magic/update-deployments.sh at master · polterguy/magic · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
#!/bin/bash
set -euo pipefail

NAMESPACE="cloudlets"
IMAGE="servergardens/magic-backend:v22.8.3"
FSGROUP="999"

echo "========================================="
echo "Safe upgrade of deployments in $NAMESPACE"
echo "Target image: $IMAGE"
echo "========================================="

for DEP in $(kubectl get deployments -n "$NAMESPACE" -o jsonpath='{.items[*].metadata.name}')
do
  echo ""
  echo "-----------------------------------------"
  echo "Checking deployment: $DEP"
  echo "-----------------------------------------"

  VOLNAME=$(kubectl get deployment "$DEP" -n "$NAMESPACE" \
    -o jsonpath='{.spec.template.spec.volumes[0].name}')

  # Track whether we actually change anything
  NEEDS_UPDATE=0

  # ===============================
  # 1) Check image
  # ===============================
  CURIMG=$(kubectl get deployment "$DEP" -n "$NAMESPACE" \
    -o jsonpath='{.spec.template.spec.containers[0].image}')

  if [[ "$CURIMG" != "$IMAGE" ]]; then
    echo "Image needs update: $CURIMG → $IMAGE"
    kubectl set image deployment/"$DEP" "$DEP=$IMAGE" -n "$NAMESPACE"
    NEEDS_UPDATE=1
  else
    echo "Image already correct."
  fi

  # ===============================
  # 2) Check fsGroup
  # ===============================
  CURFS=$(kubectl get deployment "$DEP" -n "$NAMESPACE" \
    -o jsonpath='{.spec.template.spec.securityContext.fsGroup}' 2>/dev/null || true)

  if [[ "$CURFS" != "$FSGROUP" ]]; then
    echo "fsGroup needs update → $FSGROUP"
    kubectl patch deployment "$DEP" -n "$NAMESPACE" --type=merge -p "
spec:
  template:
    spec:
      securityContext:
        fsGroup: $FSGROUP
"
    NEEDS_UPDATE=1
  else
    echo "fsGroup already correct."
  fi

  # ===============================
  # Helper function for mounts
  # ===============================
  ensure_mount() {
    local TARGET="$1"
    local PATH_JSON="$2"
    local PATCH_PATH="$3"
    local MOUNT="$4"
    local SUB="$5"

    if kubectl get deployment "$DEP" -n "$NAMESPACE" \
      -o jsonpath="$PATH_JSON" | grep -q "$MOUNT"; then
      echo "Mount exists: $MOUNT"
    else
      echo "Adding mount: $MOUNT"
      kubectl patch deployment "$DEP" -n "$NAMESPACE" --type=json -p="[
        {
          \"op\": \"add\",
          \"path\": \"$PATCH_PATH\",
          \"value\": {
            \"name\": \"$VOLNAME\",
            \"mountPath\": \"$MOUNT\",
            \"subPath\": \"$SUB\"
          }
        }
      ]"
      NEEDS_UPDATE=1
    fi
  }

  # ===============================
  # 3) Main container mounts
  # ===============================
  echo "Checking main container mounts..."

  ensure_mount "main" \
    '{.spec.template.spec.containers[0].volumeMounts[*].mountPath}' \
    "/spec/template/spec/containers/0/volumeMounts/-" \
    "/magic/files/data" \
    "magic/files/data"

  ensure_mount "main" \
    '{.spec.template.spec.containers[0].volumeMounts[*].mountPath}' \
    "/spec/template/spec/containers/0/volumeMounts/-" \
    "/magic/files/modules" \
    "magic/files/modules"

  # ===============================
  # 4) Init container mounts
  # ===============================
  echo "Checking initContainer mounts..."

  ensure_mount "init" \
    '{.spec.template.spec.initContainers[0].volumeMounts[*].mountPath}' \
    "/spec/template/spec/initContainers/0/volumeMounts/-" \
    "/magic/files/data" \
    "magic/files/data"

  ensure_mount "init" \
    '{.spec.template.spec.initContainers[0].volumeMounts[*].mountPath}' \
    "/spec/template/spec/initContainers/0/volumeMounts/-" \
    "/magic/files/modules" \
    "magic/files/modules"

  # ===============================
  # 5) Restart ONLY if changes happened
  # ===============================
  if [[ "$NEEDS_UPDATE" -eq 0 ]]; then
    echo ""
    echo "✅ Deployment $DEP already fully up to date. Skipping rollout."
    continue
  fi

  echo ""
  echo "Changes applied → restarting rollout..."
  kubectl rollout restart deployment "$DEP" -n "$NAMESPACE"

  echo "Waiting for rollout..."
  kubectl rollout status deployment "$DEP" -n "$NAMESPACE"

done

echo ""
echo "========================================="
echo "All deployments processed safely."
echo "Up-to-date deployments were skipped."
echo "========================================="