kumo_keisei 0.0.52

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 3f395bd579c7d7c66b09e3e7972a391b19bca4a7
+  data.tar.gz: e0b846c39e2b565e82393745cf0ddab08013a401
+SHA512:
+  metadata.gz: 0b1a8b17c4e14841c2d88c8ce48a7451f94c806ecf75871fc50cb60ab176621833debac2bde345c7ffdd383e1dd67e48f79a74a077772b86a3dcab451e4635be
+  data.tar.gz: 8635f05b270af603bcf66d47dc3e353f25b4c8718d43470468ce2c1295c6326572501984a8112cce0cdcbf715c91543e335ebbdb4f56c59e1704c4564f9d2e8d

data/.buildkite/pipeline.yml

@@ -0,0 +1,10 @@
+steps:
+  - name: ':rspec: unit-test'
+    command: script/unit_test.sh
+    agents:
+      location: aws
+  - wait
+  - name: ':gem: build'
+    command: script/build.sh
+    agents:
+      location: aws

data/.gitignore

@@ -0,0 +1,15 @@
+.idea
+/.bundle/
+/.yardoc
+/Gemfile.lock
+/_yardoc/
+/coverage/
+/doc/
+/pkg/
+/spec/reports/
+/tmp/
+*.bundle
+*.so
+*.o
+*.a
+mkmf.log

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in kumo_keisei.gemspec
+gemspec

data/LICENSE.txt

@@ -0,0 +1,22 @@
+Copyright (c) 2015 Craig Read
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,61 @@
+# KumoKeisei [![Build status](https://badge.buildkite.com/fdbcc9783971fc3c18903abe78ccb4a7a4ebe1bdbbb753c502.svg)](https://buildkite.com/redbubble/kumo-keisei-gem)
+
+A collection of utilities wrapping the libraries for dealing with AWS Cloud Formation.
+
+## Installation
+
+This gem is automatically installed in the rbdevtools container, so any `apply-env` or `deploy` scripts have access to it.
+
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'kumo_keisei'
+```
+
+And then execute:
+
+    $ bundle
+
+Or install it yourself as:
+
+    $ gem install kumo_keisei
+
+## Usage
+
+```ruby
+stack_name = "my_awesome_stack"
+template = "./cloudformation/environment_template.json"
+template_params = "./cloudformation/environments/production/params.json"
+
+KumoKeisei::CloudFormationStack.new(stack_name, template, template_params).apply!
+```
+
+## Dependencies
+
+#### Ruby Versions
+
+This gem is tested with Ruby (MRI) versions 1.9.3 and 2.2.3.
+
+## Release
+
+1. Upgrade version in VERSION
+2. Run ./script/release-gem
+
+## Contributing
+
+1. Fork it ( https://github.com/[my-github-username]/kumo_keisei/fork )
+2. Create your feature branch (`git checkout -b my-new-feature`)
+3. Commit your changes (`git commit -am 'Add some feature'`)
+4. Push to the branch (`git push origin my-new-feature`)
+5. Create a new Pull Request
+
+## Testing changes
+
+Changes to the gem can be manually tested end to end in a project that uses the gem (i.e. http-wala).
+
+1. First start the dev-tools container: `baxter kumo tools debug non-production`
+1. Re-install the gem: `gem specific_install https://github.com/redbubble/kumo_keisei_gem.git -b <your_branch>`
+1. Fire up a console: `irb`
+1. Require the gem: `require "kumo_keisei"`
+1. Interact with the gem's classes. `KumoKeisei::CloudFormationStack.new(...).apply!`
+

data/Rakefile

@@ -0,0 +1,2 @@
+require "bundler/gem_tasks"
+

data/VERSION

@@ -0,0 +1 @@
+0.0.52

data/kumo_keisei.gemspec

@@ -0,0 +1,25 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+version = File.read(File.expand_path('../VERSION', __FILE__)).strip
+
+Gem::Specification.new do |spec|
+  spec.name          = "kumo_keisei"
+  spec.version       = version
+  spec.authors       = ["Redbubble"]
+  spec.email         = ["delivery-engineering@redbubble.com"]
+  spec.summary       = %q{A collection of utilities for dealing with AWS Cloud Formation.}
+  spec.homepage      = "http://redbubble.com"
+  spec.license       = "MIT"
+
+  spec.files         = `git ls-files -z`.split("\x0")
+  spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
+  spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
+  spec.require_paths = ["lib"]
+
+  spec.add_runtime_dependency 'aws-sdk', "~> 2.2"
+  spec.add_runtime_dependency 'kumo_ki'
+  spec.add_development_dependency "bundler", "~> 1.6"
+  spec.add_development_dependency "rake", "~> 10.0"
+  spec.add_development_dependency "rspec", "~> 3.4"
+end

