Makefile

##
## —————————————————————————————————— HASHISTACK ————————————————————————————————
##

.DEFAULT_GOAL = help

.PHONY: help header-env
help: ## Display help
	@grep -E '(^[0-9a-zA-Z_-]+:.*?##.*$$)|(^##)' $(MAKEFILE_LIST) | sed -e 's/Makefile://' | awk 'BEGIN {FS = ":.*?## "}; {printf "\033[32m%-22s\033[0m %s\n", $$1, $$2}' | sed -e 's/\[32m##/[33m/'

header-env:
	@echo "—————————————————————————————————— HASHISTACK —————————————————————————————————"
	@echo

separator = "————————————————————————————————————————————————————————————————————————————————"

##
## —————————————————————————— ENVIRONMENT CONFIGURATION —————————————————————————
##

.PHONY: install-requirements
install-requirements: ## Install system dependencies
	@echo "—————————————————————————————— SYSTEM REQUIREMENTS ———————————————————————————"
	@sudo apt-get install -y \
	ca-certificates python3 python3-dev python3-venv python3-pip direnv bash bash-completion \
	lsb-release unzip curl sshpass skopeo librsync-dev
	@grep -q 'eval "$$(direnv hook bash)"' ~/.bashrc || echo 'eval "$$(direnv hook bash)"' >> ${HOME}/.bashrc
	@[ -d "${HOME}/.asdf" ] || git clone https://github.com/asdf-vm/asdf.git ${HOME}/.asdf --branch v0.14.0
	@grep -q '. ${HOME}/.asdf/asdf.sh' ~/.bashrc || echo '. ${HOME}/.asdf/asdf.sh' >> ${HOME}/.bashrc
	@grep -q '. ${HOME}/.asdf/completions/asdf.bash' ~/.bashrc || echo '. ${HOME}/.asdf/completions/asdf.bash' >> ${HOME}/.bashrc

.PHONY: prepare
prepare: ### Install workspace env dependencies
	@echo "——————————————————————————————— ASDF REQUIREMENTS ————————————————————————————"
	@asdf plugin-add terraform https://github.com/asdf-community/asdf-hashicorp.git > /dev/null && \
	echo "[  ${Green}OK${Color_Off}  ] ${Yellow}INSTALL${Color_Off} PLUGIN TERRAFORM" || \
	echo "[${Red}FAILED${Color_Off}] ${Yellow}INSTALL${Color_Off} PLUGIN TERRAFORM"
	@asdf plugin-add terraform-docs https://github.com/looztra/asdf-terraform-docs  > /dev/null && \
	echo "[  ${Green}OK${Color_Off}  ] ${Yellow}INSTALL${Color_Off} PLUGIN TERRAFORM-DOCS" || \
	echo "[${Red}FAILED${Color_Off}] ${Yellow}INSTALL${Color_Off} PLUGIN TERRAFORM-DOCS"
	@asdf install && \
	echo "[  ${Green}OK${Color_Off}  ] ${Yellow}INSTALL${Color_Off} TOOLS" || \
	echo "[${Red}FAILED${Color_Off}] ${Yellow}INSTALL${Color_Off} TOOLS"
	@echo "—————————————————————————————— PYTHON REQUIREMENTS ———————————————————————————"
	@pip3 install -U pip --no-cache-dir --quiet &&\
	echo "[  ${Green}OK${Color_Off}  ] ${Yellow}INSTALL${Color_Off} PIP3" || \
	echo "[${Red}FAILED${Color_Off}] ${Yellow}INSTALL${Color_Off} PIP3"

	@pip3 install -U wheel --no-cache-dir --quiet &&\
	echo "[  ${Green}OK${Color_Off}  ] ${Yellow}INSTALL${Color_Off} WHEEL" || \
	echo "[${Red}FAILED${Color_Off}] ${Yellow}INSTALL${Color_Off} WHEEL"

	@pip3 install -U setuptools --no-cache-dir --quiet &&\
	echo "[  ${Green}OK${Color_Off}  ] ${Yellow}INSTALL${Color_Off} SETUPTOOLS" || \
	echo "[${Red}FAILED${Color_Off}] ${Yellow}INSTALL${Color_Off} SETUPTOOLS"

