roro 0.3.13 → 0.3.21

data/lib/roro/crypto.rb

@@ -0,0 +1,73 @@
+require "openssl"
+require "base64"
+module Roro::Crypto
+
+  class << self
+
+    def generate_key
+      @cipher = OpenSSL::Cipher.new 'AES-128-CBC'
+      @salt = '8 octets'
+      @new_key = @cipher.random_key
+      Base64.encode64(@new_key)
+    end
+
+    def write_to_file(data, filename)
+      File.open(filename, "w") { |io| io.write data }
+    end
+
+    def generate_key_file(directory, environment)
+      write_to_file(generate_key, directory + "/" + environment + ".key")
+    end
+
+    def source_files(directory=nil, extension=nil)
+      Dir.glob(directory + "/**/*#{extension}")
+    end
+
+    def build_cipher(environment)
+      @cipher = OpenSSL::Cipher.new 'AES-128-CBC'
+      @salt = '8 octets'
+      @pass_phrase = get_key(environment)
+      @cipher.encrypt.pkcs5_keyivgen @pass_phrase, @salt
+    end
+
+    def encrypt(file, environment=nil)
+      environment ||= file.split('.')[-2].split('/').last
+      build_cipher(environment)
+      encrypted = @cipher.update(File.read file) + @cipher.final
+      write_to_file(Base64.encode64(encrypted), file + '.enc')
+    end
+
+    def decrypt(file, environment=nil)
+      environment ||= file.split('.')[-3].split('/').last
+      build_cipher(environment)
+      encrypted = Base64.decode64 File.read(file)
+      @cipher.decrypt.pkcs5_keyivgen @pass_phrase, @salt
+      decrypted = @cipher.update(encrypted) + @cipher.final
+      decrypted_file = file.split('.enc').first
+      write_to_file decrypted, decrypted_file
+    end
+
+    def obfuscate(env=nil, dir=nil, ext=nil)
+      ext = ext || "#{env}.env"
+      source_files(dir, ext).each { |file| encrypt(file, env) }
+    end
+
+    def expose(env=nil, dir=nil, ext=nil)
+      ext = ext || "#{env}.env.enc"
+      source_files(dir, ext).each { |file| decrypt(file, env) }
+    end
+
+    def get_key(environment, directory=nil)
+      env_key = environment.upcase + '_KEY'
+      key_file = source_files('./.', "#{directory}/#{environment}.key").first
+      case
+      when ENV[env_key].nil? && key_file.nil?
+        raise DeployKeyError, "No #{env_key} set."
+      when ENV[env_key]
+        ENV[env_key]
+      when File.exist?(key_file)
+        File.read(key_file).strip
+      end
+    end
+  end
+end

data/lib/roro/stories/greenfield.yml

@@ -0,0 +1 @@
+stories: rails

data/lib/roro/stories/greenfield/rails.yml

@@ -0,0 +1,9 @@
+greenfield_actions:
+  - "@config.env['force'] = true"
+  - |
+    src = 'rails/Dockerfile.greenfield.tt'
+    dest = 'roro/containers/app/Dockerfile'
+    template src, dest, @config.env
+  
+greenfield_commands: 
+  - system "DOCKER_BUILDKIT=1 docker build --file roro/containers/app/Dockerfile --output . ."

data/lib/roro/stories/rollon.yml

@@ -0,0 +1,42 @@
+stories: rails
+
+intentions: 
+
+env_vars: 
+  main_app_name: 
+  developer: 
+    name: your-name
+    email: your.email@example.com
+  docker_email: your-docker-registry-email
+  docker_org: your-docker-registry-org-name
+  docker_password: your-docker-registry-password
+  docker_token: your-docker-registry-token
+  docker_username: your-docker-registry-user-name
+    
+choices:
+  
+  generate_config_story:
+    question: |
+      Would you like to create a Roro Config file to help with debugging, 
+      sharing your desired story, or both?
+    choices: 
+      y: 'Yes'
+      n: 'No'
+    default: y 
+      
+  backup_existing_files: 
+    question: |
+      RoRo will be generating a number of files, some of which will 
+      replace existing ones. Would you like to back them up?
+    choices: 
+      y: 'Yes'
+      n: 'No' 
+    default: n
+
+  copy_dockerignore:
+    question: |
+      Would you like to create a .dockerignore file?
+    choices: 
+      y: 'Yes'
+      n: 'No'
+    default: y

