iapi-idlc-sdk-pfm 1.0.4

data/lib/iapi-idlc-sdk-pfm/command/generator_commands/skeletons/code_generator/templates/default/LICENSE.mit.erb

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) <%= year %> <%= copyright_holder %>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/lib/iapi-idlc-sdk-pfm/command/generator_commands/skeletons/code_generator/templates/default/Policyfile.rb.erb

@@ -0,0 +1,25 @@
+# Policyfile.rb - Describe how you want Chef to build your system.
+#
+# For more information on the Policyfile feature, visit
+# https://docs.chef.io/policyfile.html
+
+# A name that describes what the system you're building with Chef does.
+name "<%= policy_name %>"
+
+<% if include_chef_repo_source %>
+# This lets you source cookbooks from your chef-repo.
+default_source :chef_repo, "../"
+
+<% end -%>
+# Where to find external cookbooks:
+default_source :supermarket
+
+# run_list: chef-client will run these recipes in the order specified.
+run_list "<%= policy_run_list %>"
+
+# Specify a custom source for a single cookbook:
+<% if policy_local_cookbook.nil? %>
+# cookbook "example_cookbook", path: "../cookbooks/example_cookbook"
+<% else %>
+cookbook "<%= cookbook_name %>", path: "."
+<% end %>

data/lib/iapi-idlc-sdk-pfm/command/generator_commands/skeletons/code_generator/templates/default/README.md.erb

@@ -0,0 +1,4 @@
+# <%= cookbook_name %>
+
+TODO: Enter the cookbook description here.
+

data/lib/iapi-idlc-sdk-pfm/command/generator_commands/skeletons/code_generator/templates/default/build_cookbook/Berksfile.erb

@@ -0,0 +1,7 @@
+source 'https://supermarket.chef.io'
+
+metadata
+
+group :delivery do
+  cookbook 'test', path: './test/fixtures/cookbooks/test'
+end

data/lib/iapi-idlc-sdk-pfm/command/generator_commands/skeletons/code_generator/templates/default/build_cookbook/metadata.rb.erb

@@ -0,0 +1,10 @@
+name 'build_cookbook'
+maintainer '<%= copyright_holder %>'
+maintainer_email '<%= email %>'
+license '<%= license %>'
+version '0.1.0'
+chef_version '>= 12.1' if respond_to?(:chef_version)
+<% if build_cookbook_parent_is_cookbook -%>
+
+depends 'delivery-truck'
+<% end -%>

data/lib/iapi-idlc-sdk-pfm/command/generator_commands/skeletons/code_generator/templates/default/build_cookbook/recipe.rb.erb

@@ -0,0 +1,8 @@
+#
+# Cookbook:: build_cookbook
+# Recipe:: <%= @phase %>
+#
+<%= license_description('#') %>
+<% if build_cookbook_parent_is_cookbook -%>
+include_recipe 'delivery-truck::<%= @phase %>'
+<% end -%>

data/lib/iapi-idlc-sdk-pfm/command/generator_commands/skeletons/code_generator/templates/default/inspec_default_test.rb.erb

@@ -0,0 +1,18 @@
+# # encoding: utf-8
+
+# Inspec test for recipe <%= cookbook_name %>::<%= recipe_name %>
+
+# The Inspec reference, with examples and extensive documentation, can be
+# found at http://inspec.io/docs/reference/resources/
+
+unless os.windows?
+  # This is an example test, replace with your own test.
+  describe user('root'), :skip do
+    it { should exist }
+  end
+end
+
+# This is an example test, replace it with your own test.
+describe port(80), :skip do
+  it { should_not be_listening }
+end

data/lib/iapi-idlc-sdk-pfm/command/generator_commands/skeletons/code_generator/templates/default/kitchen.yml.erb

@@ -0,0 +1,26 @@
+---
+driver:
+  name: vagrant
+
+provisioner:
+  name: chef_zero
+  # You may wish to disable always updating cookbooks in CI or other testing environments.
+  # For example:
+  #   always_update_cookbooks: <%%= !ENV['CI'] %>
+  always_update_cookbooks: true
+
+verifier:
+  name: inspec
+
+platforms:
+  - name: ubuntu-16.04
+  - name: centos-7.3
+
+suites:
+  - name: default
+    run_list:
+      - recipe[<%= cookbook_name %>::default]
+    verifier:
+      inspec_tests:
+        - test/smoke/default
+    attributes:

data/lib/iapi-idlc-sdk-pfm/command/generator_commands/skeletons/code_generator/templates/default/kitchen_policyfile.yml.erb

