cheshire
/
hscloud
forked from hswaw/hscloud
1
0
Fork 0
Code Pull Requests Activity
hscloud/cluster/clustercfg/BUILD

21 lines
462 B
Python
Raw Normal View History

Replace rules_pip with rules_python; use bazel built upstream grpc instead of Python packages As usual with Python sadness, the @pydeps wheels are built on the bazel host, so stuffing them inside a container_image (or py_image) will cause new and unexpected kinds of misery. Change-Id: Id4e4d53741cf2da367f01aa15c21c133c5cf0dba
2020-07-03 05:05:15 +00:00
load("@pydeps//:requirements.bzl", "requirement")
*: rejigger tls certs and more This pretty large change does the following: - moves nix from bootstrap.hswaw.net to nix/ - changes clustercfg to use cfssl and moves it to cluster/clustercfg - changes clustercfg to source information about target location of certs from nix - changes clustercfg to push nix config - changes tls certs to have more than one CA - recalculates all TLS certs (it keeps the old serviceaccoutns key, otherwise we end up with invalid serviceaccounts - the cert doesn't match, but who cares, it's not used anyway)
2019-04-06 22:06:23 +00:00
py_binary(
name = "clustercfg",
*: move away from python_rules python_rules is completely broken when it comes to py2/py3 support. Here, we replace it with native python rules from new Bazel versions [1] and rules_pip for PyPI dependencies [2]. rules_pip is somewhat little known and experimental, but it seems to work much better than what we had previously. We also unpin rules_docker and fix .bazelrc to force Bazel into Python 2 mode - hopefully, this repo will now work fine under operating systems where `python` is python2 (as the standard dictates). [1] - https://docs.bazel.build/versions/master/be/python.html [2] - https://github.com/apt-itude/rules_pip Change-Id: Ibd969a4266db564bf86e9c96275deffb9610dd44
2019-07-14 14:29:52 +00:00
python_version = "PY3",
*: rejigger tls certs and more This pretty large change does the following: - moves nix from bootstrap.hswaw.net to nix/ - changes clustercfg to use cfssl and moves it to cluster/clustercfg - changes clustercfg to source information about target location of certs from nix - changes clustercfg to push nix config - changes tls certs to have more than one CA - recalculates all TLS certs (it keeps the old serviceaccoutns key, otherwise we end up with invalid serviceaccounts - the cert doesn't match, but who cares, it's not used anyway)
2019-04-06 22:06:23 +00:00
srcs = [
"clustercfg.py",
"ca.py",
],
visibility = ["//visibility:public"],
deps = [
Replace rules_pip with rules_python; use bazel built upstream grpc instead of Python packages As usual with Python sadness, the @pydeps wheels are built on the bazel host, so stuffing them inside a container_image (or py_image) will cause new and unexpected kinds of misery. Change-Id: Id4e4d53741cf2da367f01aa15c21c133c5cf0dba
2020-07-03 05:05:15 +00:00
requirement("asn1crypto"),
cluster/clustercfg: fix BUILD This is continued fallout after migrating from rules_pip. Change-Id: Idb9b4d4f22aa36512d220ac31375bae7a0f25e4e
2020-08-22 20:27:29 +00:00
requirement("cffi"),
requirement("fabric"),
requirement("idna"),
requirement("six"),
*: rejigger tls certs and more This pretty large change does the following: - moves nix from bootstrap.hswaw.net to nix/ - changes clustercfg to use cfssl and moves it to cluster/clustercfg - changes clustercfg to source information about target location of certs from nix - changes clustercfg to push nix config - changes tls certs to have more than one CA - recalculates all TLS certs (it keeps the old serviceaccoutns key, otherwise we end up with invalid serviceaccounts - the cert doesn't match, but who cares, it's not used anyway)
2019-04-06 22:06:23 +00:00
"//tools:secretstore_lib",
*: do not require env.sh This removes the need to source env.{sh,fish} when working with hscloud. This is done by: 1. Implementing a Go library to reliably detect the location of the active hscloud checkout. That in turn is enabled by BUILD_WORKSPACE_DIRECTORY being now a thing in Bazel. 2. Creating a tool `hscloud`, with a command `hscloud workspace` that returns the workspace path. 3. Wrapping this tool to be accessible from Python and Bash. 4. Bumping all users of hscloud_root to use either the Go library or one of the two implemented wrappers. We also drive-by replace tools/install.sh to be a proper sh_binary, and make it yell at people if it isn't being ran as `bazel run //tools:install`. Finally, we also drive-by delete cluster/tools/nixops.sh which was never used. Change-Id: I7873714319bfc38bbb930b05baa605c5aa36470a Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1169 Reviewed-by: informatic <informatic@hackerspace.pl>
2021-10-16 20:53:51 +00:00
"//tools/hscloud:python",
*: rejigger tls certs and more This pretty large change does the following: - moves nix from bootstrap.hswaw.net to nix/ - changes clustercfg to use cfssl and moves it to cluster/clustercfg - changes clustercfg to source information about target location of certs from nix - changes clustercfg to push nix config - changes tls certs to have more than one CA - recalculates all TLS certs (it keeps the old serviceaccoutns key, otherwise we end up with invalid serviceaccounts - the cert doesn't match, but who cares, it's not used anyway)
2019-04-06 22:06:23 +00:00
],
)