belt 0.4.7 → 0.4.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1f2da2bf0507f4f380a01130c184e6a2bb54103e21274d0aa589ae1dd1d546a7
-  data.tar.gz: 1ad686dae1cf98301b286465beee62b5ae23e3d56541679e93110a9c7fa933ff
+  metadata.gz: 21aaed39c7b6868b8c6f370cbc97a686bf369f7d3fe7a03c56b850c1bc49fd62
+  data.tar.gz: 8825ef22ce89cee45435dcd1e7b405c954c9f630e90f569ee0d575de33db5b49
 SHA512:
-  metadata.gz: 298cba520960d5ebe54cbc47623aa068ef22ab7888edd3535b77278ef5d71d5d28bd01e7ac02d984d03f4f9baa09b1ff932c87d665a00f218aba12c88be5ac83
-  data.tar.gz: f5fe8ff182396627f1bdd2fd451f664d6bf1848959e7d869a7912709487035df8fd87cdae10ed983aec7181a82a9cd5fca9bb17af6f488bea5bfadcd8cd89c6e
+  metadata.gz: 9bdf007e3adcc59dd1e852f2d9563002416272ae4f954ce72231856bead07c261cc6bad6a86a8b6bbdbc6a2896b321eb717dcf5f70bda7e77cc2538ed67b2970
+  data.tar.gz: 95c20325ca7427776e6c08dbf9c6e2ad3a8dacb4293339bf24cb48dc74021a887dfd0152865a0cc295c311314047f605119e22ea8b293ba9e9dbb977a0a8c549

data/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 0.4.8
+
+### Added
+
+- **`belt deploy` auto-bootstraps the ACM certificate on first deploy.** First-time
+  deploys hit the classic ACM chicken-and-egg problem: `terraform plan` fails because
+  `domain_validation_options` aren't known until the certificate is applied. Belt now
+  detects that error pattern, runs
+  `terraform apply -target=module.app.aws_acm_certificate.app` to create the certificate,
+  and re-runs the plan automatically. No manual terraform commands needed — first-time
+  deploys just work. This is a one-time bootstrap; subsequent deploys run normally since
+  the certificate already exists.
+
 ## 0.4.7
 
 ### Bug Fix

data/lib/belt/cli/deploy_command.rb

@@ -731,9 +731,87 @@ module Belt
 
       def run_plan
         puts '━━━ terraform plan ━━━'
-        success = system('terraform', 'plan', '-out=tfplan', *@extra_args)
-        abort "\n✗ terraform plan failed" unless success
+
+        stderr_buffer = run_terraform_plan
+        return if stderr_buffer.nil? # Success
+
+        # If ACM for_each error, auto-bootstrap and retry
+        return if acm_for_each_error?(stderr_buffer) && acm_bootstrap_succeeded?
+
+        abort "\n✗ terraform plan failed"
+      end
+
+      # Returns nil on success, stderr buffer on failure
+      def run_terraform_plan
+        require 'open3'
+        stderr_buffer = +''
+
+        Open3.popen3('terraform', 'plan', '-out=tfplan', *@extra_args) do |_stdin, stdout, stderr, wait_thr|
+          stdout_thread = Thread.new do
+            while (line = stdout.gets)
+              print line
+            end
+          end
+
+          stderr_thread = Thread.new do
+            while (line = stderr.gets)
+              stderr_buffer << line
+              $stderr.print line
+            end
+          end
+
+          stdout_thread.join
+          stderr_thread.join
+
+          return nil if wait_thr.value.success?
+        end
+
+        stderr_buffer
+      end
+
+      def acm_for_each_error?(output)
+        # Detect the ACM certificate for_each chicken-and-egg error
+        output.include?('for_each') &&
+          output.include?('domain_validation_options') &&
+          output.include?('cannot be determined until apply')
+      end
+
+      # Returns true if bootstrap succeeded and retry plan passed
+      def acm_bootstrap_succeeded?
+        puts ''
+        puts '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'
+        puts '  ACM CERTIFICATE BOOTSTRAP'
+        puts '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'
+        puts ''
+        puts '  First-time deploy detected. Terraform needs the ACM certificate'
+        puts '  to exist before it can create DNS validation records.'
+        puts ''
+        puts '  Creating certificate now...'
         puts ''
+
+        # Phase 1: Create the certificate only
+        success = system('terraform', 'apply', '-target=module.app.aws_acm_certificate.app', '-auto-approve')
+        unless success
+          puts ''
+          puts '  ✗ Certificate creation failed.'
+          return false
+        end
+
+        puts ''
+        puts '  ✓ Certificate created. Re-running plan...'
+        puts ''
+
+        # Phase 2: Retry the plan
+        stderr_buffer = run_terraform_plan
+        if stderr_buffer.nil?
+          puts ''
+          return true # Success!
+        end
+
+        # Still failing - something else is wrong
+        puts ''
+        puts '  ✗ Plan still failing after bootstrap. Check the errors above.'
+        false
       end
 
       def confirm_apply?

data/lib/belt/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Belt
-  VERSION = '0.4.7'
+  VERSION = '0.4.8'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: belt
 version: !ruby/object:Gem::Version
-  version: 0.4.7
+  version: 0.4.8
 platform: ruby
 authors:
 - Stowzilla