Create default passwords when dev mode is set. #441

api/v1alpha1/gitrepository_types.go

@@ -5,12 +5,13 @@ import (
 )
 
 const (
-	GitProviderGitea   = "gitea"
-	GitProviderGitHub  = "github"
-	GiteaAdminUserName = "giteaAdmin"
-	SourceTypeLocal    = "local"
-	SourceTypeRemote   = "remote"
-	SourceTypeEmbedded = "embedded"
+	GitProviderGitea       = "gitea"
+	GitProviderGitHub      = "github"
+	GiteaAdminUserName     = "giteaAdmin"
+	GiteaDeveloperUserName = "developer"
+	SourceTypeLocal        = "local"
+	SourceTypeRemote       = "remote"
+	SourceTypeEmbedded     = "embedded"
 )
 
 type GitRepositorySpec struct {

api/v1alpha1/localbuild_types.go

@@ -53,6 +53,7 @@ type BuildCustomizationSpec struct {
 	Port           string `json:"port,omitempty"`
 	UsePathRouting bool   `json:"usePathRouting,omitempty"`
 	SelfSignedCert string `json:"selfSignedCert,omitempty"`
+	DevMode        bool   `json:"devMode,omitempty"`
 }
 
 type LocalbuildSpec struct {

hack/argo-cd/argocd-cm.yaml

@@ -4,6 +4,7 @@ metadata:
   name: argocd-cm
 data:
   application.resourceTrackingMethod: annotation
+  accounts.developer: apiKey, login
   timeout.reconciliation: 60s
   resource.exclusions: |
     - kinds:

hack/argo-cd/argocd-rbac-dev.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/name: argocd-rbac-cm
+    app.kubernetes.io/part-of: argocd
+  name: argocd-rbac-cm
+  namespace: argocd
+data:
+  policy.csv: |
+    p, role:developer, applications, *, *, allow
+    g, developer, role:developer

hack/argo-cd/kustomization.yaml

@@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - https://raw.githubusercontent.com/argoproj/argo-cd/v2.10.7/manifests/install.yaml
+  - argocd-rbac-dev.yaml
 
 patches:
   - path: dex-server.yaml

pkg/build/build.go

@@ -28,6 +28,7 @@ var (
 
 type Build struct {
 	name                 string
+	devMode              bool
 	cfg                  v1alpha1.BuildCustomizationSpec
 	kindConfigPath       string
 	kubeConfigPath       string
@@ -278,5 +279,6 @@ func isBuildCustomizationSpecEqual(s1, s2 v1alpha1.BuildCustomizationSpec) bool
 		s1.IngressHost == s2.IngressHost &&
 		s1.Port == s2.Port &&
 		s1.UsePathRouting == s2.UsePathRouting &&
-		s1.SelfSignedCert == s2.SelfSignedCert
+		s1.SelfSignedCert == s2.SelfSignedCert &&
+		s1.DevMode == s2.DevMode
 }

pkg/cmd/create/root.go

@@ -20,6 +20,7 @@ import (
 const (
 	recreateClusterUsage   = "Delete cluster first if it already exists."
 	buildNameUsage         = "Name for build (Prefix for kind cluster name, pod names, etc)."
+	devModeUsage           = "When enabled, the platform will run the core packages with developer password."
 	kubeVersionUsage       = "Version of the kind kubernetes cluster to create."
 	extraPortsMappingUsage = "List of extra ports to expose on the docker container and kubernetes cluster as nodePort " +
 		"(e.g. \"22:32222,9090:39090,etc\")."
@@ -40,6 +41,7 @@ var (
 	// Flags
 	recreateCluster           bool
 	buildName                 string
+	devMode                   bool
 	kubeVersion               string
 	extraPortsMapping         string
 	kindConfigPath            string
@@ -67,6 +69,7 @@ func init() {
 	CreateCmd.PersistentFlags().StringVar(&buildName, "build-name", "localdev", buildNameUsage)
 	CreateCmd.PersistentFlags().MarkDeprecated("build-name", "use --name instead.")
 	CreateCmd.PersistentFlags().StringVar(&buildName, "name", "localdev", buildNameUsage)
+	CreateCmd.PersistentFlags().BoolVar(&devMode, "dev-mode", false, devModeUsage)
 	CreateCmd.PersistentFlags().StringVar(&kubeVersion, "kube-version", "v1.30.3", kubeVersionUsage)
 	CreateCmd.PersistentFlags().StringVar(&extraPortsMapping, "extra-ports", "", extraPortsMappingUsage)
 	CreateCmd.PersistentFlags().StringVar(&kindConfigPath, "kind-config", "", kindConfigPathUsage)
@@ -143,6 +146,7 @@ func create(cmd *cobra.Command, args []string) error {
 			IngressHost:    ingressHost,
 			Port:           port,
 			UsePathRouting: pathRouting,
+			DevMode:        devMode,
 		},
 
