neetob 0.5.16 → 0.5.17

data/lib/neetob/cli/monthly_audit/instances_and_addons/cloudflare/minimum_tls_version_is_one_point_two.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+require_relative "../../../cloudflare/min_tls_version"
+
+module Neetob
+  class CLI
+    module MonthlyAudit
+      module InstancesAndAddons
+        module Cloudflare
+          class MinimumTlsVersionIsOnePointTwo < CLI::Base
+            def initialize
+              super()
+            end
+
+            def run
+              ui.success "### 3.2.3. Checking whether Minimum TLS version is 1.2"
+
+              domains_data = [["Domain", "Minimum TLS version", "Audit Passed"]]
+              ui.info("\n", print_to_audit_log: false)
+              Neetob::CLI::Cloudflare::Base::ZONE_IDS.keys.select { |domain|
+ domain.to_s.include?(".com") }.map do |domain|
+                ui.info("Checking Minimum TLS version for #{domain}", print_to_audit_log: false)
+                min_tls_version = Neetob::CLI::Cloudflare::MinTlsVersion.new(domain).run
+                audit_passed = min_tls_version.to_s == "1.2" ? "Yes" : "No"
+                domains_data << [domain, min_tls_version, audit_passed]
+              end
+              ui.print_table(domains_data)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/neetob/cli/monthly_audit/instances_and_addons/cloudflare/spf_records_are_valid.rb

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+module Neetob
+  class CLI
+    module MonthlyAudit
+      module InstancesAndAddons
+        module Cloudflare
+          class SpfRecordsAreValid < CLI::Base
+            def initialize
+              super()
+            end
+
+            def run
+              ui.success "### 3.2.5. Checking whether SPF records are valid"
+
+              domains_data = [["Domain", "SPF records data", "Comments", "Audit Passed"]]
+              ui.info("\n", print_to_audit_log: false)
+              Neetob::CLI::Cloudflare::Base::ZONE_IDS.keys.select { |domain|
+ domain.to_s.include?(".com") }.map do |domain|
+                ui.info("Checking SPF records data for #{domain}", print_to_audit_log: false)
+                spf_records_verification_data = Neetob::CLI::Cloudflare::VerifySpf.new(domain).run
+                audit_passed = (
+                  spf_records_verification_data[:hard_fail_not_set_message].present? ||
+                  spf_records_verification_data[:message].present?
+                ) ? "No" : "Yes"
+                comments =
+                  spf_records_verification_data[:hard_fail_not_set_message] ||
+                  spf_records_verification_data[:message]
+                data = spf_records_verification_data[:spf_txt_records].map { |record|
+                  "#{record[:name]} => #{record[:content]}"
+                }.join(", ")
+                domains_data << [domain, data, comments, audit_passed]
+              end
+              ui.print_table(domains_data)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/neetob/cli/monthly_audit/instances_and_addons/cloudflare/ssl_tls_encryption_mode_set_to_full.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+require_relative "../../../cloudflare/ssl_mode"
+
+module Neetob
+  class CLI
+    module MonthlyAudit
+      module InstancesAndAddons
+        module Cloudflare
+          class SslTlsEncryptionModeSetToFull < CLI::Base
+            def initialize
+              super()
+            end
+
+            def run
+              ui.success "### 3.2.1. Checking whether SSL/TLS encryption mode is set to Full"
+
+              domains_data = [["Domain", "SSL/TLS encryption mode", "Audit Passed"]]
+              ui.info("\n", print_to_audit_log: false)
+              Neetob::CLI::Cloudflare::Base::ZONE_IDS.keys.select { |domain|
+ domain.to_s.include?(".com") }.each do |domain|
+                ui.info("Checking SSL/TLS encryption mode for #{domain}", print_to_audit_log: false)
+                ssl_mode = Neetob::CLI::Cloudflare::SSLMode.new(domain).run
+                audit_passed = ssl_mode.to_s == "full" ? "Yes" : "No"
+                domains_data << [domain, ssl_mode, audit_passed]
+              end
+              ui.print_table(domains_data)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/neetob/cli/monthly_audit/instances_and_addons/cronitor/main.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+require_relative "setup_correctly_for_apps"
+require_relative "setup_correctly_for_help_center"
+require_relative "setup_correctly_for_landing_pages"
+
+module Neetob
+  class CLI
+    module MonthlyAudit
+      module InstancesAndAddons
+        module Cronitor
+          class Main < CLI::Base
+            def initialize
+              super()
+            end
+
+            def run
+              SetupCorrectlyForApps.new.run
+              ui.info "\n"
+              SetupCorrectlyForHelpCenter.new.run
+              ui.info "\n"
+              SetupCorrectlyForLandingPages.new.run
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/neetob/cli/monthly_audit/instances_and_addons/cronitor/setup_correctly_for_apps.rb

@@ -0,0 +1,54 @@
+# frozen_string_literal: true
+
+require_relative "../../../cronitor/get_all_monitors"
