concourse.rb 0.6.0.pre.1 → 0.6.0.pre.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6c3ac986c4f825cb16d43a4c82b95a9595c3d3bbb1d45f0fccdd2cf2820bf9f2
-  data.tar.gz: 2c0fa93ac724a2e41fec15c5e2779aceda7bc7ffcd29e02ab9f1857e4143fb59
+  metadata.gz: 0cbd9560ffd8a2a63528063f9bd50bd758e98a9145862a519cda6b14b43027fe
+  data.tar.gz: d43cc3e46031e299fbdb171f3f779fec10ab4e8f1176bb5cd215ff5b6059e5d5
 SHA512:
-  metadata.gz: 8db3ed79f5a00ad1d73799292889061a915cc9b04b8e8cc2d96c9b51be3fc62ee239afc17707af638fd6f2b5136e3e72a8dc689cb67c780949c3e76d5a29cc0b
-  data.tar.gz: d128f5a4b16f202a145761d0a93b4b1e49188c46bffd6f1e6875510e95ce0506ce9e8c0b14f800dba0957c2615d4932a622fa7a1339a18e26dde37c2150eab53
+  metadata.gz: d1c6afe8ed3417e48f83f4e8cb02ed7712abc25e5bbe96d2704ec9cb370790bed0b1d68d41206fb4d80de1db063cf7a6b5cdba172a36fba5cc69df80d4352e2d
+  data.tar.gz: dd321266fa5058f71e1aa2626166a25aab90e51f38b78bbb3ee0f27b9113dc167010ccf24a005a91388933f0debd9ff90caeaf06609f3e58e491f1f492578d08

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    concourse.rb (0.6.0.pre.1)
+    concourse.rb (0.6.0.pre.2)
       excon (~> 0.72)
       semantic (~> 1.5)
 
@@ -20,7 +20,7 @@ GEM
     concurrent-ruby (1.1.10)
     diff-lcs (1.5.0)
     docile (1.4.0)
-    excon (0.95.0)
+    excon (0.96.0)
     faker (3.1.0)
       i18n (>= 1.8.11, < 2)
     faraday (2.7.2)
@@ -28,10 +28,14 @@ GEM
       ruby2_keywords (>= 0.0.4)
     faraday-net_http (3.0.2)
     gem-release (2.2.2)
+    git (1.18.0)
+      addressable (~> 2.8)
+      rchardet (~> 1.8)
     hamster (3.0.0)
       concurrent-ruby (~> 1.0)
     i18n (1.12.0)
       concurrent-ruby (~> 1.0)
+    immutable-struct (2.4.1)
     json (2.6.3)
     jwt (2.6.0)
     lino (3.1.0)
@@ -54,9 +58,18 @@ GEM
       excon (~> 0.72)
       rake_factory (~> 0.23)
       sshkey (~> 2.0)
-    rake_factory (0.31.0)
+    rake_factory (0.32.0.pre.2)
       activesupport (>= 4)
       rake (~> 13.0)
+    rake_git (0.1.0.pre.7)
+      colored2 (~> 3.1)
+      git (~> 1.13, >= 1.13.2)
+      rake_factory (= 0.32.0.pre.2)
+    rake_git_crypt (0.1.0.pre.26)
+      colored2 (~> 3.1)
+      rake_factory (= 0.32.0.pre.2)
+      ruby_git_crypt (= 0.1.0.pre.2)
+      ruby_gpg2 (~> 0.6)
     rake_github (0.11.0)
       colored2 (~> 3.1)
       octokit (>= 4.16, < 7.0)
@@ -69,6 +82,7 @@ GEM
       colored2 (~> 3.1)
       rake_factory (~> 0.23)
       sshkey (~> 2.0)
+    rchardet (1.8.0)
     regexp_parser (2.6.1)
     rexml (3.2.5)
     rspec (3.12.0)
@@ -102,6 +116,9 @@ GEM
       rubocop (~> 1.33)
     ruby-progressbar (1.11.0)
     ruby2_keywords (0.0.5)
+    ruby_git_crypt (0.1.0.pre.2)
+      immutable-struct (~> 2.4)
+      lino (~> 3.0)
     ruby_gpg2 (0.10.0)
       lino (~> 3.0)
     sawyer (0.9.2)
@@ -133,6 +150,8 @@ DEPENDENCIES
   openssl
   rake
   rake_circle_ci
+  rake_git
+  rake_git_crypt
   rake_github
   rake_gpg
   rake_ssh
@@ -143,4 +162,4 @@ DEPENDENCIES
   simplecov
 
 BUNDLED WITH
-   2.4.2
+   2.4.17

data/Rakefile

@@ -1,25 +1,59 @@
 # frozen_string_literal: true
 
-require 'yaml'
 require 'rake_circle_ci'
+require 'rake_git'
+require 'rake_git_crypt'
 require 'rake_github'
-require 'rake_ssh'
 require 'rake_gpg'
-require 'securerandom'
+require 'rake_ssh'
 require 'rspec/core/rake_task'
 require 'rubocop/rake_task'
+require 'securerandom'
+require 'yaml'
 
 task default: %i[
   library:fix
   test:unit
 ]
 
+RakeGitCrypt.define_standard_tasks(
+  namespace: :git_crypt,
+
+  provision_secrets_task_name: :'secrets:provision',
+  destroy_secrets_task_name: :'secrets:destroy',
+
+  install_commit_task_name: :'git:commit',
+  uninstall_commit_task_name: :'git:commit',
+
+  gpg_user_key_paths: %w[
+    config/gpg
+    config/secrets/ci/gpg.public
+  ]
+)
+
+namespace :git do
+  RakeGit.define_commit_task(
+    argument_names: [:message]
+  ) do |t, args|
+    t.message = args.message
+  end
+end
+
 namespace :encryption do
+  namespace :directory do
+    desc 'Ensure CI secrets directory exists.'
+    task :ensure do
+      FileUtils.mkdir_p('config/secrets/ci')
+    end
+  end
+
   namespace :passphrase do
     desc 'Generate encryption passphrase for CI GPG key'
-    task :generate do
-      File.write('config/secrets/ci/encryption.passphrase',
-                 SecureRandom.base64(36))
+    task generate: ['directory:ensure'] do
+      File.write(
+        'config/secrets/ci/encryption.passphrase',
+        SecureRandom.base64(36)
+      )
     end
   end
 end
@@ -43,6 +77,36 @@ namespace :keys do
   end
 end
 
+namespace :secrets do
+  namespace :directory do
+    desc 'Ensure secrets directory exists and is set up correctly'
+    task :ensure do
+      FileUtils.mkdir_p('config/secrets')
+      unless File.exist?('config/secrets/.unlocked')
+        File.write('config/secrets/.unlocked', 'true')
+      end
+    end
+  end
+
+  desc 'Generate all generatable secrets.'
+  task generate: %w[
+    encryption:passphrase:generate
+    keys:deploy:generate
+    keys:gpg:generate
+  ]
+
+  desc 'Provision all secrets.'
+  task provision: [:generate]
+
+  desc 'Delete all secrets.'
+  task :destroy do
+    rm_rf 'config/secrets'
+  end
+
+  desc 'Rotate all secrets.'
+  task rotate: [:'git_crypt:reinstall']
+end
+
 RuboCop::RakeTask.new
 
 namespace :library do
@@ -100,7 +164,6 @@ end
 namespace :pipeline do
   desc 'Prepare CircleCI Pipeline'
   task prepare: %i[
-    circle_ci:project:follow
     circle_ci:env_vars:ensure
     circle_ci:checkout_keys:ensure
     circle_ci:ssh_keys:ensure

data/concourse.rb.gemspec

@@ -46,6 +46,8 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency 'openssl'
   spec.add_development_dependency 'rake'
   spec.add_development_dependency 'rake_circle_ci'
+  spec.add_development_dependency 'rake_git'
+  spec.add_development_dependency 'rake_git_crypt'
   spec.add_development_dependency 'rake_github'
   spec.add_development_dependency 'rake_gpg'
   spec.add_development_dependency 'rake_ssh'

data/lib/concourse/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Concourse
-  VERSION = '0.6.0.pre.1'
+  VERSION = '0.6.0.pre.2'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: concourse.rb
 version: !ruby/object:Gem::Version
-  version: 0.6.0.pre.1
+  version: 0.6.0.pre.2
 platform: ruby
 authors:
 - InfraBlocks Maintainers
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2023-01-02 00:00:00.000000000 Z
+date: 2023-10-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: excon
@@ -136,6 +136,34 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: rake_git
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rake_git_crypt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: rake_github
   requirement: !ruby/object:Gem::Requirement