central-cli 0.6.3

data/lib/central/cli/stacks/users/remove_command.rb

@@ -0,0 +1,17 @@
+require_relative '../common'
+
+module Central::Cli::Stacks::Users
+  class RemoveCommand < Clamp::Command
+    include Central::Cli::Common
+    include Central::Cli::StackOptions
+    include Central::Cli::Stacks::Common
+
+    parameter 'EMAIL', 'Email address'
+
+    def execute
+      require_api_url
+      token = require_token
+      result = client(token).delete("stacks/#{current_stack}/users/#{email}")
+    end
+  end
+end

data/lib/central/cli/user/forgot_password_command.rb

@@ -0,0 +1,16 @@
+module Central::Cli::User
+  class ForgotPasswordCommand < Clamp::Command
+    include Central::Cli::Common
+
+    parameter 'EMAIL', 'Email address'
+
+    option '--auth-provider-url', 'URL', 'Auth provider URL', default: 'https://auth.bluebeluga.io/'
+
+    def execute
+      params = { email: email }
+      auth_client = Central::Client.new(auth_provider_url)
+      auth_client.post('user/password_reset', params)
+      puts 'Email with password reset instructions is sent to your email address. Please follow the instructions to change your password.'
+    end
+  end
+end

data/lib/central/cli/user/reset_password_command.rb

@@ -0,0 +1,21 @@
+module Central::Cli::User
+  class ResetPasswordCommand < Clamp::Command
+    include Central::Cli::Common
+
+    parameter 'TOKEN', 'Password reset token'
+
+    option '--auth-provider-url', 'URL', 'Auth provider URL', default: 'https://auth.bluebeluga.io/'
+
+    def execute
+      require 'highline/import'
+
+      password = ask('Password: ') { |q| q.echo = '*' }
+      password2 = ask('Password again: ') { |q| q.echo = '*' }
+      abort("Passwords don't match") if password != password2
+      params = { token: token, password: password }
+      auth_client = Central::Client.new(auth_provider_url)
+      auth_client.put('user/password_reset', params)
+      puts 'Password is now changed. To login with the new password, please run: cm login'
+    end
+  end
+end

data/lib/central/cli/user/verify_command.rb

@@ -0,0 +1,22 @@
+module Central::Cli::User
+  class VerifyCommand < Clamp::Command
+    include Central::Cli::Common
+
+    parameter 'TOKEN', 'Central verify token'
+
+    option '--auth-provider-url', 'URL', 'Auth provider URL', default: 'https://auth.bluebeluga.io/'
+
+    def execute
+      require_api_url
+
+      params = { token: token }
+      begin
+        auth_client = Central::Client.new(auth_provider_url)
+        auth_client.post('user/email_confirm', params)
+        puts 'Account verified'.colorize(:green)
+      rescue Central::Errors::StandardError
+        abort 'Invalid verify token'.colorize(:red)
+      end
+    end
+  end
+end

data/lib/central/cli/user_command.rb

@@ -0,0 +1,12 @@
+require_relative 'user/verify_command'
+require_relative 'user/forgot_password_command'
+require_relative 'user/reset_password_command'
+
+class Central::Cli::UserCommand < Clamp::Command
+  subcommand 'verify', 'Verify user account', Central::Cli::User::VerifyCommand
+  subcommand 'forgot-password', 'Request password reset for Central account', Central::Cli::User::ForgotPasswordCommand
+  subcommand 'reset-password', 'Reset Central account password', Central::Cli::User::ResetPasswordCommand
+
+  def execute
+  end
+end

