RubyGems - roro - Versions diffs - 0.3.28 → 0.3.33 - Mend

roro 0.3.28 → 0.3.33

Files changed (539) hide show

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/devops/ci_styles/circleci/circleci.yml ADDED Viewed

@@ -0,0 +1,31 @@
+preface: some string
+env:
+  base:
+    app_name:
+      name: Name for your app
+      value: 'unstoppable_devops_app'
+    DOCKERHUB_ORGANIZATION:
+      name: The hub.docker.com organization for your image is often but not always the same as your username.
+      value: your-dockerhub-organization
+  ci:
+    DOCKERHUB_USERNAME:
+      name: The username you log into hub.docker.com with
+      value: dhusername
+      required: true
+    DOCKERHUB_PASSWORD:
+      name: The password you log into hub.docker.com with
+      value: dhpassword
+      required: true
+actions:
+  - directory 'stage_one', '.', @env
+  - append_to_file '.gitignore', '/k8s-general/'
+  - append_to_file '.gitignore', partial('ignores')
+  - |
+    generator = Roro::CLI.new
+    generator.generate_mise
+    generator.generate_environments @env
+      generator.generate_keys

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/devops/ci_styles/circleci/templates/partials/_ignores.erb ADDED Viewed

@@ -0,0 +1,9 @@
+## roro
+*.key
+*.env
+!/lib/roro/stacks/**/*.key
+!/lib/roro/stacks/**/*.env
+!test/**/*.key
+!test/**/*.env
+process.yml

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/devops/ci_styles/circleci/templates/stage_one/.circleci/config.yml.tt ADDED Viewed

@@ -0,0 +1,45 @@
+version: 2.1
+jobs:
+  build:
+    docker:
+      - image: cimg/ruby:2.7
+    environment:
+      IMAGE_NAME: <%= @env[:base][:DOCKERHUB_ORGANIZATION][:value] %>/<%= @env[:base][:app_name][:value] %>
+    working_directory: ~/app
+    steps:
+      - checkout
+      - setup_remote_docker
+      - run:
+          name: Build Docker image
+          command: |
+            docker build -t $IMAGE_NAME:latest .
+      - run:
+          name: Push Docker Image
+          command: |
+            gem install roro
+            roro generate:exposed ci
+            source mise/env/ci.env
+            echo "$DOCKERHUB_PASSWORD" | docker login -u "$DOCKERHUB_USERNAME" --password-stdin
+            docker tag $IMAGE_NAME:latest $IMAGE_NAME:$CIRCLE_SHA1
+            docker push $IMAGE_NAME:latest
+            docker push $IMAGE_NAME:$CIRCLE_SHA1
+      - run:
+          name: Install envsubst
+          command: |
+            sudo apt-get update && sudo apt-get -y install gettext-base
+      - run:
+          name: Install kubectl
+          command: |
+            curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl
+            chmod u+x ./kubectl
+      - run:
+          name: Deploy Code
+          command: ./scripts/ci-deploy.sh
+workflows:
+  version: 2
+  build-master:
+    jobs:
+      - build:
+          filters:
+            branches:
+              only: master

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/devops/ci_styles/circleci/templates/stage_one/Dockerfile ADDED Viewed

@@ -0,0 +1,3 @@
+FROM nginx:1.14
+COPY index.html /usr/share/nginx/html/index.html

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/devops/ci_styles/circleci/templates/stage_one/index.html ADDED Viewed

@@ -0,0 +1,7 @@
+<!DOCTYPE html>
+<title>DigitalOcean</title>
+<body>
+Kubernetes Sample Application
+getsome
+</body>

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/devops/ci_styles/circleci/templates/stage_one/k8s/app-deployment.yml.tt ADDED Viewed

@@ -0,0 +1,23 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: <%= @env[:base][:app_name][:value] %>
+  namespace: default
+  labels:
+    app: <%= @env[:base][:app_name][:value] %>
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: <%= @env[:base][:app_name][:value] %>
+  template:
+    metadata:
+      labels:
+        app: <%= @env[:base][:app_name][:value] %>
+    spec:
+      containers:
+        - name: <%= @env[:base][:app_name][:value] %>
+          image: <%= @env[:base][:DOCKERHUB_ORGANIZATION][:value] %>/<%= @env[:base][:app_name][:value] %>:$COMMIT_SHA1
+          ports:
+            - containerPort: 80
+              name: http