+
+module Neetob
+  class CLI
+    module MonthlyAudit
+      module InstancesAndAddons
+        module Cronitor
+          class SetupCorrectlyForApps < CLI::Base
+            def initialize
+              super()
+            end
+
+            def run
+              ui.success "### 3.3.1. Checking whether Cronitor monitors are set up correctly for apps"
+
+              all_monitors = Neetob::CLI::Cronitor::GetAllMonitors.new.run
+
+              apps_data = [["App", "Monitor for Application present", "Monitor for Application enabled", "Comments",
+"Audit Passed"]]
+              ui.info("\n", print_to_audit_log: false)
+              Neetob::CLI::Sre::Base::RESOURCES.keys.each do |app|
+                comments = nil
+                audit_passed = "No"
+                monitor_for_app_present = "No"
+                monitor_for_app_enabled = "No"
+                ui.info("Checking Application monitor for #{app}", print_to_audit_log: false)
+                application_monitor = all_monitors.select { |monitor|
+ monitor[:name].downcase == "#{app} Application".downcase }.first
+
+                if application_monitor.nil?
+                  comments = "Monitor not present"
+                else
+                  monitor_for_app_present = "Yes"
+                  if application_monitor[:paused]
+                    comments = "Monitor is paused"
+                  else
+                    monitor_for_app_enabled = "Yes"
+                    audit_passed = "Yes"
+                  end
+                end
+
+                apps_data << [app, monitor_for_app_present, monitor_for_app_enabled, comments, audit_passed]
+              end
+
+              ui.print_table(apps_data)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/neetob/cli/monthly_audit/instances_and_addons/cronitor/setup_correctly_for_help_center.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+module Neetob
+  class CLI
+    module MonthlyAudit
+      module InstancesAndAddons
+        module Cronitor
+          class SetupCorrectlyForHelpCenter < CLI::Base
+            def initialize
+              super()
+            end
+
+            def run
+              ui.success "### 3.3.2. Checking whether Cronitor monitors are set up correctly for Help Centers"
+
+              all_monitors = Neetob::CLI::Cronitor::GetAllMonitors.new.run
+
+              apps_data = [["App", "Monitor for Application help center present",
+"Monitor for Application help center enabled", "Comments", "Audit Passed"]]
+              ui.info("\n", print_to_audit_log: false)
+              Neetob::CLI::Sre::Base::RESOURCES.keys.each do |app|
+                comments = nil
+                audit_passed = "No"
+                monitor_for_app_help_center_present = "No"
+                monitor_for_app_help_center_enabled = "No"
+                ui.info("Checking Application help center monitor for #{app}", print_to_audit_log: false)
+                application_help_center_monitor = all_monitors.select { |monitor|
+ monitor[:name].downcase == "#{app} Help Center".downcase }.first
+
+                if application_help_center_monitor.nil?
+                  comments = "Monitor not present"
+                else
+                  monitor_for_app_help_center_present = "Yes"
+                  if application_help_center_monitor[:paused]
+                    comments = "Monitor is paused"
+                  else
+                    monitor_for_app_help_center_enabled = "Yes"
+                    audit_passed = "Yes"
+                  end
+                end
+
+                apps_data << [app, monitor_for_app_help_center_present, monitor_for_app_help_center_enabled, comments,
+audit_passed]
+              end
+
+              ui.print_table(apps_data)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/neetob/cli/monthly_audit/instances_and_addons/cronitor/setup_correctly_for_landing_pages.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+module Neetob
+  class CLI
+    module MonthlyAudit
+      module InstancesAndAddons
+        module Cronitor
+          class SetupCorrectlyForLandingPages < CLI::Base
+            def initialize
+              super()
+            end
+
+            def run
+              ui.success "### 3.3.3. Checking whether Cronitor monitors are set up correctly for landing pages"
+
+              all_monitors = Neetob::CLI::Cronitor::GetAllMonitors.new.run
+
+              apps_data = [["App", "Monitor for Application landing page present",
+"Monitor for Application landing page enabled", "Comments", "Audit Passed"]]
+              ui.info("\n", print_to_audit_log: false)
+              Neetob::CLI::Sre::Base::RESOURCES.keys.each do |app|
+                comments = nil
+                audit_passed = "No"
+                monitor_for_app_landing_page_present = "No"
+                monitor_for_app_landing_page_enabled = "No"
+                ui.info("Checking Application landing page monitor for #{app}", print_to_audit_log: false)
+                application_landing_page_monitor = all_monitors.select { |monitor|
+ monitor[:name].downcase == "#{app} Homepage".downcase }.first
+
+                if application_landing_page_monitor.nil?
