1fb7266469
- Introduced Aggregator.sol for Chainlink-compatible oracle functionality, including round-based updates and access control. - Added OracleWithCCIP.sol to extend Aggregator with CCIP cross-chain messaging capabilities. - Created .gitmodules to include OpenZeppelin contracts as a submodule. - Developed a comprehensive deployment guide in NEXT_STEPS_COMPLETE_GUIDE.md for Phase 2 and smart contract deployment. - Implemented Vite configuration for the orchestration portal, supporting both Vue and React frameworks. - Added server-side logic for the Multi-Cloud Orchestration Portal, including API endpoints for environment management and monitoring. - Created scripts for resource import and usage validation across non-US regions. - Added tests for CCIP error handling and integration to ensure robust functionality. - Included various new files and directories for the orchestration portal and deployment scripts.
171 lines
6.5 KiB
Bash
Executable File
171 lines
6.5 KiB
Bash
Executable File
#!/bin/bash
|
|
# Complete Phase 1 Setup Script
|
|
# Automates all next steps that can be automated
|
|
|
|
set -euo pipefail
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
PHASE1_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
|
|
PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../../.." && pwd)"
|
|
ENV_FILE="$PROJECT_ROOT/.env"
|
|
|
|
# Colors
|
|
GREEN='\033[0;32m'
|
|
RED='\033[0;31m'
|
|
YELLOW='\033[1;33m'
|
|
BLUE='\033[0;34m'
|
|
NC='\033[0m'
|
|
|
|
echo "=========================================="
|
|
echo "Phase 1: Complete Setup"
|
|
echo "=========================================="
|
|
echo ""
|
|
|
|
# Load Cloudflare credentials and domain
|
|
if [ -f "$ENV_FILE" ]; then
|
|
echo -e "${BLUE}Loading Cloudflare credentials and domain from .env...${NC}"
|
|
export $(grep -v '^#' "$ENV_FILE" | grep -E "CLOUDFLARE_" | xargs)
|
|
# Get domain from CLOUDFLARE_DOMAIN or extract from RPC_URL
|
|
if [ -z "${CLOUDFLARE_DOMAIN:-}" ]; then
|
|
RPC_URL=$(grep "^RPC_URL=" "$ENV_FILE" 2>/dev/null | cut -d'=' -f2 | tr -d '"' || echo "")
|
|
if [ -n "$RPC_URL" ]; then
|
|
DOMAIN_FROM_ENV=$(echo "$RPC_URL" | sed 's|https\?://||' | sed 's|/.*||')
|
|
fi
|
|
else
|
|
# Use CLOUDFLARE_DOMAIN and construct RPC subdomain
|
|
DOMAIN_FROM_ENV="rpc.${CLOUDFLARE_DOMAIN}"
|
|
fi
|
|
if [ -n "$DOMAIN_FROM_ENV" ]; then
|
|
export DOMAIN_FROM_ENV
|
|
fi
|
|
fi
|
|
|
|
cd "$PHASE1_DIR"
|
|
|
|
# Get infrastructure details
|
|
NGINX_IP=$(terraform output -json 2>/dev/null | jq -r '.nginx_proxy.value.public_ip // empty' || echo "")
|
|
NGINX_PRIVATE_IP=$(terraform output -json 2>/dev/null | jq -r '.nginx_proxy.value.private_ip // empty' || echo "")
|
|
BACKEND_IPS=$(terraform output -json 2>/dev/null | jq -r '.phase1_us_regions.value | to_entries[] | .value.private_ips[0]' | tr '\n' ',' | sed 's/,$//' || echo "")
|
|
|
|
if [ -z "$NGINX_IP" ]; then
|
|
echo -e "${RED}Error: Nginx proxy IP not found${NC}"
|
|
exit 1
|
|
fi
|
|
|
|
echo -e "${GREEN}Infrastructure Details:${NC}"
|
|
echo " Nginx Proxy: $NGINX_IP (public) / $NGINX_PRIVATE_IP (private)"
|
|
echo " Backend IPs: $BACKEND_IPS"
|
|
echo ""
|
|
|
|
# Step 1: Update Nginx backend configuration
|
|
echo -e "${BLUE}Step 1: Updating Nginx Backend Configuration${NC}"
|
|
echo "---------------------------------------------------"
|
|
|
|
if [ -n "$BACKEND_IPS" ]; then
|
|
echo "Copying update script to Nginx proxy..."
|
|
scp "$SCRIPT_DIR/update-nginx-backends.sh" besuadmin@$NGINX_IP:/tmp/ 2>/dev/null || {
|
|
echo -e "${YELLOW}Warning: Could not copy script. Manual step required.${NC}"
|
|
}
|
|
|
|
echo "Updating Nginx backend configuration..."