	@pip3 install -U --no-cache-dir -q -r requirements.txt &&\
	echo "[  ${Green}OK${Color_Off}  ] ${Yellow}INSTALL${Color_Off} PIP REQUIREMENTS" || \
	echo "[${Red}FAILED${Color_Off}] ${Yellow}INSTALL${Color_Off} PIP REQUIREMENTS"

	@pip3 install -U --no-cache-dir -q -r ${PWD}/docs/requirements.txt &&\
	cd docs/plugins/yaml2md &&\
	pip3 install -q -e . &&\
	echo "[  ${Green}OK${Color_Off}  ] ${Yellow}INSTALL${Color_Off} PIP DOC REQUIREMENTS" || \
	echo "[${Red}FAILED${Color_Off}] ${Yellow}INSTALL${Color_Off} PIP DOC REQUIREMENTS"
	@echo "————————————————————————————— ANSIBLE REQUIREMENTS ———————————————————————————"
	@ansible-galaxy collection install -fr ${PWD}/requirements.yml
	@ansible-galaxy role install -fr ${PWD}/requirements.yml


.PHONY: doc
doc: ### Build project static html documentation
	@echo ""
	@rm -f docs/source/reference/terraform/*.md
	@terraform-docs terraform/vault_kv_realm/ > docs/source/reference/terraform/vault_kv_realm.md
	@terraform-docs terraform/vault_policy_management/ > docs/source/reference/terraform/vault_policy_management.md
	@cd docs &&	make html
	@echo $(separator)
	@echo "Static documentation exported:"
	@echo "  file://${PWD}/docs/build/html/index.html"
	@echo $(separator)
	@echo ""


.PHONY: clean
clean = "Clean everything"
clean: clean-molecule


.PHONY: clean-molecule-cache
clean-molecule-cache-desc = "Clean molecule cache"
clean-molecule:
	@echo ""
	@echo $(clean-molecule-cache-desc)
	@echo $(separator)
	molecule destroy && molecule reset


.PHONY: clean-doc-desc
clean-doc-desc = "Clean project static html documentation"
clean-doc:
	@echo ""
	@echo $(clean-doc-desc)
	@echo $(separator)
	@cd docs && make clean


tf_fmt:
	find terraform/* -maxdepth 1 -type d -exec bash -c 'cd {} && pwd && terraform fmt' \;

##
## ———————————————————————————————————— INIT ————————————————————————————————————
##
init_instance: ## Init inventory dir for instance
	@ [ -n  "$(name)" ] && [ -n  "$(parent_domain)" ] && [ -n  "$(archi)" ] && \
	ansible-playbook playbooks/init.yml -e hs_base_dir=inventories -e hs_workspace=$(name) -e hs_parent_domain=$(parent_domain) -e hs_archi=$(archi) || \
	( \
	echo ----------------------------------- HASHISTACK --------------------------------- && \
	echo && \
	echo "Usage:\n\tmake init_instance name=NAME parent_domain=DOMAIN archi=[mono|multi]\n" && \
	exit 1 \
	)
##
## —————————————————————————— STAGE_99 - OFFLINE ——————————————————————————
##
stage_99: ### Download packages for offline install
	ansible-playbook playbooks/11_core_bootstrap.yml -i inventory -t online
	ansible-playbook playbooks/12_core_setup_dns.yml -i inventory -t online
	ansible-playbook playbooks/15_core_rproxy.yml -i inventory -t online
	ansible-playbook playbooks/20_vault_install.yml -i inventory -t online
	ansible-playbook playbooks/21_consul_install.yml -i inventory -t online
	ansible-playbook playbooks/30_nomad_install.yml -i inventory -t online
	ansible-playbook playbooks/40_sre_tooling.yml -i inventory -t online
##
## —————————————————————————— STAGE_0 - INFRASTRUCTURE ——————————————————————————
##
.PHONY: stage_0_scaleway
stage_0_scaleway: ### Create infra and generate inventory
	ansible-playbook ../../playbooks/01_infra_scaleway.yml


