groundskeeper-bitcore 0.1.1 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 22443d1b2eb3e74cb732993ae2162a17d28899f8
-  data.tar.gz: f64b1e9362ba9a7025afc5ed6b522f247bd2470b
+  metadata.gz: 2a59a195b265d2acb9f80f92047a932b9d383774
+  data.tar.gz: cc30dafde4d041ded80022417a6aab76f91505c2
 SHA512:
-  metadata.gz: 8833b8710aad1de7efe9b704a042ea49ae90d541933c302b72e5e1ecab89ed6a8bb2efc6171ab53a2e81502d4bcc87de988076bcb9f0bb4ff4c222ebd0a479b3
-  data.tar.gz: 194d6b7558ad5158d94adeaf816c405ba4142ce2fbe8c8bf8ddc27dc65b5a6a21419cda8bc44ce7edd111bf1bf927459e3b33997107bd21b35148cb36c93b831
+  metadata.gz: 4a6e194b5cb47ff597fe0088a77b2d9767f949bc748c51813a65a01e4e6460c54b6c62526e02eac519ff2f8d9693a390fe5620d2e80272366169cfcbd4ff35d3
+  data.tar.gz: 0be07658c32a457a974e6b7809b5e8c021e00acf632d3b33f032513d0c3d1a69e1e3a04c0ec9865a73a6b5ca4adf1202dcb08e8b0b34948b78086f1604e81cf0

data/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 0.2.0 - 2017-11-29
+
+* IN-8 Fixes #47 transition Jira issues upon deployment (#48)
+* update script and instructions for predeployment (#46)
+* Fixes #27 warn user if Jira env variables aren't set (#45)
+* ensure RAILS_ENV gets set remotely during deployment (#44)
+* enable production deployment (#43)
+* IN-7 Merge rails_deployment functionality into groundskeeper (#40)
+
 ## 0.1.1 - 2017-09-14
 
 * sign gem and update installation instructions (#37)

data/README.md

@@ -5,30 +5,17 @@ deploying Rails applications.
 
 ## Installation
 
-Groundskeeper is cryptographically signed. To be sure this gem hasn't been
-tampered with, add the following public key if you have not already:
-
-```bash
-gem cert --add <(curl -Ls https://raw.github.com/NU-CBITS/groundskeeper/master/certs/ericcf.pem)
-```
-
 Install this gem globally via:
 
 ```bash
-gem install groundskeeper -P HighSecurity
+gem install groundskeeper-bitcore -P HighSecurity
 ```
 
 The HighSecurity trust profile will verify signed gems and require that all
 dependencies are signed.
 
 Note: if you have multiple versions of Ruby installed (via RVM e.g.), you will
-need to install this gem for each of them. In this example, your Rails
-application directory and the groundskeeper source are in the same parent
-directory:
-
-```bash
-gem install ../groundskeeper/groundskeeper-<version>.gem
-```
+need to install this gem for each of them.
 
 Additionally, to integrate with Jira you will need to set some environment
 variables. One standard place to do this is in the `~/.bash_profile`:
@@ -62,6 +49,19 @@ application directory:
 ground release
 ```
 
+To prepare the server (only required the first time) for deployment:
+
+```bash
+tag=0.0.0 stage=production ground predeploy
+```
+
+To deploy the release (note that `stage` is optional and will be set to staging
+by default):
+
+```bash
+tag=0.0.0 stage=production ground deploy
+```
+
 ## Development
 
 After checking out the repo, run `bin/setup` to install dependencies. Then, run

data/config/db_config.yml.erb

@@ -0,0 +1,10 @@
+<% project = fetch :project %>
+<% db_env_variables = project.db_env_variables(fetch :stage) %>
+<%= (fetch :stage).to_s %>:
+  adapter: postgresql
+  encoding: unicode
+  pool: 5
+  host:  <%= db_env_variables["host"] %>
+  database: <%= db_env_variables["database"] %>
+  username: <%%= ENV['<%= db_env_variables["username"] %>'] %>
+  password: <%%= ENV['<%= db_env_variables["password"] %>'] %>

data/config/deploy.rb

@@ -0,0 +1,112 @@
+# frozen_string_literal: true
+
+require "mina/rails"
+require "mina/git"
+require "mina/rvm" # for rvm support. (https://rvm.io)
+
+require_relative "./git_config.rb"
+require_relative "./predeploy.rb"
+require_relative "./tasks.rb"
+
+def load_project
+  invoke :before_run unless fetch(:project)
+end
+
+# Basic settings:
+#   domain       - The hostname to SSH to.
+#   deploy_to    - Path to deploy into.
+#   repository   - Git repo to clone from. (needed by mina/git)
+#   branch       - Branch name to deploy. (needed by mina/git)
+
+# set :application_name, 'foobar'
+# set :domain, 'foobar.com'
+# set :deploy_to, '/var/www/foobar.com'
+# set :repository, 'git://...'
+# set :branch, 'master'
+
+# Optional settings:
+#   set :user, 'foobar'          # Username in the server to SSH to.
+#   set :port, '30000'           # SSH port number.
+#   set :forward_agent, true     # SSH forward_agent.
+
+# Shared dirs and files will be symlinked into the app-folder by the
+# 'deploy:link_shared_paths' step. Some plugins already add folders to
+# shared_dirs like `mina/rails` add `public/assets`, `vendor/bundle` and many
+# more run `mina -d` to see all folders and files already included in
+# `shared_dirs` and `shared_files`
+set :shared_dirs, fetch(:shared_dirs, []).push(
+  "log",
+  "tmp/pids",
+  "tmp/cache",
+  "tmp/sockets",
+  "bundle",
+  "public/system"
+)
+
+set :shared_files, fetch(:shared_files, []).push(
+  "config/database.yml",
+  "config/secrets.yml"
+)
+
+# This task is the environment that is loaded for all remote run commands, such
+# as `mina deploy` or `mina rake`.
+task :environment do
+  # Be sure to commit your .ruby-version to your repository.
+  # For those using RVM, use this to load an RVM version@gemset.
+  # invoke :'rvm:use', 'ruby-1.9.3-p125@default'
+end
+
+# Put any custom commands you need to run at setup
+# All paths in `shared_dirs` and `shared_paths` will be created on their own.
+task :setup do
+end
+
+task :staging do
+  set :stage, :staging
+  set :rails_env, "staging"
+end
+
+task :production do
+  set :stage, :production
+  set :rails_env, "production"
+end
+
+if ENV["stage"] == "production"
+  invoke :production
+else
+  invoke :staging
+end
+
+desc "Run predeployment tasks."
+task predeploy: :remote_environment do
+  load_project
+  run :remote do
+    invoke :setup
+  end
+  invoke :'deploy_configure:create_configs'
+  invoke :'deploy_prepare:create_vhost'
+  invoke :'deploy_prepare:configure_pg'
+  invoke :'deploy_prepare:set_owner'
+end
+
+desc "Deploys the current version to the server."
+task deploy: :remote_environment do
+  load_project
+  deploy do
+    # Put things that will set up an empty directory into a fully set-up
+    # instance of your project.
+    invoke :rvm_use
+    invoke :checkout_release
+    invoke :link_shared_dirs
+    invoke :'bundle:install'
+    invoke :'rails:db_migrate'
+    invoke :'rails:assets_precompile'
+    invoke :'deploy:cleanup'
+
+    on :launch do
+      invoke :restart
+    end
+  end
+
+  invoke :open_browser
+end

data/config/git_config.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+require "yaml"
+require "json"
+require "groundskeeper"
+
+desc "Sets up project details."
+# rubocop:disable Metrics/BlockLength
+task :before_run do
+  application = %x(basename `git rev-parse --show-toplevel`).strip!
+  unless Groundskeeper::Project.available_applications.include? application
+    raise "must be inside application repo (currently in #{application}). " \
+          "available applications: " +
+          Groundskeeper::Project.available_applications
+  end
+
+  project = Groundskeeper::Project.build(application)
+  set :project, project
+
+  set :application_name, application
+  set :domain, project.full_dns(fetch(:stage))
+  set :user, "deploy"
+  set :repository, project.repo_url
+  set :deploy_to, project.deploy_to
+  set :forward_agent, true
+  set :bundle_path, "bundle"
+
+  set :rvm_ruby_version, project.rvm_ruby_version
+  set :rvm_type, :system
+
+  # On each deploy, prompt for the tag
+  puts "Looking up tags for project #{application}... (#{project.repo_url})"
+  tags = project.tags
+  raise "There must be a tagged release prior to deploying." if tags.count.zero?
+  tag = ENV["tag"]
+  unless tags.include? tag
+    raise "Tag \"#{tag}\" not found. Available tags:\n #{tags.join("\n")}"
+  end
+  set :branch, "master"
+  set :tag, "tags/#{tag}"
+end
+# rubocop:enable Metrics/BlockLength

data/config/predeploy.rb

@@ -0,0 +1,104 @@
+# frozen_string_literal: true
+
+PG_CONFIG = "/usr/pgsql-9.3/bin/pg_config"
+
+def load_template(name)
+  template_str = File.binread(File.join(File.dirname(__FILE__), name))
+  template = ERB.new(template_str, nil, "-")
+  template.result
+end
+
+def environments_dir
+  "#{fetch :deploy_to}/shared/config/environments"
+end
+
+def secrets_config_file
+  "#{fetch :deploy_to}/shared/config/secrets.yml"
+end
+
+def database_config_file
+  "#{fetch :deploy_to}/shared/config/database.yml"
+end
+
+def rails_config_file
+  "#{environments_dir}/#{fetch :stage}.rb"
+end
+
+def vhost_config_file
+  "/etc/httpd/conf.d/#{fetch :application_name}.conf"
+end
+
+def remote_shared_path(path)
+  "#{fetch(:user)}@#{fetch(:domain)}:#{fetch(:shared_path)}/#{path}"
+end
+
+# rubocop:disable Metrics/BlockLength
+namespace :deploy_configure do
+  desc "Create database and secrets"
+  task create_configs: :remote_environment do
+    load_project
+
+    secrets_config = load_template("secrets_config.yml.erb")
+    db_config = load_template("db_config.yml.erb")
+    # TODO: Move environment variables to env.yml
+    rails_config = load_template("rails_config.rb.erb")
+
+    run :remote do
+      command "mkdir -p #{environments_dir}"
+    end
+
+    if File.exist? "./config/secrets.yml"
+      invoke :'deploy_configure:copy_secrets'
+    end
+
+    comment "Writing staging secrets to #{secrets_config_file}"
+    comment "touch #{secrets_config_file}"
+    run :remote do
+      command "echo \"#{secrets_config}\" >> #{secrets_config_file}"
+    end
+
+    comment "Writing database config to #{database_config_file}"
+    run :remote do
+      command "echo \"#{db_config}\" > #{database_config_file}"
+    end
+
+    comment "Writing Rails config to #{rails_config_file}"
+    run :remote do
+      command "echo \"#{rails_config}\" > #{rails_config_file}"
+    end
+  end
+
+  desc "Copy secrets,"
+  task :copy_secrets do
+    path = remote_shared_path("config/secrets.yml")
+    comment "Copying secrets.yml to #{path}."
