ruby-terraform 0.51.0.pre.1 → 0.51.0.pre.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 38713cdcc13c8730928709bf5b6f3cb71eb8e4ccfadcad7ba2790cf32084139b
-  data.tar.gz: 9fd9e64ed1e3e46c4563b693a2710c4cb1352af78b32720ea54fc92d05cabc71
+  metadata.gz: cff48b117932b50d1b445d3b16a37667023415fc65e4b8ab2cf9f290cf79484c
+  data.tar.gz: 4d95ede4e7f14a6cd9f450a6c09c00168329ae3b7ebcb4b83da5d5adc532647c
 SHA512:
-  metadata.gz: 44d4bda94b4b60cda29d977262c699e6d8cd68f7272b35fb7e9d1f28133733ed4e79947b654b40e875ca843ad7da636182bb8037a4ae3619eba53ae604462d48
-  data.tar.gz: b6894f17a96dcf535ddf3b02ad8d80cf3b43501d7847d30ca0372dc24646dec9e126e95a0c76d23409236f041ba698644975eec03adb713d8189cd6011b17e18
+  metadata.gz: 19de637a5acaf2da3d7fdc88b010e12824084d45e264895a060b4005218cf7523c80cbed26bdcadde427fcff15f6883f80fabec5ade0f924523b404b4d0b33f9
+  data.tar.gz: e3a1dc2a9381648e8383d1c815e9996786588c7722c08b2749bdf4a7e476763a6f2c6035303d20ccb8d587a2db3a6258de1991348de2b8062dc6f404a13f9b01

data/Gemfile.lock

@@ -1,22 +1,31 @@
 PATH
   remote: .
   specs:
-    ruby-terraform (0.51.0.pre.1)
+    ruby-terraform (0.51.0.pre.2)
       lino (~> 1.1)
 
 GEM
   remote: https://rubygems.org/
   specs:
+    addressable (2.7.0)
+      public_suffix (>= 2.0.2, < 5.0)
     concurrent-ruby (1.1.6)
     diff-lcs (1.3)
     excon (0.72.0)
+    faraday (1.0.0)
+      multipart-post (>= 1.2, < 3)
     gem-release (2.1.1)
     hamster (3.0.0)
       concurrent-ruby (~> 1.0)
     lino (1.1.0)
       hamster (~> 3.0)
       open4 (~> 1.3)
+    multipart-post (2.1.1)
+    octokit (4.16.0)
+      faraday (>= 0.9)
+      sawyer (~> 0.8.0, >= 0.5.3)
     open4 (1.3.4)
+    public_suffix (4.0.3)
     rake (13.0.1)
     rspec (3.9.0)
       rspec-core (~> 3.9.0)
@@ -31,6 +40,10 @@ GEM
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.9.0)
     rspec-support (3.9.2)
+    sawyer (0.8.2)
+      addressable (>= 2.3.5)
+      faraday (> 0.8, < 2.0)
+    sshkey (2.0.0)
 
 PLATFORMS
   ruby
@@ -39,9 +52,11 @@ DEPENDENCIES
   bundler (~> 2.0)
   excon (~> 0.72)
   gem-release (~> 2.1)
+  octokit (~> 4.16)
   rake (~> 13.0)
   rspec (~> 3.9)
   ruby-terraform!
+  sshkey (~> 2.0)
 
 BUNDLED WITH
    2.1.4

data/Rakefile

@@ -1,3 +1,5 @@
+require 'sshkey'
+require 'octokit'
 require 'rspec/core/rake_task'
 
 require_relative 'rake/circleci'
@@ -6,41 +8,130 @@ RSpec::Core::RakeTask.new(:spec)
 
 task :default => :spec
 
-namespace :pipeline do
-  namespace :env_vars do
-    circle_ci_config = 'config/secrets/circle_ci/config.yaml'
+namespace :ssh_key do
+  desc "Generate a new SSH key for CI"
+  task :generate do
+    print "Generating a new SSH key... "
+    key = SSHKey.generate(
+        type: "RSA",
+        bits: 4096,
+        comment: "maintainers@infrablocks.io")
+    File.write('config/secrets/ci/ssh.private', key.private_key)
+    File.write('config/secrets/ci/ssh.public', key.public_key)
+    puts "Done."
+  end
+end
+
+namespace :circle_ci do
+  circle_ci_config_path = 'config/secrets/circle_ci/config.yaml'
 
