | ||
| if [ "$status" != "Healthy" ]; then | ||
| echo "Not all apps are healthy, waiting 10 seconds" | ||
| sleep 10 | ||
| continue 2 | ||
| fi | ||
| break 2 | ||
| done | ||
| done | ||
| done | ||
| - name: set dns record to alb | ||
| run: | | ||
| alb_arn=$(aws elbv2 describe-load-balancers --region ${{ secrets.AWS_REGION }} | jq -r '.LoadBalancers[].LoadBalancerArn' | xargs -I {} aws --region ${{ secrets.AWS_REGION }} elbv2 describe-tags --resource-arns {} --query "TagDescriptions[?Tags[?Key=='ingress.k8s.aws/stack' &&Value=='eks-lab-ingress']].ResourceArn" --output text) | ||
| ## Get the ALB DNS Name | ||
| alb_dns=$(aws elbv2 describe-load-balancers --region ${{ secrets.AWS_REGION }} --query "LoadBalancers[?LoadBalancerArn=='${alb_arn}'].DNSName" --output text) | ||
| ## Get hosted zone id | ||
| hosted_zone_id=$(aws route53 list-hosted-zones --query "HostedZones[?Name=='caiogomes.me.'].Id" --output text) | ||
| ## Set the DNS record to the ALB DNS Name | ||
| aws route53 change-resource-record-sets --hosted-zone-id $hosted_zone_id --change-batch '{"Changes":[{"Action":"UPSERT","ResourceRecordSet":{"Name":"*.eks.caiogomes.me.","Type":"CNAME","TTL":300,"ResourceRecords":[{"Value":"'${alb_dns}'"}]}}]}' | ||
| - name: set argocd admin password | ||
| run: | | ||
| kubectl -n argocd patch secret argocd-secret -p '{"stringData": {"admin.password": "${{ secrets.ARGOCD_ADMIN_PASSWORD }}"}}' |