data/lib/central/cli/vault/list_command.rb

@@ -0,0 +1,25 @@
+require 'tty'
+
+module Central::Cli::Vault
+  class ListCommand < Clamp::Command
+    include Central::Cli::Common
+    include Central::Cli::StackOptions
+
+    def execute
+      require_api_url
+      token = require_token
+      result = client(token).get("stacks/#{current_stack}/secrets")
+      header = ['Name', 'Created at']
+      rows = []
+      result['secrets'].sort_by { |s| s['name'] }.each do |secret|
+        rows << [secret['name'], secret['created_at']]
+      end
+
+      ttable = TTY::Table.new header: header, rows: Array.new(rows)
+      renderer = TTY::Table::Renderer::Unicode.new(ttable)
+      renderer.border.style = :cyan
+      renderer.padding = [0, 1, 0, 1]
+      puts renderer.render
+    end
+  end
+end

data/lib/central/cli/vault/read_command.rb

@@ -0,0 +1,17 @@
+module Central::Cli::Vault
+  class ReadCommand < Clamp::Command
+    include Central::Cli::Common
+    include Central::Cli::StackOptions
+
+    parameter 'NAME', 'Secret name'
+
+    def execute
+      require_api_url
+      token = require_token
+      result = client(token).get("secrets/#{current_stack}/#{name}")
+      puts "#{result['name']}:"
+      puts "  created_at: #{result['created_at']}"
+      puts "  value: #{result['value']}"
+    end
+  end
+end

data/lib/central/cli/vault/remove_command.rb

@@ -0,0 +1,14 @@
+module Central::Cli::Vault
+  class RemoveCommand < Clamp::Command
+    include Central::Cli::Common
+    include Central::Cli::StackOptions
+
+    parameter 'NAME', 'Secret name'
+
+    def execute
+      require_api_url
+      token = require_token
+      client(token).delete("secrets/#{current_stack}/#{name}")
+    end
+  end
+end

data/lib/central/cli/vault/update_command.rb

@@ -0,0 +1,18 @@
+module Central::Cli::Vault
+  class UpdateCommand < Clamp::Command
+    include Central::Cli::Common
+
+    parameter 'NAME', 'Secret name'
+    parameter '[VALUE]', 'Secret value'
+
+    def execute
+      require_api_url
+      token = require_token
+      secret = value
+      secret = STDIN.read if secret.to_s == ''
+      abort('No value provided') if secret.to_s == ''
+      data = { value: secret }
+      client(token).put("stacks/#{current_stack}/secrets/#{name}", data)
+    end
+  end
+end

data/lib/central/cli/vault/write_command.rb

@@ -0,0 +1,22 @@
+module Central::Cli::Vault
+  class WriteCommand < Clamp::Command
+    include Central::Cli::Common
+    include Central::Cli::StackOptions
+
+    parameter 'NAME', 'Secret name'
+    parameter '[VALUE]', 'Secret value'
+
+    def execute
+      require_api_url
+      token = require_token
+      secret = value
+      secret = STDIN.read if secret.to_s == ''
+      abort('No value provided') if secret.to_s == ''
+      data = {
+        name: name,
+        value: secret
+      }
+      client(token).post("stacks/#{current_stack}/secrets", data)
+    end
+  end
+end

data/lib/central/cli/vault_command.rb

@@ -0,0 +1,16 @@
+require_relative 'vault/write_command'
+require_relative 'vault/list_command'
+require_relative 'vault/read_command'
+require_relative 'vault/remove_command'
+require_relative 'vault/update_command'
+
+class Central::Cli::VaultCommand < Clamp::Command
+  subcommand %w(list ls), 'List secrets', Central::Cli::Vault::ListCommand
+  subcommand 'write', 'Write a secret', Central::Cli::Vault::WriteCommand
+  subcommand 'read', 'Read secret', Central::Cli::Vault::ReadCommand
+  subcommand 'update', 'Update secret', Central::Cli::Vault::UpdateCommand
+  subcommand %w(remove rm), 'Remove secret', Central::Cli::Vault::RemoveCommand
+
+  def execute
+  end
+end

data/lib/central/cli/version.rb

@@ -0,0 +1,5 @@
+module Central
+  module Cli
+    VERSION = File.read(File.realpath(File.join(__dir__, '../../../VERSION'))).strip
+  end
+end