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/devops/ci_styles/circleci/templates/stage_one/k8s/app-service.yml.tt ADDED Viewed

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: <%= @env[:base][:app_name][:value] %>
+  namespace: default
+  labels:
+    app: <%= @env[:base][:app_name][:value] %>
+spec:
+  type: ClusterIP
+  ports:
+    - port: 80
+      targetPort: http
+      name: http
+  selector:
+    app: <%= @env[:base][:app_name][:value] %>

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/devops/ci_styles/circleci/templates/stage_one/k8s-general/cicd-role-binding.yml ADDED Viewed

@@ -0,0 +1,13 @@
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: cicd
+  namespace: default
+subjects:
+  - kind: ServiceAccount
+    name: cicd
+    namespace: default
+roleRef:
+  kind: Role
+  name: cicd
+  apiGroup: rbac.authorization.k8s.io

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/devops/ci_styles/circleci/templates/stage_one/k8s-general/cicd-role.yml ADDED Viewed

@@ -0,0 +1,9 @@
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: cicd
+  namespace: default
+rules:
+  - apiGroups: ["", "apps", "batch", "extensions"]
+    resources: ["deployments", "services", "replicasets", "pods", "jobs", "cronjobs"]
+    verbs: ["*"]

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/devops/ci_styles/circleci/templates/stage_one/k8s-general/cicd-service-account.yml ADDED Viewed

@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: cicd
+  namespace: default

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/devops/ci_styles/circleci/templates/stage_one/scripts/ci-deploy.sh.tt ADDED Viewed

@@ -0,0 +1,23 @@
+#! /bin/bash
+# exit script when any command ran here returns with non-zero exit code
+set -e
+COMMIT_SHA1=$CIRCLE_SHA1
+  # We must export it so it's available for envsubst
+export COMMIT_SHA1=$COMMIT_SHA1
+  # since the only way for envsubst to work on files is using input/output redirection,
+  #  it's not possible to do in-place substitution, so we need to save the output to another file
+  #  and overwrite the original with that one.
+envsubst <./k8s/app-deployment.yml >./k8s/app-deployment.yml.out
+mv ./k8s/app-deployment.yml.out ./k8s/app-deployment.yml
+echo "$KUBERNETES_CLUSTER_CERTIFICATE" | base64 --decode > cert.crt
+./kubectl \
+--kubeconfig=/dev/null \
+--server=$KUBERNETES_SERVER \
+--certificate-authority=cert.crt \
+--token=$KUBERNETES_TOKEN \
+apply -f ./k8s/

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/devops/ci_styles/circleci/test/0/_test.rb ADDED Viewed

@@ -0,0 +1,57 @@
+require 'test_helper'
+describe 'adventure::circleci::0 rails' do
+  Given { skip }
+  Given(:workbench) {}
+  Given { @rollon_loud    = false }
+  Given { @rollon_dummies = false }
+  Given { rollon(__dir__) }
+  describe 'must generate a' do
+    Given(:app_name) { 'unstoppable_devops' }
+    Given(:org_name) { 'your-dockerhub-organization' }
+    Given(:image)    { "#{org_name}/#{app_name}" }
+    describe 'scripts directory with ci-deploy.sh' do
+      Then  { assert_file './scripts/ci-deploy.sh', %r{k8s/app-deployment.yml} }
+    end
+    describe '.circleci directory with config.yml' do
+      Then  { assert_file './.circleci/config.yml', /IMAGE_NAME: #{image}/ }
+    end
+    describe 'k8s directory with' do
+      describe 'app-deployment.yml' do
+        Then  { assert_file './k8s/app-deployment.yml', /image: #{image}/ }
+      end
+      describe 'app-service.yml' do
+        Then  { assert_file './k8s/app-service.yml', /app: #{app_name}/ }
+        And   { assert_file './k8s/app-service.yml', /name: #{app_name}/ }
+      end
+    end
+    describe 'kube-general folder with' do
+      describe 'cicd-service-account.yml' do
+        Given(:kind) { 'kind: ServiceAccount' }
+        Then { assert_file 'k8s-general/cicd-service-account.yml', /#{kind}/ }
+      end
+      describe 'cicd-service-account.yml' do
+        Given(:kind) { 'kind: ServiceAccount' }
+        Then { assert_file 'k8s-general/cicd-service-account.yml', /#{kind}/ }
+      end
+    end
+    describe '.gitignore' do
+      Given(:ignoreds) do
+        %w[
+          /k8s-general/
+          \*.env
+          \*.key
+        ]
+      end
+      Then { ignoreds.each { |i| assert_file '.gitignore', /#{i}/ } }
+    end
+  end
+end

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/devops/devops.yml ADDED Viewed

	@@ -0,0 +1 @@
1	+ preface: Adventures in dev ops. Add ci/cd.

