6046e86506
Previously the setup-rbe.sh script did not allow accounts that did have domains of angular.io or google.com. Since we add emails from other domains into everyone@angular.io, we are unable to be certain in the script that the account is not actually a member of the required group. This change adds the option to choose to continue with an email account logged in which we cannot verify by domain. PR Close #36846
113 lines
3.9 KiB
Bash
Executable File
113 lines
3.9 KiB
Bash
Executable File
#!/bin/bash
|
|
# A script for automatically configuring a user's local dev
|
|
# environment to use Remote Build Execution.
|
|
# Short cuts to set output as bold and normal
|
|
bold=$(tput bold)
|
|
normal=$(tput sgr0)
|
|
|
|
###########################################################
|
|
# Setup/Confirm Environment #
|
|
###########################################################
|
|
# The full path location of the script
|
|
full_script_path="$(pwd)/$(dirname ${BASH_SOURCE[0]})"
|
|
# Determine the root directory of the Angular github repo.
|
|
project_directory=$(git rev-parse --show-toplevel 2> /dev/null)
|
|
if [[ $? -ne 0 ]]; then
|
|
echo "This command must be run from within the cloned \"angular/angular\" repository"
|
|
exit 1
|
|
fi
|
|
|
|
# Confirm gcloud installed and available as a command.
|
|
if [ ! -x "$(command -v gcloud)" ]; then
|
|
echo "gcloud command is not available. Please install gcloud before continuing"
|
|
echo "Please visit: https://cloud.google.com/sdk/install"
|
|
exit 1
|
|
fi
|
|
|
|
# The full path to the .bazelrc.user file
|
|
bazelrc_user_filepath="$project_directory/.bazelrc.user"
|
|
|
|
###########################################################
|
|
# Action Functions #
|
|
###########################################################
|
|
# Log into gcloud
|
|
function gcloud_login() {
|
|
gcloud auth application-default login
|
|
if [[ $? -ne 0 ]]; then
|
|
echo "gcloud login failed. Aborting"
|
|
exit 2
|
|
fi
|
|
}
|
|
|
|
# Confirm the user is already logged into gcloud, if they aren't
|
|
# attempt to login. After login, confirm the logged in account
|
|
# is from the correct domain.
|
|
function confirm_gcloud_login() {
|
|
echo "Checking gcloud login state"
|
|
gcloud auth application-default print-access-token &> /dev/null
|
|
if [[ $? -ne 0 ]]; then
|
|
echo "Not currently logged into gcloud. Starting gcloud login now"
|
|
gcloud_login
|
|
fi
|
|
access_token=$(gcloud auth application-default print-access-token)
|
|
current_account=$(curl -s https://www.googleapis.com/oauth2/v1/tokeninfo?access_token=$access_token | node $full_script_path/get-email)
|
|
if [[ ! $current_account =~ (angular\.io$)|(google\.com$) ]]; then
|
|
echo
|
|
echo "Logged in as $current_account";
|
|
echo "The account used for remote build execution must be a member of everyone@angular.io"
|
|
echo "or everyone@google.com."
|
|
echo
|
|
echo "As $current_account is not from either domain, membership cannot be automatically"
|
|
echo "determined. If you know $current_account to be a member of one of the required groups"
|
|
echo "you can proceed, using it for authentication."
|
|
echo
|
|
read -p "Continue RBE setup using $current_account? [Y/y]"
|
|
if [[ $REPLY =~ ^[Yy]$ ]]; then
|
|
return
|
|
fi
|
|
echo
|
|
echo "Please login instead using an account that is a member of the one of the above groups."
|
|
read -p "Rerun login now? [Y/y]"
|
|
if [[ $REPLY =~ ^[Yy]$ ]]; then
|
|
gcloud_login
|
|
confirm_gcloud_login
|
|
return
|
|
else
|
|
echo "Exiting..."
|
|
exit 3
|
|
fi
|
|
fi
|
|
echo "Logged in as $current_account";
|
|
}
|
|
|
|
# Prompts to add a flag to the .bazelrc.user file if its not already in place
|
|
function add_flag() {
|
|
flag=$1
|
|
read -p " Add $flag flag? [Y/y]"
|
|
if [[ $REPLY =~ ^[Yy]$ ]]; then
|
|
if [[ ! $(grep "^$flag$" $bazelrc_user_filepath) ]]; then
|
|
echo "$flag" >> $bazelrc_user_filepath
|
|
echo "Added $flag to .bazelrc.user"
|
|
else
|
|
echo "$flag already in .bazelrc.user"
|
|
fi
|
|
fi
|
|
echo
|
|
}
|
|
|
|
###########################################################
|
|
# RBE Setup Script #
|
|
###########################################################
|
|
# Create the bazelrc.user file, echo the config flags into the file.
|
|
touch $bazelrc_user_filepath
|
|
|
|
# Ensure default credentials are valid.
|
|
confirm_gcloud_login
|
|
|
|
# Add extra line space before config setup.
|
|
echo
|
|
# Remote builds
|
|
echo "The ${bold}remote${normal} flag enables RBE, builds run remotely when possible and caching"
|
|
echo "occurs in the RBE context"
|
|
add_flag "build --config=remote"
|