data/lib/kumo_keisei/cloud_formation_stack.rb

@@ -0,0 +1,186 @@
+require 'aws-sdk'
+
+require_relative "parameter_builder"
+require_relative "console_jockey"
+
+module KumoKeisei
+  class CloudFormationStack
+    class CreateError < StandardError; end
+    class UpdateError < StandardError; end
+
+    UPDATEABLE_STATUSES = [
+      'UPDATE_ROLLBACK_COMPLETE',
+      'CREATE_COMPLETE',
+      'UPDATE_COMPLETE',
+      'DELETE_COMPLETE'
+    ]
+
+    RECOVERABLE_STATUSES = [
+      'ROLLBACK_COMPLETE',
+      'ROLLBACK_FAILED'
+    ]
+
+    UNRECOVERABLE_STATUSES = [
+      'UPDATE_ROLLBACK_FAILED'
+    ]
+
+    attr_reader :stack_name
+
+    def self.exists?(stack_name)
+      self.new(stack_name, nil).exists?
+    end
+
+    def initialize(stack_name, stack_template, stack_params_filepath = nil)
+      @stack_name = stack_name
+      @stack_template = stack_template
+      @stack_params_filepath = stack_params_filepath
+
+      flash_message "Stack name: #{stack_name}"
+    end
+
+    def apply!(dynamic_params={})
+      if updatable?
+        update!(dynamic_params)
+      else
+        ConsoleJockey.write_line "There's a previous stack called #{@stack_name} that didn't create properly, I'll clean it up for you..."
+        ensure_deleted!
+        ConsoleJockey.write_line "Creating your new stack #{@stack_name}"
+        create!(dynamic_params)
+      end
+    end
+
+    def destroy!
+      wait_until_ready(false)
+      ensure_deleted!
+    end
+
+    def outputs(output)
+      outputs_hash = get_stack.outputs.reduce({}) { |acc, o| acc.merge(o.output_key.to_s => o.output_value) }
+
+      outputs_hash[output]
+    end
+
+    def logical_resource(resource_name)
+      response = cloudformation.describe_stack_resource(stack_name: @stack_name, logical_resource_id: resource_name)
+      stack_resource = response.stack_resource_detail
+      stack_resource.each_pair.reduce({}) {|acc, (k, v)| acc.merge(transform_logical_resource_id(k) => v) }
+    end
+
+    def exists?
+      !get_stack.nil?
+    end
+
+    private
+
+    def transform_logical_resource_id(id)
+      id.to_s.split('_').map {|w| w.capitalize }.join
+    end
+
+    def get_stack(options={})
+      @stack = nil if options[:dump_cache]
+
+      @stack ||= cloudformation.describe_stacks(stack_name: @stack_name).stacks.find { |stack| stack.stack_name == @stack_name }
+    end
+
+    def cloudformation
+      @cloudformation ||= Aws::CloudFormation::Client.new
+    end
+
+    def ensure_deleted!
+      cloudformation.delete_stack(stack_name: @stack_name)
+      cloudformation.wait_until(:stack_delete_complete, stack_name: @stack_name) { |waiter| waiter.delay = 20; waiter.max_attempts = 45 }
+    end
+
+    def updatable?
+      stack = get_stack
+
+      return true if UPDATEABLE_STATUSES.include? stack.stack_status
+      return false if RECOVERABLE_STATUSES.include? stack.stack_status
+      raise UpdateError.new("Stack is in an unrecoverable state") if UNRECOVERABLE_STATUSES.include? stack.stack_status
+      raise UpdateError.new("Stack is busy, try again soon")
+    rescue Aws::CloudFormation::Errors::ValidationError
+      false
+    end
+
+    def create!(dynamic_params)
+      cloudformation_params = ParameterBuilder.new(dynamic_params, @stack_params_filepath).params
+      cloudformation.create_stack(
+        stack_name: @stack_name,
+        template_body: File.read(@stack_template),
+        parameters: cloudformation_params,
+        capabilities: ["CAPABILITY_IAM"],
+        on_failure: "DELETE"
+      )
+
+      begin
+        cloudformation.wait_until(:stack_create_complete, stack_name: @stack_name) { |waiter| waiter.delay = 20; waiter.max_attempts = 45 }
+      rescue Aws::Waiters::Errors::UnexpectedError => ex
+        handle_unexpected_error(ex)
+      end
+    end
+
+    def update!(dynamic_params={})
+      cloudformation_params = ParameterBuilder.new(dynamic_params, @stack_params_filepath).params
+      wait_until_ready(false)
+
+      cloudformation.update_stack(
+        stack_name: @stack_name,
+        template_body: File.read(@stack_template),
+        parameters: cloudformation_params,
+        capabilities: ["CAPABILITY_IAM"]
+      )
+
+      cloudformation.wait_until(:stack_update_complete, stack_name: @stack_name) { |waiter| waiter.delay = 20; waiter.max_attempts = 45 }
+    rescue Aws::CloudFormation::Errors::ValidationError => ex
+      raise ex unless ex.message == "No updates are to be performed."
+      ConsoleJockey.write_line "No changes need to be applied for #{@stack_name}."
+    rescue Aws::Waiters::Errors::FailureStateError => ex
+      ConsoleJockey.write_line "Failed to apply the environment update. The stack has been rolled back. It is still safe to apply updates."
+      ConsoleJockey.write_line "Find error details in the AWS CloudFormation console: #{stack_events_url}"
+      raise UpdateError.new("Stack update failed for #{@stack_name}.")
+    end
+
+    def stack_events_url
+      "https://console.aws.amazon.com/cloudformation/home?region=#{ENV['AWS_DEFAULT_REGION']}#/stacks?filter=active&tab=events&stackId=#{get_stack.stack_id}"
+    end
+
+    def wait_until_ready(raise_on_error=true)
+      loop do
+        stack = get_stack(dump_cache: true)
+
+        if stack_ready?(stack.stack_status)
+          if raise_on_error && stack_operation_failed?(stack.stack_status)
+            raise stack.stack_status
+          end
+
+          break
+        end
+        puts "waiting for #{@stack_name} to be READY, current: #{last_event_status}"
+        sleep 10
+      end
+    rescue Aws::CloudFormation::Errors::ValidationError
+      nil
+    end
+
+    def stack_ready?(last_event_status)
+      last_event_status =~ /COMPLETE/ || last_event_status =~ /ROLLBACK_FAILED/
+    end
+
+    def stack_operation_failed?(last_event_status)
+      last_event_status =~ /ROLLBACK/
+    end
+
+    def handle_unexpected_error(error)
+      if error.message =~ /does not exist/
+        ConsoleJockey.write_line "There was an error during stack creation for #{@stack_name}, and the stack has been cleaned up."
+        raise CreateError.new("There was an error during stack creation. The stack has been deleted.")
+      else
+        raise error
+      end
+    end
+
+    def flash_message(message)
+      ConsoleJockey.flash_message(message)
+    end
+  end
+end

