jenkins-factory 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: a11a17e3bdbd0d8632fefa847871616f6ad64a53
+  data.tar.gz: 4c89804b45d2267ceb3a258bd938853936bcb11b
+SHA512:
+  metadata.gz: aca24b4ab3305044f841b24a98164e0e3fc5c1a28180a226606ee465e80efbdc66c53803e880b9f0b7cca16c21160965f6c2456f84a81ba5a006f7318ce0ed2a
+  data.tar.gz: f0ed381302fc519c3ce53fe8ba531965754bf996ae3e47322ff77dbd1ab7ceb2f7184ac1ad9312071ed85a15e0b5b8627dcef1ca44fa9d01b194b1881e677920

data/bin/jenkins_factory

@@ -0,0 +1,19 @@
+#!/usr/bin/env ruby
+require 'trollop'
+require 'jenkins_factory'
+require 'yaml'
+
+opts = Trollop::options do
+  opt :jenkins_settings_yml_path, 'Show the YAML here', type: :string, required: true
+end
+
+jenkins_settings = YAML.load_file(opts[:jenkins_settings_yml_path])
+
+jenkins_settings.keys.each do |k|
+  jenkins_settings[k.to_sym] = jenkins_settings[k]
+  jenkins_settings.delete k
+end
+
+jenkins_url = JenkinsFactory.new.create(jenkins_settings)
+
+puts jenkins_url

data/lib/base_jenkins_ami.rb

@@ -0,0 +1,20 @@
+class BaseJenkinsAmi
+  REGION_BASE_AMIS = {
+    'us-east-1' => 'ami-e2754888',
+    'us-west-2' => 'ami-677c9e07'
+  }
+
+  def discover_base_ami
+    if ENV['AWS_REGION'].nil?
+      raise 'AWS_REGION must be set in environment'
+    else
+      base_ami = REGION_BASE_AMIS[ENV['AWS_REGION']]
+
+      if base_ami.nil?
+        raise "#{ENV['AWS_REGION']} is illegitimate or unsupported region"
+      else
+        base_ami
+      end
+    end
+  end
+end

data/lib/cfndsl/jenkins_cfndsl.rb

@@ -0,0 +1,106 @@
+CloudFormation {
+
+  IAM_Role('JenkinsInstanceRole') {
+    AssumeRolePolicyDocument JSON.load <<-END
+      {
+        "Statement":[
+          {
+            "Sid":"1",
+            "Effect":"Allow",
+            "Principal":{
+              "Service":[
+                "ec2.amazonaws.com"
+              ]
+            },
+            "Action":"sts:AssumeRole"
+          }
+        ]
+      }
+    END
+
+    Path '/'
+
+    Policies JSON.load <<-END
+      [
+        {
+          "PolicyName":"JenkinsGodlikeWreckYourAccountPolicy",
+          "PolicyDocument":{
+            "Version":"2012-10-17",
+            "Statement": [
+              {
+                "Action": [
+                  "*"
+                ],
+                "Effect": "Allow",
+                "Resource": "*"
+              }
+            ]
+          }
+        }
+      ]
+    END
+  }
+
+  IAM_InstanceProfile('JenkinsInstanceProfile') {
+    Path '/'
+    Roles [ Ref('JenkinsInstanceRole') ]
+  }
+
+  EC2_SecurityGroup('JenkinsSecurityGroup') {
+    VpcId vpc_id
+    GroupDescription 'Will mostly be phoning home to CP'
+  }
+
+  %w(22 8080).each do |ingress_port|
+    EC2_SecurityGroupIngress("SecurityGroupIngress#{ingress_port}") {
+      GroupId Ref('JenkinsSecurityGroup')
+      IpProtocol 'tcp'
+      FromPort ingress_port.to_s
+      ToPort ingress_port.to_s
+      CidrIp jenkins_ingress_ssh_cidr
+    }
+  end
+
+  EC2_Instance('JenkinsInstance') {
+    ImageId jenkins_base_ami_id
+    InstanceType 'm4.large'
+    KeyName jenkins_ec2_key_pair_name
+
+    IamInstanceProfile Ref('JenkinsInstanceProfile')
+
+    NetworkInterfaces [
+      NetworkInterface {
+        GroupSet Ref('JenkinsSecurityGroup')
+        AssociatePublicIpAddress associate_public_ip_address
+        DeviceIndex 0
+        DeleteOnTermination true
+        SubnetId subnet_id
+      }
+    ]
+
+    start_jenkins_commands = [
+      "#!/bin/bash -xe\n",
+      "yum update -y aws-cfn-bootstrap\n",
+      "yum -y upgrade\n",
+      "service jenkins start\n"
+    ]
+
+    cfn_signal_commands = [
+      '/opt/aws/bin/cfn-signal -e $? ',
+      '                        --stack ', Ref('AWS::StackName'),
+      '                        --resource JenkinsInstance ',
+      '                        --region ',Ref('AWS::Region'),"\n"
+    ]
+
+    userdata_commands = start_jenkins_commands + extra_userdata + cfn_signal_commands
+    UserData FnBase64(FnJoin(
+                        '',
+                        userdata_commands
+                      ))
+
+    CreationPolicy('ResourceSignal', { 'Count' => 1,  'Timeout' => 'PT15M' })
+  }
+
+  Output(:JenkinsURL,
+         FnJoin('', [ 'http://', FnGetAtt('JenkinsInstance', 'PublicIp'), ':8080/']))
+}