+                  comments = "Monitor not present"
+                else
+                  monitor_for_app_landing_page_present = "Yes"
+                  if application_landing_page_monitor[:paused]
+                    comments = "Monitor is paused"
+                  else
+                    monitor_for_app_landing_page_enabled = "Yes"
+                    audit_passed = "Yes"
+                  end
+                end
+
+                apps_data << [app, monitor_for_app_landing_page_present, monitor_for_app_landing_page_enabled,
+comments, audit_passed]
+              end
+
+              ui.print_table(apps_data)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/neetob/cli/monthly_audit/instances_and_addons/honeybadger/main.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+require_relative "setup_correctly_for_apps"
+
+module Neetob
+  class CLI
+    module MonthlyAudit
+      module InstancesAndAddons
+        module Honeybadger
+          class Main < CLI::Base
+            def initialize
+              super()
+            end
+
+            def run
+              SetupCorrectlyForApps.new.run
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/neetob/cli/monthly_audit/instances_and_addons/honeybadger/setup_correctly_for_apps.rb

@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+module Neetob
+  class CLI
+    module MonthlyAudit
+      module InstancesAndAddons
+        module Honeybadger
+          class SetupCorrectlyForApps < CLI::Base
+            def initialize
+              super()
+            end
+
+            def run
+              ui.success "### 3.4.1. [Manual] Checking whether Honeybadger is correctly set up for apps"
+              ui.info "#### Please manually check and add Yes/No for all the following checks on the Honeybadger dashboard for the apps listed in the table below:"
+              ui.info "- Settings > General > Project Settings > Enable notifications for production is turned on"
+              ui.info "- Settings > Alerts & integrations > This project's integrations > GitHub is integrated to the correct project repo."
+              ui.info "- Settings > Alerts & integrations > This project's integrations > GitHub > Edit > Error Events > Automatically create an issue when an error occurs and Automatically re-open issues are turned on"
+              ui.info "- Settings > Alerts & integrations > This project's integrations > Slack is integrated to the correct project channel in #neeto-health workspace"
+              ui.info "- Please add comments if any for the checks below in the Comments column in the table"
+              ui.info "- Finally, set Audit Passed as Yes only if all the checks are passed for the app, otherwise set it as No, and add a comment in the Comments column"
+
+              apps_data = [
+                [
+                  "App",
+                  "Enable Notifications for production is turned on",
+                  "GitHub is integrated to the correct project repo",
+                  "Automatically create GitHub issue and automatically re-open issue is turned on",
+                  "Slack is integrated to the correct project channel in #neeto-health workspace",
+                  "Comments",
+                  "Audit Passed"
+                ]
+              ]
+              ui.info("\n")
+              (
+                Neetob::CLI::Sre::Base::APPS_LIST[:neetodeploy] +
+                Neetob::CLI::Sre::Base::APPS_LIST[:heroku]
+              ).select { |app| app.include?("production") }.each do |app|
+
+                apps_data << [app, nil, nil, nil, nil, nil, nil]
+              end
+              ui.print_table(apps_data)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/neetob/cli/monthly_audit/instances_and_addons/main.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+require_relative "neeto_deploy/main"
+require_relative "cloudflare/main"
+require_relative "cronitor/main"
+require_relative "honeybadger/main"
+
+module Neetob
+  class CLI
+    module MonthlyAudit
+      module InstancesAndAddons
+        class Main < CLI::Base
+          def initialize
+            super()
+          end
+
+          def run
+            ui.success("# 3. Running audit for application instances and add-ons")
+            ui.info "\n"
+            ui.success("## 3.1. Checking NeetoDeploy related configurations")
+            ui.info "\n"
+            NeetoDeploy::Main.new.run
+            ui.info "\n"
+            ui.success("## 3.2. Checking Cloudflare related configurations")
+            ui.info "\n"
+            Cloudflare::Main.new.run
+            ui.info "\n"
+            ui.success("## 3.3. Checking Cronitor related configurations")
