uffizzi-core 0.1.12

data/app/models/uffizzi_core/credential/google.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::Credential::Google < UffizziCore::Credential
+end

data/app/models/uffizzi_core/credential.rb

@@ -0,0 +1,61 @@
+# frozen_string_literal: true
+
+class UffizziCore::Credential < UffizziCore::ApplicationRecord
+  include AASM
+  include UffizziCore::CredentialRepo
+
+  self.table_name = UffizziCore.table_names[:credentials]
+
+  belongs_to :account
+
+  before_destroy :remove_token
+
+  validates :registry_url, presence: true
+
+  aasm :state, column: :state do
+    state :not_connected, initial: true
+    state :active
+    state :unauthorized
+
+    event :activate do
+      transitions from: [:not_connected, :unauthorized], to: :active
+    end
+
+    event :unauthorize do
+      transitions from: [:not_connected, :active], to: :unauthorized
+    end
+  end
+
+  def github_container_registry?
+    type == UffizziCore::Credential::GithubContainerRegistry.name
+  end
+
+  def docker_hub?
+    type == UffizziCore::Credential::DockerHub.name
+  end
+
+  def azure?
+    type == UffizziCore::Credential::Azure.name
+  end
+
+  def google?
+    type == UffizziCore::Credential::Google.name
+  end
+
+  def amazon?
+    type == UffizziCore::Credential::Amazon.name
+  end
+
+  private
+
+  def remove_token
+    account.projects.find_each do |project|
+      project.deployments.find_each do |deployment|
+        containers = deployment.containers
+        attributes = { continuously_deploy: UffizziCore::Container::STATE_DISABLED }
+
+        containers.with_docker_hub_repo.update_all(attributes) if docker_hub?
+      end
+    end
+  end
+end

data/app/models/uffizzi_core/database.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::Database < UffizziCore::ApplicationRecord
+end

data/app/models/uffizzi_core/database_offering.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::DatabaseOffering < UffizziCore::ApplicationRecord
+end

data/app/models/uffizzi_core/deployment.rb

@@ -0,0 +1,86 @@
+# frozen_string_literal: true
+
+# @model Deployment
+#
+# @property id [integer]
+# @property project_id [integer]
+# @property kind [string]
+# @property state [string]
+# @property preview_url [string]
+# @property tag [string]
+# @property branch [string]
+# @property commit [string]
+# @property image_id [string]
+# @property created_at [date-time]
+# @property updated_at [date-time]
+# @property ingress_container_ready [boolean]
+# @property ingress_container_state [string]
+# @property creation_source [string]
+# @property contaners [array]
+# @property deployed_by [object]
+
+class UffizziCore::Deployment < UffizziCore::ApplicationRecord
+  include AASM
+  include UffizziCore::StateMachineConcern
+  include UffizziCore::DeploymentRepo
+  extend Enumerize
+
+  self.table_name = UffizziCore.table_names[:deployments]
+
+  enumerize :kind, in: [:standard, :performance, :enterprise, :free], predicates: true, default: :standard
+
+  belongs_to :project, touch: true
+  belongs_to :deployed_by, class_name: UffizziCore::User.name, foreign_key: :deployed_by_id, optional: true
+  belongs_to :template, optional: true
+  belongs_to :compose_file, optional: true
+
+  has_many :credentials, through: :project
+  has_many :containers, dependent: :destroy, index_errors: true
+  has_many :activity_items, dependent: :destroy
+
+  has_one :ingress_container, -> { where(receive_incoming_requests: true) }, class_name: UffizziCore::Container.name
+
+  validates :kind, presence: true
+
+  enumerize :creation_source, in: [:manual, :continuous_preview, :compose_file_manual, :compose_file_continuous_preview], predicates: true,
+                              scope: true, default: :manual
+
+  accepts_nested_attributes_for :containers, allow_destroy: true
+
+  after_destroy_commit :clean
+
+  def active_containers
+    containers.active
+  end
+
+  aasm(:state) do
+    state :active, initial: true
+    state :failed
+    state :disabled
+
+    event :activate do
+      transitions from: [:disabled], to: :active
+    end
+
+    event :fail, after: :after_fail do
+      transitions from: [:active], to: :failed
+    end
+
+    event :disable, after: :after_disable do
+      transitions from: [:active, :failed], to: :disabled
+    end
+  end
+
+  def after_disable
+    clean
+  end
+
+  def after_fail
+    active_containers.each(&:disable!)
+  end
+
+  def clean
+    active_containers.each(&:disable!)
+    UffizziCore::Deployment::DeleteJob.perform_async(id)
+  end
+end