+    run :local do
+      command = "scp ./config/secrets.yml #{path}"
+      puts `#{command}`
+    end
+  end
+end
+# rubocop:enable Metrics/BlockLength
+
+namespace :deploy_prepare do
+  desc "Write the virtual host config file. May require an Apache restart."
+  task :create_vhost do
+    load_project
+    vhost_config = load_template("vhost_config.conf.erb")
+
+    comment "Writing virtual host config to #{vhost_config_file}"
+    command "echo \"#{vhost_config}\" > #{vhost_config_file}"
+  end
+
+  desc "Configure Postgres."
+  task :configure_pg do
+    comment "Configuring Postgres with config #{PG_CONFIG}"
+    command "bundle config build.pg -- --with-pg-config=#{PG_CONFIG}"
+  end
+
+  desc "Set owner."
+  task :set_owner do
+    comment "Setting owner of #{fetch :deploy_to} apache"
+    command "sudo chgrp -R apache #{fetch :deploy_to}"
+  end
+end

data/config/rails_config.rb.erb

@@ -0,0 +1,88 @@
+<% project = fetch :project %>
+Rails.application.configure do
+  # For catching exceptions
+  config.sentry_dsn = '<%= project.sentry_dsn %>'
+  config.sentry_public_dsn = '<%= project.sentry_public_dsn %>'
+
+  # Settings specified here will take precedence over those in config/application.rb.
+
+  # Code is not reloaded between requests.
+  config.cache_classes = true
+
+  # Eager load code on boot. This eager loads most of Rails and
+  # your application in memory, allowing both thread web servers
+  # and those relying on copy on write to perform better.
+  # Rake tasks automatically ignore this option for performance.
+  config.eager_load = true
+
+  # Full error reports are disabled and caching is turned on.
+  config.consider_all_requests_local       = false
+  config.action_controller.perform_caching = true
+
+  # Disable serving static files from the `/public` folder by default since
+  # Apache or NGINX already handles this.
+  config.public_file_server.enabled = ENV['RAILS_SERVE_STATIC_FILES'].present?
+
+  # Compress JavaScripts and CSS.
+  config.assets.js_compressor = :uglifier
+  # config.assets.css_compressor = :sass
+
+  # Do not fallback to assets pipeline if a precompiled asset is missed.
+  config.assets.compile = false
+
+  # Specifies the header that your server uses for sending files.
+  config.action_dispatch.x_sendfile_header = 'X-Sendfile' # for apache
+  # config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for nginx
+
+  # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
+  config.force_ssl = true
+
+  # Set to :debug to see everything in the log.
+  config.log_level = :info
+
+  # Prepend all log lines with the following tags.
+  config.log_tags = [ :request_id ]
+
+  # Use a different logger for distributed setups.
+  # config.logger = ActiveSupport::TaggedLogging.new(SyslogLogger.new)
+
+  # Use a different cache store in production.
+  # config.cache_store = :mem_cache_store
+
+  config.action_mailer.perform_caching = false
+
+  # Precompile additional assets.
+  # application.js, application.css, and all non-JS/CSS in app/assets folder are already added.
+  # config.assets.precompile += %w( search.js )
+
+  # Ignore bad email addresses and do not raise email delivery errors.
+  # Set this to true and configure the email server for immediate delivery to raise delivery errors.
+  config.action_mailer.default_url_options = { host: '<%= fetch :domain %>' }
+  config.action_mailer.delivery_method = :smtp
+  config.action_mailer.raise_delivery_errors = false
+  config.action_mailer.perform_deliveries = true
+  config.action_mailer.smtp_settings = {
+    authentication: :plain,
+    address: 'smtp.mailgun.org',
+    port: 587,
+    domain: 'cbits.northwestern.edu',
+    user_name: ENV['mailgun_db_username'],
+    password: ENV['mailgun_db_password']
+  }
+
+  Rails.application.routes.default_url_options[:host] = '<%= fetch :domain %>'
+  Rails.application.routes.default_url_options[:protocol] = 'https'
+
+  # Enable locale fallbacks for I18n (makes lookups for any locale fall back to
+  # the I18n.default_locale when a translation can not be found).
+  config.i18n.fallbacks = true
+
+  # Send deprecation notices to registered listeners.
+  config.active_support.deprecation = :notify
+
+  # Disable automatic flushing of the log to improve performance.
+  # config.autoflush_log = false
+
+  # Use default logging formatter so that PID and timestamp are not suppressed.