@@ -0,0 +1,33 @@
+---
+driver:
+  name: vagrant
+
+## The forwarded_port port feature lets you connect to ports on the VM guest via
+## localhost on the host.
+## see also: https://docs.vagrantup.com/v2/networking/forwarded_ports.html
+
+#  network:
+#    - ["forwarded_port", {guest: 80, host: 8080}]
+
+provisioner:
+  name: policyfile_zero
+
+## require_chef_omnibus specifies a specific chef version to install. You can
+## also set this to `true` to always use the latest version.
+## see also: https://docs.chef.io/config_yml_kitchen.html
+
+#  require_chef_omnibus: 12.8.1
+
+verifier:
+  name: inspec
+
+platforms:
+  - name: ubuntu-16.04
+  - name: centos-7.3
+
+suites:
+  - name: default
+    verifier:
+      inspec_tests:
+        - test/smoke/default
+    attributes:

data/lib/iapi-idlc-sdk-pfm/command/generator_commands/skeletons/code_generator/templates/default/metadata.rb.erb

@@ -0,0 +1,20 @@
+name '<%= cookbook_name %>'
+maintainer '<%= copyright_holder %>'
+maintainer_email '<%= email %>'
+license '<%= @spdx_license %>'
+description 'Installs/Configures <%= cookbook_name %>'
+long_description 'Installs/Configures <%= cookbook_name %>'
+version '0.1.0'
+chef_version '>= 12.1' if respond_to?(:chef_version)
+
+# The `issues_url` points to the location where issues for this cookbook are
+# tracked.  A `View Issues` link will be displayed on this cookbook's page when
+# uploaded to a Supermarket.
+#
+# issues_url 'https://github.com/<insert_org_here>/<%= cookbook_name %>/issues'
+
+# The `source_url` points to the development reposiory for this cookbook.  A
+# `View Source` link will be displayed on this cookbook's page when uploaded to
+# a Supermarket.
+#
+# source_url 'https://github.com/<insert_org_here>/<%= cookbook_name %>'

data/lib/iapi-idlc-sdk-pfm/command/generator_commands/skeletons/code_generator/templates/default/recipe.rb.erb

@@ -0,0 +1,5 @@
+#
+# Cookbook:: <%= cookbook_name %>
+# Recipe:: <%= recipe_name %>
+#
+<%= license_description('#') %>

data/lib/iapi-idlc-sdk-pfm/command/generator_commands/skeletons/code_generator/templates/default/recipe_spec.rb.erb

@@ -0,0 +1,22 @@
+#
+# Cookbook:: <%= cookbook_name %>
+# Spec:: default
+#
+<%= license_description('#') %>
+
+require 'spec_helper'
+
+describe '<%= cookbook_name %>::<%= recipe_name %>' do
+  context 'When all attributes are default, on an Ubuntu 16.04' do
+    let(:chef_run) do
+      # for a complete list of available platforms and versions see:
+      # https://github.com/customink/fauxhai/blob/master/PLATFORMS.md
+      runner = ChefSpec::ServerRunner.new(platform: 'ubuntu', version: '16.04')
+      runner.converge(described_recipe)
+    end
+
+    it 'converges successfully' do
+      expect { chef_run }.to_not raise_error
+    end
+  end
+end

data/lib/iapi-idlc-sdk-pfm/command/generator_commands/skeletons/code_generator/templates/default/repo/gitignore.erb

@@ -0,0 +1,128 @@
+## Below are example of common git excludes.
+## Please note that /cookbooks folder is ignored. This allows users to
+## clone individual cookbooks into the /cookbook folder of the chef repo
+## and work on them in parallel. This pattern also allows for chef-workstation
+## pattern, where base repo also builds out a dynamic chef workstation.
+## Examples of workstation cookbooks:
+##    https://github.com/mwrock/chef_workstation
+##    https://github.com/Nordstrom/chefdk_bootstrap
+
+
+## Ignore Chef related files and secrets
+.chef
+.chef/*.pem
+.chef/encrypted_data_bag_secret
+<%- if policy_only -%>
+cookbooks/**
+!cookbooks/README.md
+<%- end -%>
+
+## Ignore Chef-Zero files
+clients
+nodes
+
+# ## OS junk files
+# [Tt]humbs.db
+# *.DS_Store
+
+# ## Example of the workstation pattern.
+# !/cookbooks/chef_workstation/files/default/bundler/Gemfile
+# !/cookbooks/chef_workstation/files/default/bundler/Gemfile.lock
+# cookbooks/*
+# !cookbooks/chef_workstation
+
+# ##Chef
+# .kitchen/
+# .vagrant
+# nodes
+# metadata.json
+
+# ##ruby
+# *.gem
+# Gemfile
+# Gemfile.lock
+.rake_test_cache
+
+# ## Rails Heroku and other bits to ignore
+# *.log
+# *.sqlite3
+# db/*.sqlite3
+# .bundle
+# log/*
+# tmp/*
+# public/system/*
+
+# ##nodejs
+# node_modules
+
+# # Nuget (exclude all exes except for the one in the global build folder)
+# nuget.exe
+# !build/nuget/nuget.exe
+# *.nupkg
+# # NuGet packages (based on default naming convention)
+# [Bb]uild/[Pp]ackages/
+
+# # Build System # common build output folders
+# build-common/
+# output/
+
+# ## Probably not a good idea to be keeing VM inages in source control
+# *.vhd
+# *.vhdx
+
+# ## Pester Test summary
+# Test.xml
+
+# ##Webstorm files
+# *.idea
+# .idea
+# .idea/
+
+# ##Mono (or something?) files
+# *.pidb
+# *.userprefs
+
+# ## Visual Studio files
+# *.docstates
+# *.[Oo]bj
+# *.dat
+# *.crc
+# *.dbmdl
+# *.pdb
+# *.user
+# *.aps
+# *.pch
+# *.vspscc
+# *.vssscc
+# *_i.c
+# *_p.c
+# *.ncb
+# *.suo
+# *.tlb
+# *.tlh
+# *.bak
+# *.[Cc]ache
+# *.ilk
+# *.log
+# *.lib
+# *.sbr
+# *.schemaview
+# ipch/
+# [Oo]bj/
+# [Bb]in/*
+# [Dd]ebug*/
+# [Rr]elease*/
+# Ankh.NoLoad
+
+# ##Tooling
+# _ReSharper*/
+# *.[Rr]e[Ss]harper
+# [Tt]est[Rr]esult*
+# .[Jj]ust[Cc]ode
+# *ncrunch*
+
+# ##Subversion files
+# .svn
+
+# ## Office Temp Files
+# ~$*

data/lib/iapi-idlc-sdk-pfm/command/generator_commands.rb

@@ -0,0 +1,34 @@
+require 'mixlib/cli'
+require 'rbconfig'
+require 'pathname'
+require 'iapi-idlc-sdk-pfm/command/base'
+require 'iapi-idlc-sdk-pfm/generator'
+
+module Pfm
+  module Command
+    # ## SharedGeneratorOptions
+    #
+    # These CLI options are shared amongst the generator commands
+    module SharedGeneratorOptions
+      include Mixlib::CLI
+
+      # You really want these to have default values, as
+      # they will likely be used all over the place.
+      # option :verbose,
+      #        short:        '-V',
+      #        long:         '--verbose',
+      #        description:  'Show detailed output from the generator',
+      #        boolean:      true,
+      #        default:      false
+    end
+
+    # ## GeneratorCommands
+    #
+    # This module is the namespace for all subcommands of `pfm generate`
+    module GeneratorCommands
+      def self.build(class_name, params)
+        const_get(class_name).new(params)
+      end
+    end
+  end
+end

data/lib/iapi-idlc-sdk-pfm/command/package.rb

@@ -0,0 +1,118 @@
+require 'iapi-idlc-sdk-pfm/command/base'
+require 'mixlib/shellout'
+require 'aws-sdk-s3'
+require 'json'
+require 'colorize'
+
+module Pfm
+  module Command
+    class Package < Base
+      banner 'Usage: pfm package [options]'
+
+      option :application_name,
+             long:         '--application-name NAME',
+             description:  'Application Name',
+             default:      ''
+
+      def initialize
+        super
+        @params_valid = true
+        @errors = []
+      end
+
+      def run(params)
+        @params = params
+        read_and_validate_params
+
+        if params_valid?
+          package
+          # @workspace.cleanup causing bundler issues
+          0
+        else
+          @errors.each { |error| err("Error: #{error}") }
+          parse_options(params)
+          msg(opt_parser)
+          1
+        end
+      rescue DeploymentFailure => e
+        err("ERROR: #{e.message}\n")
+        1
+      end
+
+      def package
+        raise InvalidRepository, 'This doesn\'t look like a valid infrastructure repository' unless File.directory? "#{inf_base_dir}/tf"
+
+        # tag git repo with version number.
+        begin
+          system("git tag -am 'v#{REPO_VERSION}' v#{REPO_VERSION} &>/dev/null") || raise
+          msg("Tagged v#{REPO_VERSION}".colorize(:green))
+        rescue
+          msg("Tag v#{REPO_VERSION} has already been created... skipping.".colorize(:green))
+        end
+
+        begin
+          system('git push --follow-tags &>/dev/null') || raise
+          msg('Pushed git tags.'.colorize(:green))
+        rescue
+          err('Failed to push tags.'.colorize(:red))
+        end
+
+        workspace = Idlc::Workspace.new
+
+        workspace.flatten("#{inf_base_dir}/tf", 'tf')
+        workspace.add('lib/')
+        workspace.add('.pfm/config') if File.exist? '.pfm/config'
+        workspace.add('backend.tf') if File.exist? 'backend.tf'
+        workspace.add('infraspec.yml') if File.exist? 'infraspec.yml'
+
+        package_name = "#{@config[:application_name]}.#{REPO_VERSION}.infra.zip"
+        dest_zip = "./.pfm/#{package_name}"
+        FileUtils.rm_rf(dest_zip) if File.exist? dest_zip
+        Idlc::Workspace.zip_folder(workspace.tmp_dir, dest_zip)
+        msg("packaged to #{dest_zip}".colorize(:green))
+
+        # upload to s3
+        s3 = Aws::S3::Resource.new(region: SETTINGS['AWS_REGION'])
+        bucket_name = Idlc::SERVICES[SETTINGS['AWS_REGION']]['build']['publish_bucket']
+
+        obj = s3.bucket(bucket_name).object(package_name)
+        obj.upload_file(dest_zip)
+        msg('Pushed package to S3.'.colorize(:green))
+
+        # register with Orchestrate Build
+        raise InvalidRepository, 'Missing configuration.schema.json file in root.' unless File.exist? 'configuration.schema.json'
+        client = Idlc::AWSRestClient.new()
+
+        request = {
+          service: 'build',
+          method: 'PUT',
+          path: '/builds',
+          body: {
+            application_name: @config[:application_name],
+            revision: REPO_VERSION,
+            artifact_path: "s3://#{bucket_name}/#{package_name}",
+            configuration_schema: JSON.parse(File.read('configuration.schema.json'))
+          }
+        }
+
+        response = client.fetch(request.to_json)
+        msg("Registered #{@config[:application_name]} #{REPO_VERSION} with Orchestrate.".colorize(:green))
+      end
+
+      def read_and_validate_params
+        arguments = parse_options(@params)
+
+        case arguments.size
+        when 0
+          @params_valid = true
+        else
+          @params_valid = false
+        end
+      end
+
+      def params_valid?
+        @params_valid
+      end
+    end
+  end
+end

data/lib/iapi-idlc-sdk-pfm/command/plan.rb

@@ -0,0 +1,96 @@
+require 'iapi-idlc-sdk-pfm/command/base'
+require 'mixlib/shellout'
+
+module Pfm
+  module Command
+    class Plan < Base
+      banner 'Usage: pfm plan [options]'
+
+      option :app_release,
+             short:        '-a VERSION',
+             long:         '--app-release VERSION',
+             description:  'Application Version Number to Deploy',
+             default:      ''
+
+      option :server_build,
+             short:        '-b NUMBER',
+             long:         '--server-build NUMBER',
+             description:  'Server Build Number to Deploy',
+             default:      ENV['SERVER_BUILD']
+
+      option :landscape,
+             short:        '-l',
+             long:         '--landscape',
+             description:  'Format the output with the terraform_landscape gem',
+             boolean:      true,
+             default:      false
+
+      option :config_file,
+             short:        '-c FILE',
+             long:         '--config-file FILE',
+             description:  'Optional environment metadata file',
+             default:      nil
+
+      option :working_dir,
+             short:        '-d DIR',
+             long:         '--dir DIR',
+             description:  'Optional directory of infrastructure configuration to use',
+             default:      ''
+
+      def initialize
+        super
+        @params_valid = true
+        @errors = []
+      end
+
+      def run(params)
+        @params = params
+        read_and_validate_params
+
+        if params_valid?
+          if (@config[:config_file])
+            deploy_setupv2
+            plan(@config[:working_dir])
+          else
+            deploy_setup
+            plan(@workspace.tmp_dir)
+          end
+          # @workspace.cleanup causing bundler issues
+          0
+        else
+          @errors.each { |error| err("Error: #{error}") }
+          parse_options(params)
+          msg(opt_parser)
+          1
+        end
+      rescue DeploymentFailure => e
+        err("ERROR: #{e.message}\n")
+        1
+      end
+
+      def plan(dir)
+        begin
+          Terraform::Binary.plan(dir.to_s) unless @config[:landscape]
+          Terraform::Binary.plan("#{dir} | landscape") if @config[:landscape]
+        rescue
+          raise DeploymentFailure, 'Finished with errors'
+        end
+      end
+
+      def read_and_validate_params
+        arguments = parse_options(@params)
+
+        case arguments.size
+        when 0
+          @params_valid = true
+        else
+          @params_valid = false
+        end
+      end
+
+      def params_valid?
+        @params_valid
+      end
+    end
+  end
+end

data/lib/iapi-idlc-sdk-pfm/command/templates/app/files/config/client.rb.template

@@ -0,0 +1,9 @@
+log_level         :info
+log_location      STDOUT
+local_mode        true
+chef_zero.enabled true
+ssl_verify_mode   "verify_peer"
+cookbook_path [
+  "c:/chef/bake/cookbooks",
+  "c:/chef/vendor/cookbooks"
+]

data/lib/iapi-idlc-sdk-pfm/command/templates/app/files/config/init.ps1.userdata

@@ -0,0 +1,16 @@
+<powershell>
+$logfile="C:\\Program Files\\Amazon\\Ec2ConfigService\\Logs\\packer-build-userdata.log"
+# Allow script execution
+Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force
+#PS Remoting and & winrm.cmd basic config
+Enable-PSRemoting -Force -SkipNetworkProfileCheck
+& winrm.cmd set winrm/config '@{MaxTimeoutms="1800000"}' >> $logfile
+& winrm.cmd set winrm/config/winrs '@{MaxMemoryPerShellMB="1024"}' >> $logfile
+& winrm.cmd set winrm/config/winrs '@{MaxShellsPerUser="50"}' >> $logfile
+#Server settings - support username/password login
+& winrm.cmd set winrm/config/service/auth '@{Basic="true"}' >> $logfile
+& winrm.cmd set winrm/config/service '@{AllowUnencrypted="true"}' >> $logfile
+& winrm.cmd set winrm/config/winrs '@{MaxMemoryPerShellMB="1024"}' >> $logfile
+#Firewall Config
+& netsh advfirewall firewall set rule name="Windows Remote Management (HTTP-In)" profile=public protocol=tcp localport=5985 remoteip=localsubnet new remoteip=any  >> $logfile
+</powershell>

data/lib/iapi-idlc-sdk-pfm/command/templates/base/files/config/client.rb.template

@@ -0,0 +1,9 @@
+log_level         :info
+log_location      STDOUT
+local_mode        true
+chef_zero.enabled true
+ssl_verify_mode   "verify_peer"
+cookbook_path [
+  "{{user `chef_dir`}}/bake/cookbooks",
+  "{{user `chef_dir`}}/vendor/cookbooks"
+]