@docupace/pipeline 1.0.39-newrelease.13 → 1.0.39-newrelease.14

package/bin/azuread_update_callbacks_for_app.sh

@@ -0,0 +1,58 @@
+#!/bin/bash
+set -e
+
+ENV=$1
+
+if [ -z "$ENV" ]; then
+    echo "Usage: $0 <environment>"
+    exit 1
+fi
+
+TENANT_ID="docupace.onmicrosoft.com"
+CLIENT_ID=$ARM_CLIENT_ID
+CLIENT_SECRET=$ARM_CLIENT_SECRET
+NEW_REDIRECT="https://docupace-$ENV-$SITE_NAME.us.auth0.com/login/callback"
+APP_ID="auth0-$ENV-docupace"
+APP_SCOPE="https://graph.microsoft.com/.default"
+GRAPH_API="https://graph.microsoft.com/v1.0"
+
+ACCESS_TOKEN=$(curl -s -X POST \
+-H "Content-Type: application/x-www-form-urlencoded" \
+-d "grant_type=client_credentials&client_id=$CLIENT_ID&client_secret=$CLIENT_SECRET&scope=$APP_SCOPE" \
+https://login.microsoftonline.com/$TENANT_ID/oauth2/v2.0/token | jq -r '.access_token')
+
+APP_DETAILS=$(curl -s -G "https://graph.microsoft.com/v1.0/applications" \
+    -H "Authorization: Bearer $ACCESS_TOKEN" \
+    -H "Content-Type: application/json" \
+    --data-urlencode "\$filter=appId eq '$CLIENT_ID'")
+
+APP_ID=$(echo "$APP_DETAILS" | jq -r '.value[0].id')
+echo "Application ID: $APP_ID"
+
+CURRENT_REDIRECTS=$(echo "$APP_DETAILS" | jq -r '.value[0].web.redirectUris // []')
+echo "Current redirect URIs: $CURRENT_REDIRECTS"
+
+if echo "$CURRENT_REDIRECTS" | jq -e --arg uri "$NEW_REDIRECT" 'index($uri)' > /dev/null; then
+    echo "Redirect URI '$NEW_REDIRECT' already exists. No update needed."
+else
+    UPDATED_REDIRECTS=$(echo "$CURRENT_REDIRECTS" | jq --arg uri "$NEW_REDIRECT" '. + [$uri]')
+    echo "Updated redirect URIs: $UPDATED_REDIRECTS"
+
+    UPDATE_REDIRECTS=$(curl -fs -X PATCH \
+        -H "Authorization: Bearer $ACCESS_TOKEN" \
+        -H "Content-Type: application/json" \
+        -d "{
+          \"web\": {
+            \"redirectUris\": $UPDATED_REDIRECTS
+          }
+        }" \
+        "https://graph.microsoft.com/v1.0/applications/$APP_ID")
+
+    if [ $? -eq 0 ]; then
+        echo "Successfully updated redirect URIs"
+        echo $UPDATE_REDIRECTS
+    else
+        echo "Failed to update redirect URIs"
+        echo $UPDATE_REDIRECTS
+    fi
+fi

package/eslint.config.js

@@ -10,7 +10,7 @@ export default [
       globals: {
         ...globals.browser,
         ...globals.node, // Add Node.js globals
-      },
+      },g
     },
   },
   pluginJs.configs.recommended,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@docupace/pipeline",
-  "version": "1.0.39-newrelease.13",
+  "version": "1.0.39-newrelease.14",
   "description": "",
   "main": "index.js",
   "type": "module",

package/src/auth0/cli.js

@@ -15,7 +15,7 @@ const program = new Command();
 
 program
   .command(
-    'configureFromSite <fromSite> <toSite> <fromEnv> <toEnv> <deployUI> <deployGraphQLServer> <useNewDomain> <useS3> <deployCCUI>',
+    'configureFromSite <fromSite> <toSite> <fromEnv> <toEnv> <deployUI> <deployGraphQLServer> <useNewDomain> <useS3Ui> <deployCCUI> <useS3Gq> ',
   )
   .description('Configure the Auth0 tenants in env for the given site')
   .action(
@@ -27,8 +27,9 @@ program
       deployUI,
       deployGraphQLServer,
       useNewDomain,
-      useS3,
+      useS3Ui,
       deployCCUI,
+      useS3Gq,
     ) => {
       await configureFromSite(
         fromSite,
@@ -38,8 +39,9 @@ program
         deployUI,
         deployGraphQLServer,
         useNewDomain,
-        useS3 === 'true' || useS3 === true,
+        useS3Ui === 'true' || useS3Ui === true,
         deployCCUI,
+        useS3Gq === 'true' || useS3Gq === true,
       );
     },
   );

