You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
598 lines
21 KiB
598 lines
21 KiB
#!/usr/bin/env bash
|
|
|
|
# Copyright 2020 Lingfei Kong <colin404@foxmail.com>. All rights reserved.
|
|
# Use of this source code is governed by a MIT style
|
|
# license that can be found in the LICENSE file.
|
|
|
|
# This file creates release artifacts (tar files, container images) that are
|
|
# ready to distribute to install or distribute to end users.
|
|
|
|
###############################################################################
|
|
# Most of the ::release:: namespace functions have been moved to
|
|
# github.com/iam/release. Have a look in that repo and specifically in
|
|
# lib/releaselib.sh for ::release::-related functionality.
|
|
###############################################################################
|
|
|
|
# Tencent cos configuration
|
|
readonly BUCKET="marmotedu-1254073058"
|
|
readonly REGION="ap-beijing"
|
|
readonly COS_RELEASE_DIR="iam-release"
|
|
readonly COSTOOL="coscmd"
|
|
|
|
# This is where the final release artifacts are created locally
|
|
readonly RELEASE_STAGE="${LOCAL_OUTPUT_ROOT}/release-stage"
|
|
readonly RELEASE_TARS="${LOCAL_OUTPUT_ROOT}/release-tars"
|
|
readonly RELEASE_IMAGES="${LOCAL_OUTPUT_ROOT}/release-images"
|
|
|
|
# IAM github account info
|
|
readonly IAM_GITHUB_ORG=marmotedu
|
|
readonly IAM_GITHUB_REPO=iam
|
|
|
|
readonly ARTIFACT=iam.tar.gz
|
|
readonly CHECKSUM=${ARTIFACT}.sha1sum
|
|
|
|
IAM_BUILD_CONFORMANCE=${IAM_BUILD_CONFORMANCE:-y}
|
|
IAM_BUILD_PULL_LATEST_IMAGES=${IAM_BUILD_PULL_LATEST_IMAGES:-y}
|
|
|
|
# Validate a ci version
|
|
#
|
|
# Globals:
|
|
# None
|
|
# Arguments:
|
|
# version
|
|
# Returns:
|
|
# If version is a valid ci version
|
|
# Sets: (e.g. for '1.2.3-alpha.4.56+abcdef12345678')
|
|
# VERSION_MAJOR (e.g. '1')
|
|
# VERSION_MINOR (e.g. '2')
|
|
# VERSION_PATCH (e.g. '3')
|
|
# VERSION_PRERELEASE (e.g. 'alpha')
|
|
# VERSION_PRERELEASE_REV (e.g. '4')
|
|
# VERSION_BUILD_INFO (e.g. '.56+abcdef12345678')
|
|
# VERSION_COMMITS (e.g. '56')
|
|
function iam::release::parse_and_validate_ci_version() {
|
|
# Accept things like "v1.2.3-alpha.4.56+abcdef12345678" or "v1.2.3-beta.4"
|
|
local -r version_regex="^v(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)-([a-zA-Z0-9]+)\\.(0|[1-9][0-9]*)(\\.(0|[1-9][0-9]*)\\+[0-9a-f]{7,40})?$"
|
|
local -r version="${1-}"
|
|
[[ "${version}" =~ ${version_regex} ]] || {
|
|
iam::log::error "Invalid ci version: '${version}', must match regex ${version_regex}"
