link.sh

#!/bin/sh

set -eu
set -x

ORG_DOMAIN="${ORG_DOMAIN:-k3d.example.com}"
LINKERD="${LINKERD:-linkerd}"

# Generate credentials so the service-mirror
#
# Unfortunately, the credentials have the API server IP as addressed from
# localhost and not the docker network, so we have to patch that up.
fetch_credentials() {
    cluster="$1"
    # Grab the LB IP of cluster's API server & replace it in the secret blob:
    lb_ip=$(kubectl --context="k3d-$cluster" get svc -n kube-system traefik \
        -o 'go-template={{ (index .status.loadBalancer.ingress 0).ip }}')

    $LINKERD multicluster --context="k3d-$cluster" link \
            --cluster-name="$cluster" \
            --api-server-address="https://${lb_ip}:6443"
}

# East & West get access to each other.
fetch_credentials east | kubectl --context=k3d-west apply -n linkerd-multicluster -f -

fetch_credentials west | kubectl --context=k3d-east apply -n linkerd-multicluster -f -

# Dev gets access to both clusters.
fetch_credentials east | kubectl --context=k3d-dev apply -n linkerd-multicluster -f -
fetch_credentials west | kubectl --context=k3d-dev apply -n linkerd-multicluster -f -

sleep 10
for c in dev east west ; do
    $LINKERD --context="k3d-$c" mc check
done