@aws-cdk-testing/cli-integ 2.173.4 → 3.0.0

package/lib/staging/codeartifact.ts

@@ -0,0 +1,387 @@
+import {
+  AssociateExternalConnectionCommand,
+  CodeartifactClient,
+  CreateDomainCommand,
+  CreateRepositoryCommand,
+  DeleteRepositoryCommand,
+  DescribeDomainCommand,
+  DescribeRepositoryCommand,
+  GetAuthorizationTokenCommand,
+  GetRepositoryEndpointCommand,
+  ListPackagesCommand,
+  ListPackagesRequest,
+  ListRepositoriesCommand,
+  ListTagsForResourceCommand,
+  PutPackageOriginConfigurationCommand,
+} from '@aws-sdk/client-codeartifact';
+import { sleep } from '../aws';
+
+const COLLECT_BY_TAG = 'collect-by';
+const REPO_LIFETIME_MS = 24 * 3600 * 1000; // One day
+
+export class TestRepository {
+  public static readonly DEFAULT_DOMAIN = 'test-cdk';
+
+  public static async newRandom() {
+    const qualifier = Math.random()
+      .toString(36)
+      .replace(/[^a-z0-9]+/g, '');
+
+    const repo = new TestRepository(`test-${qualifier}`);
+    await repo.prepare();
+    return repo;
+  }
+
+  public static async newWithName(name: string) {
+    const repo = new TestRepository(name);
+    await repo.prepare();
+    return repo;
+  }
+
+  public static existing(repositoryName: string) {
+    return new TestRepository(repositoryName);
+  }
+
+  /**
+   * Garbage collect repositories
+   */
+  public static async gc() {
+    if (!(await TestRepository.existing('*dummy*').domainExists())) {
+      return;
+    }
+
+    const codeArtifact = new CodeartifactClient();
+
+    let nextToken: string | undefined;
+    do {
+      const page = await codeArtifact.send(
+        new ListRepositoriesCommand({
+          nextToken: nextToken,
+        }),
+      );
+
+      for (const repo of page.repositories ?? []) {
+        const tags = await codeArtifact.send(
+          new ListTagsForResourceCommand({
+            resourceArn: repo.arn!,
+          }),
+        );
+        const collectable = tags?.tags?.find((t) => t.key === COLLECT_BY_TAG && Number(t.value) < Date.now());
+        if (collectable) {
+          // eslint-disable-next-line no-console
+          console.log('Deleting', repo.name);
+          await codeArtifact.send(
+            new DeleteRepositoryCommand({
+              domain: repo.domainName!,
+              repository: repo.name!,
+            }),
+          );
+        }
+      }
+
+      nextToken = page.nextToken;
+    } while (nextToken);
+  }
+
+  public readonly npmUpstream = 'npm-upstream';
+  public readonly pypiUpstream = 'pypi-upstream';
+  public readonly nugetUpstream = 'nuget-upstream';
+  public readonly mavenUpstream = 'maven-upstream';
+  public readonly domain = TestRepository.DEFAULT_DOMAIN;
+
+  private readonly codeArtifact = new CodeartifactClient();
+
+  private _loginInformation: LoginInformation | undefined;
+
+  private constructor(public readonly repositoryName: string) {}
+
+  public async prepare() {
+    await this.ensureDomain();
+    await this.ensureUpstreams();
+
+    await this.ensureRepository(this.repositoryName, {
+      description: 'Testing repository',
+      upstreams: [this.npmUpstream, this.pypiUpstream, this.nugetUpstream, this.mavenUpstream],
+      tags: {
+        [COLLECT_BY_TAG]: `${Date.now() + REPO_LIFETIME_MS}`,
+      },
+    });
+  }
+
+  public async loginInformation(): Promise<LoginInformation> {
+    if (this._loginInformation) {
+      return this._loginInformation;
+    }
+
+    this._loginInformation = {
+      authToken: (
+        await this.codeArtifact.send(
+          new GetAuthorizationTokenCommand({
+            domain: this.domain,
+            durationSeconds: 12 * 3600,
+          }),
+        )
+      ).authorizationToken!,
+      repositoryName: this.repositoryName,
+
+      npmEndpoint: (
+        await this.codeArtifact.send(
+          new GetRepositoryEndpointCommand({
+            domain: this.domain,
+            repository: this.repositoryName,
+            format: 'npm',
+          }),
+        )
+      ).repositoryEndpoint!,
+
+      mavenEndpoint: (
+        await this.codeArtifact.send(
+          new GetRepositoryEndpointCommand({
+            domain: this.domain,
+            repository: this.repositoryName,
+            format: 'maven',
+          }),
+        )
+      ).repositoryEndpoint!,
+
+      nugetEndpoint: (
+        await this.codeArtifact.send(
+          new GetRepositoryEndpointCommand({
+            domain: this.domain,
+            repository: this.repositoryName,
+            format: 'nuget',
+          }),
+        )
+      ).repositoryEndpoint!,
+
+      pypiEndpoint: (
+        await this.codeArtifact.send(
+          new GetRepositoryEndpointCommand({
+            domain: this.domain,
+            repository: this.repositoryName,
+            format: 'pypi',
+          }),
+        )
+      ).repositoryEndpoint!,
+    };
+    return this._loginInformation;
+  }
+
+  public async delete() {
+    try {
+      await this.codeArtifact.send(
+        new DeleteRepositoryCommand({
+          domain: this.domain,
+          repository: this.repositoryName,
+        }),
+      );
+
+      // eslint-disable-next-line no-console
+      console.log('Deleted', this.repositoryName);
+    } catch (e: any) {
+      if (e.name !== 'ResourceNotFoundException') {
+        throw e;
+      }
+      // Okay
+    }
+  }
+
+  /**
+   * List all packages and mark them as "allow upstream versions".
+   *
+   * If we don't do this and we publish `foo@2.3.4-rc.0`, then we can't
+   * download `foo@2.3.0` anymore because by default CodeArtifact will
+   * block different versions from the same package.
+   */
+  public async markAllUpstreamAllow() {
+    for await (const pkg of this.listPackages({ upstream: 'BLOCK' })) {
+      await retryThrottled(() =>
+        this.codeArtifact.send(
+          new PutPackageOriginConfigurationCommand({
+            domain: this.domain,
+            repository: this.repositoryName,
+
+            format: pkg.format!,
+            package: pkg.package!,
+            namespace: pkg.namespace!,
+            restrictions: {
+              publish: 'ALLOW',
+              upstream: 'ALLOW',
+            },
+          }),
+        ),
+      );
+    }
+  }
+
+  private async ensureDomain() {
+    if (await this.domainExists()) {
+      return;
+    }
+    await this.codeArtifact.send(
+      new CreateDomainCommand({
+        domain: this.domain,
+        tags: [{ key: 'testing', value: 'true' }],
+      }),
+    );
+  }
+
+  private async ensureUpstreams() {
+    await this.ensureRepository(this.npmUpstream, {
+      description: 'The upstream repository for NPM',
+      external: 'public:npmjs',
+    });
+    await this.ensureRepository(this.mavenUpstream, {
+      description: 'The upstream repository for Maven',
+      external: 'public:maven-central',
+    });
+    await this.ensureRepository(this.nugetUpstream, {
+      description: 'The upstream repository for NuGet',
+      external: 'public:nuget-org',
+    });
+    await this.ensureRepository(this.pypiUpstream, {
+      description: 'The upstream repository for PyPI',
+      external: 'public:pypi',
+    });
+  }
+
+  private async ensureRepository(
+    name: string,
+    options?: {
+      readonly description?: string;
+      readonly external?: string;
+      readonly upstreams?: string[];
+      readonly tags?: Record<string, string>;
+    },
+  ) {
+    if (await this.repositoryExists(name)) {
+      return;
+    }
+
+    await this.codeArtifact.send(
+      new CreateRepositoryCommand({
+        domain: this.domain,
+        repository: name,
+        description: options?.description,
+        upstreams: options?.upstreams?.map((repositoryName) => ({ repositoryName })),
+        tags: options?.tags ? Object.entries(options.tags).map(([key, value]) => ({ key, value })) : undefined,
+      }),
+    );
+
+    if (options?.external) {
+      const externalConnection = options.external;
+      await retry(() =>
+        this.codeArtifact.send(
+          new AssociateExternalConnectionCommand({
+            domain: this.domain,
+            repository: name,
+            externalConnection,
+          }),
+        ),
+      );
+    }
+  }
+
+  private async domainExists() {
+    try {
+      await this.codeArtifact.send(new DescribeDomainCommand({ domain: this.domain }));
+      return true;
+    } catch (e: any) {
+      if (e.name !== 'ResourceNotFoundException') {
+        throw e;
+      }
+      return false;
+    }
+  }
+
+  private async repositoryExists(name: string) {
+    try {
+      await this.codeArtifact.send(new DescribeRepositoryCommand({ domain: this.domain, repository: name }));
+      return true;
+    } catch (e: any) {
+      if (e.name !== 'ResourceNotFoundException') {
+        throw e;
+      }
+      return false;
+    }
+  }
+
+  private async *listPackages(filter: Pick<ListPackagesRequest, 'upstream' | 'publish' | 'format'> = {}) {
+    let response = await retryThrottled(() =>
+      this.codeArtifact.send(
+        new ListPackagesCommand({
+          domain: this.domain,
+          repository: this.repositoryName,
+          ...filter,
+        }),
+      ),
+    );
+
+    while (true) {
+      for (const p of response.packages ?? []) {
+        yield p;
+      }
+
+      if (!response.nextToken) {
+        break;
+      }
+
+      response = await retryThrottled(() =>
+        this.codeArtifact.send(
+          new ListPackagesCommand({
+            domain: this.domain,
+            repository: this.repositoryName,
+            ...filter,
+            nextToken: response.nextToken,
+          }),
+        ),
+      );
+    }
+  }
+}
+
+async function retry<A>(block: () => Promise<A>) {
+  let attempts = 3;
+  while (true) {
+    try {
+      return await block();
+    } catch (e: any) {
+      if (attempts-- === 0) {
+        throw e;
+      }
+      // eslint-disable-next-line no-console
+      console.debug(e.message);
+      await sleep(500);
+    }
+  }
+}
+
+async function retryThrottled<A>(block: () => Promise<A>) {
+  let time = 100;
+  let attempts = 15;
+  while (true) {
+    try {
+      return await block();
+    } catch (e: any) {
+      // eslint-disable-next-line no-console
+      console.debug(e.message);
+      if (e.name !== 'ThrottlingException') {
+        throw e;
+      }
+      if (attempts-- === 0) {
+        throw e;
+      }
+      await sleep(Math.floor(Math.random() * time));
+      time *= 2;
+    }
+  }
+}
+
+export interface LoginInformation {
+  readonly authToken: string;
+  readonly repositoryName: string;
+  readonly npmEndpoint: string;
+  readonly mavenEndpoint: string;
+  readonly nugetEndpoint: string;
+  readonly pypiEndpoint: string;
+}

package/lib/staging/maven.js

@@ -12,11 +12,12 @@ const shell_1 = require("../shell");
 // Do not try to JIT the Maven binary
 const NO_JIT = '-XX:+TieredCompilation -XX:TieredStopAtLevel=1';
 async function mavenLogin(login, usageDir) {
+    var _a;
     await writeMavenSettingsFile(settingsFile(usageDir), login);
     // Write env var
     // Twiddle JVM settings a bit to make Maven survive running on a CodeBuild box.
     await usageDir.addToEnv({
-        MAVEN_OPTS: `-Duser.home=${usageDir.directory} ${NO_JIT} ${process.env.MAVEN_OPTS ?? ''}`.trim(),
+        MAVEN_OPTS: `-Duser.home=${usageDir.directory} ${NO_JIT} ${(_a = process.env.MAVEN_OPTS) !== null && _a !== void 0 ? _a : ''}`.trim(),
     });
 }
 function settingsFile(usageDir) {
@@ -26,6 +27,7 @@ function settingsFile(usageDir) {
 }
 async function uploadJavaPackages(packages, login, usageDir) {
     await (0, parallel_shell_1.parallelShell)(packages, async (pkg, output) => {
+        var _a;
         console.log(`⏳ ${pkg}`);
         const sourcesFile = pkg.replace(/.pom$/, '-sources.jar');
         const javadocFile = pkg.replace(/.pom$/, '-javadoc.jar');
@@ -41,7 +43,7 @@ async function uploadJavaPackages(packages, login, usageDir) {
             outputs: [output],
             modEnv: {
                 // Do not try to JIT the Maven binary
-                MAVEN_OPTS: `${NO_JIT} ${process.env.MAVEN_OPTS ?? ''}`.trim(),
+                MAVEN_OPTS: `${NO_JIT} ${(_a = process.env.MAVEN_OPTS) !== null && _a !== void 0 ? _a : ''}`.trim(),
             },
         });
         console.log(`✅ ${pkg}`);
@@ -86,4 +88,4 @@ async function writeMavenSettingsFile(filename, login) {
     </activeProfiles>
   </settings>`);
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/lib/staging/maven.ts

