Makefile

# Copyright © 2018 Jimmi Dyson <jimmidyson@gmail.com>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

SHELL=/bin/bash -o pipefail

export GO111MODULE := on

ROOTPKG := $(shell GO111MODULE=$(GO111MODULE) go list -m)
PARENTPKG := $(shell dirname $(ROOTPKG))
BINARYNAME := $(shell basename $(ROOTPKG))

BUILD_DATE := $(shell date -u)
VERSION ?= $(shell git describe --match 'v[0-9]*' --dirty=-dev --always)

KUBERNETES_CLUSTER ?= 
KUBERNETES_CLUSTER_SANITIZED := $(subst /,., $(KUBERNETES_CLUSTER))
DCOS_TASK ?= kube-control-plane-0-instance

CIS_FOCUS ?=

.PHONY: build
build: out/$(BINARYNAME)

OS := $(shell uname)
ifeq ($(OS),Darwin)
SEDI := sed -i ''
OPEN := open
else
SEDI := sed -i
OPEN := xdg-open
endif

out/$(BINARYNAME): $(wildcard */*.go)
	@GOOS=linux GOARCH=amd64 go build \
		-tags netgo \
		-ldflags "-extldflags \"-static\" -X $(ROOTPKG)/pkg/version.AppVersion=$(VERSION) -X '$(ROOTPKG)/pkg/version.BuildDate=$(BUILD_DATE)'" \
		-o $(CURDIR)/out/$(BINARYNAME) .

.PHONY: clean
clean:
	@rm -rf results out

.PHONY: test.dcos
test.dcos: build $(addprefix test.dcos.,control-plane etcd kubelet) test.dcos.aggregate

.PHONY: test.dcos.aggregate
test.dcos.aggregate:
	@for f in $$(find $(CURDIR)/results -name cis.json); do \
		directory_name=$$(basename `dirname $${f}`) ; \
		jq ".specs |= ([.[] | {name: .name, results: {\"$${directory_name}\": del(.name)}}])" $${f} > $(CURDIR)/results/$${directory_name}/cis-munged.json ; \
	done ;
	@jq --slurp -f $(CURDIR)/aggregate.jq $$(find $(CURDIR)/results -name cis-munged.json) > $(CURDIR)/results/cis-aggregated.json
	@$(SEDI) 's|$(GOPATH)/src/||g' $(CURDIR)/results/cis-aggregated.json
	@go run $(CURDIR)/cmd/aggregated-render/main.go ./results/cis-aggregated.json ./aggregated.html.tmpl $(CURDIR)/results/aggregated.html
	@$(OPEN) $(CURDIR)/results/aggregated.html ; \

.PHONY: test.dcos.remote
test.dcos.remote:
ifndef DCOS_TASK
	$(error "Missing DCOS_TASK variable")
endif
	@mkdir -p $(CURDIR)/results/$(DCOS_TASK)
	@echo "Copying binary to $(KUBERNETES_CLUSTER_SANITIZED)__$(DCOS_TASK)"
	@cat out/$(BINARYNAME) | dcos task exec -i $(KUBERNETES_CLUSTER_SANITIZED)__$(DCOS_TASK) bash -c "cat > $(BINARYNAME)"
	@dcos task exec $(KUBERNETES_CLUSTER_SANITIZED)__$(DCOS_TASK) chmod +x $(BINARYNAME)
	@echo "Running tests on $(DCOS_TASK)"
	@dcos task exec $(KUBERNETES_CLUSTER_SANITIZED)__$(DCOS_TASK) ./$(BINARYNAME) cis $(CIS_FOCUS) > $(CURDIR)/results/$(DCOS_TASK)/stdout.txt || true
	@echo "Retrieving junit results from $(DCOS_TASK) into $(CURDIR)/results/$(DCOS_TASK)/junit.xml"
	@dcos task exec -i $(KUBERNETES_CLUSTER_SANITIZED)__$(DCOS_TASK) bash -c "cat junit.xml" > $(CURDIR)/results/$(DCOS_TASK)/junit.xml
	@echo "Retrieving json results from $(DCOS_TASK) into $(CURDIR)/results/$(DCOS_TASK)/cis.json"
	@dcos task exec -i $(KUBERNETES_CLUSTER_SANITIZED)__$(DCOS_TASK) bash -c "cat cis.json" > $(CURDIR)/results/$(DCOS_TASK)/cis.json

.PHONY: test.dcos.control-plane
test.dcos.control-plane: build
	@$(MAKE) DCOS_TASK=kube-control-plane-0-instance CIS_FOCUS=$(CIS_FOCUS) test.dcos.remote

.PHONY: test.dcos.etcd
test.dcos.etcd: build
	@$(MAKE) DCOS_TASK=etcd-0-peer CIS_FOCUS=$(CIS_FOCUS) test.dcos.remote

.PHONY: test.dcos.kubelet
test.dcos.kubelet: build
	@$(MAKE) DCOS_TASK=kube-node-0-kubelet CIS_FOCUS=$(CIS_FOCUS) test.dcos.remote