subspace 0.6.17 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: bce86137d1436605ac79ba30b51f5bffc2fbdcb7
-  data.tar.gz: fca6d81fe147e9a92804ca3a6d4d4dea7bd647ef
+  metadata.gz: 94cc2121bb0fd23080ec1199d94962700215666d
+  data.tar.gz: ffbfc888a7d9b47a01fd477b9cbce7aadfa0bb2c
 SHA512:
-  metadata.gz: 8734979ad61c1099e97ead9549f6e59e42fd4ee6ba30aeef8447b993cdb4052126b62846179e8898a81f51d637bd067ee3fbf4831330aaeabc47733b516e02ef
-  data.tar.gz: 8f7e65018b665bcd88ae13f9891d3c5c41d47a85c8c1cc81535a624d5fab01e69e127ccf9242edf3044d6ff29d67ac7ef6fa4774921eeedf4206b0e8d5f7515e
+  metadata.gz: fc3d2dfb01e59f0d0971180c5040962eec5ed21405ddbcb8830aa85076151feffb69fb16ad96084391cdeb90fb44538f797d243f0e538f1ad3678735d304006b
+  data.tar.gz: 3a28fd453456243ec744d7ae2d0b23150ad3916c517e3881320487e139c17d77d39aad24629cf90e6bcd32e84a09665687c74a6fdb041f3ffa60a163c44526a9

data/CHANGELOG.md

@@ -8,6 +8,23 @@ This project attempts to follow [semantic versioning](https://semver.org/)
 
 * _nada_
 
+## 1.0.0 - 2018-08-15
+
+No breaking changes from 0.6.17 to 1.0.0, but decided it's time for version
+1.0.0 to be out.
+
+* enhancements
+  * Tag tasks in the alienvault and monit roles such that all tasks are tagged
+    with the role name.
+  * Make tags 'upgrade' for doing apt-get update and upgrade and
+    'authorized\_keys' for setting deploy user's authorized\_keys in the common
+    role.
+  * Make tag 'appyml' for the task to upload application.yml in the rails role.
+
+* features
+  * Add ability to pass certain options through `subspace provision` to
+    `ansible-playbook`. These are: tags, start-at-task
+
 ## 0.6.17 - 2018-08-14
 
 * bug fixes

data/README.md

@@ -34,18 +34,36 @@ Or install it yourself as:
 
 ## Usage
 
-* `subspace init`
+### `subspace init`
 
 Initialize the project for subspace. Creates `config/provision` with all
 necessary files.
 
-* `subspace provision <environment>`
+### `subspace provision <environment>`
 
 Runs the playbook at `config/provision/<environment.yml>`.
 
-* `subspace vars <environment> [--edit] [--create]`
+You can pass certain options through to the `ansible-playbook` command. See [the
+provision command](lib/subspace/commands/provision.rb) for the current list.
 
-Manage environment variables on different platforms.  The default action is simply to show the vars defined for an environemnt.  Pass --edit to edit them in the system editor.
+At the time of this writing, we pass through the `ansible-playbook` "tags" and
+"start-at-task" options. The tags option is probably the most useful.
+
+e.g. To run only the alienvault tasks (all of which have been tagged with the
+'alienvault' tag): `subspace provision dev --tags=alienvault`
+
+#### Tagged roles
+
+Role       | Tags                      | Comment
+---------- | ----                      | -------
+alienvault | alienvault                | All tasks in the alienvault role have been tagged 'alienvault'
+common     | upgrade, authorized\_keys | upgrade runs apt-get update and apt-get upgrade; authorized\_keys updates the authorized\_keys file for the deploy user
+rails      | appyml                    |
+monit      | monit                     | All tasks in the monit role have been tagged 'monit'
+
+### `subspace vars <environment> [--edit] [--create]`
+
+Manage environment variables on different platforms.  The default action is simply to show the vars defined for an environment.  Pass --edit to edit them in the system editor.
 
 The new system uses a file in `config/provision/templates/application.yml.template` that contains environment variables for all environments.  The configuration that is not secret is visible and version controlled, while the secrets are stored in the vault files for their environments. The default file created by `subspace init`  looks like this:
 
@@ -78,6 +96,18 @@ This can get you up and running in development securely, the only thing you need
 
 NOTE: application.yml should be in the `.gitignore`, since subspace creates a new version on the server and symlinks it on top of whatever is checked in.
 