data/lib/kumo_keisei/console_jockey.rb

@@ -0,0 +1,19 @@
+module KumoKeisei
+  class ConsoleJockey
+    def self.flash_message(message)
+      puts "\n"
+      puts "###################=============================------------"
+      puts message
+      puts "------------=============================###################"
+      puts "\n"
+
+      $stdout.flush
+    end
+
+    def self.write_line(message)
+      puts message
+
+      $stdout.flush
+    end
+  end
+end

data/lib/kumo_keisei/environment_config.rb

@@ -0,0 +1,110 @@
+require 'kumo_ki'
+require 'logger'
+require 'yaml'
+
+require_relative 'file_loader'
+require_relative 'parameter_builder'
+
+class KumoKeisei::EnvironmentConfig
+  LOGGER = Logger.new(STDOUT)
+
+  attr_reader :app_name, :env_name
+
+  def initialize(options, logger = LOGGER)
+    @app_name = options[:app_name]
+    @env_name = options[:env_name]
+    @config_dir_path = options[:config_dir_path]
+    @params_template_file_path = options[:params_template_file_path]
+    @injected_config = options[:injected_config] || {}
+    @file_loader = KumoKeisei::FileLoader.new(options)
+
+    @log = logger
+  end
+
+  def get_binding
+    binding
+  end
+
+  def production?
+    env_name == "production"
+  end
+
+  def development?
+    !(%w(production staging).include?(env_name))
+  end
+
+  def plain_text_secrets
+    @plain_text_secrets ||= decrypt_secrets(encrypted_secrets)
+  end
+
+  def config
+    @config ||= common_config.merge(env_config).merge(@injected_config)
+  end
+
+  def cf_params
+    return [] unless params_template
+    KumoKeisei::ParameterBuilder.new(get_stack_params(params_template)).params
+  end
+
+  private
+
+  def kms
+    @kms ||= KumoKi::KMS.new
+  end
+
+  def get_stack_params(params_template)
+    YAML.load(ERB.new(params_template).result(get_binding))
+  end
+
+  def params_template
+    return nil unless @params_template_file_path
+
+    @file_loader.load_config!(@params_template_file_path)
+  end
+
+  def decrypt_secrets(secrets)
+    Hash[
+      secrets.map do |name, cipher_text|
+        @log.debug "Decrypting '#{name}'"
+        if cipher_text.start_with? '[ENC,'
+          begin
+            [name, "#{kms.decrypt cipher_text[5,cipher_text.size]}"]
+          rescue
+            @log.error "Error decrypting secret '#{name}'"
+            raise
+          end
+        else
+          [name, cipher_text]
+        end
+      end
+    ]
+  end
+
+  def env_config_file_name
+    "#{env_name}.yml"
+  end
+
+  def env_secrets_file_name
+    "#{env_name}_secrets.yml"
+  end
+
+  def encrypted_secrets
+    encrypted_common_secrets.merge(encrypted_env_secrets)
+  end
+
+  def encrypted_common_secrets
+    @file_loader.load_config('common_secrets.yml')
+  end
+
+  def encrypted_env_secrets
+    @file_loader.load_config(env_secrets_file_name)
+  end
+
+  def common_config
+    @file_loader.load_config('common.yml')
+  end
+
+  def env_config
+    @file_loader.load_config(env_config_file_name)
+  end
+end

data/lib/kumo_keisei/file_loader.rb

@@ -0,0 +1,24 @@
+module KumoKeisei
+  class FileLoader
+    def initialize(options)
+      @config_dir_path = options[:config_dir_path]
+    end
+
+    def load_config!(file_name, context = nil)
+      erb_result = ERB.new(File.read(file_path(file_name))).result(context)
+      YAML.load(erb_result)
+    end
+
+    def load_config(file_name)
+      path = file_path(file_name)
+      return {} unless File.exist?(path)
+      load_config!(file_name)
+    end
+
+    private
+
+    def file_path(file_name)
+      File.join(@config_dir_path, file_name)
+    end
+  end
+end

data/lib/kumo_keisei/parameter_builder.rb

@@ -0,0 +1,36 @@
+require 'json'
+
+module KumoKeisei
+  class ParameterBuilder
+    def initialize(dynamic_params = {}, file_path = nil)
+      @dynamic_params = dynamic_params
+      @file_path = file_path
+    end
+
+    def params
+      parsed_dynamic_params + parsed_file_params
+    end
+
+    def parsed_dynamic_params
+      @dynamic_params.map do |key, value|
+        {
+          parameter_key: key.to_s,
+          parameter_value: value
+        }
+      end
+    end
+
+    def parsed_file_params
+      return [] unless (@file_path && File.exists?(@file_path))
+
+      file_contents = JSON.parse(File.read(@file_path))
+
+      file_contents.map do |param| 
+        {
+          parameter_key: param["ParameterKey"],
+          parameter_value: param["ParameterValue"]
+        }
+      end
+    end
+  end
+end

