kube.sh

## AWS configure

## create new user group with access to EC@, S3, VPC and IAM roles if it does not exist
echo "Get user group ${AWS_USER_GROUP}..."
user_group="$(aws iam get-group --group-name $AWS_USER_GROUP | jq -r ".Group.GroupName")"
if [ "${user_group}" != ${AWS_USER_GROUP} ]; then
	echo "Create user group ${AWS_USER_GROUP}"
	aws iam create-group --group-name ${AWS_USER_GROUP}
	aws iam attach-group-policy --group-name ${AWS_USER_GROUP} --policy-arn arn:aws:iam::aws:policy/AmazonEC2FullAccess
	aws iam attach-group-policy --group-name ${AWS_USER_GROUP} --policy-arn arn:aws:iam::aws:policy/AmazonS3FullAccess
	aws iam attach-group-policy --group-name ${AWS_USER_GROUP} --policy-arn arn:aws:iam::aws:policy/AmazonVPCFullAccess
	aws iam attach-group-policy --group-name ${AWS_USER_GROUP} --policy-arn arn:aws:iam::aws:policy/IAMFullAccess
else
	echo "Using existing group..."
fi

## create new user
echo "Get user ${AWS_USER}..."
# find $AWS_USER before in the list of users on AWS
user="$(aws iam get-user --user-name $AWS_USER | jq -r ".User.UserName")"
if [ "${user}" != "${AWS_USER}" ]; then
	echo "Create user ${AWS_USER}..."
	aws iam create-user --user-name ${AWS_USER}
else
	echo "Using existing user..."
fi

# create AWS access key
echo "Create AWS access key..."
create_access_key(){
	aws iam create-access-key --user-name ${AWS_USER} > kops-creds
}

## kops Access Keys
aws iam list-access-keys --user-name ${AWS_USER} > kops-creds
access_keys="$(cat kops-creds | jq -r '.AccessKeyMetadata')"
if [ "${access_keys}" == [] ]; then
	create_access_key
else
	# delete existing access keys
	for key in $(echo ${access_keys} | jq -c '.[]'); do
		access_key=$(echo ${key} | jq -r '.AccessKeyId')
		aws iam delete-access-key --user-name=${AWS_USER} --access-key-id=${access_key}
	done
	create_access_key
fi

# delete existing key
delete_existing_key_pair(){
	echo "Delete exising key pair..."
	aws ec2 delete-key-pair --key-name ${AWS_KEY_NAME}
}

# create a key pair
create_key_pair(){
    # delete an existing key pair since it is not stored
	delete_existing_key_pair
	echo "Create new key pair..."
	# create a new key pair
	aws ec2 create-key-pair --key-name ${AWS_KEY_NAME} | jq -r '.KeyMaterial' > kube-key.pem
	# modify the file permissions
	chmod 400 kube-key.pem
	# create a public key from the private key
	ssh-keygen -y -f kube-key.pem > kube-key.pub
}
# run function 
create_key_pair

echo "Get s3 bucket..."
## creating cluster state storage
# find list of all buckets
buckets="$(aws s3api list-buckets | jq -r '.Buckets')"
found_bucket=false
# loop through all bucket names
for name in $( echo ${buckets} | jq -c '.[]'); do
        # for each name in the list test it against ${BUCKET_NAME}
        bucket_name=$(echo ${name} | jq -r '.Name')
        if [ ${bucket_name} == ${BUCKET_NAME} ]; then 
		found_bucket=true
        fi
done

# configure the bucket that will be used
# if the $BUCKET_NAME is not found, it will be created
if [ ${found_bucket} == false ]; then
	echo "Create s3 bucket..."
	export BUCKET_NAME=kube-$(date +%s)
	echo $BUCKET_NAME
	# create bucket
	aws s3api create-bucket --bucket $BUCKET_NAME --create-bucket-configuration LocationConstraint=$AWS_DEFAULT_REGION
	export KOPS_STATE_STORE=s3://$BUCKET_NAME
else
	echo "Using existing s3 bucket..."
fi

# continue executing script even on failure
set +e

echo "Creating cluster..."
# creating a cluster
kops create cluster --name $NAME --master-count 1 --master-size t2.micro --node-count 1 --node-size t2.micro --zones $ZONE --master-zones $ZONE --ssh-public-key kube-key.pub --yes

# kops sets kubectl context
kops export kubecfg ${NAME}

# verify that the cluster has been created before exiting the pipeline
while true; do
  kops validate cluster --name $NAME | grep 'is ready' &> /dev/null || true
  if [ $? == 0 ]; then
     break
  fi
    sleep 30
done

# show cluster information
kops get cluster
kubectl cluster-info