@@ -0,0 +1,95 @@
+/* eslint-disable no-console */
+import * as path from 'path';
+import { pathExists } from 'fs-extra';
+import { LoginInformation } from './codeartifact';
+import { parallelShell } from './parallel-shell';
+import { UsageDir } from './usage-dir';
+import { writeFile } from '../files';
+import { shell } from '../shell';
+
+// Do not try to JIT the Maven binary
+const NO_JIT = '-XX:+TieredCompilation -XX:TieredStopAtLevel=1';
+
+export async function mavenLogin(login: LoginInformation, usageDir: UsageDir) {
+  await writeMavenSettingsFile(settingsFile(usageDir), login);
+
+  // Write env var
+  // Twiddle JVM settings a bit to make Maven survive running on a CodeBuild box.
+  await usageDir.addToEnv({
+    MAVEN_OPTS: `-Duser.home=${usageDir.directory} ${NO_JIT} ${process.env.MAVEN_OPTS ?? ''}`.trim(),
+  });
+}
+
+function settingsFile(usageDir: UsageDir) {
+  // If we configure usageDir as a fake home directory Maven will find this file.
+  // (No other way to configure the settings file as part of the environment).
+  return path.join(usageDir.directory, '.m2', 'settings.xml');
+}
+
+export async function uploadJavaPackages(packages: string[], login: LoginInformation, usageDir: UsageDir) {
+  await parallelShell(packages, async (pkg, output) => {
+    console.log(`⏳ ${pkg}`);
+
+    const sourcesFile = pkg.replace(/.pom$/, '-sources.jar');
+    const javadocFile = pkg.replace(/.pom$/, '-javadoc.jar');
+
+    await shell(['mvn',
+      `--settings=${settingsFile(usageDir)}`,
+      'org.apache.maven.plugins:maven-deploy-plugin:3.0.0:deploy-file',
+      `-Durl=${login.mavenEndpoint}`,
+      '-DrepositoryId=codeartifact',
+      `-DpomFile=${pkg}`,
+      `-Dfile=${pkg.replace(/.pom$/, '.jar')}`,
+      ...await pathExists(sourcesFile) ? [`-Dsources=${sourcesFile}`] : [],
+      ...await pathExists(javadocFile) ? [`-Djavadoc=${javadocFile}`] : []], {
+      outputs: [output],
+      modEnv: {
+        // Do not try to JIT the Maven binary
+        MAVEN_OPTS: `${NO_JIT} ${process.env.MAVEN_OPTS ?? ''}`.trim(),
+      },
+    });
+
+    console.log(`✅ ${pkg}`);
+  },
+  (pkg, output) => {
+    if (output.toString().includes('409 Conflict')) {
+      console.log(`❌ ${pkg}: already exists. Skipped.`);
+      return 'skip';
+    }
+    if (output.toString().includes('Too Many Requests')) {
+      console.log(`♻️ ${pkg}: Too many requests. Retrying.`);
+      return 'retry';
+    }
+    return 'fail';
+  });
+}
+
+export async function writeMavenSettingsFile(filename: string, login: LoginInformation) {
+  await writeFile(filename, `<?xml version="1.0" encoding="UTF-8" ?>
+  <settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"
+            xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+            xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0
+                                http://maven.apache.org/xsd/settings-1.0.0.xsd">
+    <servers>
+      <server>
+        <id>codeartifact</id>
+        <username>aws</username>
+        <password>${login.authToken}</password>
+      </server>
+    </servers>
+    <profiles>
+      <profile>
+        <id>default</id>
+        <repositories>
+          <repository>
+            <id>codeartifact</id>
+            <url>${login.mavenEndpoint}</url>
+          </repository>
+        </repositories>
+      </profile>
+    </profiles>
+    <activeProfiles>
+      <activeProfile>default</activeProfile>
+    </activeProfiles>
+  </settings>`);
+}