package/src/auth0/configure.js

@@ -10,7 +10,10 @@ import {
   readDeployConfig,
 } from '../next/deploy.js';
 
-import { getVaultSecrets, updateVaultSecrets } from './vault.js';
+import {
+  getVaultSecrets,
+  updateVaultSecrets
+} from './vault.js';
 import {
   coreSiteEnvMap,
   environmentConfig,
@@ -19,7 +22,7 @@ import {
 
 async function ensureDirectoryExists(dirPath) {
   try {
-    await fs.promises.mkdir(dirPath, { recursive: true });
+    await fs.promises.mkdir(dirPath, {recursive: true});
     console.log(`Directory created or already exists: ${dirPath}`);
   } catch (err) {
     console.error(`Failed to create directory: ${err.message}`);
@@ -67,6 +70,7 @@ async function configureUI(
   auth0Token,
   vaultSiteSecretsPath,
   imageTag,
+  revision,
   repoPath,
   useS3,
 ) {
@@ -81,7 +85,7 @@ async function configureUI(
     const auth0Response = await axios.get(
       `https://${auth0Domain}/api/v2/clients`,
       {
-        headers: { authorization: `Bearer ${auth0Token}` },
+        headers: {authorization: `Bearer ${auth0Token}`},
       },
     );
 
@@ -117,10 +121,18 @@ async function configureUI(
       console.log(`siteAWSSecretsPath => ${siteAWSSecretsPath}`);
     }
 
+    const awsS3Vars = (useS3 === true || useS3 === 'true')
+      ? `
+    AWS_ACCESS_KEY_ID: vault:secret/data/${site}/aws/config#AWS_ACCESS_KEY_ID
+    AWS_BUCKET_NAME: vault:secret/data/${site}/aws/config#AWS_BUCKET_NAME
+    AWS_SECRET_ACCESS_KEY: vault:secret/data/${site}/aws/config#AWS_SECRET_ACCESS_KEY
+    AWS_REGION: vault:secret/data/${site}/aws/config#AWS_REGION`
+      : '';
+
     // Prepare ui.app.yaml
     const uiAppYaml = `
 repo: docupace-ui-main
-revision: master
+revision: ${revision}
 `.trim();
 