|
|
return 1
|
|
}
|
|
|
|
# The VERSION variables are used when this file is sourced, hence
|
|
# the shellcheck SC2034 'appears unused' warning is to be ignored.
|
|
|
|
# shellcheck disable=SC2034
|
|
VERSION_MAJOR="${BASH_REMATCH[1]}"
|
|
# shellcheck disable=SC2034
|
|
VERSION_MINOR="${BASH_REMATCH[2]}"
|
|
# shellcheck disable=SC2034
|
|
VERSION_PATCH="${BASH_REMATCH[3]}"
|
|
# shellcheck disable=SC2034
|
|
VERSION_PRERELEASE="${BASH_REMATCH[4]}"
|
|
# shellcheck disable=SC2034
|
|
VERSION_PRERELEASE_REV="${BASH_REMATCH[5]}"
|
|
# shellcheck disable=SC2034
|
|
VERSION_BUILD_INFO="${BASH_REMATCH[6]}"
|
|
# shellcheck disable=SC2034
|
|
VERSION_COMMITS="${BASH_REMATCH[7]}"
|
|
}
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Build final release artifacts
|
|
function iam::release::clean_cruft() {
|
|
# Clean out cruft
|
|
find "${RELEASE_STAGE}" -name '*~' -exec rm {} \;
|
|
find "${RELEASE_STAGE}" -name '#*#' -exec rm {} \;
|
|
find "${RELEASE_STAGE}" -name '.DS*' -exec rm {} \;
|
|
}
|
|
|
|
function iam::release::package_tarballs() {
|
|
# Clean out any old releases
|
|
rm -rf "${RELEASE_STAGE}" "${RELEASE_TARS}" "${RELEASE_IMAGES}"
|
|
mkdir -p "${RELEASE_TARS}"
|
|
iam::release::package_src_tarball &
|
|
iam::release::package_client_tarballs &
|
|
iam::release::package_iam_manifests_tarball &
|
|
iam::release::package_server_tarballs &
|
|
iam::util::wait-for-jobs || { iam::log::error "previous tarball phase failed"; return 1; }
|
|
|
|
iam::release::package_final_tarball & # _final depends on some of the previous phases
|
|
iam::util::wait-for-jobs || { iam::log::error "previous tarball phase failed"; return 1; }
|
|
}
|
|
|
|
function iam::release::updload_tarballs() {
|
|
iam::log::info "upload ${RELEASE_TARS}/* to cos bucket ${BUCKET}."
|
|
for file in $(ls ${RELEASE_TARS}/*)
|
|
do
|
|
if [ "${COSTOOL}" == "coscli" ];then
|
|
coscli cp "${file}" "cos://${BUCKET}/${COS_RELEASE_DIR}/${IAM_GIT_VERSION}/${file##*/}"
|
|
coscli cp "${file}" "cos://${BUCKET}/${COS_RELEASE_DIR}/latest/${file##*/}"
|
|
else
|
|
coscmd upload "${file}" "${COS_RELEASE_DIR}/${IAM_GIT_VERSION}/"
|
|
coscmd upload "${file}" "${COS_RELEASE_DIR}/latest/"
|
|
fi
|
|
done
|
|
}
|
|
|
|
# Package the source code we built, for compliance/licensing/audit/yadda.
|
|
function iam::release::package_src_tarball() {
|
|
local -r src_tarball="${RELEASE_TARS}/iam-src.tar.gz"
|
|
iam::log::status "Building tarball: src"
|
|
if [[ "${IAM_GIT_TREE_STATE-}" = 'clean' ]]; then
|
|
git archive -o "${src_tarball}" HEAD
|
|
else
|
|
find "${IAM_ROOT}" -mindepth 1 -maxdepth 1 \
|
|
! \( \
|
|
\( -path "${IAM_ROOT}"/_\* -o \
|
|
-path "${IAM_ROOT}"/.git\* -o \
|
|
-path "${IAM_ROOT}"/.gitignore\* -o \
|
|
-path "${IAM_ROOT}"/.gsemver.yaml\* -o \
|
|
-path "${IAM_ROOT}"/.config\* -o \
|
|
-path "${IAM_ROOT}"/.chglog\* -o \
|
|
-path "${IAM_ROOT}"/.gitlint -o \
|
|
-path "${IAM_ROOT}"/.golangci.yaml -o \
|
|
-path "${IAM_ROOT}"/.goreleaser.yml -o \