data/lib/jenkins_factory.rb

@@ -0,0 +1,63 @@
+require 'cfndsl_converger'
+require_relative 'base_jenkins_ami'
+require_relative 'job_seeder'
+
+class JenkinsFactory
+
+  def create(controller_ip:,
+             ec2_keypair_name:,
+             vpc_id:,
+             subnet_id:,
+
+             job_repo:,
+             job_repo_branch: 'master',
+             job_definition_relative_path:,
+
+             # this is currently baked into the AMI
+             jenkins_admin_username:,
+             jenkins_admin_password:,
+
+             # crude bash commands, but maybe consider scp a tar of cookbooks?
+             extra_user_data_provisioning: [],
+             associate_public_ip_address: true)
+
+    customisations = {
+      'jenkins_base_ami_id' => BaseJenkinsAmi.new.discover_base_ami,
+      'jenkins_ingress_ssh_cidr' => controller_ip,
+      'jenkins_ec2_key_pair_name' => ec2_keypair_name,
+      'subnet_id' => subnet_id,
+      'vpc_id' => vpc_id,
+      'associate_public_ip_address' => associate_public_ip_address.to_s,
+      'extra_userdata' => extra_user_data_provisioning
+    }
+
+    stack_outputs = converge_jenkins_stack customisations: customisations
+
+    jenkins_connection_info = {
+      'jenkins_url' => stack_outputs['JenkinsURL'],
+      'jenkins_user' => jenkins_admin_username,
+      'jenkins_pass' => jenkins_admin_password
+    }
+
+    jobs_location = {
+      'job_repo' => job_repo,
+      'job_repo_branch' => job_repo_branch,
+      'job_definition_relative_path' => job_definition_relative_path
+    }
+
+    JobSeeder.new.seed_jobs jenkins_connection_info: jenkins_connection_info,
+                            jobs_location: jobs_location
+
+    stack_outputs['JenkinsURL']
+  end
+
+  private
+
+  def converge_jenkins_stack(customisations:)
+    converger = CfndslConverger.new
+    outputs = converger.converge stack_name: "Jenkins-Factory-#{Time.now.to_i}",
+                                 path_to_stack: 'lib/cfndsl/jenkins_cfndsl.rb',
+                                 bindings: customisations
+    outputs
+  end
+end

data/lib/job_seeder.rb

@@ -0,0 +1,40 @@
+require 'jenkins_api_client'
+
+# i guess also consider using local jenkins cli from user data?
+class JobSeeder
+  def seed_jobs(jenkins_connection_info:,
+                jobs_location:)
+
+    client = jenkins_api_client jenkins_connection_info: jenkins_connection_info
+
+    job_name = 'job-seed'
+    if client.job.exists? job_name
+      client.job.delete job_name
+    end
+
+    seed_xml = patch_job_seed jobs_location: jobs_location
+
+    client.job.create job_name,
+                      seed_xml
+
+    client.job.build job_name
+  end
+
+  # only exposed for testing, don't call me
+  # ok yea ERB more elegant but i'm feeling lazy
+  def patch_job_seed(jobs_location:)
+    seed_xml = IO.read(File.join('lib', 'xml', 'job-seed-config.xml.erb'))
+    seed_xml.gsub!(/<%= @job_definition_relative_path %>/, jobs_location['job_definition_relative_path'])
+    seed_xml.gsub!(/<%= @job_repo_branch %>/, jobs_location['job_repo_branch'])
+    seed_xml.gsub!(/<%= @job_repo %>/, jobs_location['job_repo'])
+    seed_xml
+  end
+
+  private
+
+  def jenkins_api_client(jenkins_connection_info:)
+    JenkinsApi::Client.new server_url: jenkins_connection_info['jenkins_url'],
+                           username: jenkins_connection_info['jenkins_user'],
+                           password: jenkins_connection_info['jenkins_pass']
+  end
+end

metadata

@@ -0,0 +1,93 @@
+--- !ruby/object:Gem::Specification
+name: jenkins-factory
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- someguy
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2016-03-29 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: trollop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.1.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.1.2
+- !ruby/object:Gem::Dependency
+  name: aws-sdk-utils
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.0.5
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.0.5
+- !ruby/object:Gem::Dependency
+  name: jenkins_api_client
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.4.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.4.2
+description: Experimental single-click for cranking out a basic Jenkins instance in
+  EC2
+email: 
+executables:
+- jenkins_factory
+extensions: []
+extra_rdoc_files: []
+files:
+- bin/jenkins_factory
+- lib/base_jenkins_ami.rb
+- lib/cfndsl/jenkins_cfndsl.rb
+- lib/jenkins_factory.rb
+- lib/job_seeder.rb
+homepage: https://github.com/stelligent/jenkins-factory
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - "~>"
+    - !ruby/object:Gem::Version
+      version: '2.2'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.6.2
+signing_key: 
+specification_version: 4
+summary: jenkins_factory
+test_files: []