Makefile

# Copyright 2019 The Machine Controller Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

SHELL = /bin/bash -eu -o pipefail

GO_VERSION = 1.13.8

export CGO_ENABLED := 0

export E2E_SSH_PUBKEY ?= $(shell test -f ~/.ssh/id_rsa.pub && cat ~/.ssh/id_rsa.pub)

export GIT_TAG ?= $(shell git tag --points-at HEAD)

export GOFLAGS?=-mod=readonly -trimpath

REGISTRY ?= docker.io
REGISTRY_NAMESPACE ?= kubermatic

LDFLAGS ?= -ldflags '-s -w'

IMAGE_TAG = \
		$(shell echo $$(git rev-parse HEAD && if [[ -n $$(git status --porcelain) ]]; then echo '-dirty'; fi)|tr -d ' ')
IMAGE_NAME ?= $(REGISTRY)/$(REGISTRY_NAMESPACE)/machine-controller:$(IMAGE_TAG)

OS = centos coreos ubuntu sles rhel flatcar
USERDATA_BIN = $(patsubst %, machine-controller-userdata-%, $(OS))

.PHONY: all
all: build-machine-controller webhook

.PHONY: build-machine-controller
build-machine-controller: machine-controller $(USERDATA_BIN)

machine-controller-userdata-%: cmd/userdata/% $(shell find cmd/userdata/$* pkg -name '*.go')
	go build -v \
		$(LDFLAGS) \
		-o $@ \
		github.com/kubermatic/machine-controller/cmd/userdata/$*

%: cmd/% $(shell find cmd/$* pkg -name '*.go')
	go build -v \
		$(LDFLAGS) \
		-o $@ \
		github.com/kubermatic/machine-controller/cmd/$*

.PHONY: clean
clean:
	rm -f machine-controller \
		webhook \
		$(USERDATA_BIN)

.PHONY: lint
lint:
	golangci-lint run -v

.PHONY: docker-image
docker-image:
	docker build --build-arg GO_VERSION=$(GO_VERSION) -t $(IMAGE_NAME) .

.PHONY: docker-image-publish
docker-image-publish: docker-image
	docker push $(IMAGE_NAME)
	if [[ -n "$(GIT_TAG)" ]]; then \
		$(eval IMAGE_TAG = $(GIT_TAG)) \
		docker build -t $(IMAGE_NAME) . && \
		docker push $(IMAGE_NAME) && \
		$(eval IMAGE_TAG = latest) \
		docker build -t $(IMAGE_NAME) . ;\
		docker push $(IMAGE_NAME) ;\
	fi

.PHONY: test-unit-docker
test-unit-docker:
	@docker run --rm \
		-v $$PWD:/go/src/github.com/kubermatic/machine-controller \
		-v $$PWD/.buildcache:/cache \
		-e GOCACHE=/cache \
		-w /go/src/github.com/kubermatic/machine-controller \
		golang:$(GO_VERSION) \
			make test-unit GOFLAGS=$(GOFLAGS)

.PHONY: test-unit
test-unit:
	@#The `-race` flag requires CGO
	CGO_ENABLED=1 go test -race ./...

.PHONY: e2e-cluster
e2e-cluster: machine-controller webhook
	make -C test/tools/integration apply
	./test/tools/integration/provision_master.sh do-not-deploy-machine-controller
	KUBECONFIG=$(shell pwd)/.kubeconfig kubectl apply -f examples/machine-controller.yaml -l local-testing="true"

.PHONY: e2e-destroy
e2e-destroy:
	./test/tools/integration/cleanup_machines.sh
	make -C test/tools/integration destroy

examples/ca-key.pem:
	openssl genrsa -out examples/ca-key.pem 4096

examples/ca-cert.pem: examples/ca-key.pem
	openssl req -x509 -new -nodes -key examples/ca-key.pem \
    -subj "/C=US/ST=CA/O=Acme/CN=k8s-machine-controller-ca" \
		-sha256 -days 10000 -out examples/ca-cert.pem

examples/admission-key.pem: examples/ca-cert.pem
	openssl genrsa -out examples/admission-key.pem 2048
	chmod 0600 examples/admission-key.pem

examples/admission-cert.pem: examples/admission-key.pem
	openssl req -new -sha256 \
    -key examples/admission-key.pem \
    -subj "/C=US/ST=CA/O=Acme/CN=machine-controller-webhook.kube-system.svc" \
    -out examples/admission.csr
	openssl x509 -req -in examples/admission.csr -CA examples/ca-cert.pem \
		-CAkey examples/ca-key.pem -CAcreateserial \
		-out examples/admission-cert.pem -days 10000 -sha256

.PHONY: deploy
deploy: examples/admission-cert.pem
	@cat examples/machine-controller.yaml \
		|sed "s/__admission_ca_cert__/$(shell cat examples/ca-cert.pem|base64 -w0)/g" \
		|sed "s/__admission_cert__/$(shell cat examples/admission-cert.pem|base64 -w0)/g" \
		|sed "s/__admission_key__/$(shell cat examples/admission-key.pem|base64 -w0)/g" \
		|kubectl apply -f -

.PHONY: check-dependencies
check-dependencies:
	go mod verify