|
|
-path "${IAM_ROOT}"/.note.md -o \
|
|
-path "${IAM_ROOT}"/.todo.md \
|
|
\) -prune \
|
|
\) -print0 \
|
|
| "${TAR}" czf "${src_tarball}" --transform "s|${IAM_ROOT#/*}|iam|" --null -T -
|
|
fi
|
|
}
|
|
|
|
# Package up all of the server binaries
|
|
function iam::release::package_server_tarballs() {
|
|
# Find all of the built client binaries
|
|
local long_platforms=("${LOCAL_OUTPUT_BINPATH}"/*/*)
|
|
if [[ -n ${IAM_BUILD_PLATFORMS-} ]]; then
|
|
read -ra long_platforms <<< "${IAM_BUILD_PLATFORMS}"
|
|
fi
|
|
|
|
for platform_long in "${long_platforms[@]}"; do
|
|
local platform
|
|
local platform_tag
|
|
platform=${platform_long##${LOCAL_OUTPUT_BINPATH}/} # Strip LOCAL_OUTPUT_BINPATH
|
|
platform_tag=${platform/\//-} # Replace a "/" for a "-"
|
|
iam::log::status "Starting tarball: server $platform_tag"
|
|
|
|
(
|
|
local release_stage="${RELEASE_STAGE}/server/${platform_tag}/iam"
|
|
rm -rf "${release_stage}"
|
|
mkdir -p "${release_stage}/server/bin"
|
|
|
|
local server_bins=("${IAM_SERVER_BINARIES[@]}")
|
|
|
|
# This fancy expression will expand to prepend a path
|
|
# (${LOCAL_OUTPUT_BINPATH}/${platform}/) to every item in the
|
|
# server_bins array.
|
|
cp "${server_bins[@]/#/${LOCAL_OUTPUT_BINPATH}/${platform}/}" \
|
|
"${release_stage}/server/bin/"
|
|
|
|
iam::release::clean_cruft
|
|
|
|
local package_name="${RELEASE_TARS}/iam-server-${platform_tag}.tar.gz"
|
|
iam::release::create_tarball "${package_name}" "${release_stage}/.."
|
|
) &
|
|
done
|
|
|
|
iam::log::status "Waiting on tarballs"
|
|
iam::util::wait-for-jobs || { iam::log::error "server tarball creation failed"; exit 1; }
|
|
}
|
|
|
|
# Package up all of the cross compiled clients. Over time this should grow into
|
|
# a full SDK
|
|
function iam::release::package_client_tarballs() {
|
|
# Find all of the built client binaries
|
|
local long_platforms=("${LOCAL_OUTPUT_BINPATH}"/*/*)
|
|
if [[ -n ${IAM_BUILD_PLATFORMS-} ]]; then
|
|
read -ra long_platforms <<< "${IAM_BUILD_PLATFORMS}"
|
|
fi
|
|
|
|
for platform_long in "${long_platforms[@]}"; do
|
|
local platform
|
|
local platform_tag
|
|
platform=${platform_long##${LOCAL_OUTPUT_BINPATH}/} # Strip LOCAL_OUTPUT_BINPATH
|
|
platform_tag=${platform/\//-} # Replace a "/" for a "-"
|
|
iam::log::status "Starting tarball: client $platform_tag"
|
|
|
|
(
|
|
local release_stage="${RELEASE_STAGE}/client/${platform_tag}/iam"
|
|
rm -rf "${release_stage}"
|
|
mkdir -p "${release_stage}/client/bin"
|
|
|
|
local client_bins=("${IAM_CLIENT_BINARIES[@]}")
|
|
|
|
# This fancy expression will expand to prepend a path
|
|
# (${LOCAL_OUTPUT_BINPATH}/${platform}/) to every item in the
|
|
# client_bins array.
|
|
cp "${client_bins[@]/#/${LOCAL_OUTPUT_BINPATH}/${platform}/}" \
|
|
"${release_stage}/client/bin/"
|
|
|
|
iam::release::clean_cruft
|
|
|
|
local package_name="${RELEASE_TARS}/iam-client-${platform_tag}.tar.gz"
|
|
iam::release::create_tarball "${package_name}" "${release_stage}/.."