data/lib/central/cli/version_command.rb

@@ -0,0 +1,22 @@
+require_relative 'version'
+
+class Central::Cli::VersionCommand < Clamp::Command
+  include Central::Cli::Common
+
+  def execute
+    url = begin
+            api_url
+          rescue
+            nil
+          end
+    puts "cli: #{Central::Cli::VERSION}"
+    if url
+      resp = begin
+               JSON.parse(client.http_client.get(path: '/').body)
+             rescue
+               nil
+             end
+      puts "master: #{resp['version']} (#{url})" if resp
+    end
+  end
+end

data/lib/central/cli/vpn/config_command.rb

@@ -0,0 +1,25 @@
+module Central::Cli::Vpn
+  class ConfigCommand < Clamp::Command
+    include Central::Cli::Common
+    include Central::Cli::StackOptions
+
+    def execute
+      require 'rbconfig'
+      require_api_url
+      payload = { cmd: ['/usr/local/bin/ovpn_getclient', 'CENTRAL_VPN_CLIENT'] }
+      stdout, stderr = client(require_token).post("containers/#{current_stack}/vpn/vpn-1/exec", payload)
+      if linux?
+        stdout << "\n"
+        stdout << "up /etc/openvpn/update-resolv-conf\n"
+        stdout << "down /etc/openvpn/update-resolv-conf\n"
+      end
+      puts stdout
+    end
+
+    # @return [Boolean]
+    def linux?
+      host_os = RbConfig::CONFIG['host_os']
+      host_os.include?('linux')
+    end
+  end
+end

data/lib/central/cli/vpn/create_command.rb

@@ -0,0 +1,71 @@
+require 'shell-spinner'
+
+module Central::Cli::Vpn
+  class CreateCommand < Clamp::Command
+    include Central::Cli::Common
+    include Central::Cli::StackOptions
+
+    option '--node', 'NODE', 'Node name where VPN is deployed'
+    option '--ip', 'IP', 'Node ip-address'
+
+    def execute
+      require_api_url
+      token = require_token
+      preferred_node = node
+
+      vpn = begin
+              client(token).get("services/#{current_stack}/vpn")
+            rescue
+              nil
+            end
+      abort('VPN already exists') if vpn
+
+      nodes = client(token).get("stacks/#{current_stack}/nodes")
+      if preferred_node.nil?
+        node = nodes['nodes'].find { |n| n['connected'] }
+        abort('Cannot find any online nodes') if node.nil?
+      else
+        node = nodes['nodes'].find { |n| n['connected'] && n['name'] == preferred_node }
+        abort('Node not found') if node.nil?
+      end
+
+      vpn_ip = node_vpn_ip(node)
+      data = {
+        name: 'vpn',
+        stateful: true,
+        image: 'fishyard/openvpn:ethwe',
+        ports: [
+          {
+            container_port: '1194',
+            node_port: '1194',
+            protocol: 'udp'
+          }
+        ],
+        cap_add: ['NET_ADMIN'],
+        env: ["OVPN_SERVER_URL=udp://#{vpn_ip}:1194"],
+        affinity: ["node==#{node['name']}"]
+      }
+      client(token).post("stacks/#{current_stack}/services", data)
+      client(token).post("services/#{current_stack}/vpn/deploy", {})
+      ShellSpinner 'Deploying vpn service ' do
+        sleep 1 until client(token).get("services/#{current_stack}/vpn")['state'] != 'deploying'
+      end
+      puts "OpenVPN service is now started (udp://#{vpn_ip}:1194)."
+      puts "Use 'cm vpn config' to fetch OpenVPN client config to your machine "\
+           '(it takes a while until config is ready).'
+    end
+
+    # @param [Hash] node
+    # @return [String]
+    def node_vpn_ip(node)
+      return ip unless ip.nil?
+
+      # vagrant
+      if api_url == 'http://192.168.66.100:8080'
+        node['private_ip']
+      else
+        node['public_ip']
+      end
+    end
+  end
+end

data/lib/central/cli/vpn/delete_command.rb

@@ -0,0 +1,21 @@
+module Central::Cli::Vpn
+  class DeleteCommand < Clamp::Command
+    include Central::Cli::Common
+    include Central::Cli::StackOptions
+
+    def execute
+      puts "DEPRECATION WARNING: Support for 'cm vpn delete' will be dropped. Use 'cm vpn remove' instead.".colorize(:red)
+      require_api_url
+      token = require_token
+
+      vpn = begin
+              client(token).get("services/#{current_stack}/vpn")
+            rescue
+              nil
+            end
+      abort('VPN service does not exist') if vpn.nil?
+
+      client(token).delete("services/#{current_stack}/vpn")
+    end
+  end
+end

data/lib/central/cli/vpn/remove_command.rb

@@ -0,0 +1,19 @@
+module Central::Cli::Vpn
+  class RemoveCommand < Clamp::Command
+    include Central::Cli::Common
+
+    def execute
+      require_api_url
+      token = require_token
+
+      vpn = begin
+              client(token).get("services/#{current_stack}/vpn")
+            rescue
+              nil
+            end
+      abort('VPN service does not exist') if vpn.nil?
+
+      client(token).delete("services/#{current_stack}/vpn")
+    end
+  end
+end

data/lib/central/cli/vpn_command.rb

@@ -0,0 +1,13 @@
+require_relative 'vpn/create_command'
+require_relative 'vpn/config_command'
+require_relative 'vpn/remove_command'
+require_relative 'vpn/delete_command'
+
+class Central::Cli::VpnCommand < Clamp::Command
+  subcommand 'create', 'Create VPN service', Central::Cli::Vpn::CreateCommand
+  subcommand 'config', 'Show/Export VPN config', Central::Cli::Vpn::ConfigCommand
+  subcommand %w(remove rm), 'Remove VPN service', Central::Cli::Vpn::RemoveCommand
+
+  def execute
+  end
+end

data/lib/central/cli/whoami_command.rb

@@ -0,0 +1,20 @@
+class Central::Cli::WhoamiCommand < Clamp::Command
+  include Central::Cli::Common
+
+  option '--bash-completion-path', :flag, 'Show bash completion path', hidden: true
+
+  def execute
+    if bash_completion_path?
+      puts File.realpath(File.join(__dir__, '../scripts/init'))
+      exit 0
+    end
+
+    require_api_url
+    puts "Master: #{current_master['name']}"
+    puts "URL: #{api_url}"
+    puts "Stack: #{current_stack}"
+    token = require_token
+    user = client(token).get('user')
+    puts "User: #{user['email']}"
+  end
+end

data/lib/central/client.rb

@@ -0,0 +1,208 @@
+require 'json'
+require 'excon'
+require_relative 'errors'
+require 'central/cli/version'
+
+module Central
+  class Client
+    attr_accessor :default_headers
+    attr_reader :http_client
+
+    # Initialize api client
+    #
+    # @param [String] api_url
+    # @param [Hash] default_headers
+    def initialize(api_url, default_headers = {})
+      Excon.defaults[:ssl_verify_peer] = false if ignore_ssl_errors?
+      @http_client = Excon.new(api_url)
+      @default_headers = {
+        'Accept' => 'application/json',
+        'Content-Type' => 'application/json',
+        'User-Agent' => "central-cli/#{Central::Cli::VERSION}"
+      }.merge(default_headers)
+      @api_url = api_url
+    end
+
+    # Get request
+    #
+    # @param [String] path
+    # @param [Hash,NilClass] params
+    # @param [Hash] headers
+    # @return [Hash]
+    def get(path, params = nil, headers = {})
+      response = http_client.get(
+        path: request_uri(path),
+        query: params,
+        headers: request_headers(headers)
+      )
+      if response.status == 200
+        parse_response(response)
+      else
+        handle_error_response(response)
+      end
+    end
+
+    # Get request
+    #
+    # @param [String] path
+    # @param [Lambda] response_block
+    # @param [Hash,NilClass] params
+    # @param [Hash] headers
+    def get_stream(path, response_block, params = nil, headers = {})
+      http_client.get(
+        read_timeout: 360,
+        path: request_uri(path),
+        query: params,
+        headers: request_headers(headers),
+        response_block: response_block
+      )
+    end
+
+    # Post request
+    #
+    # @param [String] path
+    # @param [Object] obj
+    # @param [Hash] params
+    # @param [Hash] headers
+    # @return [Hash]
+    def post(path, obj, params = {}, headers = {})
+      request_headers = request_headers(headers)
+      request_options = {
+        path: request_uri(path),
+        headers: request_headers,
+        body: encode_body(obj, request_headers['Content-Type']),
+        query: params
+      }
+
+      response = http_client.post(request_options)
+      if [200, 201].include?(response.status)
+        parse_response(response)
+      else
+        handle_error_response(response)
+      end
+    end
+
+    # Put request
+    #
+    # @param [String] path
+    # @param [Object] obj
+    # @param [Hash] params
+    # @param [Hash] headers
+    # @return [Hash]
+    def put(path, obj, params = {}, headers = {})
+      request_headers = request_headers(headers)
+      request_options = {
+        path: request_uri(path),
+        headers: request_headers,
+        body: encode_body(obj, request_headers['Content-Type']),
+        query: params
+      }
+
+      response = http_client.put(request_options)
+      if [200, 201].include?(response.status)
+        parse_response(response)
+      else
+        handle_error_response(response)
+      end
+    end
+
+    # Delete request
+    #
+    # @param [String] path
+    # @param [Hash,String] body
+    # @param [Hash] params
+    # @param [Hash] headers
+    # @return [Hash]
+    def delete(path, body = nil, params = {}, headers = {})
+      request_headers = request_headers(headers)
+      request_options = {
+        path: request_uri(path),
+        headers: request_headers,
+        body: encode_body(body, request_headers['Content-Type']),
+        query: params
+      }
+      response = http_client.delete(request_options)
+      if response.status == 200
+        parse_response(response)
+      else
+        handle_error_response(response)
+      end
+    end
+
+    private
+
+    ##
+    # Get full request uri
+    #
+    # @param [String] path
+    # @return [String]
+    def request_uri(path)
+      "/v1/#{path}"
+    end
+
+    ##
+    # Get request headers
+    #
+    # @param [Hash] headers
+    # @return [Hash]
+    def request_headers(headers = {})
+      @default_headers.merge(headers)
+    end
+
+    ##
+    # Encode body based on content type
+    #
+    # @param [Object] body
+    # @param [String] content_type
+    def encode_body(body, content_type)
+      if content_type == 'application/json'
+        dump_json(body)
+      else
+        body
+      end
+    end
+
+    ##
+    # Parse response
+    #
+    # @param [HTTP::Message]
+    # @return [Object]
+    def parse_response(response)
+      if response.headers['Content-Type'].include?('application/json')
+        parse_json(response.body)
+      else
+        response.body
+      end
+    end
+
+    ##
+    # Parse json
+    #
+    # @param [String] json
+    # @return [Hash,Object,NilClass]
+    def parse_json(json)
+      JSON.parse(json)
+    rescue
+      nil
+    end
+
+    ##
+    # Dump json
+    #
+    # @param [Object] obj
+    # @return [String]
+    def dump_json(obj)
+      JSON.dump(obj)
+    end
+
+    def ignore_ssl_errors?
+      ENV['SSL_IGNORE_ERRORS'] == 'true'
+    end
+
+    def handle_error_response(response)
+      message = response.body
+      message = 'Not found' if response.status == 404 && message == ''
+      fail Central::Errors::StandardError.new(response.status, message)
+    end
+  end
+end