uffizzi_core 0.1.3

data/app/services/uffizzi_core/repo_service.rb

@@ -0,0 +1,178 @@
+# frozen_string_literal: true
+
+module UffizziCore::RepoService
+  AVAILABLE_KINDS = [
+    {
+      name: :buildpacks18,
+      detect: proc { |**_args| { available: true, args: [] } },
+    },
+    {
+      name: :dockerfile,
+      detect: proc { |**args|
+        has_dockerfiles = args[:dockerfiles].is_a?(Array) && !args[:dockerfiles].empty?
+        multiple_dockerfiles = has_dockerfiles && args[:dockerfiles].length > 1
+
+        {
+          available: has_dockerfiles,
+          args: multiple_dockerfiles ? { name: :dockerfile, type: :select, options: args[:dockerfiles] } : [],
+        }
+      },
+    },
+    {
+      name: :dotnet,
+      detect: proc { |**args|
+        has_app_runtimes = args[:dotnetruntimes].is_a?(Array) && !args[:dotnetruntimes].empty?
+        multiple_app_runtimes = has_app_runtimes && args[:dotnetruntimes].length > 1
+        has_csproj = args[:csproj].present?
+
+        {
+          available: has_app_runtimes || has_csproj,
+          args: multiple_app_runtimes ? { name: :dotnetruntimes, type: :select, options: args[:dotnetruntimes] } : [],
+        }
+      },
+    },
+    {
+      name: :gatsby,
+      detect: proc { |**args| { available: args[:gatsbyconfig].present?, args: [] } },
+    }, {
+      name: :barestatic,
+      detect: proc { |**args|
+                { available: args[:barestatic].present? && args.filter_map do |k, v|
+                               ![:barestatic, :dockerfiles].include?(k) && v.present?
+                             end.blank?, args: [] }
+              },
+    }
+  ].freeze
+
+  class << self
+    def nodejs_static?(repo)
+      repo.gatsby? || repo.barestatic?
+    end
+
+    def cnb?(repo)
+      repo.buildpacks18? || repo.dotnet? || nodejs_static?(repo)
+    end
+
+    def needs_target_port?(repo)
+      return false if repo.nil?
+
+      !repo.dockerfile?
+    end
+
+    def credential(repo)
+      credentials = repo.project.account.credentials
+
+      case repo.type
+      when UffizziCore::Repo::Github.name
+        credentials.github.first
+      when UffizziCore::Repo::DockerHub.name
+        credentials.docker_hub.first
+      when UffizziCore::Repo::Azure.name
+        credentials.azure.first
+      when UffizziCore::Repo::Google.name
+        credentials.google.first
+      when UffizziCore::Repo::Amazon.name
+        credentials.amazon.first
+      end
+    end
+
+    def image_name(repo)
+      "e#{repo.container.deployment_id}r#{repo.id}-#{Digest::SHA256.hexdigest("#{self.class}:#{repo.branch}:
+      #{repo.project_id}:#{repo.id}")[0, 10]}"
+    end
+
+    def tag(repo)
+      repo&.builds&.deployed&.last&.commit || 'latest'
+    end
+
+    def image(repo)
+      repo_credential = credential(repo)
+
+      "#{repo_credential.registry_url}/#{image_name(repo)}"
+    end
+
+    def select_default_from(meta)
+      return :gatsby if meta[:gatsby][:available]
+      return :dotnet if meta[:dotnet][:available]
+      return :barestatic if meta[:barestatic][:available]
