mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-02-01 01:28:11 -03:30
use python script to update sha256 sum in the vars
This commit is contained in:
85
scripts/change_k8s_version.py
Normal file
85
scripts/change_k8s_version.py
Normal file
@@ -0,0 +1,85 @@
|
||||
#!/usr/bin/env python
|
||||
# -*- coding: utf-8 -*-
|
||||
#
|
||||
# This file is part of Kargo.
|
||||
#
|
||||
# Foobar is free software: you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation, either version 3 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# Foobar is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with Foobar. If not, see <http://www.gnu.org/licenses/>.
|
||||
import sys
|
||||
import hashlib
|
||||
import urllib2
|
||||
import yaml
|
||||
import argparse
|
||||
|
||||
|
||||
def get_remote_sha256_sum(url, max_file_size=100*1024*1024):
|
||||
remote = urllib2.urlopen(url)
|
||||
hash = hashlib.sha256()
|
||||
total_read = 0
|
||||
while True:
|
||||
data = remote.read(4096)
|
||||
total_read += 4096
|
||||
if not data or total_read > max_file_size:
|
||||
break
|
||||
hash.update(data)
|
||||
return hash.hexdigest()
|
||||
|
||||
|
||||
def read_vars(var_file):
|
||||
"""
|
||||
Read the variables file
|
||||
"""
|
||||
try:
|
||||
with open(var_file, "r") as f:
|
||||
kargovars = yaml.load(f)
|
||||
except:
|
||||
print(
|
||||
"Can't read variables file %s" % var_file
|
||||
)
|
||||
sys.exit(1)
|
||||
return kargovars
|
||||
|
||||
|
||||
def get_kube_sha256(version, download_url, binaries):
|
||||
kube_sha256 = dict()
|
||||
for k in binaries:
|
||||
s = get_remote_sha256_sum(download_url + '/' + k)
|
||||
kube_sha256[k] = s
|
||||
kube_sha256[k + '_checksum'] = kube_sha256.pop(k)
|
||||
kube_sha256['kube_apiserver_checksum'] = kube_sha256.pop('kube-apiserver_checksum')
|
||||
return(kube_sha256)
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
parser = argparse.ArgumentParser(
|
||||
prog='change_k8s_version',
|
||||
description='%(prog)s changes the version to be installed with kargo',
|
||||
)
|
||||
|
||||
parser.add_argument(
|
||||
'-v', '--version', dest='kube_version', required=True,
|
||||
help="kubernetes version"
|
||||
)
|
||||
args = parser.parse_args()
|
||||
|
||||
kube_binaries = ['kubelet', 'kubectl', 'kube-apiserver']
|
||||
kargo_root = ".."
|
||||
var_files = ['../roles/uploads/defaults/kube_versions.yml', '../roles/download/defaults/kube_versions.yml']
|
||||
kube_download_url = "https://storage.googleapis.com/kubernetes-release/release/%s/bin/linux/amd64" % args.kube_version
|
||||
|
||||
new = get_kube_sha256(args.kube_version, kube_download_url, kube_binaries)
|
||||
for f in var_files:
|
||||
current = read_vars(f)
|
||||
current['kube_version'][args.kube_version] = new
|
||||
with open(f, 'w') as out:
|
||||
out.write(yaml.dump(current, indent=4, default_flow_style=False))
|
||||
@@ -1,117 +0,0 @@
|
||||
#!/bin/bash
|
||||
|
||||
# This file is part of Kargo.
|
||||
#
|
||||
# Foobar is free software: you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation, either version 3 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# Foobar is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with Foobar. If not, see <http://www.gnu.org/licenses/>.
|
||||
|
||||
#color variables
|
||||
txtbld=$(tput bold) # Bold
|
||||
bldred=${txtbld}$(tput setaf 1) # red
|
||||
bldgre=${txtbld}$(tput setaf 2) # green
|
||||
bldylw=${txtbld}$(tput setaf 3) # yellow
|
||||
txtrst=$(tput sgr0) # Reset
|
||||
err=${bldred}ERROR${txtrst}
|
||||
info=${bldgre}INFO${txtrst}
|
||||
warn=${bldylw}WARNING${txtrst}
|
||||
|
||||
usage()
|
||||
{
|
||||
cat << EOF
|
||||
Update ansible playbook with a specific kubernetes version
|
||||
|
||||
Usage : $(basename $0) -v <k8s version>
|
||||
-h | --help : Show this message
|
||||
-i | --init : Initial upgrade (download binaries)
|
||||
-v | --version : Kubernetes version
|
||||
|
||||
ex : switch to kubernetes v1.2.4
|
||||
$(basename $0) -v v1.2.4
|
||||
EOF
|
||||
}
|
||||
|
||||
# Options parsing
|
||||
while (($#)); do
|
||||
case "$1" in
|
||||
-h | --help) usage; exit 0;;
|
||||
-i | --init) INIT=1; shift;;
|
||||
-v | --version) VERS=${2}; shift 2;;
|
||||
*)
|
||||
usage
|
||||
echo "ERROR : Unknown option"
|
||||
exit 3
|
||||
;;
|
||||
esac
|
||||
done
|
||||
|
||||
if [ -z ${VERS} ]; then
|
||||
usage
|
||||
echo -e "\n${err}: The option version must be defined"
|
||||
exit 3
|
||||
else
|
||||
if ! [[ ${VERS} =~ ^v[0-9]\.[0-9]\.[0-9]$ ]]; then
|
||||
echo -e "\n${err}: Invalid version format (ex: v1.2.4)"
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
UPLOAD_VARFILE="roles/uploads/defaults/main.yml"
|
||||
DOWNLOAD_VARFILE="roles/download/defaults/main.yml"
|
||||
K8S_BIN="kubelet kubectl kube-apiserver"
|
||||
|
||||
if [[ ${INIT} -eq 1 ]]; then
|
||||
DOWNLOAD_URL=https://storage.googleapis.com/kubernetes-release/release/${VERS}/bin/linux/amd64
|
||||
TMP_DIR=$(mktemp -d --tmpdir kubernetes_tmpbin_XXXXXXX)
|
||||
sed -i "s/^hyperkube_image_tag.*$/hyperkube_image_tag: \"${VERS}\"/" roles/kubernetes/node/defaults/main.yml
|
||||
trap 'rm -rf "${tmpdir}"' EXIT
|
||||
cd "${tmpdir}"
|
||||
|
||||
for BIN in ${K8S_BIN}; do
|
||||
curl -s -o ${BIN} ${DOWNLOAD_URL}/${BIN}
|
||||
if [ $? -ne 0 ]; then
|
||||
echo -e "\n${err}: Downloading ${BIN} failed! Try again"
|
||||
exit 1
|
||||
else
|
||||
echo -e "\n${info}: ${BIN} downloaded successfuly"
|
||||
fi
|
||||
done
|
||||
|
||||
for varfile in ${UPLOAD_VARFILE} ${DOWNLOAD_VARFILE}; do
|
||||
sed -i "s/^kube_version.*$/kube_version: \"${VERS}\"/" ${varfile}
|
||||
|
||||
for BIN in ${K8S_BIN}; do
|
||||
CHECKSUM=$(sha256sum ${BIN} | cut -d' ' -f1)
|
||||
BIN=$(echo ${BIN} | tr '-' '_')
|
||||
sed -i "s/^${BIN}_checksum.*$/${BIN}_checksum: \"${CHECKSUM}\"/" ${varfile}
|
||||
done
|
||||
done
|
||||
|
||||
rm -rf "${tmpdir}"
|
||||
else
|
||||
CHECKSUM_URL=https://storage.googleapis.com/kargo/${VERS}_k8s-sha256
|
||||
sed -i "s/^hyperkube_image_tag.*$/hyperkube_image_tag: \"${VERS}\"/" roles/kubernetes/node/defaults/main.yml
|
||||
for varfile in ${UPLOAD_VARFILE} ${DOWNLOAD_VARFILE}; do
|
||||
sed -i "s/^kube_version.*$/kube_version: \"${VERS}\"/" ${varfile}
|
||||
for BIN in ${K8S_BIN}; do
|
||||
if [[ "${BIN}" =~ "apiserver" ]]; then
|
||||
BIN="apiserver"
|
||||
fi
|
||||
line=$(curl -sk ${CHECKSUM_URL} | grep ${BIN})
|
||||
CHECKSUM=$(echo ${line} | cut -d':' -f2)
|
||||
if [[ "${BIN}" =~ "apiserver" ]]; then
|
||||
BIN="kube_apiserver"
|
||||
fi
|
||||
sed -i "s/^${BIN}_checksum.*$/${BIN}_checksum: \"${CHECKSUM}\"/" ${varfile}
|
||||
done
|
||||
done
|
||||
fi
|
||||
Reference in New Issue
Block a user