Merge pull request #12 from rafaprata/feature/enable-air-gapped

Enable rmt chart run on air-gapped environments

Author: ngetahun

rmt-helm/templates/20-app-configmap.yaml

@@ -12,4 +12,72 @@ data:
   products_disable: |-
     {{- range .Values.app.scc.products_disable}}
     {{ . }}
-    {{- end }}
+    {{- end }}
+---
+{{- $component := "app" -}}
+{{- $sccSync := .Values.app.scc -}}
+{{- if not $sccSync.enabled }}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ include "rmt.fullname" . }}-{{ $component }}-config
+data:
+  entrypoint.sh: |
+    #!/bin/sh
+    set -e
+
+    # PV could be empty, make sure the directories exist
+    mkdir -p /var/lib/rmt/public/repo
+    mkdir -p /var/lib/rmt/public/suma
+    mkdir -p /var/lib/rmt/regsharing
+    mkdir -p /var/lib/rmt/tmp
+    # Set permissions
+    chown -R _rmt:nginx /var/lib/rmt
+
+    if [ -z "${MYSQL_HOST}" ]; then
+      echo "MYSQL_HOST not set!"
+      exit 1
+    fi
+    if [ -z "${MYSQL_PASSWORD}" ]; then
+            echo "MYSQL_PASSWORD not set!"
+            exit 1
+    fi
+
+    MYSQL_DATABASE="${MYSQL_DATABASE:-rmt}"
+    MYSQL_USER="${MYSQL_USER:-rmt}"
+
+    # Create adjusted /etc/rmt.conf
+    echo -e "database:\n  host: ${MYSQL_HOST}\n  database: ${MYSQL_DATABASE}\n  username: ${MYSQL_USER}\n  password: ${MYSQL_PASSWORD}" > /etc/rmt.conf
+    echo -e "  adapter: mysql2\n  encoding: utf8\n  timeout: 5000\n  pool: 5\n" >> /etc/rmt.conf
+    echo -e "scc:\n  username: ${SCC_USERNAME}\n  password:  ${SCC_PASSWORD}\n  sync_systems: ${SCC_SYNC}\n" >> /etc/rmt.conf
+    echo -e "log_level:\n  rails: debug" >> /etc/rmt.conf
+
+    if [ $# -eq 0 ]; then
+      set -- /usr/share/rmt/bin/rails server -e production
+    fi
+
+    if [ "$1" == "/usr/share/rmt/bin/rails" -a "$2" == "server" ]; then
+      echo "Create/migrate SUSE RMT database"
+      pushd /usr/share/rmt > /dev/null
+      /usr/share/rmt/bin/rails db:create db:migrate RAILS_ENV=production
+      popd > /dev/null
+      if [ ${SCC_SYNC} != "false" ]; then
+        echo "Syncing product list"
+        rmt-cli sync
+        for PRODUCT in $SCC_PRODUCT_ENABLE
+        do
+          rmt-cli products enable $PRODUCT
+        done
+        for PRODUCT in $SCC_PRODUCT_DISABLE
+        do
+          rmt-cli products disable $PRODUCT
+        done
+        rmt-cli repos clean
+      fi
+      echo "Executing: catatonit -- $@"
+      exec catatonit -- "$@"
+    else
+      echo "Executing: $@"
+      exec "$@"
+    fi
+{{- end }}

rmt-helm/templates/20-app-cronjob.yaml

@@ -1,3 +1,4 @@
+{{- if .Values.app.scc.enabled }}
 ---
 {{- $component := "app" -}}
 {{- $task := "sync" -}}
@@ -107,4 +108,5 @@ spec:
           volumes:
           - name: {{ include "rmt.fullname" . }}-{{ $component }}
             persistentVolumeClaim:
-              claimName: {{ include "rmt.fullname" . }}-{{ $component }}
+              claimName: {{ include "rmt.fullname" . }}-{{ $component }}
+{{- end }}

rmt-helm/templates/20-app-deployment.yaml

@@ -4,6 +4,7 @@
 {{- $initImage := .Values.app.init.image -}}
 {{- $autoscaling := .Values.app.autoscaling -}}
 {{- $replicaCount := .Values.app.replicaCount -}}
+{{- $sccSync := .Values.app.scc -}}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -59,6 +60,10 @@ spec:
             secretKeyRef:
               name: "{{ include "rmt.fullname" . }}-db"
               key: password
+        {{- if not $sccSync.enabled }}
+        - name: SCC_SYNC
+          value: {{ $sccSync.enabled | toString }}
+        {{- end }}
         - name: SCC_USERNAME
           valueFrom:
             secretKeyRef:
@@ -96,10 +101,19 @@ spec:
         volumeMounts:
         - name: {{ include "rmt.fullname" . }}-{{ $component }}-pv
           mountPath: /var/lib/rmt
+        {{- if not $sccSync.enabled }}
+        - name: {{ include "rmt.fullname" . }}-{{ $component }}-entrypoint
+          mountPath: /usr/local/bin
+        {{- end }}
       volumes:
       - name: {{ include "rmt.fullname" . }}-{{ $component }}-pv
         persistentVolumeClaim:
           claimName: {{ include "rmt.fullname" . }}-{{ $component }}
+      {{- if not $sccSync.enabled }}
+      - name: {{ include "rmt.fullname" . }}-{{ $component }}-entrypoint
+        configMap:
+          name: {{ include "rmt.fullname" . }}-{{ $component }}-config
+      {{- end }}
       initContainers:
       - name: "{{ .Chart.Name }}-{{ $component }}-init"
         image: "{{ $initImage.repository }}:{{ $initImage.tag | default .Chart.AppVersion }}"

rmt-helm/values.yaml

@@ -52,6 +52,8 @@ app:
     # -- RMT server storage volume requirements. This can vary greatly depending on the number of modules to mirror.
     size: 300Mi
   scc:
+    # -- Enable or Disable the sync with SCC
+    enabled: true
     # -- SCC username
     username:
     # -- SCC password