dotfiles/dot_local/bin/executable_kubectl-invoke

#!/usr/bin/env -S guile --no-auto-compile -e main -s
!#

(use-modules (json)
             (srfi srfi-1)
             (srfi srfi-37)
             (guix scripts))

(define %options
  (list
   (option '(#\d "dry-run") #f #f
           (lambda (opt name arg result)
             (values (alist-cons 'dry-run? #t result)
                     #f)))
   (option '(#\N "host-network") #f #f
           (lambda (opt name arg result)
             (values (alist-cons 'host-network? #t result)
                     #f)))
   (option '(#\n "namespace") #t #f
           (lambda (opt name arg result)
             (alist-cons 'namespace arg result)))
   (option '(#\H "host") #t #f
           (lambda (opt name arg result)
             (alist-cons 'host arg result)))
   (option '(#\f "format") #t #f
           (lambda (opt name arg result)
             (alist-cons 'format arg result)))
   (option '(#\u "uid") #t #f
           (lambda (opt name arg result)
             (alist-cons 'uid arg result)))
   (option '(#\g "gid") #t #f
           (lambda (opt name arg result)
             (alist-cons 'gid arg result)))
   (option '(#\m "machinectl") #t #f
           (lambda (opt name arg result)
             (alist-cons 'machinectl arg result)))
   (option '(#\s "sudo") #t #f
           (lambda (opt name arg result)
             (alist-cons 'sudo arg result)))
   (option '(#\C "cpu") #t #f
           (lambda (opt name arg result)
             (alist-cons 'cpu arg result)))
   (option '(#\M "memory") #t #f
           (lambda (opt name arg result)
             (alist-cons 'memory arg result)))
   (option '(#\i "image") #t #f
           (lambda (opt name arg result)
             (alist-cons 'image arg result)))
   (option '(#\S "spec") #t #f
           (lambda (opt name arg result)
             (alist-cons 'spec arg result)))))

(define %default-options
  '(()))

(define (random-string)
  (fold string-append "" (map number->string (map random (cdr (iota 19))))))

(define (main args)
  (define opts
    (parse-command-line args %options
                        (list %default-options)))
  (define dry-run? (assoc-ref opts 'dry-run?))
  (define host-network? (assoc-ref opts 'host-network?))
  (define namespace (assoc-ref opts 'namespace))
  (define host (assoc-ref opts 'host))
  (define format
    (or (assoc-ref opts 'format)
        "busybox"))
  (define uid (assoc-ref opts 'uid))
  (define gid (assoc-ref opts 'gid))
  (define machinectl (assoc-ref opts 'machinectl))
  (define sudo (assoc-ref opts 'sudo))
  (define cpu (assoc-ref opts 'cpu))
  (define memory (assoc-ref opts 'memory))
  (define image (assoc-ref opts 'image))
  (define spec
    (let ((spec (assoc-ref opts 'spec)))
      (if spec
          (json-string->scm spec)
          '())))
  (case (string->symbol format)
    ((busybox)
     (let ((labels '(("app.kubernetes.io/name" . "busybox"))))
       (apply system*
              `(,@(if dry-run? '("echo") '())
                "kubectl"
                "run"
                "--rm=true"
                "--stdin=true"
                "--tty=true"
                ,@(if namespace
                      (list (string-append "--namespace=" namespace))
                      '())
                ,(string-append "--labels="
                                (string-join
                                 (map (lambda (label)
                                        (string-append (first label)
                                                       "="
                                                       (cdr label)))
                                      labels)
                                 ","))
                ,@(if host
                      (list
                       (string-concatenate
                        (list
                         "--overrides="
                         (scm->json-string
                          `(("spec"
                             ("tolerations"
                              .
                              #((("effect" . "NoSchedule")
                                 ("value" . "true")
                                 ("operator" . "Equal")
                                 ("key" . "unschedulable"))))
                             ("nodeSelector"
                              ("kubernetes.io/hostname" . ,host)))
                            ("apiVersion" . "v1"))))))
                      '())
                ,(string-append "busybox-" (random-string))
                "--image=busybox"
                "/bin/sh"))))
    ((nixery)
     (let ((labels '(("app.kubernetes.io/name" . "nixery"))))
       (apply system*
              `(,@(if dry-run? '("echo") '())
                "kubectl"
                "run"
                "--rm=true"
                "--stdin=true"
                "--tty=true"
                ,@(if namespace
                      (list (string-append "--namespace=" namespace))
                      '())
                ,(string-append "--labels="
                                (string-join
                                 (map (lambda (label)
                                        (string-append (first label)
                                                       "="
                                                       (cdr label)))
                                      labels)
                                 ","))
                ,@(if host
                      (list
                       (string-concatenate
                        (list
                         "--overrides="
                         (scm->json-string
                          `(("spec"
                             ("hostNetwork" . ,host-network?)
                             ("tolerations"
                              .
                              #((("effect" . "NoSchedule")
                                 ("value" . "true")
                                 ("operator" . "Equal")
                                 ("key" . "unschedulable"))))
                             ("nodeSelector"
                              ("kubernetes.io/hostname" . ,host))
                             ,@spec)
                            ("apiVersion" . "v1"))))))
                      '())
                ,(string-append "nixery-" (random-string))
                ,(string-append "--image=" (if image image "nixery.dev/shell"))
                "/bin/bash"))))
    ((netshoot)
     (let ((labels '(("app.kubernetes.io/name" . "netshoot"))))
       (apply system*
              `(,@(if dry-run? '("echo") '())
                "kubectl"
                "run"
                "--rm=true"
                "--stdin=true"
                "--tty=true"
                ,@(if namespace
                      (list (string-append "--namespace=" namespace))
                      '())
                ,(string-append "--labels="
                                (string-join
                                 (map (lambda (label)
                                        (string-append (first label)
                                                       "="
                                                       (cdr label)))
                                      labels)
                                 ","))
                ,@(if host
                      (list
                       (string-concatenate
                        (list
                         "--overrides="
                         (scm->json-string
                          `(("spec"
                             ("tolerations"
                              .
                              #((("effect" . "NoSchedule")
                                 ("value" . "true")
                                 ("operator" . "Equal")
                                 ("key" . "unschedulable"))))
                             ("nodeSelector"
                              ("kubernetes.io/hostname" . ,host)))
                            ("apiVersion" . "v1"))))))
                      '())
                ,(string-append "netshoot-" (random-string))
                "--image=nicolaka/netshoot"
                "/bin/bash"))))
    ((nanoserver)
     (let ((labels '(("app.kubernetes.io/name" . "nanoserver"))))
       (apply system*
              `(,@(if dry-run? '("echo") '())
                "kubectl"
                "run"
                "--rm=true"
                "--stdin=true"
                "--tty=true"
                ,@(if namespace
                      (list (string-append "--namespace=" namespace))
                      '())
                ,(string-append "--labels="
                                (string-join
                                 (map (lambda (label)
                                        (string-append (first label)
                                                       "="
                                                       (cdr label)))
                                      labels)
                                 ","))
                ,@(if host
                      (list
                       (string-concatenate
                        (list
                         "--overrides="
                         (scm->json-string
                          `(("spec"
                             ("tolerations"
                              .
                              #((("effect" . "NoSchedule")
                                 ("value" . "true")
                                 ("operator" . "Equal")
                                 ("key" . "unschedulable"))))
                             ("nodeSelector"
                              ("kubernetes.io/hostname" . ,host)))
                            ("apiVersion" . "v1"))))))
                      '())
                ,(string-append "nanoserver-" (random-string))
                "--image=mcr.microsoft.com/windows/nanoserver:ltsc2022"))))
    ((shell)
     (let ((labels '(("app.kubernetes.io/name" . "nsenter"))))
       (apply system*
              `(,@(if dry-run? '("echo") '())
                "kubectl"
                "run"
                "--rm=true"
                "--stdin=true"
                "--tty=true"
                ,@(if namespace
                      (list (string-append "--namespace=" namespace))
                      '())
                ,(string-append "--labels="
                                (string-join
                                 (map (lambda (label)
                                        (string-append (first label)
                                                       "="
                                                       (cdr label)))
                                      labels)
                                 ","))
                ,@(if host
                      (list
                       (string-concatenate
                        (list
                         "--overrides="
                         (scm->json-string
                          `(("spec"
                             ("tolerations"
                              .
                              #((("operator" . "Exists")
                                 ("key" . "CriticalAddonsOnly"))
                                (("operator" . "Exists")
                                 ("effect" . "NoExecute"))))
                             ("containers"
                              .
                              #((("resources"
                                  ("requests"
                                   ,@(if memory
                                         (list (cons "memory" memory))
                                         (list (cons "memory" "256Mi")))
                                   ,@(if cpu
                                         (list (cons "cpu" cpu))
                                         (list (cons "cpu" "100m"))))
                                  ("limits"
                                   ,@(if memory
                                         (list (cons "memory" memory))
                                         (list (cons "memory" "256Mi")))
                                   ,@(if cpu
                                         (list (cons "cpu" cpu))
                                         (list (cons "cpu" "100m")))))
                                 ("command"
                                  .
                                  #("nsenter"
                                    "--target"
                                    "1"
                                    "--mount"
                                    "--uts"
                                    "--ipc"
                                    "--net"
                                    "--pid"
                                    "--no-fork"
                                    ,@(if uid
                                          (list "-S" uid)
                                          '())
                                    ,@(if gid
                                          (list "-G" gid)
                                          '())
                                    ,@(cond
                                       (machinectl
                                        (list "sh" "-l" "-c"
                                              (string-join (list "machinectl" "shell"
                                                                 (string-append machinectl "@")))))
                                       (sudo
                                        (list "sh" "-l" "-c"
                                              (string-join (list "sudo" "-u" sudo "-i"))))
                                       (else
                                        '("/bin/sh" "-l")))))
                                 ("tty" . #t)
                                 ("stdinOnce" . #t)
                                 ("stdin" . #t)
                                 ("name" . "nsenter")
                                 ("image" . "docker.io/library/alpine")
                                 ("securityContext" ("privileged" . #t)))))
                             ("hostNetwork" . #t)
                             ("hostPID" . #t)
                             ("nodeName" . ,host)))))))
                      '())
                "--image=docker.io/library/alpine"
                ,(string-append "shell-" (random-string))))))))