cert_renewal.sh

#!/bin/bash

# ASCII art as arrays of lines
cat << 'EOF'
MXKKKKMMMMMWKKKKNMMMMMMMMMMWKKXWKKKMWKKKKMMMMMKKKKKKMMKKKKXMMMMMMMMMMMMMMN0O0XXMKKKKKKKXWKKKKKNMMWKKKKKKKX
MdccccKMMMMkcccc0MMMMMMMMMMXllONxcxWNkoccOMMMNkkcokkWNkdcxkMMMMMMMMMMMMWxlkOklcMkcokkkcxNkcokkodNNcokcokck
MXlccccxN0dccccxWMMMMMMMMMMMolOOkcKMMKck0cOMMMMMlxMMMMM0cWMMMMMMMMMMMMMklWMMMNKMMloOl0KNMWcx00doNWxXMcOMOK
MMWkloddlccccl0MMMMMMMMMMMMMolXXKcKMXcoxxocKMMMMlxMMMMM0cWMMddMMMMMMMMMOcNMMMWXMMldXxK0kMWcx0klkWMMMMcOMMM
MMMNxlcccccodkNMMMMMMMMMMMMOllkNdldkolxNWxloONxxloxxWNxdldxxldMMMMMMMMMMOdddddxWxloxxxolNxlokMNdoKMkxloxXM
MMkcccccoxdlccl0MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMWWMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
MOcccccxKKkcccccOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
MoccccxxxxxxccccoMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
MkcccclOXXOlccccOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
MWkcccldkocccccOMMMMMMMMMMMXKKKKXWMMXKKKKKKNNKKWMNKKXNKKKKKKKWXKKXMXKKXMXKKKWMMMNKKKKWMMMMMMMMMMMMMMMMMMMM
MMMXxdoccccclxNMMMMMMMMMMMM0llOOklKMOcoOkOcOKdclXKxcxXxcxOkdcNxcxOXOkcxW0dccoWMMKkcoONMMMMMMMMMMMMMMMMMMMM
MMWOlcccclodooKMMMMMMMMMMMMMol0OxlKMWcokcKKNM0ckcOKcKMKcxocNKMXcOoco0cNMNldXcdMMMWckMMMMMMMMMMMMMMMMMMMMMM
MNlccccd0KocccckMMMMMMMMMMMMolK0odXMWcdXkN0OM0cMXoocKMKc00kWxKMcclKcclMWooxxxlkMMWckMMKlXMMMMMMMMMMMMMMMMM
MdccccKMMMMxcccc0MMMMMMMMMMkooxWM0okxodxxxdxNdoxKWxoXKdodxxdo0Mko0MKokXdodKMkdoxOdodxxdoXMMMMMMMMMMMMMMMMM
MOkkkOMMMMMNkkkkKMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
EOF

# Check if the user is in the docker group
# Print "Checking your docker permissions..." in yellow with an hourglass emoji all in a row
printf "\n\n\e[33mChecking your docker permissions...\e[0m \e[33m⌛\e[0m\n"
if id -nG "$USER" | grep -qw "docker"; then
    # Print "You are in the docker group. Proceeding with the script..." in green with a rocket emoji
    printf "\e[32mYou are in the docker group. Proceeding with the script...\e[0m \e[32m🚀\e[0m\n"
    
    # Check for a folder named 'hail' in the current directory. If it doesn't exist, clone from GitHub
    if [ ! -d "hail" ]; then
        # Print "Cloning 'hail' from GitHub..." in yellow with a dna emoji
        printf "\e[33mNo 'hail' folder found. Cloning 'hail' from GitHub...\e[0m \e[33m🧬\e[0m\n"
        git clone https://github.com/populationgenomics/hail.git
        cd hail
    else
        # Print "Found 'hail' folder. Updating 'hail' from GitHub..." in yellow
        printf "\e[33mFound 'hail' folder. Updating 'hail' from GitHub...\e[0m \e[33m🧬\e[0m\n"
        cd hail
    fi
    git switch main
    git pull

    # Print "Setting up gcloud credentials..." in yellow
    # If any of the following commands fail, the script will exit
    printf "\e[33mSetting up gcloud credentials...\e[0m\n"
    gcloud config set project hail-295901
    gcloud config set compute/zone australia-southeast1-b
    gcloud auth configure-docker australia-southeast1-docker.pkg.dev
    gcloud container clusters get-credentials vdc

    # If the commands above fail, the script will exit else print "gcloud credentials set successfully!" in green with a green check mark all in a row
    if [ $? -eq 0 ]; then
        printf "\e[32mgcloud credentials set successfully!\e[0m \e[32m✔️\e[0m\n"
    else
        printf "\e[31mError: gcloud credentials could not be set!\e[0m \e[31m✘\e[0m\n"
        exit 1
    fi

    # Print "Generating certificates..." in yellow with a warning sign emoji
    printf "\e[33mGenerating certificates...\e[0m \e[33m⚠️\e[0m\n"
    cd letsencrypt
    make run NAMESPACE=default

    # If the command above fails, the script will exit else print "Certificates generated successfully!" in green with a green check mark
    if [ $? -eq 0 ]; then
        printf "\e[32mCertificates generated successfully!\e[0m \e[32m✔️\e[0m\n"
    else
        # Add red X emoji to the end of the line
        printf "\e[31mError: Certificates could not be generated!\e[0m \e[31m✘\e[0m\n"
        exit 1
    fi

    # Print "Restarting Hail services..." in yellow and add a warning sign emoji
    printf "\e[33mRestarting Hail services...\e[0m \e[33m⚠️\e[0m\n"

    export HAIL=$HOME/hail

    SERVICES_TO_RESTART=$(python3 -c '
import os
import yaml
hail_dir = os.getenv("HAIL")
x = yaml.safe_load(open(f"{hail_dir}/tls/config.yaml"))["principals"]
print(",".join(x["name"] for x in x))')

    kubectl delete pods -l "app in ($SERVICES_TO_RESTART)"

    # If the command above fails, the script will exit else print "Hail services restarted successfully!" in green with a green check mark
    if [ $? -eq 0 ]; then
        printf "\e[32mHail services restarted successfully!\e[0m \e[32m✔️\e[0m\n"
    else
        printf "\e[31mError: Hail services could not be restarted!\e[0m \e[31m✘\e[0m\n"
        exit 1
    fi

    # Verify the new certificates by checking the dates:
    echo | openssl s_client -servername batch.hail.populationgenomics.org.au -connect batch.hail.populationgenomics.org.au:443 2>/dev/null | openssl x509 -noout -dates

    # Print "Remember to turn off the VM to save costs!" in yellow and add a smiling face
    printf "\e[33mRemember to turn off the VM to save costs!\e[0m \e[32m😊\e[0m\n"

else
    printf "\e[31mYou need to add your user to the docker group to continue!\e[0m \e[31m✘\e[0m\n"
    printf "\e[31mYou can add yourself to the docker group by running the following command:\e[0m \e[31m\n"
    printf "\e[31msudo usermod -aG docker \$USER\e[0m \e[31m\n"
    exit 1
fi