+  namespace :env_vars do
     desc "Destroy all environment variables from the CircleCI pipeline"
     task :destroy do
-      puts "Deleting all environment variables from pipeline..."
-      CircleCI.new(circle_ci_config).delete_env_vars
+      print "Deleting all environment variables from pipeline... "
+      circle_ci = CircleCI.new(circle_ci_config_path)
+      circle_ci.delete_env_vars
       puts "Done."
     end
 
     desc "Provision all environment variables to the CircleCI pipeline"
     task :provision do
-      puts "Creating all environment variables in pipeline..."
+      puts "Creating all environment variables in the pipeline... "
       env_vars = {
           'ENCRYPTION_PASSPHRASE':
               File.read('config/secrets/ci/encryption.passphrase').chomp
       }
 
+      circle_ci = CircleCI.new(circle_ci_config_path)
       env_vars.each do |name, value|
-        puts "Creating environment variable: #{name}"
-        CircleCI.new(circle_ci_config).create_env_var(name, value)
+        print "Creating environment variable: #{name}... "
+        circle_ci.create_env_var(name, value)
       end
 
       puts "Done."
     end
 
-    desc "Ensures all environment variables are configured on the CircleCI " +
+    desc "Ensure all environment variables are configured on the CircleCI " +
         "pipeline"
     task :ensure => [:'destroy', :'provision']
   end
+
+  namespace :ssh_key do
+    desc "Destroy SSH key from the CircleCI pipeline"
+    task :destroy do
+      print "Destroying SSH key in the pipeline... "
+      circle_ci = CircleCI.new(circle_ci_config_path)
+      circle_ci.delete_ssh_keys
+      puts "Done."
+    end
+
+    desc "Provision SSH key to the CircleCI pipeline"
+    task :provision do
+      print "Creating SSH key in the pipeline... "
+      circle_ci = CircleCI.new(circle_ci_config_path)
+      circle_ci.create_ssh_key(
+          SSHKey.new(
+              File.read('config/secrets/ci/ssh.private'),
+              comment: 'github.com'))
+      puts "Done."
+    end
+
+    desc "Ensure SSH key is configured on the CircleCI pipeline"
+    task :ensure => [:'destroy', :'provision']
+  end
+end
+
+namespace :github do
+  namespace :deploy_key do
+    desc "Remove deploy key from the Github repository"
+    task :destroy do
+      print "Removing deploy key from the Github repository... "
+      config = YAML.load_file('config/secrets/github/config.yaml')
+      access_token = config["github_personal_access_token"]
+      repo = config["github_repository"]
+      client = Octokit::Client.new(access_token: access_token)
+
+      deploy_keys = client.list_deploy_keys(repo)
+      circle_ci_deploy_key = deploy_keys.find { |k| k[:title] == 'CircleCI' }
+      if circle_ci_deploy_key
+        client.remove_deploy_key(repo, circle_ci_deploy_key[:id])
+      end
+      puts "Done."
+    end
+
+    desc "Add deploy key to the Github repository"
+    task :provision do
+      print "Adding deploy key to the Github repository... "
+      config = YAML.load_file('config/secrets/github/config.yaml')
+      access_token = config["github_personal_access_token"]
+      repo = config["github_repository"]
+      client = Octokit::Client.new(access_token: access_token)
+
+      ssh_key = SSHKey.new(
+          File.read('config/secrets/ci/ssh.private'),
+          comment: 'CircleCI')
+      client.add_deploy_key(repo,
+          ssh_key.comment,
+          ssh_key.ssh_public_key,
+          read_only: false)
+      puts "Done."
+    end
+
+    desc "Ensure deploy key is configured on the Github repository"
+    task :ensure => [:'destroy', :'provision']
+  end
+end
+
+namespace :pipeline do
+  task :prepare => [
+      :'circle_ci:env_vars:ensure',
+      :'circle_ci:ssh_key:ensure',
+      :'github:deploy_key:ensure'
+  ]
 end
 
