shiprails 0.1.5 → 0.1.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 9f6d4d236056ae63cc0c45a01ffc84f1eb579046
-  data.tar.gz: 142517c6bdcec225dae78167de982fd257979ec3
+  metadata.gz: 1c32b0a8dd0dfb9748f6638795d209ff1851e018
+  data.tar.gz: 558a8c9922e386130f411b446cb469018b6785fd
 SHA512:
-  metadata.gz: d63e1ae14db4b0e055082b48da424f1c365f77acc20acf72f1b82dbc4587534fec163c2fab5918905722c9585b5db46c214d9be6c2d0bd9f06bf24c66e3cd6c4
-  data.tar.gz: 78e7470fb2b5f4c98e41affeda518ad11438aa521f2788832b259335fb1d340defd52ccdf28b14ec427fc948179265f8d2331699a4f99a08029006200b2f3c6f
+  metadata.gz: f477b73820f0046ff2c42952482c5b8b28def379a3df2e5dec8f44bd165d9df05bc78c57e67f747d141a12cff85c984a04f95c0fbf0c5be9a360477d59f0e1d1
+  data.tar.gz: 37b8bb889c1d0ffe99f34163400b73321e54d8623feb8a4d356cf3725acecf34d3952f7509958b0ceb67fd516fcc95081ce998f55abef1a2d4d915c8279ce12a

data/lib/shiprails/ship/install.rb

@@ -48,7 +48,7 @@ module Shiprails
       end
 
       def ec2_ssh_private_key_path
-        @ec2_ssh_private_key_path ||= ask "Where is your AWS EC2 SSH private key?", default: 'shiprails.pem'
+        @ec2_ssh_private_key_path ||= ask "Where is your AWS EC2 SSH private key?", default: "#{project_name}.pem"
       end
 
       def environments

data/lib/shiprails/ship/setup.rb

@@ -1,6 +1,9 @@
 require "active_support/all"
 require "aws-sdk"
+require "base64"
+require "fileutils"
 require "git"
+require "netaddr"
 require "thor/group"
 
 module Shiprails
@@ -35,11 +38,349 @@ module Shiprails
         say "Created CloudWatch Log groups.", :green
       end
 
+      def create_vpcs
+        say "Creating VPCs..."
+        created_vpcs = []
+        configuration[:services].each do |service_name, service|
+          service[:regions].each do |region_name, region|
+            ec2 = Aws::EC2::Client.new region: region_name.to_s
+            region[:environments].each do |environment_name|
+              vpc_name = "#{project_name}_#{environment_name}"
+              unless created_vpcs.include? vpc_name
+                begin
+                  vpcs = ec2.describe_vpcs.vpcs
+                  vpc = vpcs.find{ |v| v.tags.find{|t| t.key == "Name" }.try(:value) == vpc_name }
+                  unless vpc.nil?
+                    say "Found #{vpc_name}."
+                    next
+                  end
+                  say "Setting up #{vpc_name}."
+                  vpc_cidr_block = "10.0.0.0/16"
+                  vpc = ec2.create_vpc({
+                    amazon_provided_ipv_6_cidr_block: true,
+                    cidr_block: vpc_cidr_block,
+                  }).vpc
+                  vpc = Aws::EC2::Vpc.new client: ec2, id: vpc.vpc_id
+                  vpc.modify_attribute({
+                    enable_dns_support: { value: true }
+                  })
+                  vpc.create_tags({ tags: [{ key: 'Name', value: vpc_name }]})
+                  availability_zones = ec2.describe_availability_zones({
+                    filters: [{
+                      name: "state",
+                      values: ["available"]
+                    }]
+                  }).availability_zones
+                  say "Creating #{availability_zones.length} availability zones."
+                  bits = 16
+                  while true
+                    begin
+                      NetAddr::CIDR.create(vpc_cidr_block).subnet(:Bits => bits, :NumSubnets => availability_zones.count)
+                    rescue
+                      bits += 1
+                      retry if bits <= 32
+                    end
+                    break
+                  end
+                  cidr_blocks = NetAddr::CIDR.create(vpc_cidr_block).subnet(:Bits => bits, :NumSubnets => availability_zones.count)
+                  availability_zones.each_with_index do |zone, idx|
+                    ec2.create_subnet({
+                      vpc_id: vpc.vpc_id,
+                      cidr_block: cidr_blocks[idx],
+                      ipv_6_cidr_block: "2001:db8:1234:1a#{idx.to_s.rjust(2, '0')}::/64",
+                      availability_zone: zone.zone_name,
+                    })
+                    say "Created subnet for #{zone.zone_name} availability zone (#{vpc_name})."
+                  end
+                  ec2.create_route_table({
+                    vpc_id: vpc.vpc_id,
+                  })
+                  say "Created route table for #{vpc_name}."
+                  ig = ec2.create_internet_gateway.internet_gateway
+                  ec2.attach_internet_gateway({
+                    internet_gateway_id: ig.internet_gateway_id,
+                    vpc_id: vpc.vpc_id,
+                  })
+                  say "Created internet gateway for #{vpc_name}."
+                # rescue Aws::IAM::Errors::EntityAlreadyExists => err
+                end
+                say "Created #{vpc_name} VPC."
+                created_vpcs << vpc_name
+              end
+            end
+          end
+        end
+        say "Created VPCs.", :green
+      end
+
+      def create_security_groups
+        say "Creating security groups..."
+        completed_vpcs = []
+        configuration[:services].each do |service_name, service|
+          service[:regions].each do |region_name, region|
+            ec2 = Aws::EC2::Client.new region: region_name.to_s
+            region[:environments].each do |environment_name|
+              vpc_name = "#{project_name}_#{environment_name}"
+              unless completed_vpcs.include? vpc_name
+                begin
+                  vpcs = ec2.describe_vpcs.vpcs
+                  vpc = vpcs.find{ |v| v.tags.find{|t| t.key == "Name" }.value == vpc_name }
+                  ecs_security_group_id = ec2.create_security_group({
+                    group_name: "ecs-#{vpc_name}",
+                    description: "ECS cluster instances",
+                    vpc_id: vpc.vpc_id
+                  }).group_id
+                  elb_security_group_id = ec2.create_security_group({
+                    group_name: "elb-#{vpc_name}",
+                    description: "ELB instances",
+                    vpc_id: vpc.vpc_id
+                  }).group_id
+                  public_web_security_group_id = ec2.create_security_group({
+                    group_name: "public-web-#{vpc_name}",
+                    description: "Public web ingress",
+                    vpc_id: vpc.vpc_id
+                  }).group_id
+                  datastores_security_group_id = ec2.create_security_group({
+                    group_name: "datastores-#{vpc_name}",
+                    description: "RDS, ElastiCache, etc. instances",
+                    vpc_id: vpc.vpc_id
+                  }).group_id
+                  team_access_security_group_id = ec2.create_security_group({
+                    group_name: "team-access-#{vpc_name}",
+                    description: "Ingress for team members",
+                    vpc_id: vpc.vpc_id
+                  }).group_id
+                  # allow ECS instances to receive traffic from ELBs
+                  ec2.authorize_security_group_ingress({
+                    group_id: ecs_security_group_id,
+                    source_security_group_name: "elb-#{vpc_name}",
+                  })
+                  # allow public web group to receive traffic from the web
+                  ec2.authorize_security_group_ingress({
+                    group_id: public_web_security_group_id,
+                    ip_permissions: [
+                      {
+                        prefix_list_ids: [],
+                        from_port: "80",
+                        ip_ranges: [{
+                          cidr_ip: "0.0.0.0/0"
+                        }],
+                        to_port: "80",
+                        ip_protocol: "tcp",
+                        user_id_group_pairs: [],
+                        ipv_6_ranges: [{
+                          cidr_ipv_6: "::/0"
+                        }]
+                      },
+                      {
+                        prefix_list_ids: [],
+                        from_port: "443",
+                        ip_ranges: [{
+                          cidr_ip: "0.0.0.0/0"
+                        }],
+                        to_port: "443",
+                        ip_protocol: "-1",
+                        user_id_group_pairs: [],
+                        ipv_6_ranges: [{
+                          cidr_ipv_6: "::/0"
+                        }]
+                      },
+                    ]
+                  })
+                  # allow datastore instances to receive traffic from ECS instances
+                  current_ip_address = `curl http://ipecho.net/plain`
+                  ec2.authorize_security_group_ingress({
+                    group_id: team_access_security_group_id,
+                    ip_permissions: [
+                      {
+                        prefix_list_ids: [],
+                        from_port: "-1",
+                        ip_ranges: [{
+                          cidr_ip: "#{current_ip_address}/32"
+                        }],
+                        to_port: "-1",
+                        ip_protocol: "-1",
+                        user_id_group_pairs: [],
+                        ipv_6_ranges: []
+                      },
+                    ]
+                  })
+                  # allow ELBs to access ECS instances
+                  ec2.authorize_security_group_egress({
+                    group_id: elb_security_group_id,
+                    source_security_group_name: "ecs-#{vpc_name}",
+                  })
+                  # allow ECS instances to access the public web
+                  ec2.authorize_security_group_egress({
+                    group_id: ecs_security_group_id,
+                    ip_permissions: [
+                      {
