entrypoint.sh

#!/bin/sh

set -e

missing_var() {
    echo "Variable $1 needs to be set"
    exit 1
}

DOCKER_IMAGE_REPO="$(printenv INPUT_DOCKER-IMAGE-REPO)" || missing_var "INPUT_DOCKER-IMAGE-REPO"
DOCKER_IMAGE_TAG="$(printenv INPUT_DOCKER-IMAGE-TAG)" || missing_var "INPUT_DOCKER-IMAGE-TAG"
HELM_RELEASE_NAME="$(printenv INPUT_HELM-RELEASE-NAME)" || missing_var "INPUT_HELM-RELEASE-NAME"
HELM_CHART_PATH="$(printenv INPUT_HELM-CHART-PATH)" || missing_var "INPUT_HELM-CHART-PATH"
HELM_VARS_FOLDER="$(printenv INPUT_HELM-VARS-FOLDER)" || missing_var "INPUT_HELM-VARS-FOLDER"
HELM_SET="$(printenv INPUT_HELM-SET || true)"
HELM_SET_STRING="$(printenv INPUT_HELM-SET-STRING || true)"
GKE_PROJECT="$(printenv INPUT_GKE-PROJECT)" || missing_var "INPUT_GKE-PROJECT"
GKE_CLUSTER="$(printenv INPUT_GKE-CLUSTER)" || missing_var "INPUT_GKE-CLUSTER"
GKE_ZONE="$(printenv INPUT_GKE-ZONE)" || missing_var "INPUT_GKE-ZONE"
GKE_SA_KEY="$(printenv INPUT_GKE-SA-KEY)" || missing_var "INPUT_GKE-SA-KEY"

echo "DOCKER_IMAGE_REPO=$DOCKER_IMAGE_REPO"
echo "DOCKER_IMAGE_TAG=$DOCKER_IMAGE_TAG"
echo "HELM_RELEASE_NAME=$HELM_RELEASE_NAME"
echo "HELM_CHART_PATH=$HELM_CHART_PATH"
echo "HELM_VARS_FOLDER=$HELM_VARS_FOLDER"
echo "HELM_SET=$HELM_SET"
echo "HELM_SET_STRING=$HELM_SET_STRING"
echo "GKE_PROJECT=$GKE_PROJECT"
echo "GKE_CLUSTER=$GKE_CLUSTER"
echo "GKE_ZONE=$GKE_ZONE"
echo "GKE_SA_KEY=$GKE_SA_KEY"

[[ ! -f "$HELM_CHART_PATH/Chart.yaml" ]] && echo "No Helm chart found at $HELM_CHART_PATH/Chart.yaml" && exit 1
[[ ! -d "$HELM_VARS_FOLDER" ]] && echo "HELM_VARS_FOLDER=$HELM_VARS_FOLDER doesn't exist" && exit 1

export KUBECONFIG=/kubeconfig.yaml

echo $GKE_SA_KEY \
    | gke-kubeconfig -cluster $GKE_CLUSTER -location $GKE_ZONE -project $GKE_PROJECT \
    > $KUBECONFIG
chmod 400 $KUBECONFIG

[[ ! -f "$HELM_VARS_FOLDER/values.yaml" ]] && echo '{}' > $HELM_VARS_FOLDER/values.yaml
[[ ! -f "$HELM_VARS_FOLDER/secrets.yaml" ]] && echo '{}' > $HELM_VARS_FOLDER/secrets.yaml

echo $GKE_SA_KEY > $HOME/gke-sa-key.json && \
    GOOGLE_APPLICATION_CREDENTIALS=$HOME/gke-sa-key.json \
    sops -d $HELM_VARS_FOLDER/secrets.yaml \
    > $HELM_VARS_FOLDER/secrets.yaml.dec || true

helm upgrade \
    --atomic \
    --install \
    --values $HELM_VARS_FOLDER/values.yaml \
    --values $HELM_VARS_FOLDER/secrets.yaml.dec \
    --set-string image.repository=$DOCKER_IMAGE_REPO \
    --set-string image.tag=$DOCKER_IMAGE_TAG \
    --set "$HELM_SET" \
    --set-string "$HELM_SET_STRING" \
    $HELM_RELEASE_NAME \
    $HELM_CHART_PATH