Function forgeops_dependencies

lib/python/forgeops_dependencies.py:67–115

Check for and install dependencies in the kubernetes cluster if they are not found. If dependencies are found in K8s, this function does not modify or reinstall the components.

(legacy)

def forgeops_dependencies(legacy):
    """
    Check for and install dependencies in the kubernetes cluster if they are not found.
    If dependencies are found in K8s, this function does not modify or reinstall the components.
    """
    check_base_toolset()

    print('Checking cert-manager and related CRDs:', end=' ')
    try:
        run('kubectl', 'get crd certificaterequests.cert-manager.io',
            cstderr=True, cstdout=True)
        run('kubectl', 'get crd certificates.cert-manager.io',
            cstderr=True, cstdout=True)
        run('kubectl', 'get crd clusterissuers.cert-manager.io',
            cstderr=True, cstdout=True)
    except Exception:
        warning('cert-manager CRD not found. Installing cert-manager.')
        certmanager('apply', tag=REQ_VERSIONS['cert-manager']['DEFAULT'])
    else:
        message('cert-manager CRD found in cluster.')

    _, img, _= run('kubectl', f'-n cert-manager get deployment cert-manager -o jsonpath={{.spec.template.spec.containers[0].image}}',
                   cstderr=True, cstdout=True)
    check_component_version('cert-manager', img.decode('ascii').split(':')[1])

    print('Checking secret-agent operator and related CRDs:', end=' ')
    try:
        run('kubectl', 'get crd secretagentconfigurations.secret-agent.secrets.forgerock.io',
            cstderr=True, cstdout=True)
    except Exception as _e:
        warning('secret-agent CRD not found. Installing secret-agent.')
        secretagent('apply', tag=REQ_VERSIONS['secret-agent']['DEFAULT'])
    else:
        message('secret-agent CRD found in cluster.')
        message('\nChecking secret-agent operator is running...')
        run('kubectl', 'wait --for=condition=Established crd secretagentconfigurations.secret-agent.secrets.forgerock.io --timeout=30s')
        run('kubectl', '-n secret-agent-system wait --for=condition=available deployment  --all --timeout=120s')
        try:
            run('kubectl', '-n secret-agent-system get pod -l app.kubernetes.io/name=secret-agent-manager --field-selector=status.phase==Running')
        except Exception as e:
            error(f'Could not find a running secret-agent pod. See the following error: {e}')
            sys.exit(1)
        message('secret-agent operator is running')

    _, img, _ = run('kubectl', f'-n secret-agent-system get deployment secret-agent-controller-manager -o jsonpath={{.spec.template.spec.containers[0].image}}',
                    cstderr=True, cstdout=True)
    check_component_version('secret-agent', img.decode('ascii').split(':')[1])

    print()