stacker 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: bc3ba2bbeac3d470e4d355cf4605df35e6640720
-  data.tar.gz: c6e53ace12414864ae41bbfe9a3ed32135daab50
+  metadata.gz: 2fc55049bd623960704c1fd41806d7cd649e32b7
+  data.tar.gz: a1251cd848cd6fc8e24ed819df0c113e9997757b
 SHA512:
-  metadata.gz: 669c65102b76e13165b7668e56631f6b97d02ee5643f703ed2f0cdffa41c8d8844ae320e6ccfc218582a41f2e27f1f5079ecbe1ca10dd736bc42b768caae6662
-  data.tar.gz: 25f33fa2551709a54a55cd5a3633374c183078f8dbb7508f4ff986d180e9470d0ce1910bedf3cc13a507ad7a936ab3b7c99aa20832b4ddd5e163d9ab89e01096
+  metadata.gz: bba3693278a33e76d4dba9ffd54e3e355fc01c72a8430aaec6566c38c5570c612b21eccfa537d302d0b5224c84f7e4e5c293c892c71dbc72500593a442ce1c76
+  data.tar.gz: fd29533ef84783f7e303f118ecf15e5dcea095ac0098490c3fd629833dd5db2dd4af9f87fc87e8039ce5840b931167c3cd523f75154f263346d96675873332be

data/lib/stacker/cli.rb

@@ -10,8 +10,15 @@ module Stacker
     default_path = ENV['STACKER_PATH'] || '.'
     default_region = ENV['STACKER_REGION'] || 'us-east-1'
 
-    method_option :path,   default: default_path,   banner: 'project path'
-    method_option :region, default: default_region, banner: 'AWS region name'
+    method_option :path, type: :string, default: default_path,
+      banner: 'project path'
+
+    method_option :region, type: :string, default: default_region,
+      banner: 'AWS region name'
+
+    method_option :allow_destructive, type: :boolean, default: false,
+      banner: 'allow destructive updates'
+
     def initialize(*args); super(*args) end
 
     desc "init [PATH]", "Create stacker project directories"
@@ -63,9 +70,9 @@ module Stacker
 
           if yes? "Update remote template with these changes (y/n)?"
             time = Benchmark.realtime do
-              stack.update
+              stack.update allow_destructive: options['allow_destructive']
             end
-            Stacker.logger.info time stack_name, 'updated', time
+            Stacker.logger.info formatted_time stack_name, 'updated', time
           else
             Stacker.logger.warn 'Update skipped'
           end
@@ -74,7 +81,7 @@ module Stacker
             time = Benchmark.realtime do
               stack.create
             end
-            Stacker.logger.info time stack_name, 'created', time
+            Stacker.logger.info formatted_time stack_name, 'created', time
           else
             Stacker.logger.warn 'Create skipped'
           end
@@ -139,6 +146,10 @@ YAML
       end
     end
 
+    def formatted_time stack, action, benchmark
+      "Stack #{stack} #{action} in: #{(benchmark / 60).floor} min and #{(benchmark % 60).round} seconds."
+    end
+
     def full_diff stack
       templ_diff = stack.template.diff :color
       param_diff = stack.parameters.diff :color
@@ -182,10 +193,6 @@ YAML
       stack.parameters.resolved
     end
 
-    def time (stack, action, benchmark)
-      return "Stack #{stack} #{action} in: #{(benchmark / 60).floor} min and #{(benchmark % 60).round} seconds."
-    end
-
     def with_one_or_all stack_name = nil, &block
       yield_with_stack = proc do |stack|
         Stacker.logger.info "#{stack.name}:"
@@ -199,6 +206,14 @@ YAML
         region.stacks.each(&yield_with_stack)
       end
 
+    rescue Stacker::Stack::StackPolicyError => err
+      if options['allow_destructive']
+        Stacker.logger.fatal err.message
+      else
+        Stacker.logger.fatal 'Stack update policy prevents replacing or destroying resources.'
+        Stacker.logger.warn 'Try running again with \'--allow-destructive\''
+      end
+      exit 1
     rescue Stacker::Stack::Error => err
       Stacker.logger.fatal err.message
       exit 1

data/lib/stacker/stack.rb

@@ -1,3 +1,4 @@
+require 'active_support/core_ext/hash/keys'
 require 'active_support/core_ext/hash/slice'
 require 'active_support/core_ext/module/delegation'
 require 'aws-sdk'
@@ -9,10 +10,11 @@ require 'stacker/stack/template'
 module Stacker
   class Stack
 
-    class Error < StandardError;     end
+    class Error < StandardError; end
+    class StackPolicyError < Error; end
     class DoesNotExistError < Error; end
     class MissingParameters < Error; end
-    class UpToDateError < Error;     end
+    class UpToDateError < Error; end
 
     extend Memoist
 
@@ -25,6 +27,25 @@ module Stacker
       status_reason
     ]
 
+    SAFE_UPDATE_POLICY = <<-JSON
+{
+  "Statement" : [
+    {
+      "Effect" : "Deny",
+      "Action" : ["Update:Replace", "Update:Delete"],
+      "Principal" : "*",
+      "Resource" : "*"
+    },
+    {
+      "Effect" : "Allow",
+      "Action" : "Update:*",
+      "Principal" : "*",
+      "Resource" : "*"
+    }
+  ]
+}
+JSON
+
     attr_reader :region, :name, :options
 
     def initialize region, name, options = {}
@@ -87,7 +108,12 @@ module Stacker
       raise Error.new err.message
     end
 
-    def update blocking = true
+    def update options = {}
+      options.assert_valid_keys(:blocking, :allow_destructive)
+
+      blocking = options.fetch(:blocking, true)
+      allow_destructive = options.fetch(:allow_destructive, false)
+
       if parameters.missing.any?
         raise MissingParameters.new(
           "Required parameters missing: #{parameters.missing.join ', '}"
@@ -96,11 +122,17 @@ module Stacker
 
       Stacker.logger.info 'Updating stack'
 
-      client.update(
+      update_params = {
         template: template.local,
         parameters: parameters.resolved,
         capabilities: capabilities.local
-      )
+      }
+
+      unless allow_destructive
+        update_params[:stack_policy_during_update_body] = SAFE_UPDATE_POLICY
+      end
+
+      client.update(update_params)
 
       wait_while_status 'UPDATE_IN_PROGRESS' if blocking
     rescue AWS::CloudFormation::Errors::ValidationError => err
@@ -116,12 +148,32 @@ module Stacker
 
     private
 
+    def report_status
+      case status
+      when /_COMPLETE$/
+        Stacker.logger.info "#{name} Status => #{status}"
+      when /_ROLLBACK_IN_PROGRESS$/
+        failure_event = client.events.enum(limit: 30).find do |event|
+          event.resource_status =~ /_FAILED$/
+        end
+        failure_reason = failure_event.resource_status_reason
+        if failure_reason =~ /stack policy/
+          raise StackPolicyError.new failure_reason
+        else
+          Stacker.logger.fatal "#{name} Status => #{status}"
+          raise Error.new "Failure Reason: #{failure_reason}"
+        end
+      else
+        Stacker.logger.debug "#{name} Status => #{status}"
+      end
+    end
+
     def wait_while_status wait_status
       while flush_cache(:status) && status == wait_status
-        Stacker.logger.debug "#{name} Status => #{status}"
+        report_status
         sleep 5
       end
-      Stacker.logger.info "#{name} Status => #{status}"
+      report_status
     end
 
   end

data/lib/stacker/version.rb

@@ -1,3 +1,3 @@
 module Stacker
-  VERSION = "0.1.0"
+  VERSION = "0.2.0"
 end

metadata

@@ -1,125 +1,125 @@
 --- !ruby/object:Gem::Specification
 name: stacker
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Cotap, Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-11-25 00:00:00.000000000 Z
+date: 2015-01-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '4.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '4.0'
 - !ruby/object:Gem::Dependency
   name: aws-sdk
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '1.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '1.0'
 - !ruby/object:Gem::Dependency
   name: coderay
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '1.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '1.1'
 - !ruby/object:Gem::Dependency
   name: diffy
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '3.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '3.0'
 - !ruby/object:Gem::Dependency
   name: indentation
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '0.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '0.0'
 - !ruby/object:Gem::Dependency
   name: memoist
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '0.9'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '0.9'
 - !ruby/object:Gem::Dependency
   name: rainbow
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '1.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '1.1'
 - !ruby/object:Gem::Dependency
   name: thor
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '0.18'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '0.18'
 - !ruby/object:Gem::Dependency
@@ -182,12 +182,12 @@ require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
-  - - '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: 1.9.3
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []