Taskfile.yml

# Copyright AGNTCY Contributors (https://github.com/agntcy)
# SPDX-License-Identifier: Apache-2.0

version: "3"

## Load config from dotenv file
dotenv:
  - '{{ .ROOT_DIR }}/.env'

## Collection of config params
vars:
  ## Image config
  IMAGE_REPO: '{{ .IMAGE_REPO | default "ghcr.io/agntcy" }}'
  IMAGE_TAG: '{{ .IMAGE_TAG }}'

  ## Dependency config
  BIN_DIR: '{{ .ROOT_DIR }}/bin'
  HELM_VERSION: '3.16.3'
  HELM_BIN: '{{ .BIN_DIR }}/helm-{{.HELM_VERSION}}'
  KUBECTL_VERSION: '1.31.3'
  KUBECTL_BIN: '{{ .BIN_DIR }}/kubectl-{{.KUBECTL_VERSION}}'
  KIND_VERSION: '0.25.0'
  KIND_BIN: '{{ .BIN_DIR }}/kind-{{.KIND_VERSION}}'

## Set refresh interval for observable tasks like hot-reload
interval: 500ms

tasks:
  ##
  ## General
  ##
  default:
    cmds:
      - task -l

  build:
    desc: Build project artifacts
    cmds:
      - task: build:charts
      - task: build:images

  build:charts:
    desc: Build helm charts
    deps:
      - deps:helm
    vars:
      HELM_ALL_CHART_PATHS:
        sh: find . -name Chart.yaml -exec dirname {} \;
    cmds:
      - for: { var: HELM_ALL_CHART_PATHS }
        cmd: 'cd {{ .ITEM }} && {{ .HELM_BIN }} dependency update'

  build:images:
    desc: Build container images
    vars:
      BAKE_OPTS: '--set *.platform=linux/{{ARCH}}'
    cmds:
      - docker buildx bake {{.BAKE_OPTS}}

  release:
    desc: Release images for all components with a release tag
    prompt:
      - Are you sure you want to push the images to remote registry?
    vars:
      RELEASE_TAG: '{{ .RELEASE_TAG | default "latest" }}'
    cmds:
      # TODO: use buildx to simplify
      - |
        images=$(docker buildx bake default --print | jq -r '.target | with_entries(.value |= .tags[0]) | to_entries[] | .value')
        echo "$images" | while read image; do
          target_name="${image%%:*}"
          echo "Releasing images for $target_name"

          docker tag $image $target_name:latest
          docker tag $image $target_name:{{.RELEASE_TAG}}
          docker image rm $image

          docker push --all-tags $target_name
        done

  up:
    desc: Deploy services in an ephemeral kind cluster
    preconditions:
      - which yq
    deps:
      - deps:helm
      - deps:kubectl
      - deps:kind
    vars:
      # Kind args
      KIND_CLUSTER_NAME: '{{ .KIND_CLUSTER_NAME | default "test-oasf-cluster" }}'
      KIND_CREATE_OPTS:  '{{ .KIND_CREATE_OPTS | default "" }}'
      KIND_CONFIG_PATH:  '/tmp/{{.KIND_CLUSTER_NAME}}'
      # Deployment args
      HELM_NAMESPACE:   '{{ .HELM_NAMESPACE | default "default" }}'
      HELM_CHART_PATH:  '{{ .ROOT_DIR }}/install/charts/oasf'
      HELM_VALUES_PATH: '{{ .HELM_VALUES_PATH | default (printf "%s/install/charts/oasf/values-test.yaml" .ROOT_DIR) }}'
      RELEASE_NAME:     'oasf'
    cmds:
      # Clean up previous deployment
      - task: down

      # Create volume config to share between Kind and host
      - |
        cat <<EOF > {{.KIND_CONFIG_PATH}}
        apiVersion: kind.x-k8s.io/v1alpha4
        kind: Cluster
        nodes:
          - role: control-plane
            extraMounts:
              - hostPath: {{ .ROOT_DIR }}/schema
                containerPath: /schema
            kubeadmConfigPatches:
            - |
              kind: InitConfiguration
              nodeRegistration:
                kubeletExtraArgs:
                  node-labels: "ingress-ready=true"
            extraPortMappings:
            - containerPort: 30080
              hostPort: 8080
              protocol: TCP
        EOF

      # Create ephemeral cluster
      - '{{ .KIND_BIN }} create cluster {{ .KIND_CREATE_OPTS }} --name {{ .KIND_CLUSTER_NAME }} --config {{.KIND_CONFIG_PATH}}'
      - '{{ .KIND_BIN }} export kubeconfig --name {{ .KIND_CLUSTER_NAME }}'

      # Check cluster status
      - '{{ .KUBECTL_BIN }} cluster-info'

      # Extract images from values-test.yaml and load them into kind
      - |
        {{- if .IMAGE_TAG }}
        {{ .KIND_BIN }} load docker-image "{{ .IMAGE_REPO }}/oasf-server:{{ .IMAGE_TAG }}" --name {{ .KIND_CLUSTER_NAME }}
        {{- else }}
        images=$(yq eval '.image.versions[].server' {{ .HELM_VALUES_PATH }})
        echo "Images to load: $images"
        echo "$images" | while read image; do
          {{ .KIND_BIN }} load docker-image "{{ .IMAGE_REPO }}/oasf-server:$image" --name {{ .KIND_CLUSTER_NAME }}
        done
        {{- end }}

      # Deploy chart
      - |
        {{ .HELM_BIN }} upgrade {{.RELEASE_NAME}} \
          {{ .HELM_CHART_PATH }} \
          -f {{ .HELM_VALUES_PATH }} \
          --set image.repository="{{ .IMAGE_REPO }}/oasf-server" \
          {{- if .IMAGE_TAG }}
          --set image.versions[0].server={{.IMAGE_TAG}} \
          {{- end }}
          --namespace {{ .HELM_NAMESPACE }} \
          --create-namespace \
          --install \
          --wait \
          --wait-for-jobs \
          --timeout "15m"

      # Wait for the ingress controller deployment to be available
      - |
        echo "Waiting for Deployment {{.RELEASE_NAME}}-ingress-controller in namespace {{.HELM_NAMESPACE}} to become available..."
        if ! {{ .KUBECTL_BIN }} wait deployment/{{.RELEASE_NAME}}-ingress-controller \
            --for=condition=Available \
            -n {{ .HELM_NAMESPACE }} \
            --timeout=120s; then
          echo "Error: Deployment {{.RELEASE_NAME}}-ingress-controller did not become available within 120 seconds."
          exit 1
        fi
        echo
        echo "Deployment is available at http://localhost:8080."

  reload:
    desc: Hot reload schema changes after deployment
    watch: true
    deps:
      - deps:kubectl
    sources:
      - 'schema/**/*'
    vars:
      LABEL_SELECTOR: 'default-schema=true'
    preconditions:
      - '{{ .KUBECTL_BIN }} get po -l {{.LABEL_SELECTOR}}'
    cmds:
      - |
        POD_NAME=$({{ .KUBECTL_BIN }} get pods -l {{.LABEL_SELECTOR}} -o jsonpath="{.items[0].metadata.name}")
        {{.KUBECTL_BIN}} exec $POD_NAME -- ./bin/schema_server rpc "Schema.reload()"

      - echo "Reloaded schema! Use CTRL + C to exit."

  down:
    desc: Stop services and remove ephemeral kind cluster
    deps:
      - deps:kind
    vars:
      # Kind args
      KIND_CLUSTER_NAME: '{{ .KIND_CLUSTER_NAME | default "test-oasf-cluster" }}'
    cmds:
      - '{{ .KIND_BIN }} delete cluster --name {{ .KIND_CLUSTER_NAME }}'

  test:
    desc: Run end-to-end test suite
    cmds:
      - defer: { task: down }
      - task: up
      # NOTE: For now, we are only interested to know if the
      # chart can be deployed or not.
      # TODO: add test cases here

  ##
  ## Dependencies
  ##
  deps:
    desc: Install project dependencies
    cmds:
      - task: deps:helm
      - task: deps:kubectl
      - task: deps:kind

  deps:bin-dir:
    desc: Create bin directory
    internal: true
    run: once
    cmd: mkdir -p {{.BIN_DIR}}
    status:
      - test -d {{.BIN_DIR}}

  deps:helm:
    desc: Ensure supported Helm version is installed
    internal: true
    deps:
      - deps:bin-dir
    preconditions:
      - which curl
      - which tar
    cmds:
      - cmd: echo "Downloading Helm v{{.HELM_VERSION}}..."
      - cmd: curl -sSfL 'https://get.helm.sh/helm-v{{.HELM_VERSION}}-{{OS}}-{{ARCH}}.tar.gz' --output - | tar xzvOf - '{{OS}}-{{ARCH}}/helm' > {{.HELM_BIN}}
      - cmd: chmod +x {{.HELM_BIN}}
    status:
      - test -x {{.HELM_BIN}}

  deps:kubectl:
    desc: Ensure supported kubectl version is installed
    internal: true
    deps:
      - deps:bin-dir
    preconditions:
      - which curl
    cmds:
      - cmd: echo "Downloading Kubectl v{{.KUBECTL_VERSION}}..."
      - cmd: curl -L "https://dl.k8s.io/release/v{{.KUBECTL_VERSION}}/bin/{{OS}}/{{ARCH}}/kubectl" -o {{.KUBECTL_BIN}}
      - cmd: chmod +x {{.KUBECTL_BIN}}
    status:
      - test -x {{.KUBECTL_BIN}}

  deps:kind:
    desc: Ensure supported kind version is installed
    internal: true
    deps:
      - deps:bin-dir
    preconditions:
      - which go
    cmds:
      - cmd: echo "Downloading Kind v{{.KIND_VERSION}}..."
      - cmd: GOBIN={{.BIN_DIR}} go install sigs.k8s.io/kind@v{{.KIND_VERSION}}
      - cmd: mv {{.BIN_DIR}}/kind {{.KIND_BIN}}
    status:
      - test -x {{.KIND_BIN}}