uffizzi-core 0.1.12

data/app/lib/uffizzi_core/concerns/models/activity_item.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+module UffizziCore::Concerns::Models::ActivityItem
+  extend ActiveSupport::Concern
+
+  included do
+    include UffizziCore::ActivityItemRepo
+
+    self.table_name = UffizziCore.table_names[:activity_items]
+
+    belongs_to :deployment
+    belongs_to :container
+    belongs_to :build, optional: true
+
+    has_many :events, dependent: :destroy
+
+    scope :docker, -> {
+      where(type: UffizziCore::ActivityItem::Docker.name)
+    }
+
+    scope :github, -> {
+      where(type: UffizziCore::ActivityItem::Github.name)
+    }
+
+    def docker?
+      type == UffizziCore::ActivityItem::Docker.name
+    end
+
+    def image
+      [namespace, name].compact.join('/')
+    end
+
+    def full_image
+      return "#{image}:#{tag}" if docker?
+
+      ''
+    end
+  end
+end

data/app/lib/uffizzi_core/concerns/models/credential.rb

@@ -0,0 +1,65 @@
+# frozen_string_literal: true
+
+module UffizziCore::Concerns::Models::Credential
+  extend ActiveSupport::Concern
+
+  included do
+    include AASM
+    include UffizziCore::CredentialRepo
+
+    self.table_name = UffizziCore.table_names[:credentials]
+
+    belongs_to :account
+
+    before_destroy :remove_token
+
+    validates :registry_url, presence: true
+
+    aasm :state, column: :state do
+      state :not_connected, initial: true
+      state :active
+      state :unauthorized
+
+      event :activate do
+        transitions from: [:not_connected, :unauthorized], to: :active
+      end
+
+      event :unauthorize do
+        transitions from: [:not_connected, :active], to: :unauthorized
+      end
+    end
+
+    def github_container_registry?
+      type == UffizziCore::Credential::GithubContainerRegistry.name
+    end
+
+    def docker_hub?
+      type == UffizziCore::Credential::DockerHub.name
+    end
+
+    def azure?
+      type == UffizziCore::Credential::Azure.name
+    end
+
+    def google?
+      type == UffizziCore::Credential::Google.name
+    end
+
+    def amazon?
+      type == UffizziCore::Credential::Amazon.name
+    end
+
+    private
+
+    def remove_token
+      account.projects.find_each do |project|
+        project.deployments.find_each do |deployment|
+          containers = deployment.containers
+          attributes = { continuously_deploy: UffizziCore::Container::STATE_DISABLED }
+
+          containers.with_docker_hub_repo.update_all(attributes) if docker_hub?
+        end
+      end
+    end
+  end
+end

data/app/lib/uffizzi_core/concerns/models/repo.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+module UffizziCore::Concerns::Models::Repo
+  extend ActiveSupport::Concern
+
+  included do
+    extend Enumerize
+    include UffizziCore::RepoRepo
+
+    self.table_name = UffizziCore.table_names[:repos]
+
+    enumerize :kind, in: [:buildpacks18, :dockerfile, :dotnet, :gatsby, :barestatic], predicates: true
+
+    belongs_to :project
+    has_one :container, inverse_of: :repo, dependent: :destroy
+    has_many :builds, dependent: :destroy
+
+    validates :dockerfile_path, presence: true, if: :dockerfile?
+    validates :delete_preview_after, numericality: { greater_than: 0, only_integer: true }, allow_nil: true
+
+    def docker_hub?
+      type == UffizziCore::Repo::DockerHub.name
+    end
+
+    def azure?
+      type == UffizziCore::Repo::Azure.name
+    end
+
+    def google?
+      type == UffizziCore::Repo::Google.name
+    end
+  end
+end

data/app/lib/uffizzi_core/rbac/user_access_service.rb

@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+module UffizziCore::Rbac::UserAccessService
+  class << self
+    def admin_access_to_account?(_user, _account)
+      true
+    end
+
+    def developer_access_to_account?(_user, _account)
+      true
+    end
+
+    def viewer_access_to_account?(_user, _account)
+      true
+    end
+
+    def admin_or_developer_access_to_account?(_user, _account)
+      true
+    end
+
+    def any_access_to_account?(_user, _account)
+      true
+    end
+
+    def admin_access_to_project?(_user, _project)
+      true
+    end
+
+    def developer_access_to_project?(_user, _project)
+      true
+    end
+
+    def viewer_access_to_project?(_user, _project)
+      true
+    end
+
+    def admin_or_developer_access_to_project?(_user, _project)
+      true
+    end
+
+    def any_access_to_project?(_user, _project)
+      true
+    end
+  end
+end

data/app/mailers/uffizzi_core/application_mailer.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+module UffizziCore
+  class ApplicationMailer < ActionMailer::Base
+    default from: 'from@example.com'
+    layout 'mailer'
+  end
+end

data/app/models/concerns/uffizzi_core/hashid_concern.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+module UffizziCore::HashidConcern
+  extend ActiveSupport::Concern
+
+  class_methods do
+    def hashid_service
+      @hashid_service ||= Hashids.new("#{Rails.application.secrets.secret_key_base}-#{name}")
+    end
+
+    def find_by_hashid(hashid)
+      id = hashid_service.decode(hashid.to_s).first
+      find_by(id: id)
+    end
+
+    def find_by_hashid!(hashid)
+      id = hashid_service.decode(hashid.to_s).first
+      find(id)
+    end
+  end
+
+  def hashid
+    self.class.hashid_service.encode(id)
+  end
+end

data/app/models/concerns/uffizzi_core/state_machine_concern.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+module UffizziCore::StateMachineConcern
+  extend ActiveSupport::Concern
+
+  class_methods do
+    def aasm(attribute, *args)
+      attr_accessor(:"#{attribute}_event")
+
+      define_method("#{attribute}_event=") do |value|
+        send(value)
+      end
+      super(attribute, *args)
+    end
+  end
+end

data/app/models/uffizzi_core/account.rb

@@ -0,0 +1,83 @@
+# frozen_string_literal: true
+
+class UffizziCore::Account < UffizziCore::ApplicationRecord
+  include AASM
+  include UffizziCore::StateMachineConcern
+  extend Enumerize
+
+  self.table_name = UffizziCore.table_names[:accounts]
+
+  enumerize :kind, in: [:personal, :organizational], scope: true, predicates: true
+  validates :kind, presence: true
+  validates :domain, uniqueness: true, if: :domain
+
+  belongs_to :owner, class_name: UffizziCore::User.name, foreign_key: :owner_id
+
+  has_many :memberships, dependent: :destroy
+  has_many :users, through: :memberships
+  has_many :credentials, dependent: :destroy
+
+  has_many :projects, dependent: :destroy
+  has_many :deployments, through: :projects
+  has_many :payments, dependent: :destroy
+  has_many :invitations, as: :entityable
+
+  aasm(:state) do
+    state :active, initial: true
+    state :payment_issue
+    state :disabled
+    state :draft
+
+    # next states should be removed after migration
+    state :trial
+    state :trial_expired
+    state :past_due
+
+    event :activate do
+      transitions from: [:payment_issue, :disabled, :trial, :trial_expired, :past_due, :draft], to: :active
+    end
+
+    event :raise_payment_issue, before_success: :update_payment_issue_date do
+      transitions from: [:active, :trial, :trial_expired, :past_due, :disabled], to: :payment_issue
+    end
+
+    event :disable, after: :disable_projects do
+      transitions from: [:active, :trial, :trial_expired, :past_due, :payment_issue], to: :disabled
+    end
+  end
+
+  aasm(:sso_state) do
+    state :connection_not_configured, initial: true
+    state :connection_disabled
+    state :connection_active
+
+    event :activate_connection do
+      transitions from: [:connection_not_configured, :connection_disabled], to: :connection_active
+    end
+
+    event :deactivate_connection do
+      transitions from: [:connection_active], to: :connection_disabled
+    end
+
+    event :reset_connection do
+      transitions from: [:connection_active, :connection_disabled], to: :connection_not_configured
+    end
+  end
+
+  def update_payment_issue_date
+    update(payment_issue_at: DateTime.current)
+  end
+
+  def active_projects
+    projects.active
+  end
+
+  def disable_projects
+    active_projects.each(&:disable_deployments)
+  end
+
+  #  This method is deprecated. Don't use it.
+  def user
+    users.find_by(memberships: { role: UffizziCore::Membership.role.admin })
+  end
+end

data/app/models/uffizzi_core/activity_item/docker.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::ActivityItem::Docker < UffizziCore::ActivityItem
+end

data/app/models/uffizzi_core/activity_item/github.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::ActivityItem::Github < UffizziCore::ActivityItem
+end

data/app/models/uffizzi_core/activity_item/memory_limit.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::ActivityItem::MemoryLimit < UffizziCore::ActivityItem
+end