 		CustomPackageDirs:    absDirPaths,

pkg/cmd/get/secrets.go

@@ -8,6 +8,7 @@ import (
 	"io"
 	"os"
 	"path/filepath"
+	"strings"
 	"text/template"
 
 	"github.com/cnoe-io/idpbuilder/api/v1alpha1"
@@ -206,6 +207,18 @@ func secretToTemplateData(s v1.Secret) TemplateData {
 	for k, v := range s.Data {
 		data.Data[k] = string(v)
 	}
+
+	// TODO: The following code should be reviewed and improved as the secret containing the developer username/password is argocd-secret
+	// where the password has been bcrypted and by consequence we cannot get and decode it from the secret
+	// This is why we are going to add it here BUT it will be displayed every time no matter if --dev-mode has been used or not
+	if strings.Contains(s.Name, "gitea") {
+		data.Data["username-developer"] = "giteAdmin"
+		data.Data["password-developer"] = "developer"
+	} else if strings.Contains(s.Name, "argocd") {
+		data.Data["username-developer"] = "developer"
+		data.Data["password-developer"] = "developer"
+	}
+
 	return data
 }
 

pkg/controllers/gitrepository/controller.go

@@ -143,6 +143,10 @@ func (r *RepositoryReconciler) reconcileGitRepo(ctx context.Context, repo *v1alp
 		return ctrl.Result{}, fmt.Errorf("getting git provider credentials: %w", err)
 	}
 
+	if r.Config.DevMode {
+		creds.password = "developer"
+	}
+
 	err = provider.setProviderCredentials(ctx, repo, creds)
 	if err != nil {
 		return ctrl.Result{}, fmt.Errorf("setting git provider credentials: %w", err)

pkg/controllers/gitrepository/gitea.go

@@ -69,6 +69,7 @@ func (g *giteaProvider) getProviderCredentials(ctx context.Context, repo *v1alph
 	if !ok {
 		return gitProviderCredentials{}, fmt.Errorf("%s key not found in secret %s in %s ns", giteaAdminPasswordKey, repo.Spec.SecretRef.Name, repo.Spec.SecretRef.Namespace)
 	}
+
 	return gitProviderCredentials{
 		username: string(username),
 		password: string(password),

pkg/controllers/localbuild/argo.go

@@ -3,10 +3,12 @@ package localbuild
 import (
 	"context"
 	"embed"
-
+	"fmt"
 	"github.com/cnoe-io/idpbuilder/api/v1alpha1"
 	"github.com/cnoe-io/idpbuilder/globals"
 	"github.com/cnoe-io/idpbuilder/pkg/k8s"
+	corev1 "k8s.io/api/core/v1"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	"k8s.io/apimachinery/pkg/runtime"
 	"k8s.io/apimachinery/pkg/runtime/schema"
 	ctrl "sigs.k8s.io/controller-runtime"
@@ -15,6 +17,13 @@ import (
 //go:embed resources/argo/*
 var installArgoFS embed.FS
 
+const (
+	argocdDevModePassword        = "developer"
+	argocdInitialAdminSecretName = "argocd-initial-admin-secret"
+	argocdNamespace              = "argocd"
+	argocdIngressURL             = "%s://argocd.cnoe.localtest.me:%s"
+)
+
 func RawArgocdInstallResources(templateData any, config v1alpha1.PackageCustomization, scheme *runtime.Scheme) ([][]byte, error) {
 	return k8s.BuildCustomizedManifests(config.FilePath, "resources/argo", installArgoFS, scheme, templateData)
 }
@@ -57,3 +66,20 @@ func (r *LocalbuildReconciler) ReconcileArgo(ctx context.Context, req ctrl.Reque
 	resource.Status.ArgoCD.Available = true
 	return ctrl.Result{}, nil
 }
+
+func (r *LocalbuildReconciler) ArgocdInitialAdminSecretObject() corev1.Secret {
+	return corev1.Secret{
+		TypeMeta: metav1.TypeMeta{
+			Kind:       "Secret",
+			APIVersion: "v1",
+		},
+		ObjectMeta: metav1.ObjectMeta{
+			Name:      argocdInitialAdminSecretName,
+			Namespace: argocdNamespace,
+		},
+	}
+}
+
+func (r *LocalbuildReconciler) ArgocdBaseUrl(config v1alpha1.BuildCustomizationSpec) string {
+	return fmt.Sprintf(argocdIngressURL, config.Protocol, config.Port)
+}

pkg/controllers/localbuild/argo_test.go

@@ -80,8 +80,8 @@ func TestGetK8sInstallResources(t *testing.T) {
 		t.Fatalf("GetK8sInstallResources() error: %v", err)
 	}
 
-	if len(objs) != 58 {
-		t.Fatalf("Expected 58 Argo Install Resources, got: %d", len(objs))
+	if len(objs) != 59 {
+		t.Fatalf("Expected 59 Argo Install Resources, got: %d", len(objs))
 	}
 }