+## Procedure for updating on projects
+
+When subspace is updated, you should also update it for projects that use it. If subspace is locked to a specific version in the a project's gemfile, you'll need to update that to the new release number, first. Make sure this won't introduce any breaking changes by [looking at the changelog](https://github.com/tenforwardconsulting/subspace/blob/master/CHANGELOG.md).
+
+* `bundle update subspace`
+
+Then,
+
+* `subspace provision production`
+
+If you get an error saying you need a vault password file, you should be able to find it in 1Password. You might also need to update `ansible`.
+
 # Host configuration
 
 We need to know some info about hosts, but not much.  See the files for details, it's mostly the hostname and the user that can administer the system, eg `ubuntu` on AWS/ubuntu, `ec2-user`, or even `root` (not recommended)

data/ansible/roles/alienvault/tasks/main.yml

@@ -5,9 +5,14 @@
       line: "*.* @{{alienvault_usm_anywhere_sensor_ip}}:514"
       state: present
     become: true
+    tags:
+      - alienvault
 
   - name: Restart rsyslog
     service:
       name: rsyslog
       enabled: yes
       state: restarted
+    become: true
+    tags:
+      - alienvault

data/ansible/roles/common/tasks/main.yml

@@ -40,10 +40,14 @@
   - name: apt-get update
     apt: update_cache=yes cache_valid_time=86400
     become: true
+    tags:
+      - upgrade
 
   - name: apt-get upgrade
     apt: upgrade=full
     become: true
+    tags:
+      - upgrade
 
   - name: Set timezone variables
     copy: content='America/Chicago'
@@ -83,6 +87,8 @@
       dest: "/home/{{deploy_user}}/.ssh/authorized_keys"
       owner: "{{deploy_user}}"
     become: true
+    tags:
+      - authorized_keys
 
   - name: Create directory to which to deploy
     file:

data/ansible/roles/common/templates/motd

@@ -4,7 +4,7 @@ This server brought to you by:
 \___ \| | | | '_ \___ \| '_ \ / _` |/ __/ _ \
  ___) | |_| | |_) |__) | |_) | (_| | (_|  __/
 |____/ \__,_|_.__/____/| .__/ \__,_|\___\___|
-                       |_|             v0.6.17
+                       |_|             v1.0.0
 ~~~ https://github.com/tenforwardconsulting/subspace ~~~
 
 If you need to make configuration changes to the server, please modify the

data/ansible/roles/monit/tasks/main.yml

@@ -5,12 +5,16 @@
       state: present
       force: true
     become: true
+    tags:
+      - monit
 
   - name: Copy sudoers file so that deploy can use monit without entering password.
     copy:
       src: sudoers-monit
       dest: /etc/sudoers.d/monit
     become: true
+    tags:
+      - monit
 
   - name: Copy monit config to enable http from localhost
     copy:
@@ -19,3 +23,5 @@
     become: true
     notify:
       - restart_monit
+    tags:
+      - monit

data/ansible/roles/rails/tasks/main.yml

@@ -35,11 +35,15 @@
       dest: /u/apps/{{project_name}}/shared/config/application.yml
       owner: "{{deploy_user}}"
     become: true
+    tags:
+      - appyml
 
   - debug:
       msg: "Warning: Using legacy appyml for variable configuration.  Consider switching to application.yml.template"
       verbosity: 0
     when: appyml is defined
+    tags:
+      - appyml
 
   - name: Create application.yml
     when: appyml is not defined
@@ -47,4 +51,5 @@
       src: application.yml.template
       dest: /u/apps/{{project_name}}/shared/config/application.yml
       owner: "{{deploy_user}}"
-
+    tags:
+      - appyml

data/lib/subspace/cli.rb

@@ -46,7 +46,9 @@ class Subspace::Cli
       c.syntax = 'subspace provision [options]'
       c.summary = ''
       c.description = ''
-      c.example 'description', 'command example'
+      Subspace::Commands::Provision::PASS_THROUGH_PARAMS.each do |param_name|
+        c.option "--#{param_name} #{param_name.upcase}", "Passed directly through to ansible-playbook command"
+      end
       c.when_called Subspace::Commands::Provision
     end
 

data/lib/subspace/commands/provision.rb

@@ -1,10 +1,22 @@
 class Subspace::Commands::Provision < Subspace::Commands::Base
+  PASS_THROUGH_PARAMS = ["tags", "start-at-task"]
+
   def initialize(args, options)
     @environment = args.first
+    @options = options
     run
   end
 
   def run
-    ansible_command "ansible-playbook", "#{@environment}.yml", "--diff"
+    ansible_options = ["--diff"]
+    PASS_THROUGH_PARAMS.each do |param_name|
+      x = param_name.split('-')[1..-1].map(&:upcase).join('_')
+      hash_key = (param_name.gsub('-', '_') + (x == '' ? '' : "_#{x}")).to_sym
+      value = @options.__hash__[hash_key]
+      if value
+        ansible_options += ["--#{param_name}", value]
+      end
+    end
+    ansible_command "ansible-playbook", "#{@environment}.yml", *ansible_options
   end
 end

data/lib/subspace/version.rb

@@ -1,3 +1,3 @@
 module Subspace
-  VERSION = "0.6.17"
+  VERSION = "1.0.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: subspace
 version: !ruby/object:Gem::Version
-  version: 0.6.17
+  version: 1.0.0
 platform: ruby
 authors:
 - Brian Samson
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2018-08-14 00:00:00.000000000 Z
+date: 2018-08-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler