- scripts/refresh-kubeconfig.sh fetches a fresh kubeconfig from CP1 - Ansible site.yml Finalize step now uses public IP instead of Tailscale hostname for the kubeconfig server address - Updated AGENTS.md with kubeconfig refresh instructions
34 lines
1.0 KiB
Bash
Executable File
34 lines
1.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
|
|
REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
|
|
KUBECONFIG_PATH="$REPO_ROOT/outputs/kubeconfig"
|
|
SSH_KEY="${SSH_KEY:-$HOME/.ssh/infra}"
|
|
|
|
CP1_PUBLIC_IP="${1:-}"
|
|
|
|
if [ -z "$CP1_PUBLIC_IP" ]; then
|
|
if [ -f "$REPO_ROOT/ansible/inventory.ini" ]; then
|
|
CP1_PUBLIC_IP=$(grep -A2 '\[control_plane\]' "$REPO_ROOT/ansible/inventory.ini" | grep -oP '\d+\.\d+\.\d+\.\d+' | head -1)
|
|
fi
|
|
fi
|
|
|
|
if [ -z "$CP1_PUBLIC_IP" ]; then
|
|
echo "Usage: $0 <control-plane-1-public-ip>"
|
|
echo " Or ensure ansible/inventory.ini exists with control plane IPs."
|
|
exit 1
|
|
fi
|
|
|
|
echo "Fetching kubeconfig from $CP1_PUBLIC_IP ..."
|
|
ssh -i "$SSH_KEY" \
|
|
-o StrictHostKeyChecking=no \
|
|
-o UserKnownHostsFile=/dev/null \
|
|
"root@$CP1_PUBLIC_IP" "cat /etc/rancher/k3s/k3s.yaml" \
|
|
| sed "s/127.0.0.1/$CP1_PUBLIC_IP/g" \
|
|
> "$KUBECONFIG_PATH"
|
|
|
|
chmod 600 "$KUBECONFIG_PATH"
|
|
echo "Kubeconfig saved to $KUBECONFIG_PATH"
|
|
echo "Run: export KUBECONFIG=$KUBECONFIG_PATH"
|