refactor(k01): flatten directory layout and split deployment into five scripts

2026-05-06 02:37:25 +08:00
parent 8ba8c7ca20
commit c575b53843
31 changed files with 95 additions and 57 deletions
@@ -0,0 +1,119 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+REGISTRY_HOST="registry.juwan.xhttp.zip"
+CNPG_VERSION="1.29.0"
+STRIMZI_VERSION="1.0.0"
+REDIS_OP_VERSION="0.24.0"
+MONGODB_OP_VERSION="1.8.0"
+
+MODE="${1:-server}"
+
+if [ "$MODE" != "server" ] && [ "$MODE" != "agent" ]; then
+	echo "usage: $0 [server|agent]" >&2
+	exit 1
+fi
+
+if [ ! -f /root/registry-password ]; then
+	echo "need /root/registry-password (zot admin password)" >&2
+	exit 1
+fi
+
+K01_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+write_registries() {
+	mkdir -p /etc/rancher/k3s
+	cat > /etc/rancher/k3s/registries.yaml <<EOF
+mirrors:
+  ${REGISTRY_HOST}:
+    endpoint:
+      - "https://${REGISTRY_HOST}"
+configs:
+  ${REGISTRY_HOST}:
+    auth:
+      username: admin
+      password: $(cat /root/registry-password)
+EOF
+}
+
+if [ "$MODE" = "agent" ]; then
+	if [ -z "${K3S_URL:-}" ] || [ -z "${K3S_TOKEN:-}" ]; then
+		echo "agent mode requires K3S_URL and K3S_TOKEN env" >&2
+		echo "  on the server:  cat /var/lib/rancher/k3s/server/node-token" >&2
+		echo "  then on agent:  K3S_URL=https://<server-ip>:6443 K3S_TOKEN=<token> $0 agent" >&2
+		exit 1
+	fi
+	write_registries
+	if ! command -v k3s-agent >/dev/null 2>&1 && ! systemctl is-active --quiet k3s-agent; then
+		curl -sfL https://get.k3s.io | K3S_URL="$K3S_URL" K3S_TOKEN="$K3S_TOKEN" sh -
+	else
+		systemctl restart k3s-agent
+	fi
+	echo
+	echo "k3s agent joined ${K3S_URL}"
+	exit 0
+fi
+
+if ! systemctl is-active --quiet k3s; then
+	curl -sfL https://get.k3s.io | \
+		INSTALL_K3S_EXEC="--disable=traefik --write-kubeconfig-mode=644" \
+		sh -
+fi
+
+if ! command -v helm >/dev/null 2>&1; then
+	curl -fsSL https://packages.buildkite.com/helm-linux/helm-debian/gpgkey | \
+		gpg --dearmor -o /usr/share/keyrings/helm.gpg
+	echo "deb [signed-by=/usr/share/keyrings/helm.gpg] https://packages.buildkite.com/helm-linux/helm-debian/any/ any main" \
+		> /etc/apt/sources.list.d/helm-stable-debian.list
+	apt-get update
+	apt-get install -y helm
+fi
+
+write_registries
+systemctl restart k3s
+
+export KUBECONFIG=/etc/rancher/k3s/k3s.yaml
+until kubectl get nodes >/dev/null 2>&1; do sleep 2; done
+
+kubectl apply -f "${K01_DIR}/base/"
+
+kubectl apply --server-side --force-conflicts -f \
+	"https://github.com/cloudnative-pg/cloudnative-pg/releases/download/v${CNPG_VERSION}/cnpg-${CNPG_VERSION}.yaml"
+kubectl -n cnpg-system set resources deploy/cnpg-controller-manager \
+	--requests=cpu=50m,memory=64Mi --limits=cpu=200m,memory=256Mi
+
+kubectl create namespace kafka 2>/dev/null || true
+kubectl apply --server-side --force-conflicts -n kafka \
+	-f "https://github.com/strimzi/strimzi-kafka-operator/releases/download/${STRIMZI_VERSION}/strimzi-cluster-operator-${STRIMZI_VERSION}.yaml"
+kubectl -n kafka set resources deploy/strimzi-cluster-operator \
+	--requests=cpu=50m,memory=200Mi --limits=cpu=500m,memory=500Mi
+
+helm repo add ot-helm https://ot-container-kit.github.io/helm-charts/ 2>/dev/null || true
+helm repo add mongodb https://mongodb.github.io/helm-charts 2>/dev/null || true
+helm repo update
+
+helm upgrade --install redis-operator ot-helm/redis-operator \
+	--version "${REDIS_OP_VERSION}" \
+	--namespace redis-operator --create-namespace \
+	--set resources.requests.cpu=50m \
+	--set resources.requests.memory=100Mi \
+	--set resources.limits.cpu=500m \
+	--set resources.limits.memory=500Mi
+
+helm upgrade --install mongodb-kubernetes mongodb/mongodb-kubernetes \
+	--version "${MONGODB_OP_VERSION}" \
+	--namespace mongodb-operator --create-namespace \
+	--set operator.watchNamespace=juwan \
+	--set operator.resources.requests.cpu=50m \
+	--set operator.resources.requests.memory=100Mi \
+	--set operator.resources.limits.cpu=500m \
+	--set operator.resources.limits.memory=300Mi
+
+kubectl -n cnpg-system rollout status deploy/cnpg-controller-manager --timeout=300s
+kubectl -n kafka rollout status deploy/strimzi-cluster-operator --timeout=300s
+kubectl -n redis-operator rollout status deploy/redis-operator --timeout=300s
+kubectl -n mongodb-operator rollout status deploy/mongodb-kubernetes-operator --timeout=300s
+
+echo
+echo "k3s server + 4 operators ready"
+echo "node token: $(cat /var/lib/rancher/k3s/server/node-token)"