Configure ArgoCD notifications for Slack and Microsoft Teams with webhook integration

#!/usr/bin/env bash
set -euo pipefail

# ArgoCD Notifications Configuration Script for Slack and Microsoft Teams
# Supports: Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, RHEL, Amazon Linux

# Colors for output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
NC='\033[0m' # No Color

# Default values
ARGOCD_NAMESPACE="${ARGOCD_NAMESPACE:-argocd}"
SLACK_WEBHOOK="${1:-}"
TEAMS_WEBHOOK="${2:-}"

# Usage message
usage() {
    echo "Usage: $0 <slack_webhook_url> <teams_webhook_url> [argocd_namespace]"
    echo "Example: $0 'https://hooks.slack.com/services/T00/B00/XXX' 'https://outlook.office.com/webhook/...' argocd"
    exit 1
}

# Check arguments
if [[ -z "$SLACK_WEBHOOK" || -z "$TEAMS_WEBHOOK" ]]; then
    echo -e "${RED}Error: Missing required webhook URLs${NC}"
    usage
fi

if [[ $# -ge 3 ]]; then
    ARGOCD_NAMESPACE="$3"
fi

# Cleanup function
cleanup() {
    echo -e "${YELLOW}Cleaning up temporary files...${NC}"
    rm -f /tmp/argocd-notifications-*.yaml 2>/dev/null || true
}

trap cleanup ERR EXIT

# Detect OS and set package manager
echo -e "${YELLOW}[1/8] Detecting operating system...${NC}"
if [ -f /etc/os-release ]; then
    . /etc/os-release
    case "$ID" in
        ubuntu|debian)
            PKG_MGR="apt"
            PKG_INSTALL="apt install -y"
            PKG_UPDATE="apt update"
            ;;
        almalinux|rocky|centos|rhel|ol)
            PKG_MGR="dnf"
            PKG_INSTALL="dnf install -y"
            PKG_UPDATE="dnf check-update || true"
            ;;
        fedora)
            PKG_MGR="dnf"
            PKG_INSTALL="dnf install -y"
            PKG_UPDATE="dnf check-update || true"
            ;;
        amzn)
            PKG_MGR="yum"
            PKG_INSTALL="yum install -y"
            PKG_UPDATE="yum check-update || true"
            ;;
        *)
            echo -e "${RED}Unsupported distribution: $ID${NC}"
            exit 1
            ;;
    esac
else
    echo -e "${RED}Cannot detect OS. /etc/os-release not found.${NC}"
    exit 1
fi

echo -e "${GREEN}Detected: $PRETTY_NAME using $PKG_MGR${NC}"

# Check if running as root or with sudo
echo -e "${YELLOW}[2/8] Checking privileges...${NC}"
if [[ $EUID -ne 0 && -z "${SUDO_USER:-}" ]]; then
    echo -e "${RED}This script must be run as root or with sudo${NC}"
    exit 1
fi

# Install required packages
echo -e "${YELLOW}[3/8] Installing required packages...${NC}"
$PKG_UPDATE
if command -v kubectl >/dev/null 2>&1; then
    echo -e "${GREEN}kubectl already installed${NC}"
else
    if [[ "$PKG_MGR" == "apt" ]]; then
        $PKG_INSTALL curl apt-transport-https ca-certificates gnupg
        curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.28/deb/Release.key | gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg
        echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.28/deb/ /' > /etc/apt/sources.list.d/kubernetes.list
        apt update
        $PKG_INSTALL kubectl
    else
        cat > /etc/yum.repos.d/kubernetes.repo << 'EOF'
[kubernetes]
name=Kubernetes
baseurl=https://pkgs.k8s.io/core:/stable:/v1.28/rpm/
enabled=1
gpgcheck=1
gpgkey=https://pkgs.k8s.io/core:/stable:/v1.28/rpm/repodata/repomd.xml.key
EOF
        $PKG_INSTALL kubectl
    fi
fi

# Verify kubectl connectivity
echo -e "${YELLOW}[4/8] Verifying Kubernetes connectivity...${NC}"
if ! kubectl cluster-info >/dev/null 2>&1; then
    echo -e "${RED}Cannot connect to Kubernetes cluster. Please configure kubectl.${NC}"
    exit 1
fi

# Check if ArgoCD namespace exists
echo -e "${YELLOW}[5/8] Checking ArgoCD namespace...${NC}"
if ! kubectl get namespace "$ARGOCD_NAMESPACE" >/dev/null 2>&1; then
    echo -e "${RED}ArgoCD namespace '$ARGOCD_NAMESPACE' not found. Please install ArgoCD first.${NC}"
    exit 1
fi

# Install ArgoCD notifications controller
echo -e "${YELLOW}[6/8] Installing ArgoCD notifications controller...${NC}"
kubectl apply -n "$ARGOCD_NAMESPACE" -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/notifications_install.yaml

# Wait for controller to be ready
echo "Waiting for notifications controller to be ready..."
kubectl wait --for=condition=available deployment/argocd-notifications-controller -n "$ARGOCD_NAMESPACE" --timeout=300s