data/lib/kumo_keisei.rb

@@ -0,0 +1,2 @@
+require_relative "kumo_keisei/cloud_formation_stack"
+require_relative "kumo_keisei/environment_config"

data/script/build.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+
+set -e
+
+bundle install
+
+if [[ -z "$KUMO_KEISEI_VERSION" && -n "$BUILDKITE_BUILD_NUMBER" ]]; then
+  export KUMO_KEISEI_VERSION="$BUILDKITE_BUILD_NUMBER"
+fi
+
+echo "--- :wind_chime: Building gem :wind_chime:"
+
+gem build kumo_keisei.gemspec

data/script/release-gem

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require_relative '../lib/kumo_keisei'
+
+def run_command(cmd)
+  puts cmd
+  puts `#{cmd}`
+  raise "non zero exit code" if $?.exitstatus != 0
+end
+
+tag = File.read(File.expand_path('../../VERSION', __FILE__)).strip
+
+run_command "git tag #{tag}"
+run_command "git push origin #{tag}"

data/script/unit_test.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+
+set -e
+
+echo "--- :clock1: :clock2: running specs :clock3: :clock4:"
+bundle install && bundle exec rspec
+
+function inline_image {
+  printf '\033]1338;url='"$1"';alt='"$2"'\a\n'
+}
+
+echo "+++ Done! :thumbsup: :shipit:"
+inline_image "https://giftoppr.desktopprassets.com/uploads/f828c372186b5fa80a1c553adbcd4bc4d331396b/tumblr_m2cg550aq21ql201ao1_500.gif" "Yuss"