 namespace :version do
-  desc "Bump version for specified type (pre, major, minor patch)"
+  desc "Bump version for specified type (pre, major, minor, patch)"
   task :bump, [:type] do |_, args|
     bump_version_for(args.type)
   end

data/config/secrets/ci/ssh.private

@@ -1,51 +1,51 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIJKQIBAAKCAgEAtqqPk8yc8XUbEOPEHcFuCsyiR68p1vgBSUZj9PD/8Bemgfzl
-16SsL1VfEJdwrylPlLj/n4LcOS3gDbl9JuZzUiE1oUJMILIDx0m7jweAbL/jlkCD
-ZSWa7xU8G+icnZD3u6nyapT84oP2xt0R+2HtrawuY6xZfcJh8Q+JoEkJZC9B0w3b
-EsH0wOzq+c/jt8XUSeCkMxzZboJKByFW/aYxepynRkzHH7c4pM7aG307XYfQeavz
-QexIpYFrXv/75HJ9LGWumHTcjl6IYPGDm+UtVxTUO0Lhrpggq5hXyAEajQVWi7Yy
-x41ufHso4K8WpUKeq5hXlqu6scRh+w5ABpaPBTKGbJpRhDCc0yjZxExno9+/m5E1
-GHY0P32jG1EbQtLsxajkDV3L+EKjoE268+JoFZME5vrXLyVk0bfRl3GUW8eRPqk7
-WzD3a7QmQc1vvCzI53Lb/0AUl6MNXrDen36p71aAEld0XlerYKWefaH3a/OsTJV8
-tTLcUr4tx5IQpN5LBIguWphOXWEB4vWUl6UzXS2Uix+0t7Jqg9ivQQ5QrWdjH9E3
-hfJmOghu3MydnsddC7bgjOIupQ5IhrzxnJuRWf3gVurJzGcoYobEtuwpAQ96BUXI
-onEpb6du1726bBb7zABkfRP1fDLhjhN537xhlgA1fvpsVp9OPROGqCdi6NUCAwEA
-AQKCAgEAgKWm8OTOM4/SPBbtbDdqlNiCAhJvWSLZZQ3aIAwLdMBzWGEQTst/KObr
-SPgfOH3Tul6ASYsUJoEUpxXX+qma1mDlMGlMzEoTNyvKmHUkEXMjihJtd7MAZxmB
-d/ZfNul+UADk5gOABtgB2RShMXZKumHlWfVsIZHhALF8sBJANvrBVS8Q9yj6g1VY
-OBAdxLPjSxSXEBhlWdsQ3+yvI30Eo+HoPS6dnsyfbBLysSGFyd15Cff8HpWWpFl9
-kS6f7MhlN/t095J2Mx6I1h3CHu1M/WOCBSqZXyls+O0WBZohZOg5h7QOF1SYV7s1
-kug8/q7oqNll9ouDtOcmSnZCyWEH3+SYdzOv3XfUiDsYf/TAMzMq8NJyUvrGPk+4
-yahImxcfyTR655pUHKDW3fAej69Gk0f6XpHXJ2K7kW0awwCa6MhgUM7KW28LdsFK
-g1crHbXLwMacVaxWNTUCruz2tgFVA1G3gg4DF8s4ERdipbNdvvdEauWGeze/PESA
-jFouSOTgKoguMHC0V4dYBa3v1aeVYebUQ55MwIdcurpOqUOvPjvJD8SY86shxoEM
-ZObzWQLU7hOEDQmzivqJLVjRacwW72FuxSmo3XuD9Iee8fYYJWOi2eQp/W6oaFz2
-apnBOZLfWJrQ/ahzxtfNxyOayD54ZPRSNsLi1Kbx42vN7tDY4oECggEBANhdYoF/
-Znt+CoEA4nPXtL/XA8Y+J0FmCBs2j+NV8Gxpamd84SWGj7O+hmogvtebIUF4E7ck
