使用GitOps一小时将新服务集成到25个集群

#!/bin/bash

# Set environment variables


NAME="<cluster-name-stage>"
STAGE="<stage>"
SUBSCRIPTION="<...>"
KEY_VAULT_NAME="<...>"
LABELS="cluster=<>, env=<>,..."
OTTERIZE_CLOUD_INVITE_USERS="braveone@e-mail.com,lazy@e-mail.com,..."
GROUP_ID="..." #Azure AD Group (Platform Team)


# Function to set the subscription
set_subscription() {
    az account set --subscription $SUBSCRIPTION
    if [ $? -ne 0 ]; then
        echo "Failed to set Azure subscription."
        exit 1
    fi
}

# Step 1: Create the organization and save the ID in ORGA_ID
ORGA_ID=$(otterize organization create --format json | jq -r '.[0].id')
if [ -z "$ORGA_ID" ]; then
    echo "Failed to create organization."
    exit 1
fi
echo "Organization ID: $ORGA_ID"

# Step 2: Rename the organization with the provided NAME
otterize org update "$ORGA_ID" --name "$NAME"
if [ $? -ne 0 ]; then
    echo "Failed to rename organization."
    exit 1
fi
echo "Organization renamed to: $NAME"

# Step 3: Iterate over OTTERIZE_CLOUD_INVITE_USERS, retrieve user names, format the email in lowercase, and send invitations
IFS=',' read -ra ADDR <<<"$OTTERIZE_CLOUD_INVITE_USERS"
for email in "${ADDR[@]}"; do
    email=$(echo "$email" | xargs) # Trim any leading/trailing whitespace

    # Get the user's first and last name from Azure AD
    user_info=$(az ad user show --id "$email" --query '{firstName:givenName,lastName:surname}' --output tsv)

    # Extract the first name and last name
    first_name=$(echo "$user_info" | awk '{print $1}')
    last_name=$(echo "$user_info" | awk '{print $2}')

    # Construct the new email format and convert it to lowercase
    formatted_email=$(echo "${@hpa.hamburg.de">first_name}.${last_name}@hpa.hamburg.de" | tr '[:upper:]' '[:lower:]')

    # Send invitation using the formatted email
    otterize invites --org-id "$ORGA_ID" create --email "$formatted_email"
    if [ $? -ne 0 ]; then
        echo "Failed to send invite to $formatted_email."
    else
        echo "Invite sent to $formatted_email."
    fi
done

# Step 3b: Invite users from an Azure AD group by ID
group_emails=$(az ad group member list --group "$GROUP_ID" --query "[].mail" -o tsv | tr '[:upper:]' '[:lower:]')

for email in $group_emails; do
    if [ -n "$email" ]; then
        # Send invitation using the email directly from the group
        otterize invites --org-id "$ORGA_ID" create --email "$email"
        if [ $? -ne 0 ]; then
            echo "Failed to send invite to $email."
        else
            echo "Invite sent to $email."
        fi
    fi
done

# Step 4: Create the environment and save the ID in ENV_ID
ENV_ID=$(otterize environment create --org-id "$ORGA_ID" --name $STAGE --labels "$LABELS" --format json | jq -r '.[0].id')
if [ -z "$ENV_ID" ]; then
    echo "Failed to create environment."
    exit 1
fi
echo "Environment ID: $ENV_ID"

# Step 5: Create the integration and save the CLIENT_ID and CLIENT_SECRET
CREDENTIALS=$(otterize integrations create --org-id "$ORGA_ID" kubernetes --env-id "$ENV_ID" --name "$NAME" --format json | jq -r '.[0].credentials | "clientID=\(.clientId)\nclientSecret=\(.clientSecret)"')
CLIENT_ID=$(echo "$CREDENTIALS" | grep "clientID=" | cut -d'=' -f2)
CLIENT_SECRET=$(echo "$CREDENTIALS" | grep "clientSecret=" | cut -d'=' -f2)

if [ -z "$CLIENT_ID" ] || [ -z "$CLIENT_SECRET" ]; then
    echo "Failed to create integration or retrieve credentials."
    exit 1
fi

# Step 6: Push the client ID and client secret to the Azure Key Vault
az keyvault secret set --vault-name "$KEY_VAULT_NAME" --name "otterize-cloud-client-id" --value "$CLIENT_ID" >/dev/null
if [ $? -ne 0 ]; then
    echo "Failed to store Client ID in Azure Key Vault."
    exit 1
fi

az keyvault secret set --vault-name "$KEY_VAULT_NAME" --name "otterize-cloud-client-secret" --value "$CLIENT_SECRET" >/dev/null
if [ $? -ne 0 ]; then
    echo "Failed to store Client Secret in Azure Key Vault."
    exit 1
fi

echo "Client ID and Client Secret successfully stored in Azure Key Vault."

# Output the Client ID for the integration
echo "The Client ID for the integration is: $CLIENT_ID"