     // Prepare ui.values.yaml
@@ -135,29 +147,17 @@ uiMain:
   coreUrl: https://${coreURL}
   env:
     AUTH0_CLIENT_SECRET: vault:secret/data/${site}/ui/config#AUTH0_CLIENT_SECRET
-    AUTH0_SECRET: vault:secret/data/${site}/ui/config#AUTH0_SECRET
-    ${
-      useS3 === true || useS3 === 'true'
-        ? `
-    AWS_ACCESS_KEY_ID: vault:secret/data/${site}/aws/config#AWS_ACCESS_KEY_ID
-    AWS_BUCKET_NAME: vault:secret/data/${site}/aws/config#AWS_BUCKET_NAME
-    AWS_SECRET_ACCESS_KEY: vault:secret/data/${site}/aws/config#AWS_SECRET_ACCESS_KEY
-    `.trim()
-        : ''
-    }
+    AUTH0_SECRET: vault:secret/data/${site}/ui/config#AUTH0_SECRET${awsS3Vars ? '\n    ' + awsS3Vars.trim() : ''}
 image:
-  repository: registry.paperout.com/docupace-ui-main-dev-docker-local/docupace-ui-main
+  repository: registry.paperout.com/docupace-ui-main-${env}-docker-local/enterprise-ui-app
   tag: ${imageTag}
-${
-  useS3 === true || useS3 === 'true'
-    ? `
+${useS3 === true || useS3 === 'true' ? `
 serviceAccount:
   create: true
   annotations:
-    eks.amazonaws.com/role-arn: arn:aws:iam::${siteAWSSecrets.AWS_ACCOUNT_ID}:role/eks-pod-identity-connect-next-${env}-${site}-bucket
-`.trim()
-    : ''
-}
+    "helm.sh/hook": pre-install
+    "helm.sh/hook-weight": "-10"
+    eks.amazonaws.com/role-arn: arn:aws:iam::${siteAWSSecrets.AWS_ACCOUNT_ID}:role/eks-pod-identity-connect-next-${env}-${site}-bucket` : ''}
 imagePullSecrets:
   - name: jf-artifactory
 ingress:
@@ -222,7 +222,7 @@ externalConnectService:
         if (err) {
           console.error('Failed to write the file:', err);
         } else {
-          console.log('File written successfully.');
+          console.log(`File ${repoPath}/dp/${site}/ui.app.yaml written successfully.`);
         }
       },
     );
@@ -234,13 +234,11 @@ externalConnectService:
         if (err) {
           console.error('Failed to write the file:', err);
         } else {
-          console.log('File written successfully.');
+          console.log(`File ${repoPath}/dp/${site}/ui.values.yaml written successfully.`);
         }
       },
     );
-    console.log('Done!');
-    console.log('Updating Core Site Config...');
-    await updateCoreSiteConfig(site, env, useS3);
+    console.log('The UI part is done!');
   } catch (error) {
     console.error('Error configuring UI:', error);
   }
@@ -259,6 +257,7 @@ async function configureCCUI(
   auth0Token,
   vaultSiteSecretsPath,
   imageTag,
+  revision,
   repoPath,
   useS3,
   ccUrl,
@@ -275,7 +274,7 @@ async function configureCCUI(
     const auth0Response = await axios.get(
       `https://${auth0Domain}/api/v2/clients`,
       {
-        headers: { authorization: `Bearer ${auth0Token}` },
+        headers: {authorization: `Bearer ${auth0Token}`},
       },
     );
 
@@ -311,13 +310,16 @@ async function configureCCUI(
       console.log(`siteAWSSecretsPath => ${siteAWSSecretsPath}`);
     }
 
+    const awsS3Vars = (useS3 === true || useS3 === 'true')
+      ? `
+    AWS_ACCESS_KEY_ID: vault:secret/data/${site}/aws/config#AWS_ACCESS_KEY_ID
+    AWS_BUCKET_NAME: vault:secret/data/${site}/aws/config#AWS_BUCKET_NAME
+    AWS_SECRET_ACCESS_KEY: vault:secret/data/${site}/aws/config#AWS_SECRET_ACCESS_KEY
+    AWS_REGION: vault:secret/data/${site}/aws/config#AWS_REGION`
+      : '';
+
     // Prepare cc.app.yaml
-    const uiССAppYaml = `
-repo: docupace-ui-main
-revision: master
-`.trim();
-    // Prepare cc.values.yaml
-    const uiССValuesYaml = `
+    const uiCCValuesYaml = `
 uiMain:
   auth0BaseUrl: https://${ccUrl}
   auth0IssuerBaseUrl: https://${auth0Domain}
@@ -329,15 +331,9 @@ uiMain:
   env:
     AUTH0_AUDIENCE: core-api-access
     AUTH0_CLIENT_SECRET: vault:secret/data/${site}/ui-cc/config#AUTH0_CLIENT_SECRET
-    AUTH0_SECRET: vault:secret/data/${site}/ui-cc/config#AUTH0_SECRET
-    ${
-      useS3 === true || useS3 === 'true'
-        ? `
-    AWS_ACCESS_KEY_ID: vault:secret/data/${site}/aws/config#AWS_ACCESS_KEY_ID
-    AWS_BUCKET_NAME: vault:secret/data/${site}/aws/config#AWS_BUCKET_NAME
-    AWS_SECRET_ACCESS_KEY: vault:secret/data/${site}/aws/config#AWS_SECRET_ACCESS_KEY
+    AUTH0_SECRET: vault:secret/data/${site}/ui-cc/config#AUTH0_SECRET${awsS3Vars ? '\n    ' + awsS3Vars.trim() : ''}
 image:
-  repository: registry.paperout.com/docupace-ui-main-dev-docker-local/cc-ui-app
+  repository: registry.paperout.com/docupace-ui-main-${env}-docker-local/cc-ui-app
   tag: ${imageTag}
 imagePullSecrets:
   - name: jf-artifactory
@@ -358,19 +354,13 @@ ingress:
     - hosts:
         - ${ccUrl}
       secretName: dp-cc-ui-cert
-    `.trim()
-        : ''
-    }
-${
-  useS3 === true || useS3 === 'true'
-    ? `
+${useS3 === true || useS3 === 'true' ? `
 serviceAccount:
   create: true
   annotations:
-    eks.amazonaws.com/role-arn: arn:aws:iam::${siteAWSSecrets.AWS_ACCOUNT_ID}:role/eks-pod-identity-connect-next-${env}-${site}-bucket
-`.trim()
-    : ''
-}
+    "helm.sh/hook": pre-install
+    "helm.sh/hook-weight": "-10"
+    eks.amazonaws.com/role-arn: arn:aws:iam::${siteAWSSecrets.AWS_ACCOUNT_ID}:role/eks-pod-identity-connect-next-${env}-${site}-bucket` : ''}
 `.trim();
 
