@docupace/pipeline 1.0.13 → 1.0.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +1 -1
- package/src/auth0/configure.js +1 -0
- package/src/next/cli.js +3 -7
- package/src/next/vault.js +34 -30
- package/terraform/validate.sh +1 -1
package/package.json
CHANGED
package/src/auth0/configure.js
CHANGED
|
@@ -455,6 +455,7 @@ graphqlServer:
|
|
|
455
455
|
env:
|
|
456
456
|
AUTH0_CLIENT_SECRET: vault:secret/data/${site}/graphql-server/config#AUTH0_CLIENT_SECRET
|
|
457
457
|
STANDARD_CONFIG_REMOTE_PATH: vault:secret/data/common/config#STANDARD_CONFIG_REMOTE_PATH
|
|
458
|
+
SITE_CONFIG_REMOTE_PATH: vault:secret/data/${site}/common/config#SITE_CONFIG_REMOTE_PATH
|
|
458
459
|
AUTH0_CC_CLIENT_ID: vault:secret/data/${site}/graphql-server/config#AUTH0_CC_CLIENT_ID
|
|
459
460
|
AUTH0_CC_CLIENT_SECRET: vault:secret/data/${site}/graphql-server/config#AUTH0_CC_CLIENT_SECRET
|
|
460
461
|
image:
|
package/src/next/cli.js
CHANGED
|
@@ -17,7 +17,6 @@ dotenv.config({ path: ['.env.pipeline.local', 'config/.env.pipeline.local'] });
|
|
|
17
17
|
|
|
18
18
|
const program = new Command();
|
|
19
19
|
|
|
20
|
-
// GIT SHA computation
|
|
21
20
|
import { $ } from 'zx';
|
|
22
21
|
import {deployConnect, deployCore} from './jenkins.js';
|
|
23
22
|
import { runPipeline } from './pipline.js';
|
|
@@ -52,7 +51,6 @@ program
|
|
|
52
51
|
await connectClone();
|
|
53
52
|
});
|
|
54
53
|
|
|
55
|
-
|
|
56
54
|
program
|
|
57
55
|
.command('haproxySync')
|
|
58
56
|
.description('Sync haproxy config')
|
|
@@ -60,15 +58,14 @@ program
|
|
|
60
58
|
await haproxySync();
|
|
61
59
|
});
|
|
62
60
|
|
|
63
|
-
|
|
64
|
-
|
|
65
61
|
program
|
|
66
62
|
.command('vaultAddSiteData')
|
|
67
63
|
.description('Add m2m auth0 data to vault')
|
|
68
64
|
.requiredOption('-s, --site-name <siteName>', 'Site name')
|
|
65
|
+
.requiredOption('-p, --site-config-remote-path <siteConfigRemotePath>', 'Site Config Remote Path')
|
|
69
66
|
.action(async (options) => {
|
|
70
|
-
const { siteName,
|
|
71
|
-
await vaultAddSiteData(siteName);
|
|
67
|
+
const { siteName, siteConfigRemotePath } = options;
|
|
68
|
+
await vaultAddSiteData(siteName, siteConfigRemotePath);
|
|
72
69
|
});
|
|
73
70
|
|
|
74
71
|
program
|
|
@@ -130,7 +127,6 @@ program
|
|
|
130
127
|
});
|
|
131
128
|
});
|
|
132
129
|
|
|
133
|
-
|
|
134
130
|
program
|
|
135
131
|
.command('copy')
|
|
136
132
|
.description('Copy a Docker image between registries')
|
package/src/next/vault.js
CHANGED
|
@@ -1,39 +1,43 @@
|
|
|
1
1
|
import axios from 'axios';
|
|
2
2
|
|
|
3
|
-
export async function vaultAddSiteData(SITE) {
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
3
|
+
export async function vaultAddSiteData(SITE, SITE_CONFIG_REMOTE_PATH) {
|
|
4
|
+
const AUTH0_CLIENT_ID = process.env.AUTH0_CLIENT_ID;
|
|
5
|
+
const AUTH0_CLIENT_SECRET = process.env.AUTH0_CLIENT_SECRET;
|
|
6
|
+
const VAULT_ADDR = process.env.VAULT_ADDR; // Vault host URL from environment variables
|
|
7
|
+
const VAULT_TOKEN = process.env.VAULT_TOKEN; // Vault token from environment variables
|
|
8
8
|
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
9
|
+
if (!VAULT_ADDR || !VAULT_TOKEN) {
|
|
10
|
+
throw new Error('Missing VAULT_ADDR or VAULT_TOKEN environment variable.');
|
|
11
|
+
}
|
|
12
12
|
|
|
13
|
-
|
|
13
|
+
const vaultApiUrl = `${VAULT_ADDR}/v1/secret/data/${SITE}/common/config`;
|
|
14
14
|
|
|
15
|
-
|
|
16
|
-
const response = await axios.post(
|
|
17
|
-
vaultApiUrl,
|
|
18
|
-
{
|
|
19
|
-
data: {
|
|
20
|
-
AUTH0_CLIENT_ID: AUTH0_CLIENT_ID,
|
|
21
|
-
AUTH0_CLIENT_SECRET: AUTH0_CLIENT_SECRET,
|
|
22
|
-
},
|
|
23
|
-
},
|
|
24
|
-
{
|
|
25
|
-
headers: {
|
|
26
|
-
'X-Vault-Token': VAULT_TOKEN,
|
|
27
|
-
'Content-Type': 'application/json',
|
|
28
|
-
},
|
|
29
|
-
}
|
|
30
|
-
);
|
|
15
|
+
try {
|
|
31
16
|
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
console.error('Error adding data to Vault:', error.response?.data || error.message);
|
|
35
|
-
throw error;
|
|
17
|
+
if (process.env.VAULT_SKIP_VERIFY === 'true') {
|
|
18
|
+
process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
|
|
36
19
|
}
|
|
37
|
-
}
|
|
38
20
|
|
|
21
|
+
const response = await axios.post(
|
|
22
|
+
vaultApiUrl,
|
|
23
|
+
{
|
|
24
|
+
data: {
|
|
25
|
+
AUTH0_CLIENT_ID: AUTH0_CLIENT_ID,
|
|
26
|
+
AUTH0_CLIENT_SECRET: AUTH0_CLIENT_SECRET,
|
|
27
|
+
SITE_CONFIG_REMOTE_PATH: SITE_CONFIG_REMOTE_PATH,
|
|
28
|
+
},
|
|
29
|
+
},
|
|
30
|
+
{
|
|
31
|
+
headers: {
|
|
32
|
+
'X-Vault-Token': VAULT_TOKEN,
|
|
33
|
+
'Content-Type': 'application/json',
|
|
34
|
+
},
|
|
35
|
+
}
|
|
36
|
+
);
|
|
39
37
|
|
|
38
|
+
console.log('Data added to Vault successfully:', response.data);
|
|
39
|
+
} catch (error) {
|
|
40
|
+
console.error('Error adding data to Vault:', error.response?.data || error.message);
|
|
41
|
+
throw error;
|
|
42
|
+
}
|
|
43
|
+
}
|
package/terraform/validate.sh
CHANGED