#!/bin/bash # Bash funcs shared that combine common gcutil actions into single commands # remove_instance removes a named instance # # remove_instance [="us-central1-b"] remove_instance() { local project=$1 [[ -n $project ]] || { echo "$FUNCNAME: missing arg: project" 1>&2 return 1 } local an_instance=$2 [[ -n $an_instance ]] || { echo "$FUNCNAME: missing arg: an_instance" 1>&2 return 1 } local zone=$3 [[ -n $zone ]] || zone="us-central1-b" gcloud --project $project --quiet \ compute instances delete $an_instance --zone=$zone } # has_instance checks if a project contains a named instance # # has_instance has_instance() { local project=$1 [[ -n $project ]] || { echo "$FUNCNAME: missing arg: project" 1>&2 return 1 } local checked_instance=$2 [[ -n $checked_instance ]] || { echo "$FUNCNAME: missing arg: checked_instance" 1>&2 return 1 } instances=$(gcloud --project $project compute instances list \ | sed -e 's/ \+/ /g' | cut -d' ' -f 1) for i in $instances do if [[ $i == $checked_instance ]] then return 0 fi done return 1 } # find_network_ip finds the ip address of a instance if it is present in the project. # # find_network_ip find_network_ip() { local project=$1 [[ -n $project ]] || { echo "$FUNCNAME: missing arg: project" 1>&2 return 1 } local checked_instance=$2 [[ -n $checked_instance ]] || { echo "$FUNCNAME: missing arg: checked_instance" 1>&2 return 1 } has_instance $project $checked_instance || return 1 gcloud --project $project compute instances list \ | grep -e "$checked_instance\s" | sed -e 's/ \+/ /g' | cut -d' ' -f 4 } # delete_disks deletes a bunch of disks matching a pattern # # delete_disks delete_disks() { local project=$1 [[ -n $project ]] || { echo "$FUNCNAME: missing arg: project" 1>&2 return 1 } local disk_pattern=$2 [[ -n $disk_pattern ]] || { echo "$FUNCNAME: missing arg: disk_pattern" 1>&2 return 1 } trash_disks=$(gcloud --project=$project compute disks list \ | sed -e 's/ \+/ /g' | cut -d' ' -f 1 | grep $disk_pattern) [[ -n $trash_disks ]] && gcloud --project $project \ --quiet compute disks delete $trash_disks } # has_firewall checks if a project contains a named firewall # # has_firewall has_firewall() { local project=$1 [[ -n $project ]] || { echo "$FUNCNAME: missing arg: project" 1>&2 return 1 } local checked_firewall=$2 [[ -n $checked_firewall ]] || { echo "$FUNCNAME: missing arg: checked_firewall" 1>&2 return 1 } instances=$(gcloud --project $project compute firewall-rules list \ | sed -e 's/ \+/ /g' | cut -d' ' -f 1) for i in $instances do if [[ $i == $checked_firewall ]] then return 0 fi done return 1 } # remove_firewall removes a named firewall from a project. # # remove_firewall remove_firewall() { local project=$1 [[ -n $project ]] || { echo "$FUNCNAME: missing arg: project" 1>&2 return 1 } local a_firewall=$2 [[ -n $a_firewall ]] || { echo "$FUNCNAME: missing arg: a_firewall" 1>&2 return 1 } gcloud --project $project --quiet compute firewall-rules delete $a_firewall } # has_network checks if a project contains a named network # # has_network has_network() { local project=$1 [[ -n $project ]] || { echo "$FUNCNAME: missing arg: project" 1>&2 return 1 } local checked_network=$2 [[ -n $checked_network ]] || { echo "$FUNCNAME: missing arg: checked_network" 1>&2 return 1 } instances=$(gcloud --project $project compute networks list \ | sed -e 's/ \+/ /g' | cut -d' ' -f 1) for i in $instances do if [[ $i == $checked_network ]] then return 0 fi done return 1 } # maybe_setup_dev_network adds a network with the given name with firewalls # useful to development # # - All machines can accessed internally and externally over SSH (port 22) # - All machines can access one another other the internal network # - All machines can be accessed externally via port 80, 443, 8080 and 8443 maybe_setup_dev_network() { local name=$1 [[ -n $name ]] || { echo "$FUNCNAME: missing arg: network name" 1>&2 return 1 } local project=$2 [[ -n $project ]] || { echo "$FUNCNAME: missing arg: project" 1>&2 return 1 } has_network $project $name || { echo "creating network '$name'" 1>&2 gcloud compute --project $project networks create $name || return 1 } # allow instances on the network to connect to each other internally has_firewall $project "$name-ssh" || { echo "adding firewall '$name-ssh'" 1>&2 gcloud compute --project $project firewall-rules create "$name-ssh" \ --network $name \ --allow tcp:22 || return 1; } # allow instances on the network to connect to each other internally has_firewall $project "$name-internal" || { echo "adding firewall '$name-internal'" 1>&2 gcloud compute --project $project firewall-rules create "$name-internal" \ --network $name \ --source-ranges 10.0.0.0/16 --allow tcp udp icmp || return 1; } # allow instances on the network to be connected to from external ips on # specific ports has_firewall $project "$name-external" || { echo "adding firewall '$name-external'" 1>&2 gcloud compute --project $project firewall-rules create "$name-external" \ --network $name \ --allow tcp:80 tcp:8080 tcp:443 tcp:8443 || return 1; } } # maybe_remove_dev_network removes a network set up by maybe_setup_dev_network maybe_remove_dev_network() { local name=$1 [[ -n $name ]] || { echo "$FUNCNAME: missing arg: network name" 1>&2 return 1 } local project=$2 [[ -n $project ]] || { echo "$FUNCNAME: missing arg: project" 1>&2 return 1 } has_network $project $name || { echo "network $name is not present" return 0 } for i in $(gcloud compute firewall-rules list \ | grep "$name-" | cut -d' ' -f 1) do gcloud compute --quiet firewall-rules delete $i || return 1; done gcloud compute --quiet networks delete $name } # find_named_ip finds the external ip address for a given name. # # find_named_ip find_named_ip() { local name=$1 [[ -n $name ]] || { echo "$FUNCNAME: missing arg: name" 1>&2; return 1; } [[ $name == 'none' ]] && return 0; gcloud compute addresses list | sed -e 's/ \+/ /g' \ | grep $name | cut -d' ' -f 3 }