     console.log('Writing configuration files...');
@@ -378,32 +368,30 @@ serviceAccount:
 
     await fs.writeFile(
       `${repoPath}/dp/${site}/cc.app.yaml`,
-      uiССAppYaml,
+      uiCCAppYaml,
       (err) => {
         if (err) {
-          console.error('Failed to write the file:', err);
+          console.error(`Failed to write ${repoPath}/dp/${site}/cc.app.yaml file:`, err);
         } else {
-          console.log('File written successfully.');
+          console.log(`File ${repoPath}/dp/${site}/cc.app.yaml written successfully.`);
         }
       },
     );
 
     await fs.writeFile(
       `${repoPath}/dp/${site}/cc.values.yaml`,
-      uiССValuesYaml,
+      uiCCValuesYaml,
       (err) => {
         if (err) {
-          console.error('Failed to write the file:', err);
+          console.error(`Failed to write ${repoPath}/dp/${site}/cc.values.yaml file:`, err);
         } else {
-          console.log('File written successfully.');
+          console.log(`File ${repoPath}/dp/${site}/cc.values.yaml written successfully.`);
         }
       },
     );
-    console.log('Done!');
-    console.log('Updating Core Site Config...');
-    await updateCoreSiteConfig(site, env, useS3);
+    console.log('CC-UI configuration is done!');
   } catch (error) {
-    console.error('Error configuring UI:', error);
+    console.error('Error configuring CC-UI:', error);
   }
 }
 
@@ -418,12 +406,12 @@ export async function cleanAndWritePropertiesFile(configPath, content) {
     await fs.writeFile(configPath, cleanedContent, 'utf8');
     console.log(`Cleaned and written file to: ${configPath}`);
   } catch (error) {
-    console.error('Error writing properties file:', error.message);
+    console.error(`Error writing properties file to ${configPath}:`, error.message);
     process.exit(1);
   }
 }
 
-export async function updateCoreSiteConfig(site, env, useS3) {
+export async function updateCoreSiteConfig(site, env, useS3Ui, useS3Gq) {
   try {
     const coreSiteEnv = coreSiteEnvMap[env];
 
@@ -439,7 +427,7 @@ export async function updateCoreSiteConfig(site, env, useS3) {
 
     let siteAWSSecrets = null;
 
-    if (useS3 === true || useS3 === 'true') {
+    if (useS3Ui === true || useS3Ui === 'true' || useS3Gq === true || useS3Gq === 'true') {
       const siteAWSSecretsPath = getVaultSecretsConfigs(site).awsSecretsPath;
       siteAWSSecrets = await getVaultSecrets(siteAWSSecretsPath);
       console.log(`siteAWSSecretsPath => ${siteAWSSecretsPath}`);
@@ -447,14 +435,11 @@ export async function updateCoreSiteConfig(site, env, useS3) {
 
