cthiesfork-awspec 1.0.0

data/lib/awspec/resource_reader.rb

@@ -0,0 +1,58 @@
+module Awspec
+  module BlackListForwardable
+    class CalledMethodInBlackList < StandardError
+    end
+
+    def method_missing_via_black_list(name, delegate_to: nil)
+      raise ArgumentError, 'delegate_to: must be specified' unless delegate_to
+      if match_black_list?(name) && !match_white_list?(name)
+        raise CalledMethodInBlackList, "Method call #{name.inspect} is black-listed"
+      end
+      attr = delegate_to.send(name)
+      if !attr.is_a?(Struct) && attr.class.name.match(/^Aws::/)
+        ResourceReader.new(attr)
+      else
+        attr
+      end
+    end
+
+    private
+
+    BLACK_LIST_RE = /
+      clear|
+      create|delete|put|update|add|
+      attach|detach|
+      reboot|start|stop|terminate|
+      modify|reset|replace|
+      authorize|revoke|
+      deregister|enable_|remove
+    /ix
+
+    def match_black_list?(name)
+      BLACK_LIST_RE =~ name
+    end
+
+    WHITE_LIST_RE = /password_reset_required|attached_policies/ix
+
+    def match_white_list?(name)
+      WHITE_LIST_RE =~ name
+    end
+  end
+
+  class ResourceReader
+    include BlackListForwardable
+
+    def initialize(resource)
+      @resource_via_client = resource
+    end
+
+    # TODO: this method is specific to DynamoDB and probably should be moved somewhere else
+    def describe_time_to_live(*args)
+      @resource_via_client.send('describe_time_to_live', *args)
+    end
+
+    def method_missing(name)
+      method_missing_via_black_list(name, delegate_to: @resource_via_client)
+    end
+  end
+end

data/lib/awspec/setup.rb

@@ -0,0 +1,84 @@
+require 'fileutils'
+require 'yaml'
+
+module Awspec
+  class Setup
+    def self.run
+      generate_spec_helper
+      generate_rakefile
+      generate_dotgitignore
+      generate_dotrspec
+    end
+
+    def self.generate_spec_helper
+      content = <<-'EOF'
+require 'awspec'
+Awsecrets.load(secrets_path: File.expand_path('./secrets.yml', File.dirname(__FILE__)))
+EOF
+      dir = 'spec'
+      if File.exist? dir
+        unless File.directory? dir
+          $stderr.puts '!! #{dir} already exists and is not a directory'
+        end
+      else
+        FileUtils.mkdir dir
+        puts " + #{dir}/"
+      end
+
+      if File.exist? 'spec/spec_helper.rb'
+        $stderr.puts '!! spec/spec_helper.rb already exists'
+      else
+        File.open('spec/spec_helper.rb', 'w') do |f|
+          f.puts content
+        end
+        puts ' + spec/spec_helper.rb'
+      end
+    end
+
+    def self.generate_rakefile
+      content = <<-'EOF'
+require 'rspec/core/rake_task'
+RSpec::Core::RakeTask.new('spec')
+task :default => :spec
+EOF
+
+      if File.exist? 'Rakefile'
+        $stderr.puts '!! Rakefile already exists'
+      else
+        File.open('Rakefile', 'w') do |f|
+          f.puts content
+        end
+        puts ' + Rakefile'
+      end
+    end
+
+    def self.generate_dotgitignore
+      content = <<-'EOF'
+secrets.yml
+EOF
+      if File.exist? 'spec/.gitignore'
+        $stderr.puts '!! spec/.gitignore already exists'
+      else
+        File.open('spec/.gitignore', 'w') do |f|
+          f.puts content
+        end
+        puts ' + spec/.gitignore'
+      end
+    end
+
+    def self.generate_dotrspec
+      content = <<-'EOF'
+--color
+--format documentation
+EOF
+      if File.exist? '.rspec'
+        $stderr.puts '!! .rspec already exists'
+      else
+        File.open('.rspec', 'w') do |f|
+          f.puts content
+        end
+        puts ' + .rspec'
+      end
+    end
+  end
+end