.PHONY: stage_0_scaleway_destroy
stage_0_scaleway_destroy:
	ansible-playbook ../../playbooks/01_infra_scaleway.yml -e tf_action=destroy
##
## —————————————————————————————— STAGE_1 - SYSTEMS —————————————————————————————
##
.PHONY: stage_1_bootstrap
stage_1_bootstrap:
	ansible-playbook ../../playbooks/11_core_bootstrap.yml $(ARGS)
	ansible-playbook ../../playbooks/12_core_setup_dns.yml $(ARGS)
	@echo ""
	@echo "Next steps:"
	@ echo "  - create a delegation"
	@ echo "  - have your root certificate"
	@ echo "  - run:"
	@ echo "      make stage_1_rproxy"
	@echo ""

stage_1_rproxy:
	ansible-playbook ../../playbooks/15_core_rproxy.yml $(ARGS)

stage_1: stage_1_bootstrap stage_1_rproxy

stage_1_addon_delegation_scaleway:
	ansible-playbook ../../playbooks/13_core_scaleway_dns_delegation.yml -e tf_action=apply

stage_1_addon_delegation_scaleway_destroy:
	ansible-playbook ../../playbooks/13_core_scaleway_dns_delegation.yml -e tf_action=destroy

stage_1_addon_certs_letsencrypt:
	ansible-playbook ../../playbooks/14_core_letsencrypt.yml

stage_1_auto_prerequisites: stage_1_bootstrap stage_1_addon_delegation_scaleway stage_1_addon_certs_letsencrypt stage_1_rproxy
##
## ——————————————————————————— STAGE_2 - VAULT+CONSUL ———————————————————————————
##
stage_2_vault:
	ansible-playbook ../../playbooks/20_vault_install.yml $(ARGS)

stage_2_consul:
	ansible-playbook ../../playbooks/21_consul_install.yml $(ARGS)

stage_2: stage_2_vault stage_2_consul ## Deploy Vault and Consul
##
## —————————————————————————————— STAGE_3 - NOMAD ———————————————————————————————
##
stage_3: ## Deploy Nomad
	ansible-playbook ../../playbooks/30_nomad_install.yml $(ARGS)
##
## ——————————————————————————— STAGE_4 - SRE TOOLING ————————————————————————————
##
stage_4: ## Deploy SRE tooling
	ansible-playbook ../../playbooks/40_sre_tooling.yml $(ARGS)
# ***************************************
# *************************************** CORE_AWS
# ***************************************


scaleway_destroy: stage_1_addon_delegation_scaleway_destroy stage_0_scaleway_destroy

core_aws_terraform_servers: header
	ansible-playbook playbooks/01_core_aws.yml -e tf_action=apply

core_aws_terraform_servers_destroy: header
	ansible-playbook playbooks/01_core_aws.yml -e tf_action=destroy

.PHONY: core_aws
core_aws: core_aws_terraform_servers core_setup letsencrypt core_aws_terraform_lb

core_aws_destroy: header
	@echo ""
	@echo $(separator)
	@echo $(core-scw-destroy-desc)
	@echo $(separator)
	ansible-playbook rtnp.galaxie_clans.gandi_delegate_subdomain -e scope=${HS_WORKSPACE}-sre -e mode=destroy -e force=true && \
	ansible-playbook playbooks/01_core_aws.yml -e tf_action=destroy
# ***************************************
# *************************************** SRE
# ***************************************

.PHONY: sre-tooling-install
sre-tooling-install-desc = "Install SRE tooling"
sre_tooling_install: header
	@echo ""
	@echo $(separator)
	@echo "==> $(sre-tooling-install-desc)"
	@echo $(separator)
	[ -n "${HS_WORKSPACE}" ] || echo "Set the HS_WORKSPACE env variable" && \
	ansible-playbook playbooks/04_sre_tooling.yml

.PHONY: sre_tooling
sre_tooling: sre_tooling_install 

# ***************************************
# *************************************** VAULT
# ***************************************

encrypt:
	ansible-vault encrypt group_vars/hashistack/secrets/*

decrypt:
	ansible-vault decrypt group_vars/hashistack/secrets/*

container-installer:
	@docker build --platform=linux/amd64 --target hs-installer \
	-t hs-installer:latest -f docker/Dockerfile .

container-offline-installer:
	@docker build --platform=linux/amd64 -t hs-offline:latest \
	-f docker/Dockerfile .

container-run-offline-installer:
	@docker run --rm -it \
	--mount type=bind,source=${PWD}/inventories,target=/opt/hashistack/inventories \
	--mount type=bind,source=${PWD}/.env.secrets,target=/opt/hashistack/.env.secrets \
	-h hs-offline hs-offline:latest bash

get-creds:
	ansible-playbook playbooks/99_get_creds.yml