data/app/models/uffizzi_core/activity_item.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+# @model
+#
+# @property id [integer]
+# @property namespace [string]
+# @property name(required) [string]
+# @property tag [string]
+# @property branch [string]
+# @property type [string]
+# @property container_id [string]
+# @property commit [string]
+# @property commit_message [string]
+# @property build_id [integer]
+# @property created_at [date]
+# @property updated_at [date]
+# @property data [object]
+# @property digest [string]
+# @property meta [object]
+
+class UffizziCore::ActivityItem < UffizziCore::ApplicationRecord
+  include UffizziCore::ActivityItemRepo
+
+  self.table_name = UffizziCore.table_names[:activity_items]
+
+  belongs_to :deployment
+  belongs_to :container
+  belongs_to :build, optional: true
+
+  has_many :events, dependent: :destroy
+
+  scope :docker, -> {
+    where(type: UffizziCore::ActivityItem::Docker.name)
+  }
+
+  scope :github, -> {
+    where(type: UffizziCore::ActivityItem::Github.name)
+  }
+
+  def docker?
+    type == UffizziCore::ActivityItem::Docker.name
+  end
+
+  def image
+    [namespace, name].compact.join('/')
+  end
+
+  def full_image
+    return "#{image}:#{tag}" if docker?
+
+    ''
+  end
+end

data/app/models/uffizzi_core/application_record.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+module UffizziCore
+  class ApplicationRecord < ActiveRecord::Base
+    self.abstract_class = true
+  end
+end

data/app/models/uffizzi_core/build.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+class UffizziCore::Build < UffizziCore::ApplicationRecord
+  include UffizziCore::BuildRepo
+
+  self.table_name = UffizziCore.table_names[:builds]
+
+  BUILDING = 1
+  SUCCESS = 2
+  FAILED = 3
+  TIMEOUT = 4
+  CANCELLED = 5
+
+  belongs_to :repo
+
+  def successful?
+    status == SUCCESS
+  end
+
+  def unsuccessful?
+    [FAILED, TIMEOUT, CANCELLED].include?(status)
+  end
+
+  def failed?
+    status == FAILED
+  end
+
+  def building?
+    status == BUILDING
+  end
+
+  def timed_out?
+    status == TIMEOUT
+  end
+
+  def cancelled?
+    status == CANCELLED
+  end
+end

data/app/models/uffizzi_core/comment.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+class UffizziCore::Comment < UffizziCore::ApplicationRecord
+  include UffizziCore::CommentRepo
+
+  self.table_name = UffizziCore.table_names[:comments]
+
+  has_ancestry(cache_depth: true)
+  MAX_DEPTH_LEVEL = 1
+
+  belongs_to :user
+  belongs_to :commentable, polymorphic: true
+
+  validates :content, length: { maximum: 1500 }, presence: true
+  validates :ancestry_depth, numericality: { less_than_or_equal_to: MAX_DEPTH_LEVEL, only_integer: true }
+end

data/app/models/uffizzi_core/compose_file.rb

@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+
+# @model ComposeFile
+# @property id [integer]
+# @property source [string]
+# @property path [string]
+# @property content(required) [string]
+# @property auto_deploy [boolean]
+# @property state [string]
+# @property payload [string]
+
+class UffizziCore::ComposeFile < UffizziCore::ApplicationRecord
+  include UffizziCore::ComposeFileRepo
+  include AASM
+  extend Enumerize
+
+  self.table_name = UffizziCore.table_names[:compose_files]
+
+  belongs_to :project
+  belongs_to :added_by, class_name: UffizziCore::User.name, foreign_key: :added_by_id, optional: true
+
+  has_one :template, dependent: :destroy
+  has_many :config_files, dependent: :destroy
+  has_many :deployments, dependent: :nullify
+
+  enumerize :kind, in: [:main, :temporary], predicates: true, scope: :shallow, default: :main
+
+  validates :project, uniqueness: { scope: :project }, if: -> { kind.main? }
+  validates :source, presence: true
+  validates :source, uniqueness: { scope: :project }, if: -> { kind.main? }
+
+  aasm(:auto_deploy) do
+    state :disabled, initial: true
+    state :enabled
+
+    event :enable do
+      transitions from: [:disabled], to: :enabled
+    end
+
+    event :disable do
+      transitions from: [:enabled], to: :disabled
+    end
+  end
+
+  aasm(:state) do
+    state :valid_file, initial: true
+    state :invalid_file
+
+    event :set_valid do
+      transitions from: [:invalid_file], to: :valid_file
+    end
+
+    event :set_invalid do
+      transitions from: [:valid_file], to: :invalid_file
+    end
+  end
+end