data/app/models/uffizzi_core/event.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+class UffizziCore::Event < UffizziCore::ApplicationRecord
+  include UffizziCore::EventRepo
+  extend Enumerize
+
+  self.table_name = UffizziCore.table_names[:events]
+
+  enumerize :state, in: [:queued, :successful, :deployed, :failed, :building, :timeout, :cancelled, :deploying], predicates: true,
+                    scope: true
+
+  belongs_to :activity_item, touch: true
+end

data/app/models/uffizzi_core/invitation.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+class UffizziCore::Invitation < UffizziCore::ApplicationRecord
+  include AASM
+  include UffizziCore::StateMachineConcern
+  extend Enumerize
+
+  self.table_name = UffizziCore.table_names[:invitations]
+
+  enumerize :role, in: [:admin, :developer, :viewer], predicates: true
+
+  belongs_to :entityable, polymorphic: true
+  belongs_to :invited_by, class_name: UffizziCore::User.name, foreign_key: :invited_by_id
+  belongs_to :invitee, class_name: UffizziCore::User.name, foreign_key: :invitee_id, optional: true
+
+  validates :email, presence: true, 'uffizzi_core/email': true
+  validates :token, presence: true, uniqueness: true
+
+  aasm(:status) do
+    state :pending, initial: true
+    state :accepted
+
+    event :accept do
+      transitions from: :pending, to: :accepted
+    end
+  end
+end

data/app/models/uffizzi_core/membership.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+class UffizziCore::Membership < UffizziCore::ApplicationRecord
+  include UffizziCore::MembershipRepo
+  extend Enumerize
+
+  self.table_name = UffizziCore.table_names[:memberships]
+
+  enumerize :role, in: [:admin, :developer, :viewer], predicates: true
+  validates :role, presence: true
+
+  belongs_to :account
+  belongs_to :user
+
+  validates :role, presence: true
+end

data/app/models/uffizzi_core/payment.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+class UffizziCore::Payment < UffizziCore::ApplicationRecord
+  self.table_name = UffizziCore.table_names[:payments]
+
+  belongs_to :account
+
+  scope :succeeded, -> { where(status: :succeeded) }
+  scope :pending, -> { where(status: :pending) }
+  scope :failed, -> { where(status: :failed) }
+end

data/app/models/uffizzi_core/price.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+class UffizziCore::Price < UffizziCore::ApplicationRecord
+  include UffizziCore::PriceRepo
+
+  self.table_name = UffizziCore.table_names[:prices]
+
+  belongs_to :product
+end

data/app/models/uffizzi_core/product.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+class UffizziCore::Product < UffizziCore::ApplicationRecord
+  include UffizziCore::ProductRepo
+
+  self.table_name = UffizziCore.table_names[:products]
+
+  has_one :price, dependent: :destroy
+
+  UffizziCore::Product.inheritance_column = :sti
+end