data/lib/roro/stories/rollon/rails.yml

@@ -0,0 +1,76 @@
+stories: 
+  - database  
+  - ci_cd
+  - kubernetes
+
+actions: 
+  - template 'rails/.circleci/config.yml.tt', './.circleci/config.yml' 
+  - template 'rails/docker-compose.yml.tt', './docker-compose.yml', @config.env
+  - template 'base/dotenv', './.env', @config.env
+  - directory 'rails/roro', './roro', @config.env
+  - chmod "roro/docker-entrypoint.sh", 0755
+
+
+startup: 
+  success: "Your app should be available at http://localhost:3000"
+  commands: 
+    - docker-compose build --no-cache
+    - docker-compose up -d
+    - docker-compose run app bin/rails db:create
+    - docker-compose run app bin/rails db:migrate
+    - 'docker-compose run app echo #{success_msg}'
+
+env_vars: 
+  ruby_version: '2.7'
+  database_host: database
+  frontend_service: frontend
+  database_service: database
+
+choices:
+  config_std_out_true: 
+    question: |
+      The team at Heroku, among others, recommend logging to STDOUT 
+      and treating your logs as streams. We'll set this to 
+      true as an environment variable but it may also be helpful
+      to configure './config/boot.rb' with '$stdout.sync = true' 
+      just in case that doesn't work. 
+      Would you like to configure this? 
+    choices: 
+      y: 'Yes'
+      n: 'No'
+    default: y
+
+  insert_roro_gem_into_gemfile: 
+    question: |
+      Many developers believe it's good idea to secure sensitive 
+      environment files and variables. You can use RoRo to 
+      generate secret keys known only to you for use in any
+      environment, and then use them to encrypt and decrypt 
+      these files. Would you like to add RoRo to your Gemfile?
+    choices: 
+      y: 'Yes'
+      n: 'No'
+    default: n
+        
+  gitignore_sensitive_files:
+    question: | 
+      If you plan to use the environment files RoRo generates for 
+      your own environment variables, it's a good idea to keep 
+      these files out of source control. Would you like RoRo to 
+      modify your .gitignore file to accomplish this for you ?
+    choices: 
+      y: 'Yes'
+      n: 'No'
+    default: y
+      
+  insert_hfci_gem_into_gemfile: 
+    question: | 
+      Jim Weirich passed too soon and remains missed. In addition 
+      to Rake, Jim wrote a beautiful gem called 'Given' that makes 
+      Rspec and Minitest less ugly and thus your tests more easy to 
+      write. Would you like to install a gem called 
+      handsome_fencer-test that allows you to try it out?
+    choices: 
+      y: 'Yes'
+      n: 'No' 
+    default: n

data/lib/roro/stories/rollon/rails/ci_cd.yml

@@ -0,0 +1 @@
+stories: circleci

data/lib/roro/stories/rollon/rails/ci_cd/circleci.yml

@@ -0,0 +1,2 @@
+env_vars:
+  deploy_tag: "${CIRCLE_SHA1:0:7}"

data/lib/roro/stories/rollon/rails/database.yml

@@ -0,0 +1,9 @@
+stories: postgresql
+
+actions: 
+  - |
+    Roro::CLI.roro_environments.each do |environment| 
+      src = 'rails/dotenv/web.env.tt'
+      dest = "roro/containers/app/#{environment}.env"
+      template src, dest, @config.env
+    end

data/lib/roro/stories/rollon/rails/database/mysql.yml

@@ -0,0 +1,17 @@
+env_vars:
+  mysql_root_password: 'root-mysql-password'
+  mysql_password: your-mysql-password
+  mysql_username: 'root'
+  mysql_database_port: '3306'
+  database_vendor: mysql
+  
+actions: 
+  - copy_file 'rails/config/database.mysql.yml', 'config/database.yml', @config.env
+  - |
+    Roro::CLI.roro_environments.each do |e| 
+      @config.env[:rails_env] = e
+      source = 'rails/dotenv/database.mysql.env.tt'
+      target = "roro/containers/database/#{e}.env"
+      template( source, target, @config.env) 
+    end
+

data/lib/roro/stories/rollon/rails/database/postgresql.yml

@@ -0,0 +1,15 @@
+env_vars: 
+  postgres_username: postgres
+  postgres_password: your-postgres-password
+  database_vendor: postgresql
+  
+actions: 
+  - copy_file 'rails/config/database.pg.yml', 'config/database.yml', @config.env
+  - |
+    Roro::CLI.roro_environments.each do |e| 
+      @config.env[:rails_env] = e
+      source = 'rails/dotenv/database.pg.env.tt'
+      target = "roro/containers/database/#{e}.env"
+      template( source, target, @config.env) 
+    end
+

data/lib/roro/stories/rollon/rails/kubernetes.yml

@@ -0,0 +1 @@
+stories: postgresql

data/lib/roro/stories/rollon/rails/kubernetes/postgresql.yml

@@ -0,0 +1,10 @@
+stories: 
+  - default 
+  - edge
+
+actions: 
+  - template 'rails/.circleci/config.yml.tt', './.circleci/config.yml' 
+  - template 'rails/docker-compose.yml.tt', './docker-compose.yml', @config.env
+  - template 'base/dotenv', './.env', @config.env
+  - directory 'rails/roro', './roro', @config.env
+  - template 'rails/kube.rake.tt', './lib/tasks/kube.rake', @config.env

data/lib/roro/stories/rollon/rails/kubernetes/postgresql/default.yml

@@ -0,0 +1 @@
+actions:

data/lib/roro/stories/rollon/rails/kubernetes/postgresql/edge.yml

@@ -0,0 +1 @@
+actions:

data/lib/roro/stories/rollon/ruby_gem.yml

@@ -0,0 +1,5 @@
+story: 
+  ci_cd: circleci
+env_vars: 
+  ruby_version: '2.7'
+  

data/lib/roro/templates/base/.circleci/_aliases.yml

@@ -0,0 +1,8 @@
+aliases:
+  - &workspace-location
+    at: /tmp/workspace
+  - &copy-ci-dotenv | 
+    cp -rf /tmp/workspace/roro .
+  - &source-ci-variables | 
+    echo 'source roro/containers/app/ci.env' >> $BASH_ENV
+    source $BASH_ENV

data/lib/roro/templates/base/.circleci/_commands.yml

@@ -0,0 +1,31 @@
+commands: 
+  setup-docker-builds: 
+    steps: 
+      - setup_remote_docker:
+          docker_layer_caching: false
+
+  source-ci-vars: 
+    steps: 
+      - run: |
+          echo 'source roro/containers/app/ci.env' >> ${BASH_ENV}
+          source ${BASH_ENV} 
+
+  attach-roro: 
+    steps: 
+      - attach_workspace: 
+          at: workspace
+      - run: cp -rf workspace/roro .
+      - source-ci-vars
+
+  tag-and-push:
+    parameters: 
+      deploy_tag: 
+        type: string 
+        default: latest
+    steps:
+      - run: | 
+          SOURCE=$(docker images | grep project_app | awk '{ print $3 }')
+          DOCKER_REPO=${DOCKER_ORG}/${APP_NAME}_app
+          TAGGED_IMAGE=${DOCKER_REPO}:<< parameters.deploy_tag >>
+          docker tag ${SOURCE} ${TAGGED_IMAGE}
+          docker push ${TAGGED_IMAGE}

data/lib/roro/templates/base/.circleci/_defaults.yml

@@ -0,0 +1,5 @@
+defaults: &defaults
+  executor: machine-layer-caching
+  working_directory: ~/project
+  environment:
+    RORO_ENV: ci

data/lib/roro/templates/base/.circleci/_executors.yml

@@ -0,0 +1,11 @@
+executors: 
+  machine-layer-caching:
+    machine: 
+      image: circleci/classic:latest
+      docker_layer_caching: true
+  machine-executor: 
+    machine: 
+      image: circleci/classic:latest
+  ruby-executor: 
+    docker:
+      - image: cimg/ruby:2.7

data/lib/roro/templates/base/.circleci/_major_only.yml

@@ -0,0 +1,4 @@
+major_only: &major_only
+  filters:
+    branches:
+      only: master

data/lib/roro/templates/base/.circleci/_version.yml

@@ -0,0 +1 @@
+version: 2.1

data/lib/roro/templates/base/.circleci/_workflow.yml

@@ -0,0 +1,2 @@
+workflows:
+  version: 2

data/lib/roro/templates/base/.circleci/config.job-example.yml

@@ -0,0 +1,33 @@
+defaults: &defaults
+  working_directory: /tmp
+
+version: 2
+
+jobs:
+
+  build:
+    machine: true
+    steps:
+      - checkout
+      - add_ssh_keys
+      
+      - run: gem install handsome_fencer-circle_c_i
+      - run: handsome_fencer-circle_c_i expose circleci
+      - run: handsome_fencer-circle_c_i expose development
+      - run: echo 'source docker/env_files/circleci.env' >> $BASH_ENV
+      - run: docker-compose build
+      - run: docker-compose up -d
+      - run: docker-compose exec app bin/rails db:create db:migrate
+      - run: docker login -u $docker_USER -p $DOCKER_PASS
+      - run:
+          name: Tag app image
+          command: docker tag $(docker images | grep project_app | awk '{ print $3 }') ${DOCKER_ORG_NAME}/${APP_NAME}_app:$DEPLOY_TAG
+      - run:
+          name: Tag web image
+          command: docker tag $(docker images | grep project_web | awk '{ print $3 }') ${DOCKER_ORG_NAME}/${APP_NAME}_web:$DEPLOY_TAG
+
+
+      - run: docker push ${DOCKER_ORG_NAME}/${APP_NAME}_app:$DEPLOY_TAG
+      - run: docker push ${DOCKER_ORG_NAME}/${APP_NAME}_web:$DEPLOY_TAG
+
+      - run: rake --rakefile .circleci/Rakefile

data/lib/roro/templates/base/.circleci/jobs/_build.yml

@@ -0,0 +1,4 @@
+  build:
+    machine: true
+    steps:
+      - checkout

data/lib/roro/templates/base/.circleci/jobs/_release.yml

@@ -0,0 +1,12 @@
+  release:
+    machine: true
+    steps:
+      - checkout
+      - run: gem install roro
+      - run: roro generate::exposed ci
+      - run: echo 'source roro/containers/ruby_image/ci.env' >> $BASH_ENV
+      - run: chmod +x ./.circleci/setup-gem-credentials.sh
+      - run: ./.circleci/setup-gem-credentials.sh
+      - run: cat ~/.gem/credentials
+      - run: git checkout .
+      - run: gem release

data/lib/roro/templates/base/.circleci/workflows/_build_release.yml

@@ -0,0 +1,10 @@
+  build-release: 
+    jobs: 
+      - build
+      - test
+      - release:
+          requires: 
+            - build
+          filters: 
+            branches: 
+              only: release

data/lib/roro/templates/base/dotenv

@@ -0,0 +1 @@
+RORO_ENV=development