data/lib/awspec/shared_context.rb

@@ -0,0 +1,37 @@
+shared_context 'region', :region do
+  before do |example|
+    region = example.metadata[:region]
+    @_region = Aws.config[:region]
+    Aws.config[:region] = region
+  end
+
+  after do
+    Aws.config[:region] = @_region
+  end
+end
+
+shared_context 'account', :account do
+  before do |example|
+    sts_client = Aws::STS::Client.new
+    raise Awspec::InvalidAccountError unless sts_client.get_caller_identity.account == example.metadata[:account]
+    example.metadata[:described_class].account = example.metadata[:account]
+  end
+end
+
+shared_context 'cluster', :cluster do
+  before do |example|
+    example.metadata[:described_class].cluster = example.metadata[:cluster]
+  end
+end
+
+shared_context 'version', :version do
+  before do |example|
+    example.metadata[:described_class].version = example.metadata[:version]
+  end
+end
+
+shared_context 'application_name', :application_name do
+  before do |example|
+    example.metadata[:described_class].application_name = example.metadata[:application_name]
+  end
+end

data/lib/awspec/stub.rb

@@ -0,0 +1,7 @@
+module Awspec
+  class Stub
+    def self.load(type)
+      require File.dirname(__FILE__) + '/stub/' + type
+    end
+  end
+end

data/lib/awspec/stub/account.rb

@@ -0,0 +1,147 @@
+Aws.config[:ec2] = {
+  stub_responses: {
+    describe_account_attributes: {
+      account_attributes: [
+        {
+          attribute_name: 'supported-platforms',
+          attribute_values: [
+            {
+              attribute_value: 'EC2'
+            },
+            {
+              attribute_value: 'VPC'
+            }
+          ]
+        },
+        {
+          attribute_name: 'vpc-max-security-groups-per-interface',
+          attribute_values: [
+            {
+              attribute_value: '5'
+            }
+          ]
+        },
+        {
+          attribute_name: 'max-elastic-ips',
+          attribute_values: [
+            {
+              attribute_value: '5'
+            }
+          ]
+        },
+        {
+          attribute_name: 'max-instances',
+          attribute_values: [
+            {
+              attribute_value: '20'
+            }
+          ]
+        },
+        {
+          attribute_name: 'vpc-max-elastic-ips',
+          attribute_values: [
+            {
+              attribute_value: '5'
+            }
+          ]
+        },
+        {
+          attribute_name: 'default-vpc',
+          attribute_values: [
+            {
+              attribute_value: 'none'
+            }
+          ]
+        }
+      ]
+    }
+  }
+}
+Aws.config[:rds] = {
+  stub_responses: {
+    describe_account_attributes: {
+      account_quotas: [
+        {
+          account_quota_name: 'DBInstances', used: 0, max: 40
+        },
+        {
+          account_quota_name: 'ReservedDBInstances', used: 0, max: 40
+        },
+        {
+          account_quota_name: 'AllocatedStorage', used: 0, max: 100_000
+        },
+        {
+          account_quota_name: 'DBSecurityGroups', used: 0, max: 25
+        },
+        {
+          account_quota_name: 'AuthorizationsPerDBSecurityGroup', used: 0, max: 20
+        },
+        {
+          account_quota_name: 'DBParameterGroups', used: 1, max: 50
+        },
+        {
+          account_quota_name: 'ManualSnapshots', used: 0, max: 100
+        },
+        {
+          account_quota_name: 'EventSubscriptions', used: 0, max: 20
+        },
+        {
+          account_quota_name: 'DBSubnetGroups', used: 1, max: 50
+        },
+        {
+          account_quota_name: 'OptionGroups', used: 0, max: 20
+        },
+        {
+          account_quota_name: 'SubnetsPerDBSubnetGroup', used: 2, max: 20
+        },
+        {
+          account_quota_name: 'ReadReplicasPerMaster', used: 0, max: 5
+        },
+        {
+          account_quota_name: 'DBClusters', used: 0, max: 40
+        },
+        {
+          account_quota_name: 'DBClusterParameterGroups', used: 0, max: 50
+        },
+        {
+          account_quota_name: 'DBClusterRoles', used: 0, max: 5
+        }
+      ]
+    }
+  }
+}
+Aws.config[:lambda] = {
+  stub_responses: {
+    get_account_settings: {
+      account_limit: {
+        total_code_size: 80_530_636_800,
+        code_size_unzipped: 262_144_000,
+        code_size_zipped: 52_428_800,
+        concurrent_executions: 200,
+        unreserved_concurrent_executions: 50
+      },
+      account_usage: {
+        total_code_size: 2_034_651_562,
+        function_count: 8
+      }
+    }
+  }
+}
+Aws.config[:ses] = {
+  stub_responses: {
+    get_send_quota: {
+      max_24_hour_send: 200.0,
+      max_send_rate: 1.0,
+      sent_last_24_hours: 1.0
+    }
+  }
+}
+Aws.config[:sts] = {
+  stub_responses: {
+    get_caller_identity: {
+      account: '123456789012',
+      arn: 'arn:aws:iam::123456789012:user/Alice',
+      user_id: 'AKIAI44QH8DHBEXAMPLE'
+    }
+  }
+}

data/lib/awspec/stub/acm.rb

@@ -0,0 +1,34 @@
+Aws.config[:acm] = {
+  stub_responses: {
+    list_certificates: {
+      certificate_summary_list: [
+        {
+          certificate_arn: 'arn:aws:acm:region:123456789010:certificate/12345678-1234-1234-1234-123456789000',
+          domain_name: 'example.jp'
+        },
+        {
+          certificate_arn: 'arn:aws:acm:region:123456789010:certificate/12345678-1234-1234-1234-123456789010',
+          domain_name: 'example.com'
+        },
+        {
+          certificate_arn: 'arn:aws:acm:region:123456789010:certificate/12345678-1234-1234-1234-123456789011',
+          domain_name: 'example.com'
+        }
+      ],
+      next_token: nil
+    },
+    describe_certificate: {
+      certificate: {
+        certificate_arn: 'arn:aws:acm:region:123456789010:certificate/12345678-1234-1234-1234-123456789000',
+        domain_name: 'example.jp',
+        status: 'ISSUED',
+        type: 'AMAZON_ISSUED',
+        domain_validation_options: [
+          domain_name: 'example.jp',
+          validation_status: 'SUCCESS',
+          validation_method: 'DNS'
+        ]
+      }
+    }
+  }
+}

data/lib/awspec/stub/alb.rb

@@ -0,0 +1,261 @@
+# rubocop:disable Metrics/LineLength
+Aws.config[:elasticloadbalancingv2] = {
+  stub_responses: {
+    describe_load_balancers: {
+      load_balancers: [
+        {
+          load_balancer_arn:
+            'arn:aws:elasticloadbalancing:ap-northeast-1:1234567890:loadbalancer/app/my-alb/1aa1bb1cc1ddee11',
+          dns_name:
+            'internal-my-elb-1551266724.ap-northeast-1.elb.amazonaws.com',
+          canonical_hosted_zone_id: 'A12BCDEDCBA34BC',
+          created_time: Time.new(2017, 4, 4, 9, 00, 00, '+00:00'),
+          load_balancer_name: 'my-alb',
+          scheme: 'internal',
+          vpc_id: 'vpc-ab123cde',
+          state:
+            {
+              code: 'active',
+              reason: nil
+            },
+          type: 'application',
+          availability_zones:
+            [
+              {
+                zone_name: 'ap-northeast-1a',
+                subnet_id: 'subnet-1234a567'
+              },
+              {
+                zone_name: 'ap-northeast-1c',
+                subnet_id: 'subnet-abcd7890'
+              }
+            ],
+          security_groups: ['sg-1a2b3cd4'],
+          ip_address_type: 'ipv4'
+        },
+        {
+          load_balancer_arn:
+            'arn:aws:elasticloadbalancing:ap-northeast-1:1234567890:loadbalancer/net/my-nlb/2aa2bb2cc2ddee22',
+          dns_name:
+            'my-nlb-2aa2bb2cc2ddee22.elb.ap-northeast-1.amazonaws.com',
+          canonical_hosted_zone_id: 'N12BCDEDCBN34BC',
+          created_time: Time.new(2017, 4, 4, 9, 00, 00, '+00:00'),
+          load_balancer_name: 'my-nlb',
+          scheme: 'internet-facing',
+          vpc_id: 'vpc-ab123cde',
+          state:
+            {
+              code: 'active',
+              reason: nil
+            },
+          type: 'network',
+          availability_zones:
+            [
+              {
+                zone_name: 'ap-northeast-1a',
+                subnet_id: 'subnet-7890ne12'
+              },
+              {
+                zone_name: 'ap-northeast-1c',
+                subnet_id: 'subnet-nnnd1234'
+              }
+            ],
+          security_groups: ['sg-5n6b7c89'],
+          ip_address_type: 'ipv4'
+        }
+      ],
+      next_marker: nil
+    },
+    describe_listeners: {
+      listeners: [
+        {
+          default_actions: [
+            {
+              target_group_arn: 'arn:aws:elasticloadbalancing:ap-northeast-1:1234567890:targetgroup/my-targets/73e2d6bc24d8a067',
+              type: 'forward'
+            }
+          ],
+          listener_arn: 'arn:aws:elasticloadbalancing:ap-northeast-1:1234567890:listener/app/my-alb/1aa1bb1cc1ddee11/f2f7dc8efc522ab2',
+          load_balancer_arn: 'arn:aws:elasticloadbalancing:ap-northeast-1:1234567890:loadbalancer/app/my-alb/1aa1bb1cc1ddee11',
+          port: 80,
+          protocol: 'HTTP'
+        }
+      ]
+    },
+    describe_tags: {
+      tag_descriptions: [
+        resource_arn: 'arn:aws:elasticloadbalancing:ap-northeast-1:1234567890:loadbalancer/app/my-alb/1aa1bb1cc1ddee11',
+        tags: [
+          key: 'environment',