data/spec/lib/kumo_keisei/cloud_formation_stack_spec.rb

@@ -0,0 +1,191 @@
+require 'spec_helper'
+require 'ostruct'
+
+describe KumoKeisei::CloudFormationStack do
+
+  def stack_result_list_with_status(status, stack_name)
+    stack = OpenStruct.new(stack_status: status, stack_name: stack_name)
+    OpenStruct.new(stacks: [stack])
+  end
+
+  let(:stack_name) { "my-stack" }
+  let(:stack_template_path) { "template.json" }
+  let(:file_params_path) { nil }
+  let(:cloudformation) { instance_double(Aws::CloudFormation::Client) }
+  let(:happy_stack_status) { "CREATE_COMPLETE" }
+  let(:cf_stack) { stack_result_list_with_status(happy_stack_status, stack_name) }
+  let(:parameter_builder) { instance_double(KumoKeisei::ParameterBuilder, params: {}) }
+  let(:stack_template_body) { double(:stack_template_body) }
+  let(:cf_stack_update_params) do
+    {
+      stack_name: stack_name,
+      template_body: stack_template_body,
+      parameters: {},
+      capabilities: ["CAPABILITY_IAM"]
+    }
+  end
+  let(:cf_stack_create_params) do
+    cf_stack_update_params.merge(on_failure: "DELETE")
+  end
+
+  subject(:instance) { KumoKeisei::CloudFormationStack.new(stack_name, stack_template_path, file_params_path) }
+
+  before do
+    allow(KumoKeisei::ConsoleJockey).to receive(:flash_message)
+    allow(KumoKeisei::ConsoleJockey).to receive(:write_line).and_return(nil)
+    allow(Aws::CloudFormation::Client).to receive(:new).and_return(cloudformation)
+    allow(cloudformation).to receive(:describe_stacks).with({stack_name: stack_name}).and_return(cf_stack)
+    allow(KumoKeisei::ParameterBuilder).to receive(:new).and_return(parameter_builder)
+    allow(File).to receive(:read).with(stack_template_path).and_return(stack_template_body)
+  end
+
+  describe "#destroy!" do
+
+     it "deletes the stack" do
+       expect(cloudformation).to receive(:delete_stack).with({stack_name: stack_name}).and_return(cf_stack)
+       allow(cloudformation).to receive(:wait_until).with(:stack_delete_complete, stack_name: stack_name).and_return(nil)
+
+       subject.destroy!
+    end
+
+  end
+
+  describe "#apply!" do
+    context "when the stack is updatable" do
+      UPDATEABLE_STATUSES = ['UPDATE_ROLLBACK_COMPLETE', 'CREATE_COMPLETE', 'UPDATE_COMPLETE', 'DELETE_COMPLETE']
+
+      context "when the stack has changed" do
+        before do
+          allow(cloudformation).to receive(:wait_until).with(:stack_update_complete, stack_name: stack_name).and_return(nil)
+        end
+
+        UPDATEABLE_STATUSES.each do |stack_status|
+          it "updates the stack when in #{stack_status} status" do
+            allow(cloudformation).to receive(:describe_stacks).with({stack_name: stack_name}).and_return(
+              stack_result_list_with_status(stack_status, stack_name),
+              stack_result_list_with_status("UPDATE_COMPLETE", stack_name)
+            )
+            expect(cloudformation).to receive(:update_stack).with(cf_stack_update_params).and_return("stack_id")
+            subject.apply!
+          end
+        end
+
+        it "politely informs the user of any failures" do
+          allow(cloudformation).to receive(:wait_until)
+            .with(:stack_update_complete, stack_name: stack_name)
+            .and_raise(Aws::Waiters::Errors::FailureStateError.new(""))
+
+          allow(cloudformation).to receive(:update_stack).with(cf_stack_update_params).and_return("stack_id")
+          expect(KumoKeisei::ConsoleJockey).to receive(:write_line).with("Failed to apply the environment update. The stack has been rolled back. It is still safe to apply updates.")
+
+          expect { subject.apply! }.to raise_error(KumoKeisei::CloudFormationStack::UpdateError)
+        end
+      end
+
+      context "when the stack has not changed" do
+        let(:error) { Aws::CloudFormation::Errors::ValidationError.new('', 'No updates are to be performed.') }
+
+        UPDATEABLE_STATUSES.each do |stack_status|
+          it "reports that nothing has changed when in #{stack_status} status" do
+            allow(cloudformation).to receive(:describe_stacks)
+              .with({stack_name: stack_name})
+              .and_return(stack_result_list_with_status(stack_status, stack_name))
+
+            expect(cloudformation).to receive(:update_stack).with(cf_stack_update_params).and_raise(error)
+            expect(KumoKeisei::ConsoleJockey).to receive(:flash_message).with(/Stack name: #{stack_name}/)
+
+            subject.apply!
+          end
+        end
+      end
+    end
+
+    context "when the stack is not updatable" do
+      before do
+        allow(cloudformation).to receive(:wait_until).with(:stack_delete_complete, stack_name: stack_name).and_return(nil)
+        allow(cloudformation).to receive(:wait_until).with(:stack_create_complete, stack_name: stack_name).and_return(nil)
+        allow(cloudformation).to receive(:delete_stack).with(stack_name: stack_name)
+      end
+
+      context "and the stack does not exist" do
+        let(:stack_name) { "my-stack" }
+
+        it "creates the stack" do
+          allow(cloudformation).to receive(:delete_stack)
+          allow(cloudformation).to receive(:describe_stacks).with(stack_name: stack_name).and_raise(Aws::CloudFormation::Errors::ValidationError.new('',''))
+          expect(cloudformation).to receive(:create_stack).with(cf_stack_create_params)
+          subject.apply!
+        end
+
+        it "shows a friendly error message if the stack had issues during creation" do
+          allow(cloudformation).to receive(:delete_stack)
+          allow(cloudformation).to receive(:describe_stacks).with(stack_name: stack_name).and_raise(Aws::CloudFormation::Errors::ValidationError.new('',''))
+          allow(cloudformation).to receive(:create_stack).with(cf_stack_create_params)
+
+          error = Aws::Waiters::Errors::UnexpectedError.new(RuntimeError.new("Stack with id #{stack_name} does not exist"))
+          allow(cloudformation).to receive(:wait_until).with(:stack_create_complete, stack_name: stack_name).and_raise(error)
+
+          expect(KumoKeisei::ConsoleJockey).to receive(:write_line).with(/There was an error during stack creation for #{stack_name}, and the stack has been cleaned up./).and_return nil
+          expect { subject.apply! }.to raise_error(KumoKeisei::CloudFormationStack::CreateError)
+        end
+      end
+
+      context "and the stack is in ROLLBACK_COMPLETE, or ROLLBACK_FAILED" do
+        it "deletes the dead stack and creates a new one" do
+          allow(cloudformation).to receive(:describe_stacks).and_return(stack_result_list_with_status("ROLLBACK_COMPLETE", stack_name))
+
+          expect(cloudformation).to receive(:delete_stack).with(stack_name: stack_name)
+          expect(cloudformation).to receive(:create_stack)
+
+          allow(cloudformation).to receive(:wait_until).with(:stack_create_complete, stack_name: stack_name).and_return(nil)
+
+          subject.apply!
+        end
+      end
+
+      context "and the stack in in UPDATE_ROLLBACK_FAILED" do
+        it "should blow up" do
+          allow(cloudformation).to receive(:describe_stacks).and_return(stack_result_list_with_status("UPDATE_ROLLBACK_FAILED", stack_name))
+
+          expect { subject.apply! }.to raise_error("Stack is in an unrecoverable state")
+        end
+      end
+
+      context "and the stack is busy" do
+        it "should blow up" do
+          allow(cloudformation).to receive(:describe_stacks).and_return(stack_result_list_with_status("UPDATE_IN_PROGRESS", stack_name))
+
+          expect { subject.apply! }.to raise_error("Stack is busy, try again soon")
+        end
+      end
+    end
+
+    describe "#outputs" do
+      let(:output) { double(:output, output_key: "Key", output_value: "Value") }
+      let(:stack) { double(:stack, stack_name: stack_name, outputs: [output])}
+      let(:stack_result) { double(:stack_result, stacks: [stack]) }
+
+      it "returns the outputs given by CloudFormation" do
+        allow(cloudformation).to receive(:describe_stacks).and_return(stack_result)
+        expect(subject.outputs("Key")).to eq("Value")
+      end
+    end
+
+    describe "#logical_resource" do
+      let(:stack_resource_detail) { OpenStruct.new(logical_resource_id: "with-a-fox", physical_resource_id: "i-am-sam",  resource_type: "green-eggs-and-ham")}
+      let(:response) { double(:response, stack_resource_detail: stack_resource_detail) }
+      let(:stack_resource_name) { "with-a-fox" }
+
+      it "returns a hash of the stack resource detail params" do
+        allow(cloudformation).to receive(:describe_stack_resource)
+          .with(stack_name: stack_name, logical_resource_id: stack_resource_name)
+          .and_return(response)
+
+        expect(subject.logical_resource(stack_resource_name)).to include(
+          "PhysicalResourceId" => "i-am-sam",
+          "ResourceType" => "green-eggs-and-ham"
+        )
+      end
+    end
+  end
+end