|
|
) &
|
|
done
|
|
|
|
iam::log::status "Waiting on tarballs"
|
|
iam::util::wait-for-jobs || { iam::log::error "client tarball creation failed"; exit 1; }
|
|
}
|
|
|
|
# Package up all of the server binaries in docker images
|
|
function iam::release::build_server_images() {
|
|
# Clean out any old images
|
|
rm -rf "${RELEASE_IMAGES}"
|
|
local platform
|
|
for platform in "${IAM_SERVER_PLATFORMS[@]}"; do
|
|
local platform_tag
|
|
local arch
|
|
platform_tag=${platform/\//-} # Replace a "/" for a "-"
|
|
arch=$(basename "${platform}")
|
|
iam::log::status "Building images: $platform_tag"
|
|
|
|
local release_stage
|
|
release_stage="${RELEASE_STAGE}/server/${platform_tag}/iam"
|
|
rm -rf "${release_stage}"
|
|
mkdir -p "${release_stage}/server/bin"
|
|
|
|
# This fancy expression will expand to prepend a path
|
|
# (${LOCAL_OUTPUT_BINPATH}/${platform}/) to every item in the
|
|
# IAM_SERVER_IMAGE_BINARIES array.
|
|
cp "${IAM_SERVER_IMAGE_BINARIES[@]/#/${LOCAL_OUTPUT_BINPATH}/${platform}/}" \
|
|
"${release_stage}/server/bin/"
|
|
|
|
iam::release::create_docker_images_for_server "${release_stage}/server/bin" "${arch}"
|
|
done
|
|
}
|
|
|
|
function iam::release::md5() {
|
|
if which md5 >/dev/null 2>&1; then
|
|
md5 -q "$1"
|
|
else
|
|
md5sum "$1" | awk '{ print $1 }'
|
|
fi
|
|
}
|
|
|
|
function iam::release::sha1() {
|
|
if which sha1sum >/dev/null 2>&1; then
|
|
sha1sum "$1" | awk '{ print $1 }'
|
|
else
|
|
shasum -a1 "$1" | awk '{ print $1 }'
|
|
fi
|
|
}
|
|
|
|
function iam::release::build_conformance_image() {
|
|
local -r arch="$1"
|
|
local -r registry="$2"
|
|
local -r version="$3"
|
|
local -r save_dir="${4-}"
|
|
iam::log::status "Building conformance image for arch: ${arch}"
|
|
ARCH="${arch}" REGISTRY="${registry}" VERSION="${version}" \
|
|
make -C cluster/images/conformance/ build >/dev/null
|
|
|
|
local conformance_tag
|
|
conformance_tag="${registry}/conformance-${arch}:${version}"
|
|
if [[ -n "${save_dir}" ]]; then
|
|
"${DOCKER[@]}" save "${conformance_tag}" > "${save_dir}/conformance-${arch}.tar"
|
|
fi
|
|
iam::log::status "Deleting conformance image ${conformance_tag}"
|
|
"${DOCKER[@]}" rmi "${conformance_tag}" &>/dev/null || true
|
|
}
|
|
|
|
# This builds all the release docker images (One docker image per binary)
|
|
# Args:
|
|
# $1 - binary_dir, the directory to save the tared images to.
|
|
# $2 - arch, architecture for which we are building docker images.
|
|
function iam::release::create_docker_images_for_server() {
|
|
# Create a sub-shell so that we don't pollute the outer environment
|
|
(
|
|
local binary_dir
|
|
local arch
|
|
local binaries
|
|
local images_dir
|
|
binary_dir="$1"
|
|
arch="$2"
|
|
binaries=$(iam::build::get_docker_wrapped_binaries "${arch}")
|
|
images_dir="${RELEASE_IMAGES}/${arch}"
|
|
mkdir -p "${images_dir}"