+          value: 'dev'
+        ]
+      ]
+    }
+  }
+}
+
+Aws.config[:ec2] = {
+  stub_responses: {
+    describe_security_groups: {
+      security_groups: [
+        {
+          vpc_id: 'vpc-ab123cde',
+          owner_id: '112233445566',
+          group_id: 'sg-1a2b3cd4',
+          group_name: 'my-security-group-name',
+          tags: [
+            {
+              key: 'env',
+              value: 'dev'
+            }
+          ],
+          ip_permissions: [
+            {
+              from_port: 80,
+              to_port: 80,
+              ip_protocol: 'tcp',
+              ip_ranges: [
+                {
+                  cidr_ip: '123.456.789.012/32'
+                },
+                {
+                  cidr_ip: '456.789.123.456/32'
+                }
+              ],
+              user_id_group_pairs: []
+            },
+            {
+              from_port: 22,
+              to_port: 22,
+              ip_protocol: 'tcp',
+              ip_ranges: [],
+              user_id_group_pairs: [
+                {
+                  group_id: 'sg-5a6b7cd8',
+                  group_name: 'group-name-sg'
+                }
+              ]
+            },
+            {
+              from_port: 60_000,
+              to_port: 60_000,
+              ip_protocol: 'tcp',
+              ip_ranges: [
+                {
+                  cidr_ip: '100.456.789.012/32'
+                }
+              ],
+              user_id_group_pairs: []
+            },
+            {
+              from_port: 70_000,
+              to_port: 70_000,
+              ip_protocol: 'tcp',
+              ip_ranges: [
+                {
+                  cidr_ip: '100.456.789.012/32'
+                }
+              ],
+              user_id_group_pairs: []
+            },
+            {
+              from_port: 70_000,
+              to_port: 70_000,
+              ip_protocol: 'tcp',
+              ip_ranges: [
+                {
+                  cidr_ip: '101.456.789.012/32'
+                }
+              ],
+              user_id_group_pairs: []
+            },
+            {
+              from_port: 50_000,
+              to_port: 50_009,
+              ip_protocol: 'tcp',
+              ip_ranges: [
+                {
+                  cidr_ip: '123.456.789.012/32'
+                }
+              ],
+              user_id_group_pairs: []
+            },
+            {
+              from_port: nil,
+              to_port: nil,
+              ip_protocol: '-1',
+              ip_ranges: [],
+              user_id_group_pairs: [
+                {
+                  user_id: '1234567890',
+                  group_name: nil,
+                  group_id: 'sg-3a4b5cd6',
+                  vpc_id: nil,
+                  vpc_peering_connection_id: nil,
+                  peering_status: nil
+                }
+              ]
+            }
+          ],
+          ip_permissions_egress: [
+            {
+              from_port: 50_000,
+              to_port: 50_000,
+              ip_protocol: 'tcp',
+              ip_ranges: [
+                {
+                  cidr_ip: '100.456.789.012/32'
+                }
+              ]
+            },
+            {
+              from_port: 8080,
+              to_port: 8080,
+              ip_protocol: 'tcp',
+              ip_ranges: [],
+              user_id_group_pairs: [
+                {
+                  user_id: '5678901234',
+                  group_name: 'group-in-other-aws-account-with-vpc-peering',
+                  group_id: 'sg-9a8b7c6d',
+                  vpc_id: 'vpc-5b6a7c8f',
+                  vpc_peering_connection_id: 'pcx-f9e8d7c6',
+                  peering_status: 'active'
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    },
+    describe_subnets: {
+      subnets: [
+        {
+          state: 'available',
+          vpc_id: 'vpc-ab123cde',
+          subnet_id: 'subnet-1234a567',
+          cidr_block: '10.0.1.0/24',
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-subnet'
+            }
+          ]
+        }
+      ]
+    },
+    describe_vpcs: {
+      vpcs: [
+        {
+          vpc_id: 'vpc-ab123cde',
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-vpc'
+            }
+          ]
+        }
+      ]
+    }
+  }
+}