altaire-siren 0.1.0

data/lib/siren/crypto.rb

@@ -0,0 +1,17 @@
+require "jose"
+
+module Siren
+module Crypto
+  
+  def self.genkeys
+    key = JOSE::JWK.generate_key([:ec, "P-256"])
+    return [key, key.to_public]
+  end
+
+  def self.encrypt (data)
+    @key ||= JOSE::JWK.from_file("public.jwk")
+    @key.box_encrypt(data)[0].compact
+  end
+
+end
+end

data/lib/siren/song.rb

@@ -0,0 +1,214 @@
+require 'yaml'
+
+module Siren
+
+  class Song
+
+    attr_reader :env, :services
+
+    def self.load (filename)
+      new(YAML.load(File.read(filename)))
+    end
+
+    def initialize (data)
+      @name = data["metadata"]["name"]
+      @ns = data["metadata"]["namespace"]
+      @spec = data["spec"]
+      process()
+    end
+
+    def get (what, key)
+      return [] unless what.has_key?(key)
+      val = what[key]
+      return val if val.is_a?(Array)
+      return [val]
+    end
+
+    def process ()
+      @env = {}
+      @env.merge! process_env(@spec["env"])
+      @services = get(@spec, "service").map do |svc|
+        svc
+      end
+    end
+
+    def process_env (hash)
+      hash = hash.dup
+      hash.map do |name, value|
+        next unless value.is_a?(Hash)
+        case value.keys[0]
+        when "encrypt"
+          hash[name] = { "secure" => Siren::Crypto.encrypt(value.values[0]) }
+        end
+      end
+      return hash
+    end
+
+    def to_yaml
+      data = {
+        "apiVersion" => "altaire.com/v1alpha1",
+        "kind" => "Song",
+        "metadata" => { "name" => @name, "namespace" => @ns }.compact,
+        "spec" => {
+          "services" => @services,
+          "env" => @env,
+        }
+      }
+      JSON.parse(data.to_json).to_yaml
+    end
+
+    def makename (*parts)
+      parts.compact.join("-")
+    end
+
+    def env_to_k8s (hash)
+      res = []
+      hash.each do |name, value|
+        res << { name: name, value: value }
+      end
+      res
+    end
+
+    def to_deployment (svc)
+      name = makename(@name, svc["name"])
+      @stack.things << {
+        apiVersion: "apps/v1",
+        kind: "Deployment",
+        metadata: { name: name, "namespace" => @ns }.compact,
+        spec: {
+          selector: {
+            matchLabels: {
+              service: name
+            }
+          },
+          template: {
+            metadata: {
+              labels: {
+                service: name
+              }
+            },
+            spec: {
+              containers: [
+                name: name,
+                image: svc["image"],
+                env: env_to_k8s(env.merge(svc["env"] || {})),
+              ],
+              imagePullSecrets: [{ name: "regcred" }],
+            }
+          },
+        },
+      }
+    end
+
+    def to_service (svc)
+      name = makename(@name, svc["name"])
+      @stack.things << {
+        apiVersion: "v1",
+        kind: "Service",
+        metadata: { name: name, "namespace" => @ns }.compact,
+        spec: {
+          selector: {
+            service: name
+          },
+          ports: get(svc, "publish").map do |publish|
+            {
+              targetPort: publish["port"],
+              port: publish["externalPort"] || 80,
+            }
+          end
+        },
+      }
+    end
+
+    def to_certificate (svc)
+      name = makename(@name, svc["name"])
+      get(svc, "publish").map do |publish|
+        get(publish, "domain").map do |domain|
+          @stack.things << {
+            apiVersion: "cert-manager.io/v1alpha2",
+            kind: "Certificate",
+            metadata: { name: name, "namespace" => @ns }.compact,
+            spec: {
+              secretName: makename(name, domain, "tls"),
+              duration: "2160h",
+              renewBefore: "360h",
+              commonName: domain,
+              dnsNames: [domain],
+              issuerRef: {kind: "ClusterIssuer", name: "letsencrypt-production"},
+            },
+          }
+        end
+      end
+    end
+
+    def to_domain (svc)
+      name = makename(@name, svc["name"])
+      get(svc, "publish").map do |publish|
+        get(publish, "domain").map do |domain|
+          @stack.things << {
+            apiVersion: "altaire.com/v1alpha1",
+            kind: "Domain",
+            metadata: { name: makename(name, domain), "namespace" => @ns }.compact,
+            spec: {
+              domain: domain,
+              service: "traefik",
+            }
+          }
+        end
+      end
+    end
+
+    def to_ingress_route (svc)
+      name = makename(@name, svc["name"])
+      get(svc, "publish").map do |publish|
+        get(publish, "domain").map do |domain|
+          @stack.things << {
+            apiVersion: "traefik.containo.us/v1alpha1",
+            kind: "IngressRoute",
+            metadata: { name: makename(name, domain), "namespace" => @ns }.compact,
+            spec: {
+              tls: { secretName: makename(name, domain, "tls") },
+              routes: [
+                {
+                  match: "Host(`#{domain}`)",
+                  kind: "Rule",
+                  services: [
+                    {
+                      name: name,
+                      port: 80,
+                    }
+                  ],
+                  middlewares: publish["auth"] ? [{name: "altaire-auth"}] : []
+                }
+              ]
+            }
+          }
+        end
+      end
+    end
+
+    def to_namespace ()
+      return if @ns == nil
+      @stack.things << {
+        apiVersion: "v1",
+        kind: "Namespace",
+        metadata: { name: @ns },
+      }
+    end
+
+    def to_stack ()
+      @stack = Stack.new
+      to_namespace()
+      @services.each do |svc|
+        to_deployment(svc)
+        to_service(svc)
+        to_certificate(svc)
+        to_domain(svc)
+        to_ingress_route(svc)
+      end
+      @stack
+    end
+
+  end
+
+end

data/lib/siren/stack.rb

@@ -0,0 +1,25 @@
+require 'yaml'
+
+module Siren
+
+  class Stack
+
+    attr_reader :things
+
+    def self.load (filename)
+      new(YAML.load(File.read(filename)))
+    end
+
+    def initialize ()
+      @things = []
+    end
+
+    def to_yaml ()
+      @things.map do |thing|
+        JSON.parse(thing.to_json).to_yaml
+      end.join
+    end
+
+  end
+
+end

data/lib/siren/version.rb

@@ -0,0 +1,3 @@
+module Siren
+  VERSION = "0.1.0"
+end

data/public.jwk

@@ -0,0 +1 @@
+{"crv":"P-256","d":"R72pkR_p0WwCfhIU2qaxMWgrLEDWJt-CQuYo5jLzSmM","kty":"EC","x":"jP-5eOdnFX4bI4ofoyhNhq7kEzhnFk1lAKQCBFQwY1A","y":"ga7qwkwBMopCGZoOP7awn4WD5fL_Dn_n9QuyQjr2XZQ"}

metadata

@@ -0,0 +1,210 @@
+--- !ruby/object:Gem::Specification
+name: altaire-siren
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Nathan Baum
+autorequire: 
+bindir: exe
+cert_chain: []
+date: 2019-10-28 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: jose
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.1.3
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.1.3
+- !ruby/object:Gem::Dependency
+  name: clamp
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.3.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.3.1
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.2'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.2'
+- !ruby/object:Gem::Dependency
+  name: cucumber
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: aruba
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: 
+email:
+- nathan@altaire.com
+executables:
+- siren
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- Gemfile
+- Gemfile.lock
+- LICENSE.txt
+- README.md
+- Rakefile
+- altaire-siren.gemspec
+- bin/console
+- bin/setup
+- docs/docs/commands/crypto.md
+- docs/docs/commands/song.md
+- docs/docs/index.md
+- docs/mkdocs.yml
+- docs/serve.sh
+- docs/site/404.html
+- docs/site/assets/fonts/font-awesome.css
+- docs/site/assets/fonts/material-icons.css
+- docs/site/assets/fonts/specimen/FontAwesome.ttf
+- docs/site/assets/fonts/specimen/FontAwesome.woff
+- docs/site/assets/fonts/specimen/FontAwesome.woff2
+- docs/site/assets/fonts/specimen/MaterialIcons-Regular.ttf
+- docs/site/assets/fonts/specimen/MaterialIcons-Regular.woff
+- docs/site/assets/fonts/specimen/MaterialIcons-Regular.woff2
+- docs/site/assets/images/favicon.png
+- docs/site/assets/images/icons/bitbucket.1b09e088.svg
+- docs/site/assets/images/icons/github.f0b8504a.svg
+- docs/site/assets/images/icons/gitlab.6dd19c00.svg
+- docs/site/assets/javascripts/application.c648116f.js
+- docs/site/assets/javascripts/lunr/lunr.da.js
+- docs/site/assets/javascripts/lunr/lunr.de.js
+- docs/site/assets/javascripts/lunr/lunr.du.js
+- docs/site/assets/javascripts/lunr/lunr.es.js
+- docs/site/assets/javascripts/lunr/lunr.fi.js
+- docs/site/assets/javascripts/lunr/lunr.fr.js
+- docs/site/assets/javascripts/lunr/lunr.hu.js
+- docs/site/assets/javascripts/lunr/lunr.it.js
+- docs/site/assets/javascripts/lunr/lunr.ja.js
+- docs/site/assets/javascripts/lunr/lunr.jp.js
+- docs/site/assets/javascripts/lunr/lunr.multi.js
+- docs/site/assets/javascripts/lunr/lunr.nl.js
+- docs/site/assets/javascripts/lunr/lunr.no.js
+- docs/site/assets/javascripts/lunr/lunr.pt.js
+- docs/site/assets/javascripts/lunr/lunr.ro.js
+- docs/site/assets/javascripts/lunr/lunr.ru.js
+- docs/site/assets/javascripts/lunr/lunr.stemmer.support.js
+- docs/site/assets/javascripts/lunr/lunr.sv.js
+- docs/site/assets/javascripts/lunr/lunr.th.js
+- docs/site/assets/javascripts/lunr/lunr.tr.js
+- docs/site/assets/javascripts/lunr/tinyseg.js
+- docs/site/assets/javascripts/lunr/wordcut.js
+- docs/site/assets/javascripts/modernizr.74668098.js
+- docs/site/assets/stylesheets/application-palette.a8b3c06d.css
+- docs/site/assets/stylesheets/application.30686662.css
+- docs/site/commands/crypto/index.html
+- docs/site/commands/song/index.html
+- docs/site/index.html
+- docs/site/search/search_index.json
+- docs/site/sitemap.xml
+- docs/site/sitemap.xml.gz
+- exe/siren
+- lib/siren.rb
+- lib/siren/cli.rb
+- lib/siren/crypto.rb
+- lib/siren/song.rb
+- lib/siren/stack.rb
+- lib/siren/version.rb
+- public.jwk
+homepage: http://docs.altaire.xyz/siren
+licenses:
+- MIT
+metadata:
+  homepage_uri: http://docs.altaire.xyz/siren
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.0.6
+signing_key: 
+specification_version: 4
+summary: Kubernetes controller and client utility
+test_files: []