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/frameworks/kubernetes/kubernetes.yml ADDED Viewed

	@@ -0,0 +1 @@
1	+ preface: Kubernetes, also known as K8s, is an open-source system for automating deployment, scaling, and management of containerized applications.

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/frameworks/kubernetes/stories/ingress/ingress.yml ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ preface: An ingress is an API object that manages external access to the services in a cluster, typically HTTP. It may provide load balancing, SSL termination and name-based virtual hosting.
2	+

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/frameworks/kubernetes/stories/ingress/stories/nginx/nginx.yml ADDED Viewed

	@@ -0,0 +1 @@
1	+ preface: It is built around the Kubernetes Ingress resource, using a ConfigMap to store the NGINX configuration.

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/frameworks/kubernetes/stories/ingress/stories/nginx/stories/cert_manager/cert_manager.yml ADDED Viewed

@@ -0,0 +1,32 @@
+preface: some string
+env:
+  base:
+    do_cluster_name:
+      name: Digital Ocean Kubernetes cluster name
+      value: k8s-1-21-5-do-0-nyc1-1635194329871
+      help: https://docs.digitalocean.com/products/kubernetes/how-to/connect-to-cluster/
+    domain_name:
+      name: Domain name people will use to find your app
+      value: bierstiefel.com
+    do_cluster_id:
+      name:
+        Digital Ocean Kubernetes cluster id
+      value: df160ada-6534-44db-bb77-282dd7b812ad
+      help: https://docs.digitalocean.com/reference/doctl/reference/kubernetes/cluster/get/
+    cert_email:
+      name: Email address to put on your Let's Encrypt certificate
+      value: localpart@domain.tld
+      required: true
+actions:
+  - directory 'stage_one', '.', @env
+  - run "doctl kubernetes cluster kubeconfig save \"#{@env[:base][:do_cluster_name][:value]}\""
+  - run "kubectl config current-context"
+  - run "kubectl config get-contexts"
+  - run "kubectl apply -f echo1.yaml"
+  - run "kubectl apply -f echo2.yaml"
+  - run "kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v0.34.1/deploy/static/provider/do/deploy.yaml"
+  - run "kubectl get svc"
+#  - run "kubectl get pods -n ingress-nginx -l app.kubernetes.io/name=ingress-nginx"
+#  - run "doctl compute domain records list \"#{@env[:base][:do_cluster_name][:value]}\""
+#  - run "kubectl apply -f echo_ingress.yaml"

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/frameworks/kubernetes/stories/ingress/stories/nginx/stories/cert_manager/templates/stage_2/echo_ingress.yaml.tt ADDED Viewed

@@ -0,0 +1,25 @@
+apiVersion: networking.k8s.io/v1beta1
+kind: Ingress
+metadata:
+  name: echo-ingress
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-staging"
+spec:
+  tls:
+    - hosts:
+        - echo1.<%= @env[:base][:domain_name][:value] %>
+        - echo2.<%= @env[:base][:domain_name][:value] %>
+      secretName: echo-tls
+  rules:
+    - host: echo1.<%= @env[:base][:domain_name][:value] %>
+      http:
+        paths:
+          - backend:
+              serviceName: echo1
+              servicePort: 80
+    - host: echo2.example.com
+      http:
+        paths:
+          - backend:
+              serviceName: echo2
+              servicePort: 80

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/frameworks/kubernetes/stories/ingress/stories/nginx/stories/cert_manager/templates/stage_3/echo_ingress.yaml.tt ADDED Viewed

@@ -0,0 +1,25 @@
+apiVersion: networking.k8s.io/v1beta1
+kind: Ingress
+metadata:
+  name: echo-ingress
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+spec:
+  tls:
+    - hosts:
+        - echo1.<%= @env[:base][:domain_name][:value] %>
+        - echo2.<%= @env[:base][:domain_name][:value] %>
+      secretName: echo-tls
+  rules:
+    - host: echo1.<%= @env[:base][:domain_name][:value] %>
+      http:
+        paths:
+          - backend:
+              serviceName: echo1
+              servicePort: 80
+    - host: echo2.example.com
+      http:
+        paths:
+          - backend:
+              serviceName: echo2
+              servicePort: 80