data/spec/lib/kumo_keisei/environment_config_spec.rb

@@ -0,0 +1,160 @@
+require 'spec_helper'
+
+describe KumoKeisei::EnvironmentConfig do
+  let(:env_name) { 'the_jungle' }
+  let(:config_dir_path) { '/var/config' }
+  let(:options) do
+    {
+      env_name: env_name,
+      config_dir_path: config_dir_path,
+      params_template_file_path: params_template_file_path
+    }
+  end
+  let(:file_loader) { instance_double(KumoKeisei::FileLoader) }
+  let(:parameter_template) { "stack_name: <%= config['stack_name'] %>" }
+  let(:params_template_file_path) { '/junk.txt' }
+  let(:environment_config_file_name) { "#{env_name}.yml" }
+  let(:kms) { instance_double(KumoKi::KMS) }
+  let(:logger) { double(:test_logger, debug: nil) }
+
+  before do
+    allow(KumoKeisei::FileLoader).to receive(:new).and_return(file_loader)
+    allow(KumoKi::KMS).to receive(:new).and_return(kms)
+    allow(file_loader).to receive(:load_config!).with(params_template_file_path).and_return(parameter_template)
+  end
+
+  describe '#cf_params' do
+    subject { described_class.new(options, logger).cf_params }
+
+    context 'params template file path is not provided' do
+      let(:options) do
+        {
+          env_name: env_name,
+          config_dir_path: config_dir_path
+        }
+      end
+
+      it 'creates an empty array' do
+        expect(subject).to eq([])
+      end
+    end
+
+    context 'params file is empty' do
+      let(:parameter_template) { nil }
+
+      it 'creates an empty array' do
+        expect(subject).to eq([])
+      end
+    end
+
+    context 'a hard-coded param' do
+      let(:parameter_template) { "parameter_key: <%= 'parameter_value' %>" }
+
+      it 'creates a array containing an aws formatted parameter hash' do
+        expect(subject).to eq([{parameter_key: "parameter_key", parameter_value: "parameter_value"}])
+      end
+    end
+
+    context 'templated params' do
+      let(:environment_parameters) { { "stack_name" => "okonomiyaki" } }
+
+      context 'environment params' do
+        it 'creates a array containing an aws formatted parameter hash' do
+          allow(file_loader).to receive(:load_config).with('common.yml').and_return({})
+          allow(file_loader).to receive(:load_config).with(environment_config_file_name).and_return(environment_parameters)
+
+          expect(subject).to eq([{parameter_key: "stack_name", parameter_value: "okonomiyaki"}])
+        end
+      end
+    end
+  end
+
+  describe "#config" do
+    subject { described_class.new(options, logger).config }
+
+    context 'injected config' do
+
+      let(:options) do
+        {
+          env_name: env_name,
+          config_dir_path: config_dir_path,
+          params_template_file_path: params_template_file_path,
+          injected_config: { "injected" => "yes" }
+        }
+      end
+
+      let(:common_parameters) { { "stack_name" => "okonomiyaki" } }
+      it 'adds injected config to the config hash' do
+        allow(file_loader).to receive(:load_config).with('common.yml').and_return(common_parameters)
+        allow(file_loader).to receive(:load_config).with(environment_config_file_name).and_return({})
+
+        expect(subject).to eq({ "stack_name" => "okonomiyaki", "injected" => "yes" })
+      end
+    end
+
+    context 'common config' do
+      let(:common_parameters) { { "stack_name" => "okonomiyaki" } }
+
+      it 'creates a array containing an aws formatted parameter hash' do
+        allow(file_loader).to receive(:load_config).with('common.yml').and_return(common_parameters)
+        allow(file_loader).to receive(:load_config).with(environment_config_file_name).and_return({})
+
+        expect(subject).to eq('stack_name' => 'okonomiyaki')
+      end
+    end
+
+    context 'merging common and environment specific configurations' do
+      context 'with environmental overrides' do
+        let(:parameter_template) { "image: <%= config['image'] %>" }
+        let(:common_config) { {'image' => 'ami-1234'} }
+        let(:environment_config) { {'image' => 'ami-5678'} }
+        let(:env_name) { 'development' }
+
+        it 'replaces the common value with the env value' do
+          allow(file_loader).to receive(:load_config).with('common.yml').and_return(common_config)
+          allow(file_loader).to receive(:load_config).with('development.yml').and_return(environment_config)
+
+          expect(subject).to eq('image' => 'ami-5678')
+        end
+      end
+    end
+  end
+
+  describe "#plain_text_secrets" do
+    subject { described_class.new(options, logger).plain_text_secrets }
+
+    let(:crypted_password) { 'lookatmyencryptedpasswords' }
+    let(:plain_text_password) { 'plain_text_password' }
+    let(:secrets) { { 'secret_password' => "[ENC,#{crypted_password}" } }
+
+    let(:crypted_env_password) { 'cryptedenvpassword' }
+    let(:plain_text_env_password) { 'plain_text_env_password' }
+    let(:env_secrets) { { 'secret_password' => "[ENC,#{crypted_env_password}"}}
+
+    before do
+      allow(kms).to receive(:decrypt).with(crypted_password).and_return(plain_text_password)
+    end
+
+    it 'should decrypt common secrets' do
+      allow(file_loader).to receive(:load_config).with('common_secrets.yml').and_return(secrets)
+      allow(file_loader).to receive(:load_config).with("#{env_name}_secrets.yml").and_return({})
+
+      expect(subject).to eq('secret_password' => plain_text_password)
+    end
+
+    it 'should decrypt environment secrets' do
+      allow(file_loader).to receive(:load_config).with('common_secrets.yml').and_return({})
+      allow(file_loader).to receive(:load_config).with("#{env_name}_secrets.yml").and_return(secrets)
+
+      expect(subject).to eq('secret_password' => plain_text_password)
+    end
+
+    it 'should give preference to environment secrets' do
+      allow(file_loader).to receive(:load_config).with('common_secrets.yml').and_return(secrets)
+      allow(file_loader).to receive(:load_config).with("#{env_name}_secrets.yml").and_return(env_secrets)
+      allow(kms).to receive(:decrypt).with(crypted_env_password).and_return(plain_text_env_password)
+
+      expect(subject).to eq('secret_password' => plain_text_env_password)
+    end
+  end
+end