     const coreSiteConfig = `
         ${
-          siteAWSSecrets
-            ? `
+      siteAWSSecrets
+        ? `
 com.docupace.imports.files.FilesImportConfig.aws.accessKeyId=${siteAWSSecrets.AWS_ACCESS_KEY_ID}
 com.docupace.imports.files.FilesImportConfig.aws.accessKeySecret=${siteAWSSecrets.AWS_SECRET_ACCESS_KEY}
-com.docupace.imports.files.FilesImportConfig.aws.region=${siteAWSSecrets.AWS_REGION}
-`.trim()
-            : ''
-        }
+com.docupace.imports.files.FilesImportConfig.aws.region=${siteAWSSecrets.AWS_REGION}`.trim() : ''}
 `;
 
     await fs.ensureDir(path.join(coreSiteConfigRepoPath, site.toUpperCase()));
@@ -481,9 +466,11 @@ async function configureGraphQLServer(
   auth0Token,
   vaultSiteSecretsPath,
   imageTag,
+  revision,
   standardConfigRemoteBranch,
   repoPath,
   commonSecrets,
+  useS3,
 ) {
   siteHost = siteHost.replace('https://', '');
   coreURL = coreURL.replace('https://', '');
@@ -495,7 +482,7 @@ async function configureGraphQLServer(
     const auth0Response = await axios.get(
       `https://${auth0Domain}/api/v2/clients`,
       {
-        headers: { authorization: `Bearer ${auth0Token}` },
+        headers: {authorization: `Bearer ${auth0Token}`},
       },
     );
 
@@ -530,13 +517,28 @@ async function configureGraphQLServer(
 
     await updateVaultSecrets(vaultSiteSecretsPath, graphQLServerSecretData);
 
-    // Prepare ui.app.yaml
+    let siteAWSSecrets = null;
+
+    if (useS3 === true || useS3 === 'true') {
+      const siteAWSSecretsPath = getVaultSecretsConfigs(site).awsSecretsPath;
+      siteAWSSecrets = await getVaultSecrets(siteAWSSecretsPath);
+      console.log(`siteAWSSecretsPath => ${siteAWSSecretsPath}`);
+    }
+
+    const awsS3Vars = (useS3 === true || useS3 === 'true')
+      ? `
+    AWS_ACCESS_KEY_ID: vault:secret/data/${site}/aws/config#AWS_ACCESS_KEY_ID
+    AWS_S3_BUCKET_NAME: vault:secret/data/${site}/aws/config#AWS_BUCKET_NAME
+    AWS_SECRET_ACCESS_KEY: vault:secret/data/${site}/aws/config#AWS_SECRET_ACCESS_KEY
+    AWS_REGION: vault:secret/data/${site}/aws/config#AWS_REGION`.trim()
+      : '';
+    // Prepare graphql-server.app.yaml
     const graphQLServerAppYaml = `
 repo: docupace-graphql-server
-revision: ${standardConfigRemoteBranch}
+revision: ${revision}
 `.trim();
 
-    // Prepare ui.values.yaml
+    // Prepare graphql-server.values.yaml
     const graphQLServerValuesYaml = `
 graphqlServer:
   auth0Domain: https://${auth0Domain}
@@ -552,9 +554,19 @@ graphqlServer:
     STANDARD_CONFIG_REMOTE_PATH: vault:secret/data/common/config#STANDARD_CONFIG_REMOTE_PATH
     SITE_CONFIG_REMOTE_PATH: vault:secret/data/${site}/common/config#SITE_CONFIG_REMOTE_PATH
     AUTH0_CC_CLIENT_ID: vault:secret/data/${site}/graphql-server/config#AUTH0_CC_CLIENT_ID
-    AUTH0_CC_CLIENT_SECRET: vault:secret/data/${site}/graphql-server/config#AUTH0_CC_CLIENT_SECRET
+    AUTH0_CC_CLIENT_SECRET: vault:secret/data/${site}/graphql-server/config#AUTH0_CC_CLIENT_SECRET${awsS3Vars ? '\n    ' + awsS3Vars.trim() : ''}
+${
+      useS3 === true || useS3 === 'true'
+        ? `
+serviceAccount:
+  create: true
+  annotations:
+    "helm.sh/hook": pre-install
+    "helm.sh/hook-weight": "-10"
+    eks.amazonaws.com/role-arn: arn:aws:iam::${siteAWSSecrets.AWS_ACCOUNT_ID}:role/eks-pod-identity-connect-next-${env}-${site}-bucket`.trim()
+        : ''}
 image:
-  repository: registry.paperout.com/docupace-graphql-server-dev-docker-local/docupace-graphql-server
+  repository: registry.paperout.com/docupace-graphql-server-${env}-docker-local/docupace-graphql-server
   tag: ${imageTag}
 imagePullSecrets:
   - name: jf-artifactory
@@ -574,8 +586,7 @@ ingress:
   tls:
     - hosts:
         - ${siteHost}
-      secretName: dp-next-ui-cert
-`.trim();
+      secretName: dp-next-ui-cert`.trim();
 
     // Write configuration files
     console.log('Writing ArgoCD GraphQL Server configuration files...');
@@ -598,13 +609,13 @@ ingress:
       graphQLServerValuesYaml,
       (err) => {
         if (err) {
-          console.error('Failed to write the file:', err);
+          console.error(`Failed to write ${repoPath}/dp/${site}/graphql-server.values.yaml file:`, err);
         } else {
-          console.log('File written successfully.');
+          console.log(`File ${repoPath}/dp/${site}/graphql-server.values.yaml written successfully.`);
         }
       },
     );
-    console.log('Done!');
+    console.log('GraphQL Server configuration is done!');
   } catch (error) {
     console.error('Error configuring GraphQL Server:', error);
   }
@@ -618,8 +629,9 @@ export async function configureFromSite(
   deployUI,
   deployGraphQLServer,
   useNewDomain,
-  useS3,
+  useS3Ui,
   deployCCUI,
+  useS3Gq,
 ) {
   console.log(
     `Configuring Auth0 tenants and ArgoCD apps for site: ${toSite} in env: ${toEnv} from site: ${fromSite}`,
@@ -671,36 +683,95 @@ export async function configureFromSite(
   //TODO: clone fromEnv and toEnv. replace above with this
 
   // const auth0RepoPath = await cloneRepository('auth0-site-setup');
+  let uiImageTag, uiRevision;
+  if (deployUI === true || deployUI === 'true') {
+    // Read deploy configs
+    const {deployConfig: deployUIConfig} = await readDeployConfig(
+      'ui',
+      fromEnv,
+      fromSite,
+      'values',
+    );
+    const {deployConfig: deployUiRevisionConfig} = await readDeployConfig(
+      'ui',
+      fromEnv,
+      fromSite,
+      'app',
+    );
+
+    uiImageTag = deployUIConfig.image.tag;
+    uiRevision = deployUiRevisionConfig.revision;
+
+    console.log(`Copying Latest UI Revision: ${uiRevision}`);
+  }
+
+  let ccImageTag, ccRevision;
+  if (deployCCUI === true || deployCCUI === 'true') {
+    const {deployConfig: deployCCConfig} = await readDeployConfig(
+      'cc',
+      fromEnv,
+      fromSite,
+      'values',
+    );
 
-  // Read deploy configs
-  const { deployConfig: deployUIConfig } = await readDeployConfig(
-    'ui',
+    const {deployConfig: deployCCRevisionConfig} = await readDeployConfig(
+      'cc',
+      fromEnv,
+      fromSite,
+      'app',
+    );
+
+    ccImageTag = deployCCConfig.image.tag;
+    ccRevision = deployCCRevisionConfig.revision;
+
+    console.log(`Copying Latest CC Revision: ${ccRevision}`);
+  }
+
+  const {deployConfig: deployGraphQLServerConfig} = await readDeployConfig(
+    'graphql-server',
     fromEnv,
     fromSite,
     'values',
   );
-  const uiImageTag = deployUIConfig.image.tag;
 
-  const { deployConfig: deployGraphQLServerConfig } = await readDeployConfig(
+  const {deployConfig: deployGraphQLServerRevisionConfig} = await readDeployConfig(
     'graphql-server',
     fromEnv,
     fromSite,
-    'values',
+    'app',
   );
+
+  const gqRevision = deployGraphQLServerRevisionConfig.revision;
+
+  console.log(`Copying Latest GQ Server Revision: ${gqRevision}`);
+
   const graphqlImageTag = deployGraphQLServerConfig.image.tag;
   const graphqlStandardConfigRemoteBranch =
     deployGraphQLServerConfig.graphqlServer.standardConfigRemoteBranch;
 