+                        prefix_list_ids: [],
+                        from_port: "80",
+                        ip_ranges: [{
+                          cidr_ip: "0.0.0.0/0"
+                        }],
+                        to_port: "80",
+                        ip_protocol: "tcp",
+                        user_id_group_pairs: [],
+                        ipv_6_ranges: [{
+                          cidr_ipv_6: "::/0"
+                        }]
+                      },
+                      {
+                        prefix_list_ids: [],
+                        from_port: "443",
+                        ip_ranges: [{
+                          cidr_ip: "0.0.0.0/0"
+                        }],
+                        to_port: "443",
+                        ip_protocol: "-1",
+                        user_id_group_pairs: [],
+                        ipv_6_ranges: [{
+                          cidr_ipv_6: "::/0"
+                        }]
+                      },
+                    ]
+                  })
+                rescue Aws::EC2::Errors::InvalidGroupDuplicate => err
+                  say "Security groups for #{vpc_name} VPC already setup."
+                end
+                say "Created security groups for #{vpc_name} VPC."
+                completed_vpcs << vpc_name
+              end
+            end
+          end
+        end
+        say "Created security groups..", :green
+      end
+
+      def create_key_pairs
+        say "Creating EC2 key pairs..."
+        created_key_pairs = []
+        configuration[:services].each do |service_name, service|
+          service[:regions].each do |region_name, region|
+            region[:environments].each do |environment_name|
+              key_pair_name = "#{project_name}"
+              unless created_key_pairs.include? key_pair_name
+                begin
+                  ec2 = Aws::EC2::Client.new(region: region_name.to_s)
+                  key_pair = ec2.create_key_pair({
+                    key_name: key_pair_name
+                  })
+                  File.open("#{project_name}.pem", 'w') { |file| file.write(key_pair.key_material) }
+                  FileUtils.chmod 0600, "#{project_name}.pem"
+                end
+              end
+            end
+          end
+        end
+        say "Created EC2 key pairs.", :green
+      end
+
+      def create_ecs_autoscale_role
+        say "Creating ECS AutoScaling IAM roles..."
+        iam = Aws::IAM::Client.new
+        created_roles = []
+        configuration[:services].each do |service_name, service|
+          service[:regions].each do |region_name, region|
+            region[:environments].each do |environment_name|
+              role_name = "#{project_name}_#{environment_name}-ecsAutoScaling"
+              unless created_roles.include? role_name
+                begin
+                  role = iam.create_role({
+                    assume_role_policy_document: "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Effect\":\"Allow\",\"Principal\":{\"Service\":[\"application-autoscaling.amazonaws.com\"]},\"Action\":[\"sts:AssumeRole\"]}]}",
+                    path: "/",
+                    role_name: role_name,
+                  })
+                  iam.attach_role_policy({
+                    policy_arn: "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceAutoscaleRole",
+                    role_name: role_name,
+                  })
+                rescue Aws::IAM::Errors::EntityAlreadyExists => err
+                end
+                say "Created #{role_name} IAM role."
+                created_roles << role_name
+              end
+            end
+          end
+        end
+        say "Created ECS AutoScaling IAM roles.", :green
+      end
+
+      def create_ecs_instance_role
+        say "Creating ECS EC2 Instance IAM roles..."
+        iam = Aws::IAM::Client.new
+        created_roles = []
+        configuration[:services].each do |service_name, service|
+          service[:regions].each do |region_name, region|
+            region[:environments].each do |environment_name|
+              role_name = "#{project_name}_#{environment_name}-ecsInstanceRole"
+              unless created_roles.include? role_name
+                begin
+                  role = iam.create_role({
+                    assume_role_policy_document: "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Effect\":\"Allow\",\"Principal\":{\"Service\":[\"ec2.amazonaws.com\"]},\"Action\":[\"sts:AssumeRole\"]}]}",
+                    path: "/",
+                    role_name: role_name,
+                  })
+                  iam.attach_role_policy({
+                    policy_arn: "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceforEC2Role",
+                    role_name: role_name,
+                  })
+                  iam.put_role_policy({
+                    policy_document: "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Action\":[\"logs:CreateLogGroup\",\"logs:CreateLogStream\",\"logs:DescribeLogGroups\",\"logs:DescribeLogStreams\",\"logs:PutLogEvents\"],\"Effect\":\"Allow\",\"Resource\":\"arn:aws:logs:#{region_name.to_s}:#{aws_account_number}:log-group:#{project_name}_#{environment_name}\"}]}",
+                    policy_name: "ecs-cloudwatch-logs",
+                    role_name: role_name,
+                  })
+                  iam.put_role_policy({
+                    policy_document: "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Effect\":\"Allow\",\"Action\":[\"ecs:DescribeTasks\",\"ecs:ListContainerInstances\",\"ecs:ListTasks\",\"ecs:StartTask\",\"ecs:StopTask\"],\"Resource\":\"arn:aws:ecs:#{region_name.to_s}:#{aws_account_number}:cluster/#{project_name}_#{environment_name}\"}]}",
+                    policy_name: "ecs-tasks",
+                    role_name: role_name,
+                  })
+                  iam.put_role_policy({
+                    policy_document: "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"Stmt1492034037000\",\"Effect\":\"Allow\",\"Action\":[\"s3:Get*\"],\"Resource\":[\"arn:aws:s3:::#{project_name}-config/#{environment_name}/*\"]}]}",
+                    policy_name: "read-config-from-s3",
+                    role_name: role_name,
+                  })
+                rescue Aws::IAM::Errors::EntityAlreadyExists => err
+                end
+                say "Created #{role_name} IAM role."
+                created_roles << role_name
+              end
+            end
+          end
+        end
+        say "Created ECS EC2 Instance IAM roles.", :green
+      end
+
       def create_ecs_task_role
-        #
-        # TODO: create role for tasks to read config from S3
-        #
-        say "TODO: create task role", :blue
+        say "Creating ECS Task IAM roles..."
+        iam = Aws::IAM::Client.new
+        created_roles = []
+        configuration[:services].each do |service_name, service|
+          service[:regions].each do |region_name, region|
+            region[:environments].each do |environment_name|
+              role_name = "#{project_name}_#{environment_name}-ecs-task"
+              unless created_roles.include? role_name
+                begin
+                  role = iam.create_role({
+                    assume_role_policy_document: "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Effect\":\"Allow\",\"Principal\":{\"Service\":[\"ecs-tasks.amazonaws.com\"]},\"Action\":[\"sts:AssumeRole\"]}]}",
+                    path: "/",
+                    role_name: role_name,
+                  })
+                  iam.put_role_policy({
+                    policy_document: "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"Stmt1492034037000\",\"Effect\":\"Allow\",\"Action\":[\"s3:Get*\"],\"Resource\":[\"arn:aws:s3:::#{project_name}-config/#{environment_name}/*\"]}]}",
+                    policy_name: "read-config-from-s3",
+                    role_name: role_name,
+                  })
+                rescue Aws::IAM::Errors::EntityAlreadyExists => err
+                end
+                say "Created #{role_name} IAM role."
+                created_roles << role_name
+              end
+            end
+          end
+        end
+        say "Created ECS Task IAM roles.", :green
       end
 
       def create_ecs_tasks
@@ -60,10 +401,6 @@ module Shiprails
                 task_definition.delete :requires_attributes
                 say "Updating ECS task (#{task_name})."
               rescue Aws::ECS::Errors::ClientException => e
-                #
-                # TODO: set task role
-                #
-                say "TODO: set task role", :blue
                 task_definition = {
                   container_definitions: [
                     {
@@ -97,7 +434,8 @@ module Shiprails
                       }
                     }
                   ],
-                  family: task_name
+                  family: task_name,
+                  task_role_arn: "arn:aws:iam::#{aws_account_number}:role/#{project_name}_#{environment_name}-ecs-task"
                 }
                 say "Creating new ECS task (#{task_name})!"
               end
@@ -130,15 +468,123 @@ module Shiprails
       end
 
       def create_ec2_launch_configurations
-        say "TODO: create cluster launch config", :blue
+        say "Creating EC2 LaunchConfigurations..."
+        autoscaling = Aws::AutoScaling::Client.new
+        created_launch_configurations = []
+        configuration[:services].each do |service_name, service|
+          service[:regions].each do |region_name, region|
+            region[:environments].each do |environment_name|
+              launch_configuration_name = "#{project_name}_#{environment_name}-v1"
+              unless created_launch_configurations.include? launch_configuration_name
+                begin
+                  ec2 = Aws::EC2::Client.new(region: region_name.to_s)
+                  images = ec2.describe_images({
+                    filters: [
+                      {
+                        name: 'name',
+                        values: ['amzn-ami-201*-amazon-ecs-optimized']
+                      },
+                      {
+                        name: 'owner-alias',
+                        values: ['amazon']
+                      },
+                      {
+                        name: 'state',
+                        values: ['available']
+                      },
+                    ],
+                  }).images
+                  image = images.sort_by(&:name).last # get the newest version
+                  vpcs = ec2.describe_vpcs.vpcs
+                  vpc = vpcs.find{ |v| v.tags.find{|t| t.key == "Name" }.value == "#{project_name}_#{environment_name}" }
+                  security_groups = ec2.describe_security_groups({
+                    filters: [
+                      {
+                        name: "vpc-id",
+                        values: [
+                          vpc.vpc_id
+                        ],
+                      },
+                    ],
+                  }).security_groups
+                  security_group = security_groups.find{ |group| group.group_name == "ecs-#{project_name}_#{environment_name}" }
+                  autoscaling.create_launch_configuration({
+                    block_device_mappings: [
+                      {
+                        device_name: "/dev/xvdcz",
+                        ebs: {
+                          delete_on_termination: true,
+                          encrypted: false,
+                          volume_size: 22,
+                          volume_type: "gp2",
+                        },
+                      },
+                    ],
+                    iam_instance_profile: "#{project_name}_#{environment_name}-ecsInstanceRole",
+                    image_id: image.image_id,
+                    instance_type: "t2.small",
+                    key_name: "#{project_name}",
+                    launch_configuration_name: launch_configuration_name,
+                    security_groups: [ security_group.group_id ],
+                    user_data: Base64.encode64("#!/bin/bash
+echo ECS_CLUSTER=#{project_name}_#{environment_name} >> /etc/ecs/ecs.config"),
+                  })
+                rescue Aws::AutoScaling::Errors::AlreadyExistsFault
+                  say "TODO: update LaunchConfiguration with latest stuff.", :blue
+                end
+                created_launch_configurations << launch_configuration_name
+              end
+            end
+          end
+        end
+        say "Created EC2 LaunchConfigurations!", :green
       end
 
       def create_ec2_autoscaling_groups
-        say "TODO: create cluster group", :blue
-      end
-
-      def create_cloudwatch_ecs_alarms
-        say "TODO: create cloudwatch alarms for cluster memory", :blue
+        say "Creating EC2 AutoScaling Groups..."
+        autoscaling = Aws::AutoScaling::Client.new
+        created_auto_scaling_groups = []
+        configuration[:services].each do |service_name, service|
+          service[:regions].each do |region_name, region|
+            region[:environments].each do |environment_name|
+              group_name = "#{project_name}_#{environment_name}"
+              unless created_auto_scaling_groups.include? group_name
+                ec2 = Aws::EC2::Client.new region: region_name.to_s
+                vpcs = ec2.describe_vpcs.vpcs
+                vpc = vpcs.find{ |v| v.tags.find{|t| t.key == "Name" }.value == "#{project_name}_#{environment_name}" }
+                subnets = ec2.describe_subnets({
+                  filters: [
+                    {
+                      name: "vpc-id",
+                      values: [
+                        vpc.vpc_id
+                      ],
+                    },
+                  ],
+                }).subnets
+                zones_in_region = subnets.map(&:availability_zone)
+                subnets_in_region = subnets.map(&:subnet_id)
+                begin
+                  autoscaling.create_auto_scaling_group({
+                    auto_scaling_group_name: group_name,
+                    availability_zones: zones_in_region,
+                    default_cooldown: 300,
+                    health_check_grace_period: 300,
+                    health_check_type: "EC2",
+                    launch_configuration_name: "#{project_name}_#{environment_name}-v1",
+                    max_size: 10,
+                    min_size: 1,
+                    vpc_zone_identifier: subnets_in_region.join(',')
+                  })
+                rescue Aws::AutoScaling::Errors::AlreadyExistsFault
+                  say "TODO: update AutoScaling Group with latest stuff like LaunchConfiguration name.", :blue
+                end
+                created_auto_scaling_groups << group_name
+              end
+            end
+          end
+        end
+        say "Created EC2 LaunchConfigurations!", :green
       end
 
       def create_ecs_services
@@ -237,6 +683,10 @@ module Shiprails
         say "Created ECS services!", :green
       end
 
+      def create_cloudwatch_ecs_alarms
+        say "TODO: create cloudwatch alarms for cluster memory", :blue
+      end
+
       def create_cloudwatch_elb_alarms
         say "TODO: create cloudwatch alarms for elb latency / service units", :blue
       end
@@ -259,6 +709,10 @@ module Shiprails
         @aws_access_key_secret ||= ask "AWS Access Key Secret", default: ENV.fetch("AWS_SECRET_ACCESS_KEY")
       end
 
+      def aws_account_number
+        @aws_account_number ||= Aws::STS::Client.new().get_caller_identity.account
+      end
+
       def configuration
         YAML.load(File.read("#{options[:path]}/.shiprails.yml")).deep_symbolize_keys
       end

data/lib/shiprails/version.rb

@@ -1,3 +1,3 @@
 module Shiprails
-  VERSION = "0.1.5"
+  VERSION = "0.1.7"
 end

data/shiprails.gemspec

@@ -22,6 +22,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency "activesupport", "~> 5"
   spec.add_dependency "aws-sdk", "~> 2"
   spec.add_dependency "git", "~> 1.3"
+  spec.add_dependency "netaddr", "~> 1.5"
   spec.add_dependency "thor", "~> 0.14"
   spec.add_dependency "s3_config", "~> 0.1.0"
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: shiprails
 version: !ruby/object:Gem::Version
-  version: 0.1.5
+  version: 0.1.7
 platform: ruby
 authors:
 - Zane Shannon
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-05-03 00:00:00.000000000 Z
+date: 2017-05-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -52,6 +52,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.3'
+- !ruby/object:Gem::Dependency
+  name: netaddr
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.5'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.5'
 - !ruby/object:Gem::Dependency
   name: thor
   requirement: !ruby/object:Gem::Requirement