+            ui.info "\n"
+            Cronitor::Main.new.run
+            ui.info "\n"
+            ui.success("## 3.4. Checking Honeybadger related configurations")
+            ui.info "\n"
+            Honeybadger::Main.new.run
+          end
+        end
+      end
+    end
+  end
+end

data/lib/neetob/cli/monthly_audit/instances_and_addons/neeto_deploy/auto_scaling_enabled.rb

@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+
+module Neetob
+  class CLI
+    module MonthlyAudit
+      module InstancesAndAddons
+        module NeetoDeploy
+          class AutoScalingEnabled < CLI::Base
+            def initialize
+              super()
+            end
+
+            def run
+              ui.success "### 3.1.4. Checking whether auto-scaling is enabled"
+
+              apps_data = [["App", "Autoscaling config", "Comments", "Audit Passed"]]
+              ui.info("\n", print_to_audit_log: false)
+              Neetob::CLI::Sre::Base::APPS_LIST[:neetodeploy].select { |app| app.include?("production") }.each do |app|
+                ui.info("Checking auto_scaling config for #{app}", print_to_audit_log: false)
+                autoscaling_config_result = Neetob::CLI::NeetoDeploy::AutoscalingConfig.new(app).run
+                audit_passed = nil
+                comments = nil
+                autoscaling_config = nil
+                if autoscaling_config_result.is_a?(Hash) && autoscaling_config_result["error"] == "Forbidden"
+                  audit_passed = "No"
+                  comments = "You do not have permission to access the config for this app."
+                else
+                  autoscaling_config = JSON.parse(autoscaling_config_result.gsub("=>", ":"))
+                  autoscaling_turned_on_for_web = autoscaling_config["web"]
+                  autoscaling_turned_on_for_worker = autoscaling_config["worker"]
+
+                  audit_passed = autoscaling_turned_on_for_web && autoscaling_turned_on_for_worker ? "Yes" : "No"
+                  if audit_passed == "No"
+                    comments = "Auto-scaling is not enabled for web and/or worker dynos."
+                  end
+                end
+                apps_data << [app, autoscaling_config, comments, audit_passed]
+              end
+              ui.print_table(apps_data)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/neetob/cli/monthly_audit/instances_and_addons/neeto_deploy/cloudfront_cdn_enabled.rb

@@ -0,0 +1,56 @@
+# frozen_string_literal: true
+
+module Neetob
+  class CLI
+    module MonthlyAudit
+      module InstancesAndAddons
+        module NeetoDeploy
+          class CloudfrontCdnEnabled < CLI::Base
+            def initialize
+              super()
+            end
+
+            def run
+              ui.success "### 3.1.2. Checking whether Cloudfront CDN is enabled"
+
+              apps_data = [["App", "ASSET_HOST value", "Comments", "Audit Passed"]]
+              ui.info("\n", print_to_audit_log: false)
+              Neetob::CLI::Sre::Base::APPS_LIST[:neetodeploy].select { |app| app.include?("production") }.each do |app|
+                ui.info("Checking ASSET_HOST value for #{app}", print_to_audit_log: false)
+                config_vars_result = Neetob::CLI::NeetoDeploy::ConfigVars::List.new([app]).run
+                begin
+                  config_vars = JSON.parse(config_vars_result.first)
+                rescue JSON::ParserError
+                  config_vars = config_vars_result.first
+                end
+                audit_passed = nil
+                comments = nil
+                asset_host_value = nil
+                if config_vars.is_a?(Hash) && config_vars["error"] == "Forbidden"
+                  audit_passed = "No"
+                  comments = "You do not have permission to access the config vars for this app."
+                else
+                  asset_host_line = config_vars.split("\n").select { |line| line.include?("ASSET_HOST") }.first
+                  if asset_host_line.nil?
+                    audit_passed = "No"
+                    comments = "ASSET_HOST value not found."
+                  else
+                    asset_host_value = asset_host_line.split("|")[2].strip
+                    is_direct_cloudfront_asset_host = asset_host_value.include?("cloudfront.net")
+                    is_cdn_subdomain_asset_host = asset_host_value == "cdn.#{app.gsub("-web-production", "").gsub("-", "")}.com"
+                    audit_passed = is_direct_cloudfront_asset_host || is_cdn_subdomain_asset_host ? "Yes" : "No"
+                    if audit_passed == "No"
+                      comments = "ASSET_HOST value is not a Cloudfront CDN URL or a CDN subdomain URL."