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/frameworks/kubernetes/stories/ingress/stories/nginx/stories/cert_manager/templates/stage_3/ingress_nginx_svc.yaml.tt ADDED Viewed

@@ -0,0 +1,31 @@
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+    service.beta.kubernetes.io/do-loadbalancer-enable-proxy-protocol: 'true'
+    service.beta.kubernetes.io/do-loadbalancer-hostname: "workaround.bierstiefel.com"
+  labels:
+    helm.sh/chart: ingress-nginx-2.11.1
+    app.kubernetes.io/name: ingress-nginx
+    app.kubernetes.io/instance: ingress-nginx
+    app.kubernetes.io/version: 0.34.1
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/component: controller
+  name: ingress-nginx-controller
+  namespace: ingress-nginx
+spec:
+  type: LoadBalancer
+  externalTrafficPolicy: Local
+  ports:
+    - name: http
+      port: 80
+      protocol: TCP
+      targetPort: http
+    - name: https
+      port: 443
+      protocol: TCP
+      targetPort: https
+  selector:
+    app.kubernetes.io/name: ingress-nginx
+    app.kubernetes.io/instance: ingress-nginx
+    app.kubernetes.io/component: controller

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/frameworks/kubernetes/stories/ingress/stories/nginx/stories/cert_manager/templates/stage_one/echo1.yaml ADDED Viewed

@@ -0,0 +1,32 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: echo1
+spec:
+  ports:
+    - port: 80
+      targetPort: 5678
+  selector:
+    app: echo1
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: echo1
+spec:
+  selector:
+    matchLabels:
+      app: echo1
+  replicas: 2
+  template:
+    metadata:
+      labels:
+        app: echo1
+    spec:
+      containers:
+        - name: echo1
+          image: hashicorp/http-echo
+          args:
+            - "-text=echo1"
+          ports:
+            - containerPort: 5678

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/frameworks/kubernetes/stories/ingress/stories/nginx/stories/cert_manager/templates/stage_one/echo2.yaml ADDED Viewed

@@ -0,0 +1,32 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: echo2
+spec:
+  ports:
+    - port: 80
+      targetPort: 5678
+  selector:
+    app: echo2
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: echo2
+spec:
+  selector:
+    matchLabels:
+      app: echo2
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: echo2
+    spec:
+      containers:
+        - name: echo2
+          image: hashicorp/http-echo
+          args:
+            - "-text=echo2"
+          ports:
+            - containerPort: 5678

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/frameworks/kubernetes/stories/ingress/stories/nginx/stories/cert_manager/templates/stage_one/echo_ingress.yaml.tt ADDED Viewed

@@ -0,0 +1,18 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: echo-ingress
+spec:
+  rules:
+    - host: echo1.<%= @env[:base][:domain_name][:value] %>
+      http:
+        paths:
+          - backend:
+              serviceName: echo1
+              servicePort: 80
+    - host: echo2.<%= @env[:base][:domain_name][:value] %>
+      http:
+        paths:
+          - backend:
+              serviceName: echo2
+              servicePort: 80

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/frameworks/kubernetes/stories/ingress/stories/nginx/stories/cert_manager/templates/stage_one/prod_issuer.yaml.tt ADDED Viewed

@@ -0,0 +1,19 @@
+apiVersion: cert-manager.io/v1alpha2
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-prod
+  namespace: cert-manager
+spec:
+  acme:
+    # The ACME server URL
+    server: https://acme-v02.api.letsencrypt.org/directory
+    # Email address used for ACME registration
+    email: <%= @env[:base][:cert_email][:value] %>
+    # Name of a secret used to store the ACME account private key
+    privateKeySecretRef:
+      name: letsencrypt-prod
+    # Enable the HTTP-01 challenge provider
+    solvers:
+      - http01:
+          ingress:
+            class: nginx

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/frameworks/kubernetes/stories/ingress/stories/nginx/stories/cert_manager/templates/stage_one/staging_issuer.yaml.tt ADDED Viewed