+
+      :buildpacks18
+    end
+
+    def available_repo_kinds(repository_id:, branch:, credential:)
+      detections = {
+        dotnetruntimes: [],
+        gatsbyconfig: false,
+        csproj: false,
+
+        go: false,
+        ruby: false,
+        node: false,
+        python: false,
+        java: false,
+        php: false,
+        barestatic: false,
+      }
+      contents = fetch_contents(credential, repository_id, branch)
+      repo_contents = contents[:repo_contents]
+      detections[:dotnetruntimes] = repo_contents.filter_map do |f|
+        (f.name =~ /^(.+\.)?runtime\.json/ || f.name == 'runtime.template.json') && f.name
+      end
+      detections[:csproj] = repo_contents.filter_map do |f|
+        f.name =~ /^.+\.csproj/ && f.name
+      end
+      detections[:go] = has_go_files?(contents)
+
+      [[:ruby, ['Gemfile']],
+       [:node, ['package.json']],
+       [:python, ['requirements.txt', 'setup.py', 'Pipfile']],
+       [:java, ['pom.xml', 'pom.atom', 'pom.clj', 'pom.groovy', 'pom.rb', 'pom.scala', 'pom.yaml', 'pom.yml']],
+       [:php, ['composer.json', 'index.php']],
+       [:gatsbyconfig, ['gatsby-config.js']],
+       [:barestatic, ['index.html', 'index.htm', 'Default.htm']]].each do |lang|
+        detections[lang[0]] = repo_contents.filter_map do |f|
+          lang[1].include?(f.name)
+        end.present?
+      end
+    end
+
+    def filter_available_repo_kinds
+      kinds = AVAILABLE_KINDS.filter_map do |kind|
+        detection = kind[:detect].call(detections)
+
+        kind.merge(detection).except(:detect)
+      end.map { |kind| [kind[:name], kind.except(:name)] }.to_h
+
+      kinds.merge({ default: select_default_from(kinds) })
+    end
+
+    def fetch_contents(credential, repository_id, branch)
+      repo_contents = UffizziCore::Github::CredentialService.contents(credential, repository_id, ref: branch)
+      return filter_available_repo_kinds if repo_contents.empty?
+
+      if repo_contents.filter_map { |f| f.name == 'Godeps' }.present?
+        godeps_contents = UffizziCore::Github::CredentialService.contents(credential, repository_id, path: 'Godeps/', ref: branch)
+      end
+
+      if repo_contents.filter_map { |f| f.name == 'vendor' }.present? && godeps_contents.nil?
+        govendor_contents = UffizziCore::Github::CredentialService.contents(credential, repository_id, path: 'vendor/', ref: branch)
+      end
+
+      {
+        repo_contents: repo_contents,
+        godeps_contents: godeps_contents,
+        govendor_contents: govendor_contents,
+      }
+    end
+
+    def go(contents)
+      contents[:repo_contents].filter_map do |f|
+        ['go.mod', 'Gopkg.lock', 'glide.yaml'].include?(f.name)
+      end.present? || contents[:godeps_contents]&.filter_map do |f|
+                        f.name == 'Godeps.json'
+                      end.present? || contents[:govendor_contents]&.filter_map do |f|
+                                        f.name == 'vendor.json'
+                                      end.present?
+    end
+  end
+end

