cheshire
/
hscloud
forked from hswaw/hscloud
1
0
Fork 0
Code Pull Requests Activity
hscloud/cluster/clustercfg/BUILD

14 lines
252 B
Python
Raw Normal View History

*: rejigger tls certs and more This pretty large change does the following: - moves nix from bootstrap.hswaw.net to nix/ - changes clustercfg to use cfssl and moves it to cluster/clustercfg - changes clustercfg to source information about target location of certs from nix - changes clustercfg to push nix config - changes tls certs to have more than one CA - recalculates all TLS certs (it keeps the old serviceaccoutns key, otherwise we end up with invalid serviceaccounts - the cert doesn't match, but who cares, it's not used anyway)
2019-04-06 22:06:23 +00:00
py_binary(
name = "clustercfg",
*: move away from python_rules python_rules is completely broken when it comes to py2/py3 support. Here, we replace it with native python rules from new Bazel versions [1] and rules_pip for PyPI dependencies [2]. rules_pip is somewhat little known and experimental, but it seems to work much better than what we had previously. We also unpin rules_docker and fix .bazelrc to force Bazel into Python 2 mode - hopefully, this repo will now work fine under operating systems where `python` is python2 (as the standard dictates). [1] - https://docs.bazel.build/versions/master/be/python.html [2] - https://github.com/apt-itude/rules_pip Change-Id: Ibd969a4266db564bf86e9c96275deffb9610dd44
2019-07-14 14:29:52 +00:00
python_version = "PY3",
*: rejigger tls certs and more This pretty large change does the following: - moves nix from bootstrap.hswaw.net to nix/ - changes clustercfg to use cfssl and moves it to cluster/clustercfg - changes clustercfg to source information about target location of certs from nix - changes clustercfg to push nix config - changes tls certs to have more than one CA - recalculates all TLS certs (it keeps the old serviceaccoutns key, otherwise we end up with invalid serviceaccounts - the cert doesn't match, but who cares, it's not used anyway)
2019-04-06 22:06:23 +00:00
srcs = [
"clustercfg.py",
"ca.py",
],
visibility = ["//visibility:public"],
deps = [
rules_pip: update to new version rules_pip has a new version [1] of their rule system, incompatible with the version we used, that fixes a bunch of issues, notably: - explicit tagging of repositories for PY2/PY3/PY23 support - removal of dependency on host pip (in exchange for having to vendor wheels) - higher quality tooling for locking We update to the newer version of pip_rules, rename the external repository to pydeps and move requirements.txt, the lockfile and the newly vendored wheels to third_party/, where they belong. [1] - https://github.com/apt-itude/rules_pip/issues/16 Change-Id: I1065ee2fc410e52fca2be89fcbdd4cc5a4755d55
2019-09-22 00:19:18 +00:00
"@pydeps//fabric",
*: rejigger tls certs and more This pretty large change does the following: - moves nix from bootstrap.hswaw.net to nix/ - changes clustercfg to use cfssl and moves it to cluster/clustercfg - changes clustercfg to source information about target location of certs from nix - changes clustercfg to push nix config - changes tls certs to have more than one CA - recalculates all TLS certs (it keeps the old serviceaccoutns key, otherwise we end up with invalid serviceaccounts - the cert doesn't match, but who cares, it's not used anyway)
2019-04-06 22:06:23 +00:00
"//tools:secretstore_lib",
],
)