data/spec/lib/kumo_keisei/file_loader_spec.rb

@@ -0,0 +1,52 @@
+require 'spec_helper'
+
+describe KumoKeisei::FileLoader do
+  describe "#load_config" do
+    let(:config_dir_path) { '/the/garden/path' }
+    let(:options) { { config_dir_path: config_dir_path } }
+    let(:file_name) { 'environment.yml' }
+    let(:full_file_path) { config_dir_path + '/' + file_name }
+
+    subject { KumoKeisei::FileLoader.new(options).load_config(file_name) }
+
+    context "when the file does not exist" do
+      it "returns an empty hash" do
+        expect(subject).to eq({})
+      end
+    end
+
+    context "when the file does exist" do
+      let(:file_contents) { 'key: value' }
+
+      it "populates a hash" do
+        expect(File).to receive(:exist?).with(full_file_path).and_return(true)
+        expect(File).to receive(:read).with(full_file_path).and_return(file_contents)
+        expect(subject).to eq({ 'key' => 'value' })
+      end
+    end
+  end
+
+  describe '#load_config!' do
+    let(:config_dir_path) { '/the/garden/path' }
+    let(:options) { { config_dir_path: config_dir_path } }
+    let(:file_name) { 'environment.yml' }
+    let(:full_file_path) { config_dir_path + '/' + file_name }
+
+    subject { KumoKeisei::FileLoader.new(options).load_config!(file_name) }
+
+    context 'when the file does not exist' do
+      it 'raises an error' do
+        expect { subject }.to raise_error(Errno::ENOENT)
+      end
+    end
+
+    context 'when the file exists' do
+      let(:file_contents) { 'key: value' }
+
+      it 'populates a hash' do
+        expect(File).to receive(:read).with(full_file_path).and_return(file_contents)
+        expect(subject).to eq({ 'key' => 'value' })
+      end
+    end
+  end
+end

data/spec/lib/kumo_keisei/parameter_builder_spec.rb

@@ -0,0 +1,50 @@
+require 'spec_helper'
+
+describe KumoKeisei::ParameterBuilder do
+  subject  {described_class.new(dynamic_params, file_path) }
+  let(:dynamic_params) { {} }
+  let(:file_path) { nil }
+  let(:file_content) do
+    [
+      {
+        "ParameterKey" => "testFileKey",
+        "ParameterValue" => "testFileValue",
+      },
+    ]
+  end
+
+  describe '#params' do
+    before do
+      allow(File).to receive(:exists?).with(file_path).and_return(true)
+      allow(File).to receive(:read).with(file_path).and_return(file_content.to_json)
+    end
+
+    context "when there are dynamic params" do
+      let(:dynamic_params) { { key: 'value', other_key: 'other_value' } }
+      it 'includes command line params' do
+        expect(subject.params).to eq([{ parameter_key: 'key', parameter_value: 'value' }, { parameter_key: 'other_key', parameter_value: 'other_value'}])
+      end
+    end
+
+    context "when there are file params" do
+      let(:file_path) { '/some/path/to/params.json' }
+
+      it 'includes an input file' do
+        expect(subject.params).to eq([{ parameter_key: 'testFileKey', parameter_value: 'testFileValue' }])
+      end
+    end
+
+    context "there are both" do
+      let(:dynamic_params) { { key: 'value', other_key: 'other_value' } }
+      let(:file_path) { '/some/path/to/params.json' }
+
+      it 'includes command line params' do
+        expect(subject.params).to eq([
+          { parameter_key: 'key', parameter_value: 'value' },
+          { parameter_key: 'other_key', parameter_value: 'other_value'},
+          { parameter_key: 'testFileKey', parameter_value: 'testFileValue' }
+        ])
+      end
+    end
+  end
+end

