index.ts

import * as os from 'os'
import * as path from 'path'

import * as k8s from '@pulumi/kubernetes'

import { deploySourcegraphLocalRoot, gcloudConfig, deploySourcegraphRef } from './config'
import { cloneLocalDSCheckout } from './util'
import * as cluster from './cluster'

const k8sProvider = cluster.k8sProvider

export = async () => {
    const clusterAdmin = new k8s.rbac.v1.ClusterRoleBinding(
        'cluster-admin-role-binding',
        {
            metadata: { name: `${os.userInfo().username}-cluster-admin-role-binding` },

            roleRef: {
                apiGroup: 'rbac.authorization.k8s.io',
                kind: 'ClusterRole',
                name: 'cluster-admin',
            },

            subjects: [
                {
                    apiGroup: 'rbac.authorization.k8s.io',
                    kind: 'User',
                    name: gcloudConfig.username,
                },
            ],
        },
        { provider: k8sProvider }
    )

    const storageClass = new k8s.storage.v1.StorageClass(
        'sourcegraph-storage-class',
        {
            metadata: {
                name: 'sourcegraph',

                labels: {
                    deploy: 'sourcegraph',
                },
            },
            provisioner: 'kubernetes.io/gce-pd',

            parameters: {
                type: 'pd-ssd',
            },
        },
        { provider: k8sProvider }
    )

    const deploySourcegraphRoot = deploySourcegraphLocalRoot
        ? deploySourcegraphLocalRoot
        : await cloneLocalDSCheckout(deploySourcegraphRef)

    const baseDeployment = new k8s.yaml.ConfigGroup(
        'base',
        {
            files: `${path.posix.join(deploySourcegraphRoot, 'base')}/**/*.yaml`,
        },
        {
            providers: { kubernetes: k8sProvider },
            dependsOn: [clusterAdmin, storageClass],
        }
    )

    const ingressNginx = new k8s.yaml.ConfigGroup(
        'ingress-nginx',
        {
            files: `${path.posix.join(deploySourcegraphRoot, 'configure', 'ingress-nginx')}/**/*.yaml`,
        },
        { providers: { kubernetes: k8sProvider }, dependsOn: clusterAdmin }
    )

    const ingressIPs = ingressNginx
        .getResource('v1/Service', 'ingress-nginx', 'ingress-nginx')
        .apply(svc => svc.status.apply(status => status.loadBalancer.ingress.map(i => i.ip)))

    return {
        ingressIPs,
        ...cluster,
    }
}