data/app/services/uffizzi_core/response_service.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module UffizziCore::ResponseService
+  def meta(collection)
+    {
+      total_count: collection.total_count,
+      current_page: collection.current_page,
+      per_page: collection.limit_value,
+      count: collection.to_a.count,
+      total_pages: collection.total_pages,
+    }
+  end
+end

data/app/services/uffizzi_core/template_service.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+class UffizziCore::TemplateService
+  class << self
+    def valid_containers_memory_limit?(template)
+      containers_attributes = template.payload['containers_attributes']
+      container_memory_limit = template.project.account.container_memory_limit
+      return true if container_memory_limit.nil?
+
+      containers_attributes.all? { |container| container['memory_limit'].to_i <= container_memory_limit }
+    end
+
+    def valid_containers_memory_request?(template)
+      containers_attributes = template.payload['containers_attributes']
+      container_memory_limit = template.project.account.container_memory_limit
+      return true if container_memory_limit.nil?
+
+      containers_attributes.all? { |container| container['memory_request'].to_i <= container_memory_limit }
+    end
+  end
+end

data/app/services/uffizzi_core/token_service.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+module UffizziCore::TokenService
+  class << self
+    def encode(payload)
+      JWT.encode(payload, Settings.rails.secret_key_base, 'HS256')
+    end
+
+    def decode(token)
+      JWT.decode(token, Settings.rails.secret_key_base, true, algorithm: 'HS256')
+    rescue JWT::DecodeError
+      nil
+    end
+
+    def generate
+      SecureRandom.hex
+    end
+  end
+end

data/app/services/uffizzi_core/user_access_service.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+class UffizziCore::UserAccessService
+  attr_accessor :user_access_module
+
+  delegate :admin_access_to_account?, :developer_access_to_account?, :viewer_access_to_account?,
+           :admin_or_developer_access_to_account?, :any_access_to_account?, :admin_access_to_project?,
+           :developer_access_to_project?, :viewer_access_to_project?, :admin_or_developer_access_to_project?,
+           :any_access_to_project?, :global_admin?, to: :@user_access_module
+
+  def initialize(user_access_module)
+    @user_access_module = user_access_module
+  end
+end

data/app/utils/uffizzi_core/converters.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+module UffizziCore::Converters
+  class << self
+    include ActionView::Helpers::NumberHelper
+
+    def deep_lower_camelize_keys(object)
+      case object
+      when Array
+        object.map do |element|
+          element.deep_transform_keys { |key| key.to_s.camelize(:lower) }
+        end
+      when Hash
+        object.deep_transform_keys { |key| key.to_s.camelize(:lower) }
+      else
+        object
+      end
+    end
+
+    def deep_underscore_keys(object)
+      case object
+      when Array
+        object.map do |element|
+          element.deep_transform_keys { |key| key.to_s.underscore }
+        end
+      when Hash
+        object.deep_transform_keys { |key| key.to_s.underscore }
+      else
+        object
+      end
+    end
+  end
+end

data/app/validators/uffizzi_core/email_validator.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+class UffizziCore::EmailValidator < ActiveModel::EachValidator
+  EMAIL_REGEXP = /\A([^@\s<>]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})\z/i.freeze
+
+  def validate_each(record, attribute, value)
+    record.errors.add(attribute, (options[:message] || :invalid)) unless value&.match?(EMAIL_REGEXP)
+  end
+end

data/app/validators/uffizzi_core/environment_variable_list_validator.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+class UffizziCore::EnvironmentVariableListValidator < ActiveModel::EachValidator
+  def validate_each(record, attribute, variables)
+    record.errors.add(attribute, :invalid) if variables.class != Array || !valid_variables?(variables)
+  end
+
+  def valid_variables?(variables)
+    variables.each do |variable|
+      return false if variable.class != Hash || !variable.key?('name') || variable['name'].nil? || !variable.key?('value')
+    end
+
+    true
+  end
+end

data/app/validators/uffizzi_core/image_command_args_validator.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+class UffizziCore::ImageCommandArgsValidator < ActiveModel::EachValidator
+  def validate_each(record, attribute, command_args)
+    record.errors.add(attribute, :invalid) if !command_args.nil? && !valid_command_args?(command_args)
+  end
+
+  def valid_command_args?(raw_command_args)
+    return true if raw_command_args.empty?
+
+    begin
+      command_args = JSON.parse(raw_command_args)
+    rescue JSON::ParserError
+      return false
+    end
+
+    return false if command_args.class != Array || command_args.empty?
+
+    command_args.all? { |item| item.instance_of?(String) }
+  end
+end

data/config/initializers/rswag_api.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+Rswag::Api.configure do |c|
+  # Specify a root folder where Swagger JSON files are located
+  # This is used by the Swagger middleware to serve requests for API descriptions
+  # NOTE: If you're using rswag-specs to generate Swagger, you'll need to ensure
+  # that it's configured to generate files in the same folder
+  c.swagger_root = "#{UffizziCore::Engine.root}/swagger"
+
+  # Inject a lamda function to alter the returned Swagger prior to serialization
+  # The function will have access to the rack env for the current request
+  # For example, you could leverage this to dynamically assign the "host" property
+  #
+  # c.swagger_filter = lambda { |swagger, env| swagger['host'] = env['HTTP_HOST'] }
+end