-kXc98snDp+/X42NIG6abpLJFHMBM+N+ZTIz2CXPSS537SSsJS+d8Rr1+Cxv/pFFl
-uHkUCwQcGcfLIEn5eerG4UKuijIZYJ+3tTUhND+1JwGB87w6P1VzFhD++jcNe4iB
-D0Llx98h6F/GFCl48zg/RFEEsprC1C/j66BusiWQuKE5pvp46qpjmqYagAumIwGc
-s3jV8FOXn+WwOsxu7+UpUQMOlKYSHhJ8stD5H+37dZt+EUZhZgd55iv3c2PQT/Fe
-YbH0jkrjyo1K0mkCggEBANgg2qQbej7WafgtZH19RreOw2ydJihDjNUmoUxCB+Fi
-JItTLtpiE/s1Pg6pcybaVx6DlPdNk2Xay5/qZMLoMMIf9CMQW/KUA9mYnDoNyMiG
-tjn6nSfKRdIcxC9XGrN9BVB40kWoNPQ5EOchGZuigoW3g6cs09ZL+lr6dl9rZlYd
-29yxD75DK8q4QkObwFK3zlccn3NCTpVLLFQEdqQ+lHoyb28DQkulzqxJNUDaci4y
-ehbbh2pJHdudKQG5AtaC4P/LBCSOTCIeFnb0xicjt7WWHMVNJ+Ue4GOKV2K3nYTK
-aYwiTHtowcK+akkWpkAIUmq/mGOKdw7nMRe+HgN6PY0CggEABZ53PnG2kaJ2V19U
-gjmp4gmNeYqHrnUd5McH+Zlzwv0B3Gor1rOl678Y8oyjKCpJNNAPgwQaGwSq136T
-T/FFYICw5yTHpDGTS5M0K2ppyIdjO3TMre+muM1nAT4DAEzTsQh0lgCUR+CzYIny
-SXQHBKTL+8LqerbZs+9gyQUWWajhGH514t4jHFJO7sMsYYidquxYtvTTFqOtCyhw
-Rnx4bZNMjbtm5MvAb7B7njrHFcWKLtuRT+6VXY/iWEZ577JkfOj1o8cUCiFUOneH
-mYl4HXMMG+F0zyWDysRRr505b5/oql+LcFxXyoIhCjSqO54TixYP3W7cDqkRQPSl
-gAHfcQKCAQEAxP29CxMYaynXUKNfEpoa2LfBG8BoxQ480RLytaUBtcZUdMEO1XHL
-sI4o0AhWsrUT7vYT0wzcKlwweMOVr6ket/GT/lms1P9gOvbEfo2N0mgms9XfZCMT
-XJ1nm5aS+cIcE+rsDR1xlqBk7aXXx2lp+iL4Vmmfc5WwzTe4qOQlVJzGhvLD3LEw
-uwcTLrhJpZtu8Stfkhh/s8fe0X13/eAkSPSraM3ZoUWxiIr5hPEWXVEYwri5RoD6
-O++VLsLI+Wg1WDBcyE0Cy54M78PO0GHX0iTOeG8Iy+dGsrOnToz5f81WQqoId/tV
-kAEqsw933Kk5JZ8YcLIGLok+z9szVAwZCQKCAQAbvhtIGkF6MeFAdqQa1pR6N3Et
-GTeodFbaN7pXSHQror/T7WDtxoTVA4RnOCIWbTk+DPCsZrByreFZ1jhEQxYXkceo
-tZdzi5h44gCgggDoiAZyPs4c6Jh3BPeq/X6ibw+5oqEnYLKnfZ0iZQcKV24XC2L2
-1oX8Sq7TxryjO4d6iNfz2pqjrbtyGGAFneevbw2v23Md4zW9OBuVzQTJuaBK29mm
-+/KkBzAGNvobkDQshASyZjqQVVEgP7V/k8QeEQ7TT2TnmxME+7DQacsD6EHMltVP
-0cDakBVhOiiYdf272iyLP2fnhhh0iLh29dBCocQ0sWvde98e0pTU/jZoGi5Y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 -----END RSA PRIVATE KEY-----