|
|
|
|
# k8s.gcr.io is the constant tag in the docker archives, this is also the default for config scripts in GKE.
|
|
# We can use IAM_DOCKER_REGISTRY to include and extra registry in the docker archive.
|
|
# If we use IAM_DOCKER_REGISTRY="k8s.gcr.io", then the extra tag (same) is ignored, see release_docker_image_tag below.
|
|
local -r docker_registry="k8s.gcr.io"
|
|
# Docker tags cannot contain '+'
|
|
local docker_tag="${IAM_GIT_VERSION/+/_}"
|
|
if [[ -z "${docker_tag}" ]]; then
|
|
iam::log::error "git version information missing; cannot create Docker tag"
|
|
return 1
|
|
fi
|
|
|
|
# provide `--pull` argument to `docker build` if `IAM_BUILD_PULL_LATEST_IMAGES`
|
|
# is set to y or Y; otherwise try to build the image without forcefully
|
|
# pulling the latest base image.
|
|
local docker_build_opts
|
|
docker_build_opts=
|
|
if [[ "${IAM_BUILD_PULL_LATEST_IMAGES}" =~ [yY] ]]; then
|
|
docker_build_opts='--pull'
|
|
fi
|
|
|
|
for wrappable in $binaries; do
|
|
|
|
local binary_name=${wrappable%%,*}
|
|
local base_image=${wrappable##*,}
|
|
local binary_file_path="${binary_dir}/${binary_name}"
|
|
local docker_build_path="${binary_file_path}.dockerbuild"
|
|
local docker_file_path="${docker_build_path}/Dockerfile"
|
|
local docker_image_tag="${docker_registry}/${binary_name}-${arch}:${docker_tag}"
|
|
|
|
iam::log::status "Starting docker build for image: ${binary_name}-${arch}"
|
|
(
|
|
rm -rf "${docker_build_path}"
|
|
mkdir -p "${docker_build_path}"
|
|
ln "${binary_file_path}" "${docker_build_path}/${binary_name}"
|
|
ln "${IAM_ROOT}/build/nsswitch.conf" "${docker_build_path}/nsswitch.conf"
|
|
chmod 0644 "${docker_build_path}/nsswitch.conf"
|
|
cat <<EOF > "${docker_file_path}"
|
|
FROM ${base_image}
|
|
COPY ${binary_name} /usr/local/bin/${binary_name}
|
|
EOF
|
|
# ensure /etc/nsswitch.conf exists so go's resolver respects /etc/hosts
|
|
if [[ "${base_image}" =~ busybox ]]; then
|
|
echo "COPY nsswitch.conf /etc/" >> "${docker_file_path}"
|
|
fi
|
|
|
|
"${DOCKER[@]}" build ${docker_build_opts:+"${docker_build_opts}"} -q -t "${docker_image_tag}" "${docker_build_path}" >/dev/null
|
|
# If we are building an official/alpha/beta release we want to keep
|
|
# docker images and tag them appropriately.
|
|
local -r release_docker_image_tag="${IAM_DOCKER_REGISTRY-$docker_registry}/${binary_name}-${arch}:${IAM_DOCKER_IMAGE_TAG-$docker_tag}"
|
|
if [[ "${release_docker_image_tag}" != "${docker_image_tag}" ]]; then
|
|
iam::log::status "Tagging docker image ${docker_image_tag} as ${release_docker_image_tag}"
|
|
"${DOCKER[@]}" rmi "${release_docker_image_tag}" 2>/dev/null || true
|
|
"${DOCKER[@]}" tag "${docker_image_tag}" "${release_docker_image_tag}" 2>/dev/null
|
|
fi
|
|
"${DOCKER[@]}" save -o "${binary_file_path}.tar" "${docker_image_tag}" "${release_docker_image_tag}"
|
|
echo "${docker_tag}" > "${binary_file_path}.docker_tag"
|
|
rm -rf "${docker_build_path}"
|
|
ln "${binary_file_path}.tar" "${images_dir}/"
|
|
|
|
iam::log::status "Deleting docker image ${docker_image_tag}"
|
|
"${DOCKER[@]}" rmi "${docker_image_tag}" &>/dev/null || true
|
|
) &
|
|
done
|
|
|
|
if [[ "${IAM_BUILD_CONFORMANCE}" =~ [yY] ]]; then
|
|
iam::release::build_conformance_image "${arch}" "${docker_registry}" \
|
|
"${docker_tag}" "${images_dir}" &
|
|
fi
|
|
|
|
iam::util::wait-for-jobs || { iam::log::error "previous Docker build failed"; return 1; }
|
|
iam::log::status "Docker builds done"
|
|
)
|
|
|
|
}
|
|
|
|
# This will pack iam-system manifests files for distros such as COS.
|
|
function iam::release::package_iam_manifests_tarball() {
|
|
iam::log::status "Building tarball: manifests"
|
|
|
|
local src_dir="${IAM_ROOT}/deployments"
|
|
|
|
local release_stage="${RELEASE_STAGE}/manifests/iam"
|
|
rm -rf "${release_stage}"
|
|
|
|
local dst_dir="${release_stage}"
|
|
mkdir -p "${dst_dir}"
|
|
cp -r ${src_dir}/* "${dst_dir}"
|
|
#cp "${src_dir}/iam-apiserver.yaml" "${dst_dir}"
|
|
#cp "${src_dir}/iam-authz-server.yaml" "${dst_dir}"
|
|
#cp "${src_dir}/iam-pump.yaml" "${dst_dir}"
|
|
#cp "${src_dir}/iam-watcher.yaml" "${dst_dir}"
|
|
#cp "${IAM_ROOT}/cluster/gce/gci/health-monitor.sh" "${dst_dir}/health-monitor.sh"
|
|
|
|
iam::release::clean_cruft
|
|
|
|
local package_name="${RELEASE_TARS}/iam-manifests.tar.gz"
|
|
iam::release::create_tarball "${package_name}" "${release_stage}/.."
|
|
}
|
|
|
|
# This is all the platform-independent stuff you need to run/install iam.
|
|
# Arch-specific binaries will need to be downloaded separately (possibly by
|
|
# using the bundled cluster/get-iam-binaries.sh script).
|
|
# Included in this tarball:
|
|
# - Cluster spin up/down scripts and configs for various cloud providers
|
|
# - Tarballs for manifest configs that are ready to be uploaded
|
|
# - Examples (which may or may not still work)
|
|
# - The remnants of the docs/ directory
|
|
function iam::release::package_final_tarball() {
|
|
iam::log::status "Building tarball: final"
|
|
|
|
# This isn't a "full" tarball anymore, but the release lib still expects
|
|
# artifacts under "full/iam/"
|
|
local release_stage="${RELEASE_STAGE}/full/iam"
|
|
rm -rf "${release_stage}"
|
|
mkdir -p "${release_stage}"
|
|
|
|
mkdir -p "${release_stage}/client"
|
|
cat <<EOF > "${release_stage}/client/README"
|
|
Client binaries are no longer included in the IAM final tarball.
|
|
|
|
Run release/get-iam-binaries.sh to download client and server binaries.
|
|
EOF
|
|
|
|
# We want everything in /scripts.
|
|
mkdir -p "${release_stage}/release"
|
|
cp -R "${IAM_ROOT}/scripts/release" "${release_stage}/"
|
|
cat <<EOF > "${release_stage}/release/get-iam-binaries.sh"
|
|
#!/usr/bin/env bash
|
|
|
|
# Copyright 2020 Lingfei Kong <colin404@foxmail.com>. All rights reserved.
|
|
# Use of this source code is governed by a MIT style
|
|
# license that can be found in the LICENSE file.
|
|
|
|
# This file download iam client and server binaries from tencent cos bucket.
|
|
|
|
os=linux arch=amd64 version=${IAM_GIT_VERSION} && wget https://${BUCKET}.cos.${REGION}.myqcloud.com/${COS_RELEASE_DIR}/\$version/{iam-client-\$os-\$arch.tar.gz,iam-server-\$os-\$arch.tar.gz}
|
|
EOF
|
|
chmod +x ${release_stage}/release/get-iam-binaries.sh
|
|
|
|
mkdir -p "${release_stage}/server"
|
|
cp "${RELEASE_TARS}/iam-manifests.tar.gz" "${release_stage}/server/"
|
|
cat <<EOF > "${release_stage}/server/README"
|
|
Server binary tarballs are no longer included in the IAM final tarball.
|
|
|
|
Run release/get-iam-binaries.sh to download client and server binaries.
|
|
EOF
|
|
|
|
# Include hack/lib as a dependency for the cluster/ scripts
|
|
#mkdir -p "${release_stage}/hack"
|
|
#cp -R "${IAM_ROOT}/hack/lib" "${release_stage}/hack/"
|
|
|
|
cp -R ${IAM_ROOT}/{docs,configs,scripts,deployments,init,README.md,LICENSE} "${release_stage}/"
|
|
|
|
echo "${IAM_GIT_VERSION}" > "${release_stage}/version"
|
|
|
|
iam::release::clean_cruft
|
|
|
|
local package_name="${RELEASE_TARS}/${ARTIFACT}"
|
|
iam::release::create_tarball "${package_name}" "${release_stage}/.."
|
|
}
|
|
|
|
# Build a release tarball. $1 is the output tar name. $2 is the base directory
|
|
# of the files to be packaged. This assumes that ${2}/iamis what is
|
|
# being packaged.
|
|
function iam::release::create_tarball() {
|
|
iam::build::ensure_tar
|
|
|
|
local tarfile=$1
|
|
local stagingdir=$2
|
|
|
|
"${TAR}" czf "${tarfile}" -C "${stagingdir}" iam --owner=0 --group=0
|
|
}
|
|
|
|
function iam::release::install_github_release(){
|
|
GO111MODULE=on go install github.com/github-release/github-release@latest
|
|
}
|
|
|
|
# Require the following tools:
|
|
# - github-release
|
|
# - gsemver
|
|
# - git-chglog
|
|
# - coscmd or coscli
|
|
function iam::release::verify_prereqs(){
|
|
if [ -z "$(which github-release 2>/dev/null)" ]; then
|
|
iam::log::info "'github-release' tool not installed, try to install it."
|
|
|
|
if ! iam::release::install_github_release; then
|
|
iam::log::error "failed to install 'github-release'"
|
|
return 1
|
|
fi
|
|
fi
|
|
|
|
if [ -z "$(which git-chglog 2>/dev/null)" ]; then
|
|
iam::log::info "'git-chglog' tool not installed, try to install it."
|
|
|
|
if ! go install github.com/git-chglog/git-chglog/cmd/git-chglog@latest &>/dev/null; then
|
|
iam::log::error "failed to install 'git-chglog'"
|
|
return 1
|
|
fi
|
|
fi
|
|
|
|
if [ -z "$(which gsemver 2>/dev/null)" ]; then
|
|
iam::log::info "'gsemver' tool not installed, try to install it."
|
|
|
|
if ! go install github.com/arnaud-deprez/gsemver@latest &>/dev/null; then
|
|
iam::log::error "failed to install 'gsemver'"
|
|
return 1
|
|
fi
|
|
fi
|
|
|
|
|
|
if [ -z "$(which ${COSTOOL} 2>/dev/null)" ]; then
|
|
iam::log::info "${COSTOOL} tool not installed, try to install it."
|
|
|
|
if ! make -C "${IAM_ROOT}" tools.install.${COSTOOL}; then
|
|
iam::log::error "failed to install ${COSTOOL}"
|
|
return 1
|
|
fi
|
|
fi
|
|
|
|
if [ -z "${TENCENT_SECRET_ID}" -o -z "${TENCENT_SECRET_KEY}" ];then
|
|
iam::log::error "can not find env: TENCENT_SECRET_ID and TENCENT_SECRET_KEY"
|
|
return 1
|
|
fi
|
|
|
|
if [ "${COSTOOL}" == "coscli" ];then
|
|
if [ ! -f "${HOME}/.cos.yaml" ];then
|
|
cat << EOF > "${HOME}/.cos.yaml"
|
|
cos:
|
|
base:
|
|
secretid: ${TENCENT_SECRET_ID}
|
|
secretkey: ${TENCENT_SECRET_KEY}
|
|
sessiontoken: ""
|
|
buckets:
|
|
- name: ${BUCKET}
|
|
alias: ${BUCKET}
|
|
region: ${REGION}
|
|
EOF
|
|
fi
|
|
else
|
|
if [ ! -f "${HOME}/.cos.conf" ];then
|
|
cat << EOF > "${HOME}/.cos.conf"
|
|
[common]
|
|
secret_id = ${TENCENT_SECRET_ID}
|
|
secret_key = ${TENCENT_SECRET_KEY}
|
|
bucket = ${BUCKET}
|
|
region =${REGION}
|
|
max_thread = 5
|
|
part_size = 1
|
|
schema = https
|
|
EOF
|
|
fi
|
|
fi
|
|
}
|
|
|
|
# Create a github release with specified tarballs.
|
|
# NOTICE: Must export 'GITHUB_TOKEN' env in the shell, details:
|
|
# https://github.com/github-release/github-release
|
|
function iam::release::github_release() {
|
|
# create a github release
|
|
iam::log::info "create a new github release with tag ${IAM_GIT_VERSION}"
|
|
github-release release \
|
|
--user ${IAM_GITHUB_ORG} \
|
|
--repo ${IAM_GITHUB_REPO} \
|
|
--tag ${IAM_GIT_VERSION} \
|
|
--description "" \
|
|
--pre-release
|
|
|
|
# update iam tarballs
|
|
iam::log::info "upload ${ARTIFACT} to release ${IAM_GIT_VERSION}"
|
|
github-release upload \
|
|
--user ${IAM_GITHUB_ORG} \
|
|
--repo ${IAM_GITHUB_REPO} \
|
|
--tag ${IAM_GIT_VERSION} \
|
|
--name ${ARTIFACT} \
|
|
--file ${RELEASE_TARS}/${ARTIFACT}
|
|
|
|
iam::log::info "upload iam-src.tar.gz to release ${IAM_GIT_VERSION}"
|
|
github-release upload \
|
|
--user ${IAM_GITHUB_ORG} \
|
|
--repo ${IAM_GITHUB_REPO} \
|
|
--tag ${IAM_GIT_VERSION} \
|
|
--name "iam-src.tar.gz" \
|
|
--file ${RELEASE_TARS}/iam-src.tar.gz
|
|
}
|
|
|
|
function iam::release::generate_changelog() {
|
|
iam::log::info "generate CHANGELOG-${IAM_GIT_VERSION#v}.md and commit it"
|
|
|
|
git-chglog ${IAM_GIT_VERSION} > ${IAM_ROOT}/CHANGELOG/CHANGELOG-${IAM_GIT_VERSION#v}.md
|
|
|
|
set +o errexit
|
|
git add ${IAM_ROOT}/CHANGELOG/CHANGELOG-${IAM_GIT_VERSION#v}.md
|
|
git commit -a -m "docs(changelog): add CHANGELOG-${IAM_GIT_VERSION#v}.md"
|
|
git push -f origin master # 最后将 CHANGELOG 也 push 上去
|
|
}
|
|
|