data/app/models/uffizzi_core/config_file.rb

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+# @model
+#
+# @property filename [string]
+# @property kind [string]
+# @property payload [string]
+# @property source [string]
+
+class UffizziCore::ConfigFile < UffizziCore::ApplicationRecord
+  include UffizziCore::ConfigFileRepo
+  extend Enumerize
+
+  self.table_name = UffizziCore.table_names[:config_files]
+
+  belongs_to :project
+  belongs_to :added_by, class_name: UffizziCore::User.name, foreign_key: :added_by_id, optional: true
+  belongs_to :compose_file, optional: true
+
+  has_many :container_config_files, dependent: :destroy
+
+  enumerize :kind, in: [:config_map, :secret], default: :config_map, predicates: true
+  enumerize :creation_source, in: [:manual, :compose_file, :system], predicates: true, scope: true
+end

data/app/models/uffizzi_core/container.rb

@@ -0,0 +1,100 @@
+# frozen_string_literal: true
+
+# @model Container
+#
+# @property id [integer]
+# @property name [string]
+# @property memory_limit [integer]
+# @property memory_request [integer]
+# @property continuously_deploy [string]
+# @property variables [object]
+# @property secret_variables [object]
+# @property container_config_files [ConfigFile]
+
+class UffizziCore::Container < UffizziCore::ApplicationRecord
+  include UffizziCore::ContainerRepo
+  include AASM
+  include UffizziCore::StateMachineConcern
+  extend Enumerize
+
+  self.table_name = UffizziCore.table_names[:containers]
+
+  enumerize :kind, in: [:internal, :user], predicates: true
+
+  belongs_to :deployment, touch: true
+  belongs_to :repo, optional: true
+
+  has_many :activity_items, dependent: :destroy
+  has_many :container_config_files, dependent: :destroy
+  has_many :config_files, through: :container_config_files
+
+  attribute :public, :boolean, default: false
+  attribute :port, :integer, default: nil
+
+  enumerize :source, in: [:github], skip_validations: true
+  validates :port,
+            presence: true,
+            inclusion: { in: 0..65_535 },
+            uniqueness: { scope: :deployment_id },
+            if: :should_check_port
+
+  after_commit :check_target_port, on: :create
+
+  before_save :update_target_port_value, if: :will_save_change_to_port?
+  before_create :set_defaults
+
+  accepts_nested_attributes_for :repo
+  accepts_nested_attributes_for :container_config_files, allow_destroy: true
+
+  validates :variables, 'uffizzi_core/environment_variable_list': true, allow_nil: true
+  validates :secret_variables, 'uffizzi_core/environment_variable_list': true, allow_nil: true
+  validates :entrypoint, 'uffizzi_core/image_command_args': true, allow_nil: true
+  validates :command, 'uffizzi_core/image_command_args': true, allow_nil: true
+  validates :tag, presence: true
+
+  aasm :continuously_deploy, column: :continuously_deploy do
+    state :disabled, initial: true
+    state :enabled
+  end
+
+  aasm :state, column: :state do
+    state :active, initial: true
+    state :disabled
+
+    event :activate do
+      transitions from: [:disabled], to: :active
+    end
+
+    event :disable, after: :clean do
+      transitions from: [:active], to: :disabled
+    end
+  end
+
+  def image_name
+    "#{image}:#{tag}"
+  end
+
+  private
+
+  def should_check_port
+    public && active?
+  end
+
+  def clean
+    update(public: false, port: nil)
+  end
+
+  def set_defaults
+    update_target_port_value
+  end
+
+  def update_target_port_value
+    self.target_port = UffizziCore::ContainerService.target_port_value(self)
+  end
+
+  def check_target_port
+    if target_port && deployment.containers.where(target_port: target_port).size > 1
+      update(target_port: UffizziCore::DeploymentService.find_unused_port(deployment))
+    end
+  end
+end

data/app/models/uffizzi_core/container_config_file.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+class UffizziCore::ContainerConfigFile < UffizziCore::ApplicationRecord
+  self.table_name = UffizziCore.table_names[:container_config_files]
+
+  belongs_to :container
+  belongs_to :config_file
+end

data/app/models/uffizzi_core/continuous_preview.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::ContinuousPreview < UffizziCore::ApplicationRecord
+end

data/app/models/uffizzi_core/coupon.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+class UffizziCore::Coupon < UffizziCore::ApplicationRecord
+  self.table_name = UffizziCore.table_names[:coupons]
+end

data/app/models/uffizzi_core/credential/amazon.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::Credential::Amazon < UffizziCore::Credential
+end

data/app/models/uffizzi_core/credential/azure.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::Credential::Azure < UffizziCore::Credential
+end

data/app/models/uffizzi_core/credential/docker_hub.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::Credential::DockerHub < UffizziCore::Credential
+end

data/app/models/uffizzi_core/credential/github.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::Credential::Github < UffizziCore::Credential
+end

data/app/models/uffizzi_core/credential/github_container_registry.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::Credential::GithubContainerRegistry < UffizziCore::Credential
+end