cloud-mu 1.9.0.pre.beta

data/modules/mu/config/notification.rb

@@ -0,0 +1,44 @@
+# Copyright:: Copyright (c) 2018 eGlobalTech, Inc., all rights reserved
+#
+# Licensed under the BSD-3 license (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License in the root of the project or at
+#
+#     http://egt-labs.com/mu/LICENSE.html
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module MU
+  class Config
+    # Basket of Kittens config schema and parser logic. See modules/mu/clouds/*/notification.rb
+    class Notification
+
+      # XXX
+      # This one is weird in that it kind of has a first-class implementation
+      # but really should be a subclass of something else, except maybe not
+      # because in an ideal world it'd be a subclass of MANY something elses?
+      def self.schema
+        {
+          "type" => "object",
+          "additionalProperties" => false,
+          "description" => "A stub for inline resource that generate SNS notifications in AWS. This should really be expanded.",
+          "properties" => {}
+        }
+      end
+
+      # Generic pre-processing of {MU::Config::BasketofKittens::notifications}, bare and unvalidated.
+      # @param notification [Hash]: The resource to process and validate
+      # @param configurator [MU::Config]: The overall deployment configurator of which this resource is a member
+      # @return [Boolean]: True if validation succeeded, False otherwise
+      def self.validate(notification, configurator)
+        ok = true
+        ok
+      end
+
+    end
+  end
+end

data/modules/mu/config/project.rb

@@ -0,0 +1,71 @@
+# Copyright:: Copyright (c) 2018 eGlobalTech, Inc., all rights reserved
+#
+# Licensed under the BSD-3 license (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License in the root of the project or at
+#
+#     http://egt-labs.com/mu/LICENSE.html
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module MU
+  class Config
+    # Basket of Kittens config schema and parser logic. See modules/mu/clouds/*/project.rb
+    class Project
+
+      # Base configuration schema for a Project
+      # @return [Hash]
+      def self.schema
+        {
+          "type" => "object",
+          "additionalProperties" => false,
+          "description" => "Set up a cloud account (AWS account, Google Cloud project, etc)",
+          "properties" => {
+            "name" => { "type" => "string" },
+            "folder" => MU::Config::Folder.reference
+          }
+        }
+      end
+
+      # Chunk of schema to reference an account/project, here to be embedded
+      # into the schemas of other resources.
+      def self.reference
+        {
+          "type" => "object",
+          "description" => "Deploy into or connect with resources in a specific account/project",
+          "minProperties" => 1,
+          "additionalProperties" => false,
+          "properties" => {
+            "id" => {
+              "type" => "string",
+              "description" => "Discover this account/project by looking for this cloud provider identifier, such as 836541910896 (an AWS account number) or my-project-196124 (a Google Cloud project id)"
+            },
+            "name" => {
+              "type" => "string",
+              "description" => "Discover this account/project by Mu-internal name; typically the shorthand 'name' field of an Account object declared elsewhere in the deploy, or in another deploy that's being referenced with 'deploy_id'."
+            },
+            "cloud" => MU::Config.cloud_primitive,
+            "deploy_id" => {
+              "type" => "string",
+              "description" => "Search for this account/project in an existing Mu deploy; specify a Mu deploy id (e.g. DEMO-DEV-2014111400-NG)."
+            }
+          }
+        }
+      end
+
+      # Generic pre-processing of {MU::Config::BasketofKittens::project}, bare and unvalidated.
+      # @param project [Hash]: The resource to process and validate
+      # @param configurator [MU::Config]: The overall deployment configurator of which this resource is a member
+      # @return [Boolean]: True if validation succeeded, False otherwise
+      def self.validate(project, configurator)
+        ok = true
+        ok
+      end
+
+    end
+  end
+end

data/modules/mu/config/role.rb

@@ -0,0 +1,102 @@
+# Copyright:: Copyright (c) 2018 eGlobalTech, Inc., all rights reserved
+#
+# Licensed under the BSD-3 license (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License in the root of the folder or at
+#
+#     http://egt-labs.com/mu/LICENSE.html
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module MU
+  class Config
+    # Basket of Kittens config schema and parser logic. See modules/mu/clouds/*/role.rb
+    class Role
+
+      # Base configuration schema for a Group
+      # @return [Hash]
+      def self.schema
+        {
+          "type" => "object",
+          "additionalProperties" => false,
+          "description" => "Set up a cloud provider role for mapping permissions to other entities",
+          "properties" => {
+            "name" => {
+              "type" => "string",
+              "description" => "The name of a cloud provider role to create",
+              "pattern" => '^[a-zA-Z0-9]+$'
+            },
+            "import" => {
+              "type" => "array",
+              "items" => {
+                "type" => "string",
+                "description" => "Import pre-fabricated roles/policies from the cloud provider into this role."
+              }
+            },
+            "policies" => {
+              "type" => "array",
+              "items" => {
+                "type" => "object",
+                "description" => "Policies which grant or deny permissions.",
+                "required" => ["name", "permissions", "targets"],
+                "additionalProperties" => false,
+                "properties" => {
+                  "name" => {
+                    "type" => "string",
+                    "description" => "A unique name for this policy"
+                  },
+                  "flag" => {
+                    "type" => "string",
+                    "enum" => ["allow", "deny"],
+                    "default" => "allow"
+                  },
+                  "permissions" => {
+                    "type" => "array",
+                    "items" => {
+                      "type" => "string",
+                      "description" => "Permissions to grant or deny. Valid permission strings are cloud-specific."
+                    }
+                  },
+                  "targets" => {
+                    "type" => "array",
+                    "items" => {
+                      "type" => "object",
+                      "description" => "Entities to which this policy will grant or deny access.",
+                      "required" => ["identifier"],
+                      "additionalProperties" => false,
+                      "properties" => {
+                        "type" => {
+                          "type" => "string",
+                          "description" => "A Mu resource type, used when referencing a sibling Mu resource in this stack with +identifier+.",
+                          "enum" => MU::Cloud.resource_types.values.map { |t| t[:cfg_name] }.sort
+                        },
+                        "identifier" => {
+                          "type" => "string",
+                          "description" => "Either the name of a sibling Mu resource in this stack (used in conjunction with +entity_type+), or the full cloud identifier for a resource, such as an ARN in Amazon Web Services."
+                        }
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      end
+
+      # Generic pre-processing of {MU::Config::BasketofKittens::role}, bare and unvalidated.
+      # @param role [Hash]: The resource to process and validate
+      # @param configurator [MU::Config]: The overall deployment configurator of which this resource is a member
+      # @return [Boolean]: True if validation succeeded, False otherwise
+      def self.validate(role, configurator)
+        ok = true
+        ok
+      end
+
+    end
+  end
+end

data/modules/mu/config/search_domain.rb

@@ -0,0 +1,61 @@
+# Copyright:: Copyright (c) 2018 eGlobalTech, Inc., all rights reserved
+#
+# Licensed under the BSD-3 license (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License in the root of the project or at
+#
+#     http://egt-labs.com/mu/LICENSE.html
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module MU
+  class Config
+    # Basket of Kittens config schema and parser logic. See modules/mu/clouds/*/search_domain.rb
+    class SearchDomain
+
+      # Base configuration schema for a SearchDomain
+      # @return [Hash]
+      def self.schema
+        {
+          "type" => "object",
+          "additionalProperties" => false,
+          "description" => "Set up a cloud provider managed Elastic Search cluster.",
+          "properties" => {
+            "name" => { "type" => "string" },
+            "region" => MU::Config.region_primitive,
+            "vpc" => MU::Config::VPC.reference(MU::Config::VPC::ONE_SUBNET + MU::Config::VPC::MANY_SUBNETS, MU::Config::VPC::NO_NAT_OPTS, "all_private"),
+            "tags" => MU::Config.tags_primitive,
+            "optional_tags" => MU::Config.optional_tags_primitive,
+            "add_firewall_rules" => MU::Config::FirewallRule.reference,
+            "ingress_rules" => {
+              "type" => "array",
+              "items" => MU::Config::FirewallRule.ruleschema
+            },
+            "instance_count" => {
+              "type" => "integer",
+              "default" => 1
+            }
+          }
+        }
+      end
+
+      # Generic pre-processing of {MU::Config::BasketofKittens::search_domains}, bare and unvalidated.
+      # @param dom [Hash]: The resource to process and validate
+      # @param configurator [MU::Config]: The overall deployment configurator of which this resource is a member
+      # @return [Boolean]: True if validation succeeded, False otherwise
+      def self.validate(dom, configurator)
+        ok = true
+        # This resource basically only exists in AWS, so the validation lives
+        # there. If some other provider comes up with it we can factor
+        # commonalities into this spot, but there may be few to none. The AWS
+        # implementation is simple, but an odd duck.
+        ok
+      end
+
+    end
+  end
+end

data/modules/mu/config/search_domain.yml

@@ -0,0 +1,25 @@
+<% if $complexity == "complex" %>
+
+name: search_domain-complex
+instance_type: t2.small.elasticsearch
+instance_count: 4
+dedicated_masters: 1
+master_instance_type: t2.medium.elasticsearch
+zone_aware: true
+ebs_iops: 100
+ebs_type: gp2
+elasticsearch_version: "6.2"
+advanced_options:
+  "indices.query.bool.max_clause_count": 512
+#cognito:
+#  identity_pool_id: "us-east-1:69e2223c-2c74-42ca-9b27-1037fcb60b87"
+#  user_pool_id: "us-east-1_eSwWA1VYQ"
+slow_logs: <%= logs_name %>
+vpc:
+  vpc_name: <%= vpc_name %>
+
+<% else %> # IF NOT COMPLEX THEN ASSUME SIMPLE
+
+name: search_domain-simple
+instance_type: t2.small.elasticsearch
+<% end %>