data/spec/spec_helper.rb

@@ -0,0 +1,101 @@
+# This file was generated by the `rspec --init` command. Conventionally, all
+# specs live under a `spec` directory, which RSpec adds to the `$LOAD_PATH`.
+# The generated `.rspec` file contains `--require spec_helper` which will cause
+# this file to always be loaded, without a need to explicitly require it in any
+# files.
+#
+# Given that it is always loaded, you are encouraged to keep this file as
+# light-weight as possible. Requiring heavyweight dependencies from this file
+# will add to the boot time of your test suite on EVERY test run, even for an
+# individual file that may not need all of that loaded. Instead, consider making
+# a separate helper file that requires the additional dependencies and performs
+# the additional setup, and require it from the spec files that actually need
+# it.
+#
+# The `.rspec` file also contains a few flags that are not defaults but that
+# users commonly want.
+#
+# See http://rubydoc.info/gems/rspec-core/RSpec/Core/Configuration
+
+ENV['RUBY_ENV'] ||= 'test'
+require File.expand_path("../../lib/kumo_keisei.rb", __FILE__)
+Dir[File.expand_path("../support/*.rb", __FILE__)].each {|file| require file }
+
+RSpec.configure do |config|
+  # rspec-expectations config goes here. You can use an alternate
+  # assertion/expectation library such as wrong or the stdlib/minitest
+  # assertions if you prefer.
+  config.expect_with :rspec do |expectations|
+    # This option will default to `true` in RSpec 4. It makes the `description`
+    # and `failure_message` of custom matchers include text for helper methods
+    # defined using `chain`, e.g.:
+    #     be_bigger_than(2).and_smaller_than(4).description
+    #     # => "be bigger than 2 and smaller than 4"
+    # ...rather than:
+    #     # => "be bigger than 2"
+    expectations.include_chain_clauses_in_custom_matcher_descriptions = true
+  end
+
+  # rspec-mocks config goes here. You can use an alternate test double
+  # library (such as bogus or mocha) by changing the `mock_with` option here.
+  config.mock_with :rspec do |mocks|
+    # Prevents you from mocking or stubbing a method that does not exist on
+    # a real object. This is generally recommended, and will default to
+    # `true` in RSpec 4.
+    mocks.verify_partial_doubles = true
+  end
+
+# The settings below are suggested to provide a good initial experience
+# with RSpec, but feel free to customize to your heart's content.
+=begin
+  # These two settings work together to allow you to limit a spec run
+  # to individual examples or groups you care about by tagging them with
+  # `:focus` metadata. When nothing is tagged with `:focus`, all examples
+  # get run.
+  config.filter_run :focus
+  config.run_all_when_everything_filtered = true
+
+  # Allows RSpec to persist some state between runs in order to support
+  # the `--only-failures` and `--next-failure` CLI options. We recommend
+  # you configure your source control system to ignore this file.
+  config.example_status_persistence_file_path = "spec/examples.txt"
+
+  # Limits the available syntax to the non-monkey patched syntax that is
+  # recommended. For more details, see:
+  #   - http://myronmars.to/n/dev-blog/2012/06/rspecs-new-expectation-syntax
+  #   - http://www.teaisaweso.me/blog/2013/05/27/rspecs-new-message-expectation-syntax/
+  #   - http://myronmars.to/n/dev-blog/2014/05/notable-changes-in-rspec-3#new__config_option_to_disable_rspeccore_monkey_patching
+  config.disable_monkey_patching!
+
+  # This setting enables warnings. It's recommended, but in some cases may
+  # be too noisy due to issues in dependencies.
+  config.warnings = true
+
+  # Many RSpec users commonly either run the entire suite or an individual
+  # file, and it's useful to allow more verbose output when running an
+  # individual spec file.
+  if config.files_to_run.one?
+    # Use the documentation formatter for detailed output,
+    # unless a formatter has already been configured
+    # (e.g. via a command-line flag).
+    config.default_formatter = 'doc'
+  end
+
+  # Print the 10 slowest examples and example groups at the
+  # end of the spec run, to help surface which specs are running
+  # particularly slow.
+  config.profile_examples = 10
+
+  # Run specs in random order to surface order dependencies. If you find an
+  # order dependency and want to debug it, you can fix the order by providing
+  # the seed, which is printed after each run.
+  #     --seed 1234
+  config.order = :random
+
+  # Seed global randomization in this process using the `--seed` CLI option.
+  # Setting this allows you to use `--seed` to deterministically reproduce
+  # test failures related to randomization by passing the same `--seed` value
+  # as the one that triggered the failure.
+  Kernel.srand config.seed
+=end
+end

metadata

@@ -0,0 +1,141 @@
+--- !ruby/object:Gem::Specification
+name: kumo_keisei
+version: !ruby/object:Gem::Version
+  version: 0.0.52
+platform: ruby
+authors:
+- Redbubble
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2016-05-10 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: aws-sdk
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+- !ruby/object:Gem::Dependency
+  name: kumo_ki
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.6'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.6'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.4'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.4'
+description: 
+email:
+- delivery-engineering@redbubble.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".buildkite/pipeline.yml"
+- ".gitignore"
+- Gemfile
+- LICENSE.txt
+- README.md
+- Rakefile
+- VERSION
+- kumo_keisei.gemspec
+- lib/kumo_keisei.rb
+- lib/kumo_keisei/cloud_formation_stack.rb
+- lib/kumo_keisei/console_jockey.rb
+- lib/kumo_keisei/environment_config.rb
+- lib/kumo_keisei/file_loader.rb
+- lib/kumo_keisei/parameter_builder.rb
+- script/build.sh
+- script/release-gem
+- script/unit_test.sh
+- spec/lib/kumo_keisei/cloud_formation_stack_spec.rb
+- spec/lib/kumo_keisei/environment_config_spec.rb
+- spec/lib/kumo_keisei/file_loader_spec.rb
+- spec/lib/kumo_keisei/parameter_builder_spec.rb
+- spec/spec_helper.rb
+homepage: http://redbubble.com
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.2
+signing_key: 
+specification_version: 4
+summary: A collection of utilities for dealing with AWS Cloud Formation.
+test_files:
+- spec/lib/kumo_keisei/cloud_formation_stack_spec.rb
+- spec/lib/kumo_keisei/environment_config_spec.rb
+- spec/lib/kumo_keisei/file_loader_spec.rb
+- spec/lib/kumo_keisei/parameter_builder_spec.rb
+- spec/spec_helper.rb