data/config/initializers/rswag_ui.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+Rswag::Ui.configure do |c|
+  # List the Swagger endpoints that you want to be documented through the swagger-ui
+  # The first parameter is the path (absolute or relative to the UI host) to the corresponding
+  # endpoint and the second is a title that will be displayed in the document selector
+  # NOTE: If you're using rspec-api to expose Swagger files (under swagger_root) as JSON or YAML endpoints,
+  # then the list below should correspond to the relative paths for those endpoints
+
+  c.swagger_endpoint('/api-docs/v1/swagger.json', 'API V1 Docs')
+
+  # Add Basic Auth in case your API is private
+  # c.basic_auth_enabled = true
+  # c.basic_auth_credentials 'username', 'password'
+end

data/config/initializers/swagger_yard.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+require 'swagger_yard'
+
+SwaggerYard.configure do |config|
+  config.api_version = '1.0'
+
+  config.title = 'Uffizzi docs'
+  config.description = 'Your API does this'
+
+  config.api_base_path = 'http://lvh.me:7000'
+
+  config.controller_path = File.expand_path('app/controllers/uffizzi_core/api/**/*', UffizziCore::Engine.root)
+  config.model_path = File.expand_path('app/models/uffizzi_core/**/*', UffizziCore::Engine.root)
+
+  config.include_private = false
+end

data/config/locales/en.activerecord.yml

@@ -0,0 +1,18 @@
+en:
+  activerecord:
+    errors:
+      models:
+        uffizzi_core/project:
+          attributes:
+            secret:
+              not_found: There is no secret with name %{name}
+        uffizzi_core/credential:
+          attributes:
+            registry_url:
+              invalid_scheme: The protocol for the registry url is not specified
+            password:
+              password_blank: Password/Access Token can't be blank
+            username:
+              incorrect: We were unable to log you in to docker registry. Please verify that your username and password are correct.
+            type:
+              exist: Credential of that type already exist.

