mirror of
https://github.com/ghndrx/k8s-game-2048.git
synced 2026-02-10 06:45:07 +00:00
82fc2a6691
🧹 PII Cleanup & Security: - Remove all hardcoded domains (darknex.us, hndrx.co) - Remove all hardcoded emails (admin@ references) - Replace all personal info with environment variables - Repository now 100% generic and reusable 🚀 Fully Automatic Pipeline: - Pipeline now runs automatically develop → staging → production - No manual intervention required for production promotions - Auto-promotion triggers after successful tests - All workflows use commit-specific image tags 🔧 Environment Variables: - All manifests use ${VARIABLE_NAME} syntax - All scripts source from .env file - GitHub Actions use secrets for sensitive data - Complete .env.example template provided 📚 Documentation: - New comprehensive WORKFLOWS.md with pipeline details - New PIPELINE_QUICK_REFERENCE.md for quick reference - Updated all docs to use generic placeholders - Added security/privacy section to README 🔐 Security Enhancements: - Updated .gitignore for all sensitive files - Created PII verification script (verify-pii-removal.sh) - Created cleanup automation script (cleanup-pii.sh) - Repository verified PII-free and production-ready BREAKING: Repository now requires .env configuration - Copy .env.example to .env and configure for your environment - Set GitHub repository secrets for CI/CD workflows - All deployments now use environment-specific configuration
110 lines
3.7 KiB
Bash
Executable File
110 lines
3.7 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# Setup script for Kourier networking layer
|
|
# This script installs Kourier as the Knative networking layer
|
|
|
|
set -e
|
|
|
|
echo "🚀 Setting up Kourier networking layer..."
|
|
|
|
# Check if kubectl is available
|
|
if ! command -v kubectl &> /dev/null; then
|
|
echo "❌ kubectl is not installed. Please install kubectl first."
|
|
exit 1
|
|
fi
|
|
|
|
# Check if cluster is accessible
|
|
if ! kubectl cluster-info &> /dev/null; then
|
|
echo "❌ Cannot access Kubernetes cluster. Please check your kubeconfig."
|
|
exit 1
|
|
fi
|
|
|
|
# Check if Knative Serving is installed
|
|
if ! kubectl get namespace knative-serving &> /dev/null; then
|
|
echo "❌ Knative Serving is not installed. Please run ./setup-knative.sh first."
|
|
exit 1
|
|
fi
|
|
|
|
# Install Kourier
|
|
echo "📦 Installing Kourier..."
|
|
kubectl apply -f https://github.com/knative/net-kourier/releases/download/knative-v1.12.0/kourier.yaml
|
|
|
|
# Wait for Kourier to be ready
|
|
echo "⏳ Waiting for Kourier to be ready..."
|
|
kubectl wait --for=condition=Ready pod -l app=3scale-kourier-gateway -n kourier-system --timeout=300s
|
|
|
|
# Configure Knative to use Kourier
|
|
echo "🔧 Configuring Knative to use Kourier..."
|
|
kubectl patch configmap/config-network \
|
|
--namespace knative-serving \
|
|
--type merge \
|
|
--patch '{"data":{"ingress-class":"kourier.ingress.networking.knative.dev"}}'
|
|
|
|
# Get the external IP of Kourier
|
|
echo "🔍 Getting Kourier LoadBalancer details..."
|
|
kubectl get svc kourier -n kourier-system
|
|
|
|
# Configure auto-TLS (optional)
|
|
echo "🔐 Configuring auto-TLS..."
|
|
kubectl patch configmap/config-network \
|
|
--namespace knative-serving \
|
|
--type merge \
|
|
--patch '{"data":{"autoTLS":"Enabled","httpProtocol":"Redirected"}}'
|
|
|
|
# Install cert-manager for TLS (optional but recommended)
|
|
echo "📦 Installing cert-manager for TLS..."
|
|
kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.13.0/cert-manager.yaml
|
|
|
|
# Wait for cert-manager to be ready
|
|
echo "⏳ Waiting for cert-manager to be ready..."
|
|
kubectl wait --for=condition=Ready pod -l app=cert-manager -n cert-manager --timeout=300s
|
|
kubectl wait --for=condition=Ready pod -l app=cainjector -n cert-manager --timeout=300s
|
|
kubectl wait --for=condition=Ready pod -l app=webhook -n cert-manager --timeout=300s
|
|
|
|
# Install Knative cert-manager integration
|
|
echo "📦 Installing Knative cert-manager integration..."
|
|
kubectl apply -f https://github.com/knative/net-certmanager/releases/download/knative-v1.12.0/release.yaml
|
|
|
|
# Create ClusterIssuer for Let's Encrypt
|
|
echo "🔐 Creating Let's Encrypt ClusterIssuer..."
|
|
cat <<EOF | kubectl apply -f -
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: letsencrypt-prod
|
|
spec:
|
|
acme:
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
|
email: ${CERT_EMAIL}
|
|
privateKeySecretRef:
|
|
name: letsencrypt-prod
|
|
solvers:
|
|
- http01:
|
|
ingress:
|
|
class: kourier.ingress.networking.knative.dev
|
|
EOF
|
|
|
|
# Configure Knative to use the ClusterIssuer
|
|
echo "🔧 Configuring Knative to use cert-manager..."
|
|
kubectl patch configmap/config-certmanager \
|
|
--namespace knative-serving \
|
|
--type merge \
|
|
--patch '{"data":{"issuerRef":"kind: ClusterIssuer\nname: letsencrypt-prod"}}'
|
|
|
|
echo "✅ Kourier setup completed!"
|
|
echo ""
|
|
echo "🔍 Kourier LoadBalancer service details:"
|
|
kubectl get svc kourier -n kourier-system -o wide
|
|
echo ""
|
|
echo "📋 Next steps:"
|
|
echo "1. Configure your DNS to point the following domains to the LoadBalancer IP:"
|
|
echo " - ${DEV_DOMAIN}"
|
|
echo " - ${STAGING_DOMAIN}"
|
|
echo " - ${PROD_DOMAIN}"
|
|
echo " - *.${BASE_DOMAIN} (wildcard)"
|
|
echo ""
|
|
echo "2. Deploy your applications:"
|
|
echo " kubectl apply -f manifests/dev/"
|
|
echo " kubectl apply -f manifests/staging/"
|
|
echo " kubectl apply -f manifests/prod/"
|