|
|
ssh -o ConnectTimeout=10 -o StrictHostKeyChecking=no besuadmin@$NGINX_IP "chmod +x /tmp/update-nginx-backends.sh && sudo /tmp/update-nginx-backends.sh '$BACKEND_IPS'" 2>&1 | while read line; do
|
|
echo " $line"
|
|
done || {
|
|
echo -e "${YELLOW}Warning: Could not update Nginx configuration remotely.${NC}"
|
|
echo -e "${YELLOW}Run manually: ssh besuadmin@$NGINX_IP${NC}"
|
|
echo -e "${YELLOW}Then: ./update-nginx-backends.sh '$BACKEND_IPS'${NC}"
|
|
}
|
|
else
|
|
echo -e "${YELLOW}Warning: Backend IPs not found. Skipping Nginx update.${NC}"
|
|
fi
|
|
|
|
echo ""
|
|
|
|
# Step 2: Setup Cloudflare Tunnel
|
|
echo -e "${BLUE}Step 2: Setting Up Cloudflare Tunnel${NC}"
|
|
echo "---------------------------------------------------"
|
|
|
|
DOMAIN_NAME="${1:-${DOMAIN_FROM_ENV:-}}"
|
|
if [ -z "$DOMAIN_NAME" ]; then
|
|
echo -e "${YELLOW}No domain name provided. Skipping Cloudflare Tunnel setup.${NC}"
|
|
echo -e "${YELLOW}To setup manually:${NC}"
|
|
echo -e "${YELLOW} ssh besuadmin@$NGINX_IP${NC}"
|
|
echo -e "${YELLOW} ./setup-cloudflare-tunnel.sh <domain-name>${NC}"
|
|
else
|
|
echo -e "${GREEN}Using domain: $DOMAIN_NAME${NC}"
|
|
echo "Copying Cloudflare Tunnel setup script..."
|
|
scp "$SCRIPT_DIR/setup-cloudflare-tunnel.sh" besuadmin@$NGINX_IP:/tmp/ 2>/dev/null || {
|
|
echo -e "${YELLOW}Warning: Could not copy script. Manual step required.${NC}"
|
|
}
|
|
|
|
echo -e "${YELLOW}Cloudflare Tunnel setup requires browser authentication.${NC}"
|
|
echo -e "${YELLOW}Please run manually:${NC}"
|
|
echo -e "${YELLOW} ssh besuadmin@$NGINX_IP${NC}"
|
|
echo -e "${YELLOW} cd /tmp && ./setup-cloudflare-tunnel.sh $DOMAIN_NAME${NC}"
|
|
fi
|
|
|
|
echo ""
|
|
|
|
# Step 3: Backend VM Configuration
|
|
echo -e "${BLUE}Step 3: Backend VM Configuration${NC}"
|
|
echo "---------------------------------------------------"
|
|
echo -e "${YELLOW}Backend VMs use private IPs and require VPN/Bastion access.${NC}"
|
|
echo -e "${YELLOW}Configuration scripts are ready for manual execution:${NC}"
|
|
echo ""
|
|
|
|
BACKEND_VMS=$(terraform output -json 2>/dev/null | jq -r '.phase1_us_regions.value | to_entries[] | "\(.key):\(.value.private_ips[0]):\(.value.vm_names[0])"' || echo "")
|
|
|
|
if [ -n "$BACKEND_VMS" ]; then
|
|
while IFS=: read -r region ip vm_name; do
|
|
if [ -n "$ip" ] && [ "$ip" != "null" ]; then
|
|
echo -e " ${BLUE}Region: $region${NC}"
|
|
echo -e " IP: $ip"
|
|
echo -e " VM: $vm_name"
|
|
echo -e " Command: ssh besuadmin@$ip"
|
|
echo -e " Then: ./setup-besu-node.sh besu-node 0 $region"
|
|
echo ""
|
|
fi
|
|
done <<< "$BACKEND_VMS"
|
|
fi
|
|
|
|
# Step 4: Cloudflare DNS Configuration
|
|
echo -e "${BLUE}Step 4: Cloudflare DNS Configuration${NC}"
|
|
echo "---------------------------------------------------"
|
|
|
|
if [ -n "${CLOUDFLARE_ZONE_ID:-}" ] && [ -n "${CLOUDFLARE_API_TOKEN:-}" ] && [ -n "$DOMAIN_NAME" ]; then
|
|
echo "Cloudflare credentials available. DNS can be configured via API."
|
|
echo -e "${YELLOW}Note: DNS records will be created automatically when Cloudflare Tunnel is set up.${NC}"
|
|
else
|
|
echo -e "${YELLOW}Cloudflare DNS configuration requires:${NC}"
|
|
echo -e "${YELLOW} 1. Domain name${NC}"
|
|
echo -e "${YELLOW} 2. Cloudflare Tunnel ID${NC}"
|
|
echo -e "${YELLOW} 3. Manual configuration in Cloudflare Dashboard${NC}"
|
|
fi
|
|
|
|
echo ""
|
|
|
|
# Summary
|
|
echo "=========================================="
|
|
echo "Setup Summary"
|
|
echo "=========================================="
|
|
echo -e "${GREEN}Completed:${NC}"
|
|
echo " ✓ Infrastructure deployed"
|
|
echo " ✓ Nginx proxy configured"
|
|
echo " ✓ Scripts prepared"
|
|
echo ""
|
|
echo -e "${YELLOW}Manual Steps Required:${NC}"
|
|
echo " 1. Setup Cloudflare Tunnel (requires browser auth)"
|
|
echo " 2. Configure Besu nodes on backend VMs (requires VPN/Bastion)"
|
|
echo " 3. Configure Cloudflare DNS (if not done automatically)"
|
|
echo ""
|
|
echo -e "${BLUE}Next Commands:${NC}"
|
|
if [ -n "$DOMAIN_NAME" ]; then
|
|
echo " ssh besuadmin@$NGINX_IP"
|
|
echo " cd /tmp && ./setup-cloudflare-tunnel.sh $DOMAIN_NAME"
|
|
else
|
|
echo " ssh besuadmin@$NGINX_IP"
|
|
echo " cd /tmp && ./setup-cloudflare-tunnel.sh <your-domain>"
|
|
fi
|
|
echo ""
|
|
|