+  config.log_formatter = ::Logger::Formatter.new
+end

data/config/secrets_config.yml.erb

@@ -0,0 +1,3 @@
+<% require "securerandom" %>
+<%= fetch :stage %>:
+  secret_key_base: <%= SecureRandom.hex(64) %>

data/config/tasks.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+desc "Restart application"
+task :restart do
+  in_path(fetch(:current_path)) do
+    command %(mkdir -p tmp/)
+    command %(touch tmp/restart.txt)
+  end
+end
+
+desc "Checks out the selected release tag"
+task :checkout_release do
+  comment "Checking out release \"#{fetch :tag}\""
+  command %(git clone -b "#{fetch :branch}" "#{fetch :repository}" .)
+  command "git fetch"
+  command %(git checkout "#{fetch :tag}")
+end
+
+desc "Uses an RVM envionment"
+task :rvm_use do
+  command "rvm use \"ruby-#{fetch :rvm_ruby_version}\""
+end
+
+desc "Link shared directories."
+task :link_shared_dirs do
+  # Must be set after :stage is set
+  set :shared_files, fetch(:shared_files, []).push(
+    "config/environments/#{fetch :stage}.rb"
+  )
+
+  comment "Shared directories: #{(fetch :shared_dirs).join("\n")}"
+  invoke :'deploy:link_shared_paths'
+end
+
+desc "Open the newly deployed server in the browser (for macOS)."
+task :open_browser do
+  run(:local) do
+    command "open https://#{fetch :domain}"
+  end
+end

data/config/vhost_config.conf.erb

@@ -0,0 +1,49 @@
+<% project = fetch :project -%>
+<VirtualHost *:80>
+  ServerName <%= fetch :domain %>
+  Redirect permanent / https://<%= fetch :domain -%>/
+</VirtualHost>
+
+<VirtualHost *:443>
+  PassengerFriendlyErrorPages off
+  PassengerAppEnv <%= fetch :stage %>
+  PassengerRuby /usr/local/rvm/wrappers/ruby-<%= fetch :rvm_ruby_version -%>/ruby
+  # Always have at least 1 process in existence for the application
+  PassengerMinInstances 1
+
+  ServerName <%= fetch :domain %>
+
+  SSLEngine On
+  SSLCertificateFile <%= project.ssl_certificate_file(fetch(:stage).to_sym) %>
+  SSLCertificateChainFile <%= project.ssl_certificate_chain_file(fetch(:stage).to_sym) %>
+  SSLCertificateKeyFile <%= project.ssl_certificate_key_file(fetch(:stage).to_sym) %>
+
+  DocumentRoot <%= fetch :deploy_to -%>/current/public
+  RailsBaseURI /
+  PassengerDebugLogFile /var/log/httpd/passenger.log
+
+  <Directory <%= fetch :deploy_to -%>/current/public >
+    Allow from all
+    Options -MultiViews
+  </Directory>
+
+  AddOutputFilterByType DEFLATE text/html text/css application/javascript
+
+  RewriteEngine On
+
+  # Show maintenance page if it exists
+  ErrorDocument 503 /system/maintenance.html
+  RewriteCond %{REQUEST_URI} !\.(css|gif|jpg|png)$
+  RewriteCond %{DOCUMENT_ROOT}/system/maintenance.html -f
+  RewriteCond %{SCRIPT_FILENAME} !maintenance.html
+  RewriteRule ^.*$  -  [redirect=503,last]
+
+  <Location /assets/>
+    # RFC says only cache for 1 year
+    ExpiresActive On
+    ExpiresDefault \"access plus 1 year\"
+  </Location>
+</VirtualHost>
+
+# Start the application before the first access
+PassengerPreStart https://<%= fetch :domain -%>:443/

data/groundskeeper.gemspec

@@ -15,10 +15,6 @@ Gem::Specification.new do |spec|
   spec.homepage      = "https://github.com/NU-CBITS/groundskeeper.git"
   spec.license       = "MIT"
   spec.cert_chain    = ["certs/ericcf.pem"]
-  if $PROGRAM_NAME.end_with?("gem")
-    spec.signing_key = File.expand_path("~/.ssh/gem-private_key.pem")
-  end
-
   # Prevent pushing this gem to RubyGems.org. To allow pushes either set the
   # 'allowed_push_host' to allow pushing to a single host or delete this
   # section to allow pushing to any host.
@@ -34,10 +30,11 @@ Gem::Specification.new do |spec|
   end
   spec.bindir        = "bin"
   spec.executables   = "ground"
-  spec.require_paths = ["lib"]
+  spec.require_paths = %w[lib config]
 
   spec.add_dependency "jira-ruby", "~> 1.3"
   spec.add_dependency "thor", "~> 0.19"
+  spec.add_dependency "mina", "~> 1.2"
 
   spec.add_development_dependency "bundler", "~> 1.15"
   spec.add_development_dependency "minitest", "~> 5.0"

data/lib/groundskeeper.rb

@@ -11,6 +11,7 @@ require "groundskeeper/project"
 require "groundskeeper/rails_version"
 require "groundskeeper/repository"
 require "groundskeeper/version"
+require "groundskeeper/website"
 
 # :reek:IrresponsibleModule
 module Groundskeeper

data/lib/groundskeeper/application.rb

@@ -7,6 +7,9 @@ module Groundskeeper
   class Application < Thor
     attr_reader :commands
 
+    class_option :simulate, desc: "Simulate mina"
+    class_option :verbose, desc: "Run mina verbosely"
+
     def initialize(args = [], local_options = {}, config = {})
       @commands = Commands.build(self)
       super
@@ -22,5 +25,17 @@ module Groundskeeper
       commands.info
       commands.release
     end
+
+    desc "predeploy", "create configuration files for the project"
+    def predeploy
+      commands.info
+      commands.predeploy options
+    end
+
+    desc "deploy", "deploy the latest release"
+    def deploy
+      commands.info
+      commands.deploy options
+    end
   end
 end

data/lib/groundskeeper/commands.rb

@@ -1,9 +1,23 @@
 # frozen_string_literal: true
 
+require "rake"
+require "mina"
+require "pp"
+require "open3"
+
 module Groundskeeper
-  # Formulas for managing releases.
+  # Formulas for managing releases and deployments.
   # rubocop:disable Metrics/ClassLength
   class Commands
+    RAKEFILE = File.join(
+      File.dirname(__FILE__), "..", "..", "config", "deploy.rb"
+    )
+    STAGE = "stage"
+    STAGING = "staging"
+    PRODUCTION = "production"
+    DEFAULT_STAGE = STAGING
+    TAG = "tag"
+
     # rubocop:disable Metrics/MethodLength
     def self.build(console)
       repository = Repository.new
@@ -67,8 +81,10 @@ module Groundskeeper
       )
     end
 
+    # rubocop:disable Metrics/AbcSize
     def release
       return unrecognized_version unless version_file.exists?
+      return missing_jira_credentials unless jira.credentials?
 
       summarize_recent_commits
       ask_next_version
@@ -81,8 +97,21 @@ module Groundskeeper
       ask_add_version_to_jira_issues
       open_pull_request_page
     end
+    # rubocop:enable Metrics/AbcSize
     # rubocop:enable Metrics/MethodLength
 
+    def predeploy(options)
+      return unrecognized_version unless version_file.exists?
+
+      mina "predeploy", options
+    end
+
+    def deploy(options)
+      return unrecognized_version unless version_file.exists?
+
+      mina "deploy", options
+    end
+
     private
 
     # collaborators
@@ -92,6 +121,15 @@ module Groundskeeper
     attr_reader :next_version, :recent_commits, :did_checkout_branch,
                 :did_push_to_remote
 
+    def mina(command, options)
+      cmd = String.new command
+      cmd << " -s" if options[:simulate]
+      cmd << " -v" if options[:verbose]
+      run_mina cmd
+      console.say("waiting for deployed application to restart...", :yellow)
+      update_deployed_issues
+    end
+
     def announce_version
       console.say("Groundskeeper version #{Groundskeeper::VERSION}\n\n", :bold)
     end
@@ -185,6 +223,13 @@ module Groundskeeper
       )
     end
 
+    def missing_jira_credentials
+      console.say(
+        "Please configure your Jira environment variables.",
+        :red
+      )
+    end
+
     def open_pull_request_page
       return unless did_checkout_branch && did_push_to_remote
 
@@ -194,6 +239,45 @@ module Groundskeeper
     def new_branch_name
       "v#{next_version}"
     end
+
+    def run_mina(arguments)
+      command = "mina #{arguments} -f #{RAKEFILE}"
+      Open3.popen3(command) do |_stdout, stderr, _status, _thread|
+        # rubocop:disable Lint/AssignmentInCondition
+        while line = stderr.gets
+          puts line
+        end
+        # rubocop:enable Lint/AssignmentInCondition
+      end
+    end
+
+    def update_deployed_issues
+      deployed_url = "https://#{project.full_dns(stage)}"
+      deployed_version = Website.new(deployed_url).version
+
+      if deployed_version == ENV[TAG]
+        console.say("# deployment successful", :green)
+        transition_remote_issues deployed_version
+      else
+        console.say("something went wrong", :red)
+      end
+    end
+
+    def stage
+      ENV[STAGE] == PRODUCTION ? PRODUCTION : DEFAULT_STAGE
+    end
+
+    def transition_remote_issues(version)
+      version_name = "#{repository.name} #{version}"
+      deployed_issues = jira.fetch_issues_by_fix_version(version_name)
+      action = stage == PRODUCTION ? Jira::DELIVER : Jira::DEPLOY_TO_STAGING
+      console.say(
+        "transitioning deployed issues in Jira: " \
+          "#{action} #{deployed_issues.join(', ')}",
+        :yellow
+      )
+      jira.transition_remote_issues(action, deployed_issues)
+    end
   end
   # rubocop:enable Metrics/ClassLength
 end

data/lib/groundskeeper/jira.rb

@@ -6,6 +6,16 @@ require "jira-ruby"
 module Groundskeeper
   # Wraps an interface to Jira.
   class Jira
+    JIRA_USERNAME_KEY = "JIRA_USERNAME"
+    JIRA_PASSWORD_KEY = "JIRA_PASSWORD"
+    JIRA_SITE_KEY = "JIRA_SITE"
+    DEPLOY_TO_STAGING = "Deploy to Staging"
+    DELIVER = "Deliver"
+    TRANSITION_IDS = {
+      DEPLOY_TO_STAGING => 231,
+      DELIVER => 201
+    }.freeze
+
     attr_reader :client, :prefix
 
     ISSUE_PATTERN = "%s-\\d+"
@@ -16,9 +26,9 @@ module Groundskeeper
 
       def initialize
         @client = JIRA::Client.new(
-          username: ENV["JIRA_USERNAME"],
-          password: ENV["JIRA_PASSWORD"],
-          site: ENV["JIRA_SITE"],
+          username: ENV[JIRA_USERNAME_KEY],
+          password: ENV[JIRA_PASSWORD_KEY],
+          site: ENV[JIRA_SITE_KEY],
           context_path: "",
           auth_type: :basic,
           read_timeout: 120
@@ -36,6 +46,23 @@ module Groundskeeper
               .find(issue_id)
               .save(update: { fixVersions: [{ add: { name: version_name } }] })
       end
+
+      def transition_issue(issue_id:, transition_id:)
+        client.Issue
+              .find(issue_id)
+              .transitions
+              .build
+              .save(transition: { id: transition_id })
+      end
+
+      def fetch_issues_by_fix_version(version:)
+        search_path = "/rest/api/2/search"
+        query = "fixVersion = \"#{version}\""
+        response =
+          client.get("#{search_path}?fields=key&jql=#{URI.escape(query)}").body
+
+        JSON.parse(response)["issues"].map { |issue| issue["key"] }
+      end
     end
 
     def self.build(prefix)
@@ -50,6 +77,12 @@ module Groundskeeper
       @client = client
     end
 
+    def credentials?
+      ENV[JIRA_USERNAME_KEY].present? &&
+        ENV[JIRA_PASSWORD_KEY].present? &&
+        ENV[JIRA_SITE_KEY].present?
+    end
+
     # Returns the list of Jira issues found in a set of commit messages.
     def included_issues(changes)
       issue_expression = /#{format(ISSUE_PATTERN, prefix)}/
@@ -66,5 +99,18 @@ module Groundskeeper
         client.add_version_to_issue(issue_id: issue_id, version_name: name)
       end
     end
+
+    def transition_remote_issues(transition_type, issue_ids)
+      issue_ids.each do |issue_id|
+        client.transition_issue(
+          issue_id: issue_id,
+          transition_id: TRANSITION_IDS[transition_type]
+        )
+      end
+    end
+
+    def fetch_issues_by_fix_version(version)
+      client.fetch_issues_by_fix_version(version: version)
+    end
   end
 end

data/lib/groundskeeper/project.rb

@@ -1,27 +1,46 @@
 # frozen_string_literal: true
 
 require "yaml"
+require "json"
 
 module Groundskeeper
   # Accesses project details stored in the home directory.
   class Project
-    attr_reader :details
+    attr_reader :details, :servers, :repo_name
 
     DETAILS_PATH = "~/.project_details/projects.yml"
+    SERVERS_PATH = "../../servers.yml"
     JIRA_PREFIX_KEY = "jira_prefix"
     PROJECT_NAME_KEY = "name"
     SOURCE_CONTROL_USERNAME_KEY = "scm_username"
+    FULL_DNS_KEY = "full_dns"
+    RVM_RUBY_VERSION_KEY = "ruby_version"
+    DB_ENV_VARIABLES_KEY = "db_env_variables"
+    SENTRY_DSN_KEY = "sentry_dsn"
+    SENTRY_PUBLIC_DSN_KEY = "sentry_public_dsn"
+    SSL_CERTIFICATE_FILE_KEY = "SSLCertificateFile"
+    SSL_CERTIFICATE_CHAIN_FILE_KEY = "SSLCertificateChainFile"
+    SSL_CERTIFICATE_KEY_FILE_KEY = "SSLCertificateKeyFile"
 
     def self.build(repository_name)
       new(
-        yaml: Document.new(DETAILS_PATH).read,
+        projects_yaml: Document.new(DETAILS_PATH).read,
+        servers_yaml: Document.new(SERVERS_PATH).read,
         repository_name: repository_name
       )
     end
 
-    def initialize(yaml:, repository_name:)
+    def self.available_applications
+      yaml = Document.new(DETAILS_PATH).read
       projects = YAML.safe_load(yaml) || {}
+      projects.keys.join(", ")
+    end
+
+    def initialize(projects_yaml:, servers_yaml:, repository_name:)
+      projects = YAML.safe_load(projects_yaml) || {}
       @details = projects[repository_name] || {}
+      @servers = YAML.safe_load(servers_yaml) || {}
+      @repo_name = repository_name
     end
 
     def project_name
@@ -35,5 +54,62 @@ module Groundskeeper
     def source_control_username
       details[SOURCE_CONTROL_USERNAME_KEY] || ""
     end
+
+    def full_dns(stage)
+      details.dig(FULL_DNS_KEY, stage.to_s) || ""
+    end
+
+    def db_env_variables(stage)
+      details.dig(DB_ENV_VARIABLES_KEY, stage.to_s) || ""
+    end
+
+    def rvm_ruby_version
+      details[RVM_RUBY_VERSION_KEY] || ""
+    end
+
+    def sentry_dsn
+      details[SENTRY_DSN_KEY] || ""
+    end
+
+    def sentry_public_dsn
+      details[SENTRY_PUBLIC_DSN_KEY] || ""
+    end
+
+    def ssl_certificate_file(stage)
+      details.dig(SSL_CERTIFICATE_FILE_KEY, stage.to_s) || ""
+    end
+
+    def ssl_certificate_chain_file(stage)
+      details.dig(SSL_CERTIFICATE_CHAIN_FILE_KEY, stage.to_s) || ""
+    end
+
+    def ssl_certificate_key_file(stage)
+      details.dig(SSL_CERTIFICATE_KEY_FILE_KEY, stage.to_s) || ""
+    end
+
+    def server_config(stage)
+      servers[full_dns(stage)]
+    end
+
+    def repo_url
+      "git@github.com:#{source_control_username}/#{repo_name}.git"
+    end
+
+    def deploy_to
+      "/var/www/apps/#{repo_name}"
+    end
+
+    def tags
+      api_url = "https://api.github.com/repos/" \
+                "#{source_control_username}/#{repo_name}/tags"
+      authorization_header = "Authorization: token #{ENV['GITHUB_API_TOKEN']}"
+      response = JSON.parse(`curl -s -H "#{authorization_header}" #{api_url}`)
+      unless response.is_a?(Array)
+        message = response["message"]
+        puts "Failed to obtain response: #{message}"
+        return []
+      end
+      response.map { |h| h["name"] }
+    end
   end
 end

data/lib/groundskeeper/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Groundskeeper
-  VERSION = "0.1.1"
+  VERSION = "0.2.0"
 end

data/lib/groundskeeper/website.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+require "open-uri"
+
+module Groundskeeper
+  # A deployed website/application.