data/config/secrets/ci/ssh.public

@@ -1 +1,14 @@
-ssh-rsa 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 maintainers@infrablocks.io
+-----BEGIN PUBLIC KEY-----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+-----END PUBLIC KEY-----

data/config/secrets/github/config.yaml

@@ -0,0 +1,3 @@
+---
+github_personal_access_token: "6deebdb15c371069618942f48acd76f35880ebb5"
+github_repository: "infrablocks/ruby_terraform"

data/lib/ruby_terraform/version.rb

@@ -1,3 +1,3 @@
 module RubyTerraform
-  VERSION = "0.51.0.pre.1"
+  VERSION = "0.51.0.pre.2"
 end

data/rake/circleci.rb

@@ -2,7 +2,6 @@ require 'rubygems'
 require 'excon'
 require 'yaml'
 require 'json'
-require 'pp'
 
 class CircleCI
   def initialize(config_path)
@@ -22,7 +21,7 @@ class CircleCI
   end
 
   def delete_env_var(name)
-    assert_successful(Excon.delete(env_var_url(name), headers))
+    assert_successful(Excon.delete(env_var_url(name), headers: headers))
   end
 
   def delete_env_vars
@@ -38,6 +37,43 @@ class CircleCI
         Excon.post(env_vars_url, body: body, headers: headers))
   end
 
+  def find_ssh_keys
+    response = assert_successful(Excon.get(settings_url, headers: headers))
+    body = JSON.parse(response.body)
+    ssh_keys = body["ssh_keys"].map do |ssh_key|
+      {
+          fingerprint: ssh_key["fingerprint"],
+          hostname: ssh_key["hostname"]
+      }
+    end
+
+    ssh_keys
+  end
+
+  def delete_ssh_key(ssh_key_identifier)
+    assert_successful(
+        Excon.delete(ssh_keys_url,
+            body: JSON.dump(ssh_key_identifier),
+            headers: headers))
+  end
+
+  def delete_ssh_keys
+    ssh_keys = find_ssh_keys
+    ssh_keys.each do |ssh_key|
+      delete_ssh_key(ssh_key)
+    end
+  end
+
+  def create_ssh_key(ssh_key)
+    body = JSON.dump({
+        fingerprint: ssh_key.sha1_fingerprint,
+        hostname: ssh_key.comment,
+        private_key: ssh_key.private_key
+    })
+    assert_successful(
+        Excon.post(ssh_keys_url, body: body, headers: headers))
+  end
+
   private
 
   def headers
@@ -49,7 +85,6 @@ class CircleCI
   end
 
   def assert_successful(response)
-    pp response
     unless response.status >= 200 && response.status < 300
       host = response.data[:host]
       path = response.data[:path]
@@ -65,7 +100,15 @@ class CircleCI
   end
 
   def env_var_url(name)
-    "#{@base_url}/v1.1/project/#{@project_slug}/envvar/#{name}?" +
+    "#{@base_url}/v2/project/#{@project_slug}/envvar/#{name}"
+  end
+
+  def settings_url
+    "#{@base_url}/v1.1/project/#{@project_slug}/settings"
+  end
+
+  def ssh_keys_url
+    "#{@base_url}/v1.1/project/#{@project_slug}/ssh-key?" +
         "circle-token=#{@api_token}"
   end
 end

data/ruby_terraform.gemspec

@@ -31,5 +31,7 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency 'rake', '~> 13.0'
   spec.add_development_dependency 'rspec', '~> 3.9'
   spec.add_development_dependency 'excon', '~> 0.72'
+  spec.add_development_dependency 'sshkey', '~> 2.0'
+  spec.add_development_dependency 'octokit', '~> 4.16'
   spec.add_development_dependency 'gem-release', '~> 2.1'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ruby-terraform
 version: !ruby/object:Gem::Version
-  version: 0.51.0.pre.1
+  version: 0.51.0.pre.2
 platform: ruby
 authors:
 - Toby Clemson
@@ -80,6 +80,34 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.72'
+- !ruby/object:Gem::Dependency
+  name: sshkey
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: octokit
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.16'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.16'
 - !ruby/object:Gem::Dependency
   name: gem-release
   requirement: !ruby/object:Gem::Requirement
@@ -129,6 +157,7 @@ files:
 - config/secrets/ci/ssh.private
 - config/secrets/ci/ssh.public
 - config/secrets/circle_ci/config.yaml
+- config/secrets/github/config.yaml
 - config/secrets/rubygems/credentials
 - go
 - lib/ruby_terraform.rb