deploy.sh

#!/bin/bash -e

export BUILD_TARGET=$2
export DOCKER_WORKER_REPO=$1
if [ -z "$BUILD_TARGET" -o -z "$DOCKER_WORKER_REPO" ]; then
    echo "USAGE: ./deploy.sh <docker-worker-path> <target>"
    exit 1
fi
shift

export TEST
export CLOUD=aws
export BUILD_AWS=false
export BUILD_GCP=false
case $CLOUD in
    aws) BUILD_AWS=true;;
    gcp) BUILD_GCP=true;;
    "") BUILD_AWS=true BUILD_GCP=false;;
    *)
        echo "Invalid value for --cloud" >&2
        exit 1
esac

if [ "$TASKCLUSTER_ROOT_URL" == "" ]; then
    echo "TASKCLUSTER_ROOT_URL must be set" >&2
    exit 1
fi

export DEPLOYMENT
case "$TASKCLUSTER_ROOT_URL" in
    # note that these names correspond to the deployment names in taskcluster-mozilla-terraform
    https://taskcluster.net) DEPLOYMENT=taskcluster-net;;
    https://firefox-ci-tc*) DEPLOYMENT=taskcluster-net;;
    https://stage.taskcluster*) DEPLOYMENT=taskcluster-staging-net;;
    https://*.taskcluster-dev.net) DEPLOYMENT=$(echo $TASKCLUSTER_ROOT_URL | sed 's!https://\(.*\)\.taskcluster-dev.net!\1!')-dev;;
    *)
        echo "Unrecognized TASKCLUSTER_ROOT_URL" >&2
        exit 1;;
esac

$BUILD_AWS && echo "Building for AWS"
$BUILD_GCP && echo "Building for GCP"
echo "Configuring TC environment ${DEPLOYMENT}" >&2

export AWS_ACCOUNT
if $BUILD_AWS; then
    case "$DEPLOYMENT" in
        taskcluster-net) AWS_ACCOUNT=mozilla-taskcluster;;
        taskcluster-staging-net) AWS_ACCOUNT=taskcluster-aws-staging;;
        *-dev) AWS_ACCOUNT=taskcluster-aws-staging;;
        *)
            echo "No AWS account defined for this environment" >&2
            exit 1;;
    esac

    found=false
    for alias in `aws iam list-account-aliases | jq -r '.AccountAliases[]'`; do
        if [ "$alias" == "$AWS_ACCOUNT" ]; then
            found=true
        fi
    done
    if ! $found; then
        echo "Not signed into AWS account $AWS_ACCOUNT - sign in and try again" >&2
        exit 1
    fi
    echo "Using AWS account $AWS_ACCOUNT" >&2
fi

export GCP_PROJECT_ID
if $BUILD_GCP; then
    case "$DEPLOYMENT" in
        taskcluster-net) GCP_PROJECT_ID=linux64-builds;;
        # all *-dev environments use the same project..
        *-dev) GCP_PROJECT_ID=taskcluster-dev-workers;;
        *)
            echo "No GCP project defined for this environment" >&2
            exit 1;;
    esac

    if ! gcloud projects describe $GCP_PROJECT_ID >/dev/null; then
        echo "You do not have access to GCP project $GCP_PROJECT_ID"
        echo 'Try `gcloud auth login` or check your gcp account permissions'
        exit 1
    fi
    echo "Using GCP project $GCP_PROJECT_ID" >&2
fi

NODE_VERSION_MAJOR=$(node --version | tr -d v | awk -F. '{print $1}')
NODE_VERSION_MINOR=$(node --version | tr -d v | awk -F. '{print $2}')
if [ 0$NODE_VERSION_MAJOR -lt 12 -o 0$NODE_VERSION_MAJOR -eq 12 -a 0$NODE_VERSION_MINOR -lt 11 ]; then
  echo "$0 requires node version 12.11.0 or higher." >&2
  exit 1
fi

if [ -z "$PASSWORD_STORE_DIR" ]; then
    export PASSWORD_STORE_DIR=$HOME/.password-store
fi

if ! [ -d $PASSWORD_STORE_DIR ]; then
    echo "Password store not found, please install it by running:"
    echo "git clone ssh://gitolite3@git-internal.mozilla.org/taskcluster/secrets.git $PASSWORD_STORE_DIR"
    echo "To clone this repository, you need Mozilla VPN access. Please check \
https://mana.mozilla.org/wiki/display/IT/Mozilla+VPN for information on how to setup VPN connection."
    exit 1
fi

deploy/bin/import-docker-worker-secrets
trap 'rm -rf /tmp/docker-worker*' EXIT
deploy/bin/build $BUILD_TARGET