+                    end
+                  end
+                end
+                apps_data << [app, asset_host_value, comments, audit_passed]
+              end
+              ui.print_table(apps_data)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/neetob/cli/monthly_audit/instances_and_addons/neeto_deploy/essential_environment_variables_set.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+module Neetob
+  class CLI
+    module MonthlyAudit
+      module InstancesAndAddons
+        module NeetoDeploy
+          class EssentialEnvironmentVariablesSet < CLI::Base
+            def initialize
+              super()
+            end
+
+            def run
+              ui.success "### 3.1.3. Checking whether all essential environment variables are set"
+
+              apps_data = [["App", "All essential env variables set", "Comments", "Audit Passed"]]
+              ui.info("\n", print_to_audit_log: false)
+              Neetob::CLI::Sre::Base::APPS_LIST[:neetodeploy].select { |app| app.include?("production") }.each do |app|
+                ui.info("Checking essential env variables for #{app}", print_to_audit_log: false)
+                essential_env_variables_result = Neetob::CLI::Sre::CheckEssentialEnv.new(app).run
+                audit_passed = nil
+                comments = nil
+                all_essential_env_variables_set = nil
+                if essential_env_variables_result["error"] == "Forbidden"
+                  audit_passed = "No"
+                  comments = "You do not have permission to access the config vars for this app."
+                else
+                  all_essential_env_variables_set = essential_env_variables_result[:all_keys_present]
+                  audit_passed = all_essential_env_variables_set ? "Yes" : "No"
+                  if audit_passed == "No"
+                    comments = "Missing keys: #{essential_env_variables_result[:missing_keys].join(", ")}"
+                  end
+                end
+                apps_data << [app, all_essential_env_variables_set, comments, audit_passed]
+              end
+              ui.print_table(apps_data)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/neetob/cli/monthly_audit/instances_and_addons/neeto_deploy/main.rb

@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+
+require_relative "ssl_certificates_over_thirty_days_from_expiry"
+require_relative "cloudfront_cdn_enabled"
+require_relative "essential_environment_variables_set"
+require_relative "auto_scaling_enabled"
+require_relative "scheduled_exports_enabled"
+
+module Neetob
+  class CLI
+    module MonthlyAudit
+      module InstancesAndAddons
+        module NeetoDeploy
+          class Main < CLI::Base
+            def initialize
+              super()
+            end
+
+            def run
+              SslCertificatesOverThirtyDaysFromExpiry.new.run
+              ui.info "\n"
+              CloudfrontCdnEnabled.new.run
+              ui.info "\n"
+              EssentialEnvironmentVariablesSet.new.run
+              ui.info "\n"
+              AutoScalingEnabled.new.run
+              ui.info "\n"
+              ScheduledExportsEnabled.new.run
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/neetob/cli/monthly_audit/instances_and_addons/neeto_deploy/scheduled_exports_enabled.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+module Neetob
+  class CLI
+    module MonthlyAudit
+      module InstancesAndAddons
+        module NeetoDeploy
+          class ScheduledExportsEnabled < CLI::Base
+            def initialize
+              super()
+            end
+
+            def run
+              ui.success "### 3.1.5. Checking whether scheduled exports are enabled"
+
+              apps_data = [["App", "Scheduled exports config", "Comments", "Audit Passed"]]
+              ui.info("\n", print_to_audit_log: false)
+              Neetob::CLI::Sre::Base::APPS_LIST[:neetodeploy].select { |app| app.include?("production") }.each do |app|
+                ui.info("Checking Scheduled exports config for #{app}", print_to_audit_log: false)
+                scheduled_exports_result = Neetob::CLI::NeetoDeploy::ScheduledExports.new(app).run
+                audit_passed = nil
+                comments = nil
+                scheduled_exports_config = nil
+                if scheduled_exports_result.include? "Forbidden"
+                  audit_passed = "No"
+                  comments = "You do not have permission to access the config for this app."
+                else
+                  scheduled_exports_config = scheduled_exports_result.gsub("\e[32m", "").gsub("\e[0m", "").strip
+                  audit_passed = scheduled_exports_config.include?("turned on") ? "Yes" : "No"
+                  if audit_passed == "No"
+                    comments = scheduled_exports_config
+                  end
+                end
+                apps_data << [app, scheduled_exports_config, comments, audit_passed]
+              end
+              ui.print_table(apps_data)
+            end
+          end
+        end
+      end
+    end
+  end
+end