# Create secrets for webhooks
echo -e "${YELLOW}[7/8] Creating notification secrets...${NC}"
kubectl create secret generic argocd-notifications-secret \
  --from-literal=slack-token="$SLACK_WEBHOOK" \
  --from-literal=teams-webhook="$TEAMS_WEBHOOK" \
  -n "$ARGOCD_NAMESPACE" \
  --dry-run=client -o yaml | kubectl apply -f -

# Create notifications configuration
echo "Creating notification configuration..."
cat > /tmp/argocd-notifications-cm.yaml << 'EOF'
apiVersion: v1
kind: ConfigMap
metadata:
  name: argocd-notifications-cm
  namespace: NAMESPACE_PLACEHOLDER
data:
  service.slack: |
    token: $slack-token
    username: ArgoCD
    channel: "#deployments"
    iconEmoji: ":rocket:"
  service.teams: |
    recipientUrls:
      general: $teams-webhook
  template.app-deployed: |
    webhook:
      teams:
        method: POST
        body: |
          {
            "@type": "MessageCard",
            "@context": "https://schema.org/extensions",
            "summary": "Application {{.app.metadata.name}} deployed",
            "themeColor": "00FF00",
            "sections": [{
              "activityTitle": "Application Deployed Successfully",
              "activitySubtitle": "{{.app.metadata.name}} in {{.app.spec.destination.namespace}}",
              "facts": [
                {"name": "Repository", "value": "{{.app.spec.source.repoURL}}"},
                {"name": "Revision", "value": "{{.app.status.sync.revision}}"},
                {"name": "Sync Status", "value": "{{.app.status.sync.status}}"}
              ]
            }]
          }
      slack:
        attachments: |
          [{
            "title": "{{.app.metadata.name}}",
            "title_link": "{{.context.argocdUrl}}/applications/{{.app.metadata.name}}",
            "color": "#18be52",
            "fields": [
              {"title": "Sync Status", "value": "{{.app.status.sync.status}}", "short": true},
              {"title": "Repository", "value": "{{.app.spec.source.repoURL}}", "short": true}
            ]
          }]
  template.app-sync-failed: |
    webhook:
      teams:
        method: POST
        body: |
          {
            "@type": "MessageCard",
            "@context": "https://schema.org/extensions",
            "summary": "Application {{.app.metadata.name}} sync failed",
            "themeColor": "FF0000",
            "sections": [{
              "activityTitle": "Application Sync Failed",
              "activitySubtitle": "{{.app.metadata.name}} in {{.app.spec.destination.namespace}}",
              "facts": [
                {"name": "Repository", "value": "{{.app.spec.source.repoURL}}"},
                {"name": "Sync Status", "value": "{{.app.status.sync.status}}"}
              ]
            }]
          }
      slack:
        attachments: |
          [{
            "title": "{{.app.metadata.name}}",
            "title_link": "{{.context.argocdUrl}}/applications/{{.app.metadata.name}}",
            "color": "#E96D76",
            "fields": [
              {"title": "Sync Status", "value": "{{.app.status.sync.status}}", "short": true},
              {"title": "Repository", "value": "{{.app.spec.source.repoURL}}", "short": true}
            ]
          }]
  trigger.on-deployed: |
    - description: Application is synced and healthy
      oncePer: app.status.sync.revision
      send:
      - app-deployed
      when: app.status.operationState.phase in ['Succeeded'] and app.status.health.status == 'Healthy'
  trigger.on-sync-failed: |
    - description: Application syncing has failed
      send:
      - app-sync-failed
      when: app.status.operationState.phase in ['Error', 'Failed']
EOF

# Replace namespace placeholder and apply
sed "s/NAMESPACE_PLACEHOLDER/$ARGOCD_NAMESPACE/g" /tmp/argocd-notifications-cm.yaml | kubectl apply -f -

# Verify installation
echo -e "${YELLOW}[8/8] Verifying installation...${NC}"
echo "Checking notifications controller status..."
kubectl get pods -n "$ARGOCD_NAMESPACE" -l app.kubernetes.io/name=argocd-notifications-controller

echo "Checking configuration..."
kubectl get configmap argocd-notifications-cm -n "$ARGOCD_NAMESPACE" >/dev/null
kubectl get secret argocd-notifications-secret -n "$ARGOCD_NAMESPACE" >/dev/null

echo -e "${GREEN}✓ ArgoCD notifications controller installed successfully${NC}"
echo -e "${GREEN}✓ Slack and Teams webhooks configured${NC}"
echo -e "${GREEN}✓ Notification templates and triggers created${NC}"
echo ""
echo -e "${YELLOW}Next steps:${NC}"
echo "1. Add notifications to your ArgoCD applications with annotations:"
echo "   notifications.argoproj.io/subscribe.on-deployed.slack: \"\""
echo "   notifications.argoproj.io/subscribe.on-sync-failed.teams: \"\""
echo "2. Monitor logs: kubectl logs -n $ARGOCD_NAMESPACE -l app.kubernetes.io/name=argocd-notifications-controller"