package/lib/staging/npm.ts

@@ -0,0 +1,62 @@
+/* eslint-disable no-console */
+import * as path from 'path';
+import { LoginInformation } from './codeartifact';
+import { parallelShell } from './parallel-shell';
+import { UsageDir } from './usage-dir';
+import { updateIniKey, loadLines, writeLines } from '../files';
+import { shell } from '../shell';
+
+export async function npmLogin(login: LoginInformation, usageDir: UsageDir) {
+  // Creating an ~/.npmrc that references an envvar is what you're supposed to do. (https://docs.npmjs.com/private-modules/ci-server-config)
+  await writeNpmLoginToken(usageDir, login.npmEndpoint, '${NPM_TOKEN}');
+
+  // Add variables to env file
+  await usageDir.addToEnv(npmEnv(usageDir, login));
+}
+
+function npmEnv(usageDir: UsageDir, login: LoginInformation) {
+  return {
+    npm_config_userconfig: path.join(usageDir.directory, '.npmrc'),
+    npm_config_registry: login.npmEndpoint,
+    npm_config_always_auth: 'true', // Necessary for NPM 6, otherwise it will sometimes not pass the token
+    NPM_TOKEN: login.authToken,
+  };
+}
+
+export async function uploadNpmPackages(packages: string[], login: LoginInformation, usageDir: UsageDir) {
+  await parallelShell(packages, async (pkg, output) => {
+    console.log(`⏳ ${pkg}`);
+
+    // path.resolve() is required -- if the filename ends up looking like `js/bla.tgz` then NPM thinks it's a short form GitHub name.
+    await shell(['node', require.resolve('npm'), 'publish', path.resolve(pkg)], {
+      modEnv: npmEnv(usageDir, login),
+      show: 'error',
+      outputs: [output],
+    });
+
+    console.log(`✅ ${pkg}`);
+  }, (pkg, output) => {
+    if (output.toString().includes('code EPUBLISHCONFLICT')) {
+      console.log(`❌ ${pkg}: already exists. Skipped.`);
+      return 'skip';
+    }
+    if (output.toString().includes('code EPRIVATE')) {
+      console.log(`❌ ${pkg}: is private. Skipped.`);
+      return 'skip';
+    }
+    return 'fail';
+  });
+}
+
+async function writeNpmLoginToken(usageDir: UsageDir, endpoint: string, token: string) {
+  const rcFile = path.join(usageDir.directory, '.npmrc');
+  const lines = await loadLines(rcFile);
+
+  const key = `${endpoint.replace(/^https:/, '')}:_authToken`;
+  updateIniKey(lines, key, token);
+
+  await writeLines(rcFile, lines);
+  return rcFile;
+}
+
+// Environment variable, .npmrc in same directory as package.json or in home dir

package/lib/staging/nuget.ts

@@ -0,0 +1,75 @@
+/* eslint-disable no-console */
+import { LoginInformation } from './codeartifact';
+import { parallelShell } from './parallel-shell';
+import { UsageDir } from './usage-dir';
+import { writeFile } from '../files';
+import { shell } from '../shell';
+
+export async function nugetLogin(login: LoginInformation, usageDir: UsageDir) {
+  // NuGet.Config MUST live in the current directory or in the home directory, and there is no environment
+  // variable to configure its location.
+  await writeNuGetConfigFile(usageDir.cwdFile('NuGet.Config'), login);
+}
+
+export async function uploadDotnetPackages(packages: string[], usageDir: UsageDir) {
+  await usageDir.copyCwdFileHere('NuGet.Config');
+
+  await parallelShell(packages, async (pkg, output) => {
+    console.log(`⏳ ${pkg}`);
+
+    await shell(['dotnet', 'nuget', 'push',
+      pkg,
+      '--source', 'CodeArtifact',
+      '--no-symbols',
+      '--force-english-output',
+      '--disable-buffering',
+      '--timeout', '600',
+      '--skip-duplicate'], {
+      outputs: [output],
+    });
+
+    console.log(`✅ ${pkg}`);
+  },
+  (pkg, output) => {
+    if (output.toString().includes('Conflict')) {
+      console.log(`❌ ${pkg}: already exists. Skipped.`);
+      return 'skip';
+    }
+    if (output.includes('System.Threading.AbandonedMutexException')) {
+      console.log(`♻️ ${pkg}: AbandonedMutexException. Probably a sign of throttling, retrying.`);
+      return 'retry';
+    }
+    if (output.includes('Too Many Requests')) {
+      console.log(`♻️ ${pkg}: Too many requests. Retrying.`);
+      return 'retry';
+    }
+    if (output.includes('System.IO.IOException: The system cannot open the device or file specified.')) {
+      console.log(`♻️ ${pkg}: Some error that we've seen before as a result of throttling. Retrying.`);
+      return 'retry';
+    }
+    return 'fail';
+  });
+}
+
+async function writeNuGetConfigFile(filename: string, login: LoginInformation) {
+  // `dotnet nuget push` has an `--api-key` parameter, but CodeArtifact
+  // does not support that. We must authenticate with Basic auth.
+  await writeFile(filename, `<?xml version="1.0" encoding="utf-8"?>
+<configuration>
+  <packageSources>
+    <add key="nuget.org" value="https://api.nuget.org/v3/index.json" protocolVersion="3" />
+    <add key="CodeArtifact" value="${login.nugetEndpoint}v3/index.json" />
+  </packageSources>
+  <activePackageSource>
+    <add key="CodeArtifact" value="${login.nugetEndpoint}v3/index.json" />
+  </activePackageSource>
+  <packageSourceCredentials>
+    <CodeArtifact>
+        <add key="Username" value="aws" />
+        <add key="ClearTextPassword" value="${login.authToken}" />
+      </CodeArtifact>
+  </packageSourceCredentials>
+</configuration>`);
+}
+
+// NuGet.Config in current directory