data/config/locales/en.yml

@@ -0,0 +1,61 @@
+en:
+  github:
+    preview_url_message: |
+      **This branch has been deployed using Uffizzi.**
+      Preview URL:
+      https://%{preview_url}
+      View deployment details here:
+      https://%{deployment_url}
+      This is an automated comment. To turn off commenting, visit uffizzi.com.
+    invalid_compose_message: |
+      :exclamation: **Preview failed: invalid compose**
+             Uffizzi was unable to deploy a preview of this pull request because the compose file in this branch is invalid.
+  compose:
+    unsupported_file: Unsupported compose file
+    invalid_file: Invalid compose file
+    invalid_config_option: Invalid config option '%{value}' - only [a-zA-Z0-9\._\-] characters are allowed
+    no_services: Service services has neither an image nor a build context specified. At least one must be provided.
+    no_ingress: Service ingress has not been defined.
+    invalid_image_value: Invalid image value '%{value}'
+    invalid_credential: Invalid credential '%{value}'
+    invalid_repo_type: Unsupported repo type
+    repo_not_found: The specified repository doesn't exist '%{name}'
+    ingress_port_not_specified: Ingress port not specified
+    ingress_service_not_found: Ingress service not found
+    invalid_ingress_service: Invalid ingress service '%{value}'
+    no_variable_name: Invalid environment variable 'name=%{name}' 'value=%{value}'
+    invalid_config: Invalid config value 'source=%{source}' 'target=%{target}'
+    invalid_port: Invalid port specification '%{value}'
+    invalid_memory_postfix: The specified value for memory '%{value}' should specify the units. The postfix should be one of the `b` `k` `m` `g` characters
+    invalid_memory_type: Memory '%{value}' contains an invalid type, it should be a string
+    invalid_memory_value: Invalid memory value '%{value}'
+    invalid_memory: The memory should be one of the `125m` `250m` `500m` `1000m` `2000m` `4000m` values
+    image_build_no_specified: Service %{value} has neither an image nor a build context specified. At least one must be provided.
+    build_context_no_specified: The context option should be specified
+    config_file_not_found: Config file not found '%{name}'
+    invalid_context: Invalid context value '%{value}'
+    invalid_bool_value: Invalid %{field} value '%{value}'. The value should be `true` or `false`
+    invalid_delete_after_postfix: The postfix of the delete_preview_after value should be `h`
+    invalid_integer: The specified value for %{option} should be an Integer type
+    invalid_string: The specified value for %{option} should be a String type
+    invalid_delete_after_min: Minimum delete_preview_after allowed is %{value}h
+    invalid_delete_after_max: Maximum delete_preview_after allowed is %{value}h
+    invalid_type: Unsupported type of '%{option}' option
+    empty_env_file: env_file contains an empty value
+    file_not_found: Couldn't find '%{path}' file
+    env_file_duplicates: env_file contains non-unique items '%{values}'
+    boolean_option: The service name %{value} must be a quoted string, i.e. '%{value}'.
+    config_file_option_empty: "'%{config_name}' has an empty file"
+    global_config_not_found: undefined config '%{config}'
+    invalid_branch: Branch '%{branch}' doesn't exist for repository '%{repository_url}'
+    repository_not_found: The specified repository doesn't exist '%{repository_url}'
+    build_context_unknown_repository: Compose repository is undefined
+    secret_name_blank: The specified name for '%{option}' secret can not be blank
+    secret_external: The specified secret '%{secret}' should be external
+    global_secret_not_found: undefined secret '%{secret}'
+    project_secret_not_found: Project secret '%{secret}' not found
+    continuous_preview_in_service_level: The option '%{option}' is not supported for service-level. Use 'x-uffizzi-continuous-preview' instead
+    file_already_exists: A compose file already exists for this project. Run 'uffizzi compose update' to update this file or 'uffizzi compose rm' to remove it. For more options, see 'uffizzi compose --help'"
+  secrets:
+    duplicates_exists: Secret with key %{secrets} already exist.
+    invalid_key_length: A secret key must be no longer than 256 characters.

data/config/routes.rb

@@ -0,0 +1,55 @@
+# frozen_string_literal: true
+
+UffizziCore::Engine.routes.draw do
+  mount Rswag::Api::Engine => '/api-docs'
+  mount Rswag::Ui::Engine => '/api-docs'
+
+  namespace :api, defaults: { format: :json } do
+    namespace :cli do
+      namespace :v1 do
+        resource :webhooks, only: [] do
+          post :docker_hub
+          post :github
+          post :azure
+          post :amazon
+          post :google
+        end
+
+        resources :projects, only: ['index'], param: :slug do
+          scope module: :projects do
+            resource :compose_file, only: ['show', 'create', 'destroy']
+            resources :deployments, only: ['index', 'show', 'create', 'destroy'] do
+              post :deploy_containers, on: :member
+              scope module: :deployments do
+                resources :activity_items, only: ['index']
+                resources :events, only: ['index']
+                resources :containers, only: ['index'], param: :name do
+                  scope module: :containers do
+                    resources :logs, only: ['index']
+                    resources :builds, only: [] do
+                      collection do
+                        get :logs
+                      end
+                    end
+                  end
+                end
+              end
+            end
+            resources :secrets, only: ['index', 'destroy'] do
+              collection do
+                post :bulk_create
+              end
+            end
+          end
+        end
+        resource :session, only: ['create', 'destroy']
+
+        resource :account, only: [] do
+          scope module: :account do
+            resources :credentials, only: ['create', 'destroy'], param: :type
+          end
+        end
+      end
+    end
+  end
+end