+  class Website
+    VERSION_PATH = "version.txt"
+
+    attr_reader :uri
+
+    def initialize(uri)
+      @uri = uri
+    end
+
+    def version
+      URI.parse("#{uri}/#{VERSION_PATH}").read
+    end
+  end
+end

data/servers.yml

@@ -0,0 +1,35 @@
+cbits-railsapps-staging:
+  domain: cbits-railsapps-staging.nubic.northwestern.edu
+  SSLCertificateFile: /etc/pki/tls/certs/cbits.northwestern.edu.crt
+  SSLCertificateChainFile: /etc/pki/tls/certs/cbits.northwestern.edu_intermediate.crt
+  SSLCertificateKeyFile: /etc/pki/tls/private/cbits.northwestern.edu.key
+cbits-railsapps:
+  domain: cbits-railsapps.nubic.northwestern.edu
+  SSLCertificateFile: /etc/pki/tls/certs/cbits-railsapps.nubic.northwestern.edu.crt
+  SSLCertificateChainFile: /etc/pki/tls/certs/komodo_intermediate_ca.crt
+  SSLCertificateKeyFile: /etc/pki/tls/private/cbits-railsapps.nubic.northwestern.edu.key
+vtfsmcbitsapps01:
+  domain: vtfsmcbitsapps01.fsm.northwestern.edu
+  SSLCertificateFile: /etc/pki/tls/certs/cbits.northwestern.edu.crt
+  SSLCertificateChainFile: /etc/pki/tls/certs/cbits.northwestern.edu_intermediate.crt
+  SSLCertificateKeyFile: /etc/pki/tls/private/cbits.northwestern.edu.key
+vfsmcbitsapps10:
+  domain: vfsmcbitsapps10.fsm.northwestern.edu
+  SSLCertificateFile: /etc/pki/tls/certs/vfsmcbitsapps10_nubic_northwestern_edu_cert.cer
+  SSLCertificateChainFile: /etc/pki/tls/certs/vfsmcbitsapps10_nubic_northwestern_edu_interm.cer
+  SSLCertificateKeyFile: /etc/pki/tls/private/cbits-railsapps.nubic.northwestern.edu.key
+vfsmcbitsapps11:
+  domain: vfsmcbitsapps11.fsm.northwestern.edu
+  SSLCertificateFile: /etc/pki/tls/certs/vfsmcbitsapps11_nubic_northwestern_edu_cert.cer
+  SSLCertificateChainFile: /etc/pki/tls/certs/vfsmcbitsapps11_nubic_northwestern_edu_interm.cer
+  SSLCertificateKeyFile: /etc/pki/tls/private/cbits-railsapps.nubic.northwestern.edu.key
+vfsmcbitsapps12:
+  domain: vfsmcbitsapps12.fsm.northwestern.edu
+  SSLCertificateFile: /etc/pki/tls/certs/vfsmcbitsapps12.fsm.northwestern.edu.crt
+  SSLCertificateChainFile: /etc/pki/tls/certs/vfsmcbitsapps12.fsm.northwestern.edu_intermediate.crt
+  SSLCertificateKeyFile: /etc/pki/tls/private/cbits-railsapps.nubic.northwestern.edu.key
+vfsmcbitsapps13:
+  domain: vfsmcbitsapps13.fsm.northwestern.edu
+  SSLCertificateFile: /etc/pki/tls/certs/vfsmcbitsapps13.fsm.northwestern.edu.crt
+  SSLCertificateChainFile: /etc/pki/tls/certs/vfsmcbitsapps13.fsm.northwestern.edu_intermediate.crt
+  SSLCertificateKeyFile: /etc/pki/tls/private/cbits-railsapps.nubic.northwestern.edu.key

metadata

@@ -1,36 +1,15 @@
 --- !ruby/object:Gem::Specification
 name: groundskeeper-bitcore
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.2.0
 platform: ruby
 authors:
 - BIT Core
 autorequire: 
 bindir: bin
 cert_chain:
-- |
-  -----BEGIN CERTIFICATE-----
-  MIIDhTCCAm2gAwIBAgIBATANBgkqhkiG9w0BAQUFADBEMQ8wDQYDVQQDDAZlcmlj
-  Y2YxHDAaBgoJkiaJk/IsZAEZFgxub3J0aHdlc3Rlcm4xEzARBgoJkiaJk/IsZAEZ
-  FgNlZHUwHhcNMTcwOTEyMjAwODQzWhcNMTgwOTEyMjAwODQzWjBEMQ8wDQYDVQQD
-  DAZlcmljY2YxHDAaBgoJkiaJk/IsZAEZFgxub3J0aHdlc3Rlcm4xEzARBgoJkiaJ
-  k/IsZAEZFgNlZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk8FgP
-  SIrleTjIXJT/yu+W9nujkvcIMRPbLqKq60KQy/2LANMZ7DiLZRBkg2oSK0D9p8GR
-  be30F2DGAOSBZiBTLPDNAQZBpRVGeFpAAOEpREZ8ahaZVTfc8+IYSfxpnW2gaUte
-  SfbG5xNcpHkRpwkbZGoq9yFOoaucxfwoz+9QunEFDiCAumn7uRMKHJdqSEpQnFkQ
-  56GKuUvUuq7J+J4M+kwOK6a/4/Y8Bs/qUYH3GHa/0WJwfFLfp3gqhagLcZu40JFe
-  mQpX3bAkmojuxyAi7JjXKqFv1LZgxAGca5SC6sECXiTkw9eXInBKzvBN33gOv+Vj
-  9bot70L0EihaqJrnAgMBAAGjgYEwfzAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAd
-  BgNVHQ4EFgQUsMK40utpv6yRQ3i0R7avJn3LQ/YwIgYDVR0RBBswGYEXZXJpY2Nm
-  QG5vcnRod2VzdGVybi5lZHUwIgYDVR0SBBswGYEXZXJpY2NmQG5vcnRod2VzdGVy
-  bi5lZHUwDQYJKoZIhvcNAQEFBQADggEBACvUVV3V8EYqV9DanJS3ywMVnQB5ByP1
-  7TV70+Amnnu196Jp2JGJ27sjeE79VJeBbGyE0rCRUQXlaD2Zh8X6Yy04oWR0YFa8
-  DQ3rqVmKTodTJ0K/rmpIMCbwrsyg7QRxfB6cUE+sgPX5ygDmj2gYY+fcw3MoVOif
-  QY1i1gFSjcXvx0qnvQLnbD+gbr7D3wpfgFHRbBEDOuNdpFthggUO6eFraVYcsz9u
-  1v/mC2s7Cj+Jv053bCKPjSk2wLLZpHRs40jXgy/NudtouDy2yYlJHxBFfdeRNEk2
-  fo8I5WeWdUoEzUI6WlkTjMw3nWezlF0LCGz781P4qvtz0BICgaS41qw=
-  -----END CERTIFICATE-----
-date: 2017-09-15 00:00:00.000000000 Z
+- certs/ericcf.pem
+date: 2017-11-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jira-ruby
@@ -60,6 +39,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.19'
+- !ruby/object:Gem::Dependency
+  name: mina
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -138,6 +131,14 @@ files:
 - bin/ground
 - bin/setup
 - certs/ericcf.pem
+- config/db_config.yml.erb
+- config/deploy.rb
+- config/git_config.rb
+- config/predeploy.rb
+- config/rails_config.rb.erb
+- config/secrets_config.yml.erb
+- config/tasks.rb
+- config/vhost_config.conf.erb
 - groundskeeper.gemspec
 - lib/groundskeeper.rb
 - lib/groundskeeper/application.rb
@@ -151,6 +152,8 @@ files:
 - lib/groundskeeper/rails_version.rb
 - lib/groundskeeper/repository.rb
 - lib/groundskeeper/version.rb
+- lib/groundskeeper/website.rb
+- servers.yml
 homepage: https://github.com/NU-CBITS/groundskeeper.git
 licenses:
 - MIT
@@ -160,6 +163,7 @@ post_install_message:
 rdoc_options: []
 require_paths:
 - lib
+- config
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="

data.tar.gz.sig

@@ -1,2 +0,0 @@
-YN����� �@D����8��vr�F�Ϸ�ܓ�O�7��>���P}j��
-iZDh4>�3��%ɻ�mr����v3��b��0_Fk��B�u&�y��;�G��3C-ɣ��g�ݕîw捀IR~�w��gm���Q��_=~V5���2SU^���%�O��|~ր;�]�f(���

metadata.gz.sig

@@ -1,3 +0,0 @@
-z#Vg!Kj�*�-�@�/.�u���M]�3�Coe�*�n�WZq^�RY!,���Ӫ.���3�,��)�k�0:��%(B��
���H?�@$�'�K�Mra�*�`DO��)
-�M/��Y,�����~kh�������Q��GD"�����Qၔn�l�������tlq���D,�P�TSH�'_�	�MrO�r� 9�I$Ra)_]���MC-��F1�6j����36G�̶ѥU�r—��� �F�
-%