wombat-cli 0.2.0

data/packer/mock-data/chefignore

@@ -0,0 +1,102 @@
+# Put files/directories that should be ignored in this file when uploading
+# to a chef-server or supermarket.
+# Lines that start with '# ' are comments.
+
+# OS generated files #
+######################
+.DS_Store
+Icon?
+nohup.out
+ehthumbs.db
+Thumbs.db
+
+# SASS #
+########
+.sass-cache
+
+# EDITORS #
+###########
+\#*
+.#*
+*~
+*.sw[a-z]
+*.bak
+REVISION
+TAGS*
+tmtags
+*_flymake.*
+*_flymake
+*.tmproj
+.project
+.settings
+mkmf.log
+
+## COMPILED ##
+##############
+a.out
+*.o
+*.pyc
+*.so
+*.com
+*.class
+*.dll
+*.exe
+*/rdoc/
+
+# Testing #
+###########
+.watchr
+.rspec
+spec/*
+spec/fixtures/*
+test/*
+features/*
+examples/*
+Guardfile
+Procfile
+.kitchen*
+.rubocop.yml
+spec/*
+Rakefile
+.travis.yml
+.foodcritic
+.codeclimate.yml
+
+# SCM #
+#######
+.git
+*/.git
+.gitignore
+.gitmodules
+.gitconfig
+.gitattributes
+.svn
+*/.bzr/*
+*/.hg/*
+*/.svn/*
+
+# Berkshelf #
+#############
+Berksfile
+Berksfile.lock
+cookbooks/*
+tmp
+
+# Cookbooks #
+#############
+CONTRIBUTING*
+CHANGELOG*
+TESTING*
+MAINTAINERS.toml
+
+# Strainer #
+############
+Colanderfile
+Strainerfile
+.colander
+.strainer
+
+# Vagrant #
+###########
+.vagrant
+Vagrantfile

data/packer/mock-data/metadata.rb

@@ -0,0 +1,7 @@
+name 'mock-data'
+maintainer 'The Authors'
+maintainer_email 'you@example.com'
+license 'all_rights'
+description 'Installs/Configures mock-data'
+long_description 'Installs/Configures mock-data'
+version '0.1.0'

data/packer/mock-data/recipes/default.rb

@@ -0,0 +1,69 @@
+#
+# Cookbook Name:: mock-data
+# Recipe:: default
+#
+# Copyright (c) 2016 The Authors, All Rights Reserved.
+
+require 'cheffish'
+Chef::Config.ssl_verify_mode :verify_none
+
+config = {
+  :chef_server_url => 'https://chef',
+  :options => {
+    :client_name => 'pivotal',
+    :signing_key_filename => '/etc/opscode/pivotal.pem'
+  }
+}
+
+#taken from cheffish
+chef_user 'automate' do
+  chef_server config
+  admin true
+  display_name 'automate'
+  email 'chefeval@chef.io'
+  password 'automate'
+  source_key_path '/tmp/private.pem'
+end
+
+chef_user 'workstation' do
+  chef_server config
+  admin true
+  display_name 'workstation'
+  email 'workstation@chef.io'
+  password 'workstation'
+  source_key_path '/tmp/private.pem'
+end
+
+chef_organization "#{ENV['ORG']}" do
+  members ['automate', 'workstation']
+  chef_server config
+end
+
+conf_with_org = config.merge({
+  :chef_server_url => "#{config[:chef_server_url]}/organizations/#{ENV['ORG']}"
+})
+
+build_nodes = []
+num = ENV['BUILD_NODES'].to_i
+
+1.upto(num) do |i|
+  build_nodes << "build-node-#{i}"
+end
+
+build_nodes.each do |node_name|
+  chef_node node_name do
+    tag 'delivery-build-node'
+    chef_server conf_with_org
+  end
+
+  chef_client node_name do
+    source_key_path '/tmp/private.pem'
+    chef_server conf_with_org
+  end
+end
+
+chef_acl "" do
+  rights :all, users: %w(automate workstation), clients: build_nodes
+  recursive true
+  chef_server conf_with_org
+end

data/packer/mock-data/spec/spec_helper.rb

@@ -0,0 +1,2 @@
+require 'chefspec'
+require 'chefspec/berkshelf'

data/packer/mock-data/spec/unit/recipes/default_spec.rb

@@ -0,0 +1,20 @@
+#
+# Cookbook Name:: mock-data
+# Spec:: default
+#
+# Copyright (c) 2016 The Authors, All Rights Reserved.
+
+require 'spec_helper'
+
+describe 'mock-data::default' do
+  context 'When all attributes are default, on an unspecified platform' do
+    let(:chef_run) do
+      runner = ChefSpec::ServerRunner.new
+      runner.converge(described_recipe)
+    end
+
+    it 'converges successfully' do
+      expect { chef_run }.to_not raise_error
+    end
+  end
+end

data/packer/mock-data/test/integration/default/serverspec/default_spec.rb

@@ -0,0 +1,9 @@
+require 'spec_helper'
+
+describe 'mock-data::default' do
+  # Serverspec examples can be found at
+  # http://serverspec.org/resource_types.html
+  it 'does something' do
+    skip 'Replace this with meaningful tests'
+  end
+end

data/packer/mock-data/test/integration/helpers/serverspec/spec_helper.rb

@@ -0,0 +1,8 @@
+require 'serverspec'
+
+if (/cygwin|mswin|mingw|bccwin|wince|emx/ =~ RUBY_PLATFORM).nil?
+  set :backend, :exec
+else
+  set :backend, :cmd
+  set :os, family: 'windows'
+end

data/packer/workstation.json

@@ -0,0 +1,97 @@
+{
+  "variables": {
+    "aws_access_key": "{{env `AWS_ACCESS_KEY_ID`}}",
+    "aws_secret_key": "{{env `AWS_SECRET_ACCESS_KEY`}}",
+    "aws_region": "{{env `AWS_REGION`}}",
+    "aws_source_ami": "ami-87c037e7",
+    "azure_client_id": "{{env `AZURE_CLIENT_ID`}}",
+    "azure_tenant_id": "{{env `AZURE_TENANT_ID`}}",
+    "azure_client_secret": "{{env `AZURE_CLIENT_SECRET`}}",
+    "azure_subscription_id": "{{env `AZURE_SUBSCRIPTION_ID`}}",
+    "azure_storage_account": "{{env `AZURE_STORAGE_ACCOUNT`}}",
+    "azure_resource_group": "{{env `AZURE_RESOURCE_GROUP`}}",
+    "gce_account_file": "{{env `GCE_ACCOUNT_FILE`}}",
+    "gce_project_id": "{{env `GCE_PROJECT_ID`}}",
+    "gce_zone": "{{env `GCE_ZONE`}}",
+    "gce_source_image": "windows-server-2012-r2-dc-v20160809",
+    "build-nodes": "1",
+    "chefdk": "stable-latest",
+    "domain_prefix": "",
+    "domain": "animals.biz",
+    "enterprise": "mammals",
+    "org": "marsupials",
+    "winrm_password": "RL9@T40BTmXh",
+    "winrm_username": "Administrator",
+    "workstation-number": "1",
+    "workstations": "1"
+  },
+
+  "builders": [
+    { "type": "amazon-ebs",
+      "access_key": "{{user `aws_access_key`}}",
+      "secret_key": "{{user `aws_secret_key`}}",
+      "region": "{{user `aws_region`}}",
+      "source_ami": "{{user `aws_source_ami`}}",
+      "instance_type": "m3.large",
+      "communicator": "winrm",
+      "associate_public_ip_address": true,
+      "ssh_private_ip": false,
+      "winrm_port": 5985,
+      "winrm_username": "{{user `winrm_username`}}",
+      "winrm_password": "{{user `winrm_password`}}",
+      "user_data_file": "{{template_dir}}/scripts/bootstrap-aws.txt",
+      "ami_name": "workstation-{{user `workstation-number`}}-{{timestamp}}"
+    },
+    {
+      "type": "googlecompute",
+      "account_file": "{{user `gce_account_file`}}",
+      "project_id": "{{user `gce_project_id`}}",
+      "source_image": "{{user `gce_source_image`}}",
+      "zone": "{{user `gce_zone`}}",
+      "disk_type": "pd-ssd",
+      "disk_size": "80",
+      "machine_type": "n1-highcpu-8",
+      "image_name": "workstation-{{user `workstation-number`}}-{{timestamp}}",
+      "communicator": "winrm",
+      "winrm_port": 5985,
+      "winrm_username": "{{user `winrm_username`}}",
+      "winrm_password": "{{user `winrm_password`}}",
+      "metadata": {
+        "windows-startup-script-ps1": "gs://wombat-bootstrap/win-bootstrap.ps1"
+      }
+    }
+  ],
+
+  "provisioners" : [
+    {
+      "type": "file",
+      "source": "{{pwd}}/keys/",
+      "destination": "C:\\Windows\\Temp"
+    },
+    {
+      "type": "file",
+      "source": "{{template_dir}}/files/",
+      "destination": "C:\\Windows\\Temp"
+    },
+    {
+      "type": "chef-solo",
+      "install_command": "powershell.exe -Command \". { iwr -useb https://omnitruck.chef.io/install.ps1 } | iex; install -channel {{user `chef_channel`}} -version {{user `chef_ver`}}\"",
+      "guest_os_type": "windows",
+      "cookbook_paths": [ "{{pwd}}/vendored-cookbooks/workstation" ],
+      "run_list": [ "workstation" ],
+      "json": {
+        "demo": {
+          "domain_prefix": "{{user `domain_prefix`}}",
+          "domain": "{{user `domain`}}",
+          "enterprise": "{{user `enterprise`}}",
+          "org": "{{user `org`}}",
+          "workstation-number": "{{user `workstation-number`}}",
+          "build-nodes": "{{user `build-nodes`}}",
+          "versions": {
+            "chefdk": "{{user `chefdk`}}"
+          }
+        }
+      }
+    }
+  ]
+}

data/templates/bootstrap-aws.erb

@@ -0,0 +1,36 @@
+<powershell>
+
+write-output "Running User Data Script"
+write-host "(host) Running User Data Script"
+
+# set administrator password
+cmd.exe /c net user Administrator <%= @workstation_passwd %>
+
+# RDP
+cmd.exe /c netsh advfirewall firewall add rule name="Open Port 3389" dir=in action=allow protocol=TCP localport=3389
+cmd.exe /c reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f
+
+# WinRM
+write-output "Setting up WinRM"
+write-host "(host) setting up WinRM"
+
+cmd.exe /c winrm quickconfig -q
+cmd.exe /c winrm quickconfig '-transport:http'
+cmd.exe /c winrm set "winrm/config" '@{MaxTimeoutms="1800000"}'
+cmd.exe /c winrm set "winrm/config/winrs" '@{MaxMemoryPerShellMB="512"}'
+cmd.exe /c winrm set "winrm/config/service" '@{AllowUnencrypted="true"}'
+cmd.exe /c winrm set "winrm/config/client" '@{AllowUnencrypted="true"}'
+cmd.exe /c winrm set "winrm/config/service/auth" '@{Basic="true"}'
+cmd.exe /c winrm set "winrm/config/client/auth" '@{Basic="true"}'
+cmd.exe /c winrm set "winrm/config/service/auth" '@{CredSSP="true"}'
+cmd.exe /c winrm set "winrm/config/listener?Address=*+Transport=HTTP" '@{Port="5985"}'
+cmd.exe /c netsh advfirewall firewall set rule group="remote administration" new enable=yes
+cmd.exe /c netsh firewall add portopening TCP 5985 "Port 5985"
+cmd.exe /c net stop winrm
+cmd.exe /c sc config winrm start= auto
+cmd.exe /c net start winrm
+cmd.exe /c wmic useraccount where "name='Administrator'" set PasswordExpires=FALSE
+
+Set-ExecutionPolicy Unrestricted
+
+</powershell>