-  console.log(
-    `Copying Latest UI Image Tag: ${deployUIConfig.image.tag} from site: ${fromSite} to site: ${toSite}`,
-  );
+  if (deployUI === true || deployUI === 'true') {
+    console.log(
+      `Copying Latest UI Image Tag: ${uiImageTag} from site: ${fromSite} to site: ${toSite}`,
+    );
+  }
+
+  if (deployCCUI === true || deployCCUI === 'true') {
+    console.log(
+      `Copying Latest CC-UI Image Tag: ${ccImageTag} from site: ${fromSite} to site: ${toSite}`,
+    );
+  }
+
   console.log(
     `Copying Latest GraphQL Server Image Tag: ${deployGraphQLServerConfig.image.tag} from site: ${fromSite} to site: ${toSite}`,
   );
 
   const envConfig = environmentConfig[toEnv];
 
-  let CORE_URL, SITE_HOST, CORE_API_CONTEXT, CONNECT_URL, DOCUPACE_HOST;
+  let CORE_URL,
+    SITE_HOST,
+    CORE_API_CONTEXT,
+    CONNECT_URL,
+    DOCUPACE_HOST;
   const newUrl = envConfig.newUrl(toSite);
   const ccUrl = envConfig.ccUrl(toSite);
 
@@ -735,8 +806,9 @@ export async function configureFromSite(
       auth0Token,
       uiSecretsPath,
       uiImageTag,
+      uiRevision,
       repoPathToEnv,
-      useS3,
+      useS3Ui,
     );
   }
 
@@ -753,9 +825,10 @@ export async function configureFromSite(
       auth0ClientSecret,
       auth0Token,
       ccUISecretsPath,
-      uiImageTag,
+      ccImageTag,
+      ccRevision,
       repoPathToEnv,
-      useS3,
+      useS3Ui,
       ccUrl,
     );
   }
@@ -772,12 +845,17 @@ export async function configureFromSite(
     auth0Token,
     graphqlSecretsPath,
     graphqlImageTag,
+    gqRevision,
     graphqlStandardConfigRemoteBranch,
     repoPathToEnv,
     commonSecrets,
+    useS3Gq,
   );
+
+  console.log('Updating Core Site Config...');
+  await updateCoreSiteConfig(toSite, toEnv, useS3Ui, useS3Gq);
   await pushDeployConfig(
     repoPathToEnv,
-    `Config update for ${toSite} from ${fromSite} with UI: ${uiImageTag} and GraphQL: ${graphqlImageTag}`,
+    `Config update for ${toSite} from ${fromSite} GraphQL: ${graphqlImageTag}`,
   );
 }

package/src/auth0/metadata.js

@@ -10,14 +10,15 @@ export async function getAuth0Metadata(site, env) {
   try {
     const connectDeployRepoPath = await cloneRepository('connect-deploy');
 
-    if (env === 'qa') {
-      console.log(
-        `The environment is: (${env}), but connect-deploy has preprod instead`,
-      );
-      process.chdir(`${connectDeployRepoPath}/envs/preprod/${site}`);
-    } else {
-      process.chdir(`${connectDeployRepoPath}/envs/${env}/${site}`);
-    }
+    // mapping of env to env
+    const envMap = {
+      dev: 'dev',
+      preprod: 'qa',
+      stage: 'stage',
+      uat: 'uat',
+      'prod-www3': 'prod',
+    };
+    process.chdir(`${connectDeployRepoPath}/envs/${env}/${site}`);
 
     const configPath = path.join('conf', 'application.conf');
     const appConf = await fs.readFile(configPath, 'utf-8');
@@ -47,7 +48,7 @@ export async function getAuth0Metadata(site, env) {
       getVaultSecretsConfigs(site).siteCommonSecretsPath;
     console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
     const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
-    const auth0Domain = `docupace-${env}-${site}.us.auth0.com`;
+    const auth0Domain = `docupace-${envMap[env]}-${site}.us.auth0.com`;
     const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
     const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
     const auth0Token = await getAuth0AuthToken(