rubykaigi-net/gen-cloudprober.rb at master · ruby-no-kai/rubykaigi-net · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
#!/usr/bin/env ruby

# Generate cloudprober targets JSON from Route53.
# Run `./gen-cloudporber.rb --apply` to apply.

require 'bundler/inline'
gemfile do
  source 'https://rubygems.org'
  gem 'aws-sdk-route53'
  gem 'ipaddr'
  gem 'json'
  gem 'pathname'
  gem 'resolv'
  gem 'rexml'
end

TARGETS = [
  {
    zone: 'Z05547502KT77L0O53UWK',
    network: '10.33.0.0/16',
    targets: [
      /\Alo\.[\w-]+\.(?:hnd|nrt|itm|venue)\./,
      /\Amanagement\.wlc-[\w-]+\.venue\./,
      /\Airb-1000\.cs-[\w-]+\.venue\./,
      /\Avlan1000\.[ae]s-[\w-]+\.venue\./,
      /\Age-0-0-0-\d0\.br-[\w-]+\.(?:hnd|nrt|itm|venue)\./, # etherip-ipsec
      /\Age-0-0-5-\d0\.er-[\w-]+\.venue\./, # etherip-ipsec
    ],
    labels: {
      network: 'private',
    }
  },
  {
    zone: 'Z05547502KT77L0O53UWK',
    network: '192.50.220.0/24',
    targets: [
      # /\A[\w-]+\.\w+-kmc\./,
      /\Age-0-0-5\.br-01\./,
    ],
    labels: {
      network: 'public',
    }
  },
  {
    zone: 'Z05547502KT77L0O53UWK',
    network: '2001:0df0:8500:ca00::/56',
    targets: [
      /\Abr-01\.[\w-]+\.dualstack\./,
    ],
    labels: {
      network: 'public',
    }
  },
]

@r53 = Aws::Route53::Client.new

@zones = {}
def fetch_rrsets(zone_id)
  @zones[zone_id] ||=
    begin
      rrsets = []
      cursor = {}
      begin
        result = @r53.list_resource_record_sets({
          hosted_zone_id: zone_id,
          **cursor,
        })
        rrsets.concat(result.resource_record_sets)
        cursor = {
          start_record_name: result.next_record_name,
          start_record_type: result.next_record_type,
          start_record_identifier: result.next_record_identifier,
        }
      end while result.is_truncated
      rrsets
    end
end

@targets = {4 => [], 6 => []}

TARGETS.each do |h|
  network = IPAddr.new(h[:network])

  if h[:zone]
    rrsets = fetch_rrsets(h[:zone])

    if network.ipv4?
      rrtype = 'A'
      v4v6 = 4
    else
      rrtype = 'AAAA'
      v4v6 = 6
    end

    rrsets = rrsets.select {|rrset| rrset.type == rrtype }

    h[:targets].each do |t|
      rrsets.each do |rrset|
        name = rrset.name.sub(/.\z/, '')
        next unless t === name
        next if /recon|as-01|tun-03/ =~ name  # rk25

        if rrset.resource_records.empty?
          warn "#{name} has no static #{rrtype} records"
        else
          unless rr = rrset.resource_records.find {|rr| network.include? IPAddr.new(rr.value) }
            warn "#{name} has no addresses in #{network}"
          else
            @targets[v4v6] << {
              name: name,
              ip: rr.value,
              labels: h[:labels]
            }
          end
        end
      end
    end
  end
end

[4, 6].each do |v4v6|
  path = Pathname(__dir__) + "gen/cloudprober/targets#{v4v6}.json"
  path.parent.mkpath
  File.write(path, JSON.pretty_unparse({resource: @targets[v4v6]}))

  if ARGV.include?('--apply')
    system(*%W[aws s3 cp #{path} s3://rubykaigi-public/rknet/cloudprober/], exception: true)
  end
end