data/app/models/uffizzi_core/project.rb

@@ -0,0 +1,67 @@
+# frozen_string_literal: true
+
+# @model Project
+# @property slug [string]
+# @property name [string]
+# @property description [string]
+# @property created_at [date-time]
+# @property secrets [string]
+# @property default_compose [object<source: string>]
+# @property deployments [object<id: integer, domain: string>]
+
+class UffizziCore::Project < UffizziCore::ApplicationRecord
+  include AASM
+  include UffizziCore::StateMachineConcern
+  include UffizziCore::ProjectRepo
+
+  self.table_name = UffizziCore.table_names[:projects]
+
+  belongs_to :account
+
+  has_many :repos
+  has_many :deployments, dependent: :destroy
+  has_many :user_projects, dependent: :destroy
+  has_many :users, through: :user_projects
+  has_many :invitations, as: :entityable
+  has_many :config_files, dependent: :destroy
+  has_many :templates, dependent: :destroy
+  has_many :credentials, through: :account
+  has_many :compose_files, dependent: :destroy
+  has_many :secrets, dependent: :destroy, as: :resource
+
+  validates :name, presence: true, uniqueness: { scope: :account, message: 'Name already exists' }
+  validates :slug, presence: true, uniqueness: { message: 'Project slug already taken' }
+
+  aasm(:state) do
+    state :active, initial: true
+    state :disabled
+
+    event :activate do
+      transitions from: [:disabled], to: :active
+    end
+
+    event :disable, after: :after_disable do
+      transitions from: [:active], to: :disabled
+    end
+  end
+
+  def after_disable
+    update(name: "#{name} deleted #{DateTime.current.strftime('%H:%M:%S-%m%d%Y')}")
+    update(slug: "#{slug} deleted #{DateTime.current.strftime('%H:%M:%S-%m%d%Y')}")
+    disable_deployments
+  end
+
+  def active_deployments
+    deployments.active
+  end
+
+  def disable_deployments
+    active_deployments.each do |deployment|
+      UffizziCore::DeploymentService.disable!(deployment)
+    end
+  end
+
+  def compose_file
+    compose_files.main.first
+  end
+end

data/app/models/uffizzi_core/rating.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+class UffizziCore::Rating < UffizziCore::ApplicationRecord
+  include AASM
+
+  self.table_name = UffizziCore.table_names[:ratings]
+
+  aasm(:state) do
+    state :active, initial: true
+    state :disabled
+
+    event :activate do
+      transitions from: [:disabled], to: :active
+    end
+
+    event :disable do
+      transitions from: [:active], to: :disabled
+    end
+  end
+end

data/app/models/uffizzi_core/repo/amazon.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::Repo::Amazon < UffizziCore::Repo
+end

data/app/models/uffizzi_core/repo/azure.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::Repo::Azure < UffizziCore::Repo
+end

data/app/models/uffizzi_core/repo/docker_hub.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::Repo::DockerHub < UffizziCore::Repo
+end

data/app/models/uffizzi_core/repo/github.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::Repo::Github < UffizziCore::Repo
+end

data/app/models/uffizzi_core/repo/github_container_registry.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::Repo::GithubContainerRegistry < UffizziCore::Repo
+end

data/app/models/uffizzi_core/repo/google.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class UffizziCore::Repo::Google < UffizziCore::Repo
+end

data/app/models/uffizzi_core/repo.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+class UffizziCore::Repo < UffizziCore::ApplicationRecord
+  extend Enumerize
+  include UffizziCore::RepoRepo
+
+  self.table_name = UffizziCore.table_names[:repos]
+
+  enumerize :kind, in: [:buildpacks18, :dockerfile, :dotnet, :gatsby, :barestatic], predicates: true
+
+  belongs_to :project
+  has_one :container, inverse_of: :repo, dependent: :destroy
+  has_many :builds, dependent: :destroy
+
+  validates :dockerfile_path, presence: true, if: :dockerfile?
+  validates :delete_preview_after, numericality: { greater_than: 0, only_integer: true }, allow_nil: true
+
+  def docker_hub?
+    type == UffizziCore::Repo::DockerHub.name
+  end
+
+  def azure?
+    type == UffizziCore::Repo::Azure.name
+  end
+
+  def google?
+    type == UffizziCore::Repo::Google.name
+  end
+end

data/app/models/uffizzi_core/role.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+class UffizziCore::Role < UffizziCore::ApplicationRecord
+  self.table_name = UffizziCore.table_names[:roles]
+
+  has_and_belongs_to_many :users, join_table: UffizziCore.table_names[:users_roles]
+
+  belongs_to :resource,
+             polymorphic: true,
+             optional: true
+
+  validates :resource_type,
+            inclusion: { in: Rolify.resource_types },
+            allow_nil: true
+
+  scopify
+end

data/app/models/uffizzi_core/secret.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+class UffizziCore::Secret < ApplicationRecord
+  self.table_name = UffizziCore.table_names[:secrets]
+
+  belongs_to :resource, polymorphic: true
+
+  validates :name, presence: true, uniqueness: { scope: :resource }
+end

data/app/models/uffizzi_core/template.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+class UffizziCore::Template < UffizziCore::ApplicationRecord
+  include UffizziCore::TemplateRepo
+  extend Enumerize
+
+  self.table_name = UffizziCore.table_names[:templates]
+
+  belongs_to :added_by, class_name: UffizziCore::User.name, foreign_key: :added_by_id
+  belongs_to :project, touch: true
+  belongs_to :compose_file, optional: true
+
+  has_many :deployments, dependent: :nullify
+
+  enumerize :creation_source, in: [:manual, :compose_file, :system], predicates: true, scope: true
+
+  validates :name, presence: true
+  validates :name, uniqueness: { scope: :project }, if: -> { compose_file.blank? || compose_file.kind.main? }
+end

data/app/models/uffizzi_core/user.rb

@@ -0,0 +1,62 @@
+# frozen_string_literal: true
+
+class UffizziCore::User < ActiveRecord::Base
+  include AASM
+  include ActiveModel::Validations
+  include UffizziCore::StateMachineConcern
+  include UffizziCore::HashidConcern
+  include UffizziCore::UserRepo
+  extend Enumerize
+
+  self.table_name = UffizziCore.table_names[:users]
+
+  rolify
+
+  has_secure_password
+
+  validates :email, presence: true, 'uffizzi_core/email': true, uniqueness: { case_sensitive: false }
+  validates :password, allow_nil: true, length: { minimum: 8 }, on: :update
+
+  has_many :memberships, dependent: :destroy
+  has_many :accounts, through: :memberships
+  has_many :user_projects
+  has_many :projects, through: :user_projects
+
+  has_one_attached :avatar
+
+  enumerize :creation_source, in: [:system, :online_registration, :google, :sso], predicates: true
+
+  def organizational_account
+    accounts.find_by(kind: UffizziCore::Account.kind.organizational)
+  end
+
+  def active_projects
+    projects.active
+  end
+
+  def deployments
+    UffizziCore::Deployment.where(project_id: active_projects)
+  end
+
+  def full_name
+    "#{first_name} #{last_name}"
+  end
+
+  aasm(:state) do
+    state :initial, initial: true
+    state :active
+    state :disabled
+
+    event :activate do
+      transitions from: [:initial, :disabled], to: :active
+    end
+
+    event :disable do
+      transitions from: [:initial, :active], to: :disabled
+    end
+  end
+
+  def admin_access_to_project?(project)
+    projects.by_ids(project).by_accounts(memberships.by_role_admin.select(:account_id)).exists?
+  end
+end

data/app/models/uffizzi_core/user_project.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+class UffizziCore::UserProject < UffizziCore::ApplicationRecord
+  extend Enumerize
+
+  self.table_name = UffizziCore.table_names[:user_projects]
+
+  enumerize :role, in: [:admin, :developer, :viewer], predicates: true
+  validates :role, presence: true
+
+  belongs_to :user
+  belongs_to :project
+  belongs_to :invited_by, class_name: UffizziCore::User.name, foreign_key: :invited_by_id, optional: true
+end

data/app/policies/uffizzi_core/api/cli/v1/account/credentials_policy.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+class UffizziCore::Api::Cli::V1::Account::CredentialsPolicy < UffizziCore::ApplicationPolicy
+  def index?
+    context.user_access_module.admin_access_to_account?(context.user, context.account)
+  end
+
+  def create?
+    context.user_access_module.admin_access_to_account?(context.user, context.account)
+  end
+
+  def check_credential?
+    context.user_access_module.admin_access_to_account?(context.user, context.account)
+  end
+
+  def destroy?
+    context.user_access_module.admin_access_to_account?(context.user, context.account)
+  end
+end

data/app/policies/uffizzi_core/api/cli/v1/projects/compose_files_policy.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+class UffizziCore::Api::Cli::V1::Projects::ComposeFilesPolicy < UffizziCore::ApplicationPolicy
+  def show?
+    context.user_access_module.any_access_to_project?(context.user, context.project)
+  end
+
+  def create?
+    context.user_access_module.admin_or_developer_access_to_project?(context.user, context.project)
+  end
+
+  def destroy?
+    context.user_access_module.admin_or_developer_access_to_project?(context.user, context.project)
+  end
+end

data/app/policies/uffizzi_core/api/cli/v1/projects/deployments/activity_items_policy.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class UffizziCore::Api::Cli::V1::Projects::Deployments::ActivityItemsPolicy < UffizziCore::ApplicationPolicy
+  def index?
+    context.user_access_module.any_access_to_project?(context.user, context.project)
+  end
+end

data/app/policies/uffizzi_core/api/cli/v1/projects/deployments/containers_policy.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class UffizziCore::Api::Cli::V1::Projects::Deployments::ContainersPolicy < UffizziCore::ApplicationPolicy
+  def index?
+    context.user_access_module.any_access_to_project?(context.user, context.project)
+  end
+end

data/app/policies/uffizzi_core/api/cli/v1/projects/deployments/events_policy.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class UffizziCore::Api::Cli::V1::Projects::Deployments::EventsPolicy < UffizziCore::ApplicationPolicy
+  def index?
+    context.user_access_module.any_access_to_project?(context.user, context.project)
+  end
+end

data/app/policies/uffizzi_core/api/cli/v1/projects/deployments_policy.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+class UffizziCore::Api::Cli::V1::Projects::DeploymentsPolicy < UffizziCore::ApplicationPolicy
+  def index?
+    context.user_access_module.any_access_to_project?(context.user, context.project)
+  end
+
+  def show?
+    context.user_access_module.any_access_to_project?(context.user, context.project)
+  end
+
+  def create?
+    context.user_access_module.admin_or_developer_access_to_project?(context.user, context.project)
+  end
+
+  def update?
+    context.user_access_module.admin_or_developer_access_to_project?(context.user, context.project)
+  end
+
+  def destroy?
+    context.user_access_module.admin_or_developer_access_to_project?(context.user, context.project)
+  end
+
+  def deploy_containers?
+    context.user_access_module.admin_or_developer_access_to_project?(context.user, context.project)
+  end
+end

data/app/policies/uffizzi_core/api/cli/v1/projects/secrets_policy.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+class UffizziCore::Api::Cli::V1::Projects::SecretsPolicy < UffizziCore::ApplicationPolicy
+  def index?
+    context.user_access_module.any_access_to_project?(context.user, context.project)
+  end
+
+  def bulk_create?
+    context.user_access_module.admin_or_developer_access_to_project?(context.user, context.project)
+  end
+
+  def destroy?
+    context.user_access_module.admin_or_developer_access_to_project?(context.user, context.project)
+  end
+end

data/app/policies/uffizzi_core/api/cli/v1/projects_policy.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+class UffizziCore::Api::Cli::V1::ProjectsPolicy < UffizziCore::ApplicationPolicy
+  def index?
+    context.user_access_module.any_access_to_account?(context.user, context.account)
+  end
+
+  def show?
+    context.user_access_module.any_access_to_account?(context.user, context.account)
+  end
+
+  def create?
+    context.user_access_module.admin_or_developer_access_to_account?(context.user, context.account)
+  end
+
+  def destroy?
+    context.user_access_module.admin_or_developer_access_to_account?(context.user, context.account)
+  end
+end