@@ -0,0 +1,19 @@
+apiVersion: cert-manager.io/v1alpha2
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-staging
+  namespace: cert-manager
+spec:
+  acme:
+    # The ACME server URL
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    # Email address used for ACME registration
+    email: <%= @env[:base][:cert_email][:value] %>
+    # Name of a secret used to store the ACME account private key
+    privateKeySecretRef:
+      name: letsencrypt-staging
+    # Enable the HTTP-01 challenge provider
+    solvers:
+      - http01:
+          ingress:
+            class:  nginx

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/frameworks/kubernetes/stories/ingress/stories/nginx/stories/cert_manager/test/0/_test.rb ADDED Viewed

@@ -0,0 +1,15 @@
+require 'test_helper'
+describe 'adventure::cert_manager::0 circleci' do
+  Given { skip }
+  Given(:workbench)  { }
+  Given { @rollon_loud    = false }
+  Given { @rollon_dummies = false }
+  Given { rollon(__dir__) }
+  describe 'k8s manifests' do
+    Then { assert_file "k8s/app-deployment.yaml", /image: handsomefencer\/rails-kubernetes/  }
+    # And  { assert_file "k8s/database-deployment.yaml", /name: database-secret/  }
+    # And  { assert_file "k8s/secret.yaml", /DATABASE_NAME: cG9zdGdyZXM=/ }
+  end
+end

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/frameworks/rails/rails.yml ADDED Viewed

@@ -0,0 +1,51 @@
+preface: some string
+depends_on:
+  - doctl
+env:
+  base:
+    do_cluster_id:
+      name: Digital Ocean Kubernetes cluster id
+      value: 0e23750a-05a4-49f0-8fad-42a201995afc
+      help: https://docs.digitalocean.com/reference/doctl/reference/kubernetes/cluster/get/
+    do_cluster_name:
+      name: Digital Ocean Kubernetes cluster name
+      value: k8s-1-21-5-do-0-sfo3-1635359659910
+      help: https://docs.digitalocean.com/products/kubernetes/how-to/connect-to-cluster/
+    domain_name:
+      name: Domain name people will use to find your app
+      value: bierstiefel.com
+    docker_hub_username:
+      name: The username you log into hub.docker.com with
+      value: dhusername
+      required: true
+    docker_hub_password:
+      name: The password you log into hub.docker.com with
+      value: dhpassword
+      required: true
+    docker_hub_organization:
+      name: The hub.docker.com organization for your image is often but not always the same as your username.
+      value: handsomefencer
+    app_name:
+      name: Name for your app
+      value: rails-kubernetes
+    DATABASE_NAME:
+      name: Database name
+      value: postgres
+    DATABASE_PASSWORD:
+      name: Database password
+      value: postgres
+    DATABASE_USER:
+      name: Database username
+      value: postgres
+actions:
+  - directory 'stage_one', '.', @env
+  - run "doctl kubernetes cluster kubeconfig save \"#{@env[:base][:do_cluster_id][:value]}\""
+  - |
+    inside('k8s') do
+      run "kubectl create -f ./ --validate=true"
+      run "kubectl get pods -l io.kompose.service=app"
+    end
+  - run "kubectl exec $(kubectl get pods -o=name -l io.kompose.service=app) -- rake db:migrate"

data/lib/roro/stacks/unstoppable_developer_styles/sashimi/frameworks/rails/templates/stage_one/docker-compose.yml.tt ADDED Viewed

@@ -0,0 +1,41 @@
+version: '3'
+services:
+  app:
+    image: <%= @env[:base][:docker_hub_organization][:value] %>/<%= @env[:base][:app_name][:value] %>
+    depends_on:
+        - database
+        - redis
+    ports:
+        - "3000:3000"
+    env_file: .env
+    environment:
+        RAILS_ENV: development
+  database:
+    image: postgres:12.1
+    volumes:
+        - db_data:/var/lib/postgresql/data
+    ports:
+        - "5432:5432"
+    environment:
+        PGDATA: /var/lib/postgresql/data/pgdata
+  redis:
+    image: redis:5.0.7
+    ports:
+        - "6379:6379"
+  sidekiq:
+    image: <%= @env[:base][:docker_hub_organization][:value] %>/<%= @env[:base][:app_name][:value] %>
+    depends_on:
+        - app
+        - database
+        - redis
+    env_file: .env
+    environment:
+        RAILS_ENV: development
+    entrypoint: ./entrypoints/sidekiq-entrypoint.sh
+volumes:
+  db_data: