@docupace/pipeline 1.0.4-2.apache.3 → 1.0.4-4.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +1 -1
- package/src/auth0/configure.js +3 -3
- package/src/next/connect.js +42 -7
- package/terraform/apply.sh +12 -1
- package/terraform/init.sh +12 -1
- package/terraform/plan.sh +35 -22
package/package.json
CHANGED
package/src/auth0/configure.js
CHANGED
|
@@ -146,7 +146,7 @@ uiMain:
|
|
|
146
146
|
: ''
|
|
147
147
|
}
|
|
148
148
|
image:
|
|
149
|
-
repository: registry.paperout.com/docupace-ui-main-
|
|
149
|
+
repository: registry.paperout.com/docupace-ui-main-${env}-docker-local/docupace-ui-main
|
|
150
150
|
tag: ${imageTag}
|
|
151
151
|
${
|
|
152
152
|
useS3 === true || useS3 === 'true'
|
|
@@ -337,7 +337,7 @@ uiMain:
|
|
|
337
337
|
AWS_BUCKET_NAME: vault:secret/data/${site}/aws/config#AWS_BUCKET_NAME
|
|
338
338
|
AWS_SECRET_ACCESS_KEY: vault:secret/data/${site}/aws/config#AWS_SECRET_ACCESS_KEY
|
|
339
339
|
image:
|
|
340
|
-
repository: registry.paperout.com/docupace-ui-main-
|
|
340
|
+
repository: registry.paperout.com/docupace-ui-main-${env}-docker-local/cc-ui-app
|
|
341
341
|
tag: ${imageTag}
|
|
342
342
|
imagePullSecrets:
|
|
343
343
|
- name: jf-artifactory
|
|
@@ -554,7 +554,7 @@ graphqlServer:
|
|
|
554
554
|
AUTH0_CC_CLIENT_ID: vault:secret/data/${site}/graphql-server/config#AUTH0_CC_CLIENT_ID
|
|
555
555
|
AUTH0_CC_CLIENT_SECRET: vault:secret/data/${site}/graphql-server/config#AUTH0_CC_CLIENT_SECRET
|
|
556
556
|
image:
|
|
557
|
-
repository: registry.paperout.com/docupace-graphql-server-
|
|
557
|
+
repository: registry.paperout.com/docupace-graphql-server-${env}-docker-local/docupace-graphql-server
|
|
558
558
|
tag: ${imageTag}
|
|
559
559
|
imagePullSecrets:
|
|
560
560
|
- name: jf-artifactory
|
package/src/next/connect.js
CHANGED
|
@@ -15,9 +15,42 @@ const vaultAddr = process.env.VAULT_ADDR;
|
|
|
15
15
|
const connectUIEnvMap = {
|
|
16
16
|
dev: 'dev',
|
|
17
17
|
qa: 'preprod',
|
|
18
|
-
|
|
18
|
+
stage: 'stg',
|
|
19
19
|
uat: 'uat',
|
|
20
|
-
|
|
20
|
+
prod: 'prod-www3',
|
|
21
|
+
};
|
|
22
|
+
|
|
23
|
+
|
|
24
|
+
const siteSettingsEnvMap = {
|
|
25
|
+
dev: 'dev',
|
|
26
|
+
preprod: 'preprod',
|
|
27
|
+
qa: 'preprod',
|
|
28
|
+
stage: 'staging',
|
|
29
|
+
stg: 'staging',
|
|
30
|
+
uat: 'uat',
|
|
31
|
+
prd: 'prod',
|
|
32
|
+
prod: 'prod',
|
|
33
|
+
'prod-www3': 'prod',
|
|
34
|
+
'prod-las': 'prod',
|
|
35
|
+
'prod-lax': 'prod',
|
|
36
|
+
'prod-athene': 'prod',
|
|
37
|
+
'prod-staging': 'prod',
|
|
38
|
+
};
|
|
39
|
+
|
|
40
|
+
const idpEnvMap = {
|
|
41
|
+
dev: 'dev',
|
|
42
|
+
preprod: 'qa',
|
|
43
|
+
qa: 'qa',
|
|
44
|
+
stage: 'stage',
|
|
45
|
+
stg: 'stage',
|
|
46
|
+
uat: 'uat',
|
|
47
|
+
prd: 'prod',
|
|
48
|
+
prod: 'prod',
|
|
49
|
+
'prod-www3': 'prod',
|
|
50
|
+
'prod-las': 'prod',
|
|
51
|
+
'prod-lax': 'prod',
|
|
52
|
+
'prod-athene': 'prod',
|
|
53
|
+
'prod-staging': 'prod',
|
|
21
54
|
};
|
|
22
55
|
|
|
23
56
|
function log(msg) {
|
|
@@ -47,8 +80,10 @@ async function gitCheckout(repository, destDir, branch = 'master') {
|
|
|
47
80
|
}
|
|
48
81
|
|
|
49
82
|
export async function connectClone() {
|
|
50
|
-
const connectFromEnv = connectUIEnvMap[process.env.FROM_BUILD_ENVIRONMENT];
|
|
51
|
-
const
|
|
83
|
+
// const connectFromEnv = connectUIEnvMap[process.env.FROM_BUILD_ENVIRONMENT];
|
|
84
|
+
const connectFromEnv = process.env.FROM_BUILD_ENVIRONMENT;
|
|
85
|
+
const connectToEnv = process.env.BUILD_ENVIRONMENT;
|
|
86
|
+
|
|
52
87
|
if (!vaultToken || !vaultAddr) {
|
|
53
88
|
console.error('Error: VAULT_TOKEN and VAULT_ADDR must be set.');
|
|
54
89
|
throw new Error('VAULT_TOKEN and VAULT_ADDR must be set.');
|
|
@@ -81,7 +116,7 @@ export async function connectClone() {
|
|
|
81
116
|
log(`AUTH0_REGION_DOMAIN: ${process.env.AUTH0_REGION_DOMAIN}`);
|
|
82
117
|
log(`AUTH0_CLIENT_ID: ${process.env.AUTH0_CLIENT_ID}`);
|
|
83
118
|
|
|
84
|
-
process.env.AUTH0_DOMAIN = `docupace-${process.env.BUILD_ENVIRONMENT}-${process.env.BUILD_SITE}.${process.env.AUTH0_REGION_DOMAIN}`;
|
|
119
|
+
process.env.AUTH0_DOMAIN = `docupace-${idpEnvMap[process.env.BUILD_ENVIRONMENT]}-${process.env.BUILD_SITE}.${process.env.AUTH0_REGION_DOMAIN}`;
|
|
85
120
|
|
|
86
121
|
const projectRoot = process.cwd();
|
|
87
122
|
// 4) Clone 'connect-deploy' into CONNECT_DIR
|
|
@@ -89,8 +124,8 @@ export async function connectClone() {
|
|
|
89
124
|
await gitCheckout('connect-deploy', process.env.CONNECT_DIR);
|
|
90
125
|
|
|
91
126
|
await gitCheckout(
|
|
92
|
-
`${connectToEnv}-site-settings`,
|
|
93
|
-
`${process.env.CONNECT_DIR}/${connectToEnv}-site-settings`,
|
|
127
|
+
`${siteSettingsEnvMap[connectToEnv]}-site-settings`,
|
|
128
|
+
`${process.env.CONNECT_DIR}/${siteSettingsEnvMap[connectToEnv]}-site-settings`,
|
|
94
129
|
);
|
|
95
130
|
|
|
96
131
|
// 5) Create site clone (emulating the dock.sh call)
|
package/terraform/apply.sh
CHANGED
|
@@ -10,8 +10,19 @@ if [[ -z "$PROJECT" ]]; then
|
|
|
10
10
|
exit 1
|
|
11
11
|
fi
|
|
12
12
|
|
|
13
|
+
if [ "$CURRENT_ENVIRONMENT" == "prd" ]; then
|
|
14
|
+
export EKS_CLUSTER_NAME="connect-next-prd-eks-cluster"
|
|
15
|
+
CURRENT_ENVIRONMENT="prod"
|
|
16
|
+
elif [ "$CURRENT_ENVIRONMENT" == "stg" ]; then
|
|
17
|
+
export EKS_CLUSTER_NAME="connect-next-stg-eks-cluster"
|
|
18
|
+
CURRENT_ENVIRONMENT="stage"
|
|
19
|
+
else
|
|
20
|
+
export EKS_CLUSTER_NAME="connect-next-${CURRENT_ENVIRONMENT}-eks-cluster"
|
|
21
|
+
fi
|
|
22
|
+
|
|
23
|
+
echo "Using EKS cluster: $EKS_CLUSTER_NAME"
|
|
24
|
+
|
|
13
25
|
export SESSION_NAME="EKSAdminSession"
|
|
14
|
-
export EKS_CLUSTER_NAME="connect-next-${CURRENT_ENVIRONMENT}-eks-cluster"
|
|
15
26
|
export ROLE_ARN="arn:aws:iam::$(aws sts get-caller-identity | jq -r '.Account'):role/$ROLE_NAME"
|
|
16
27
|
export ASSUME_ROLE_OUTPUT=$(aws sts assume-role --role-arn $ROLE_ARN --role-session-name $SESSION_NAME)
|
|
17
28
|
export AWS_ACCESS_KEY_ID=$(echo $ASSUME_ROLE_OUTPUT | jq -r '.Credentials.AccessKeyId')
|
package/terraform/init.sh
CHANGED
|
@@ -17,8 +17,19 @@ if [[ -z "$CURRENT_ENVIRONMENT" ]]; then
|
|
|
17
17
|
exit 1
|
|
18
18
|
fi
|
|
19
19
|
|
|
20
|
+
if [ "$CURRENT_ENVIRONMENT" == "prd" ]; then
|
|
21
|
+
export EKS_CLUSTER_NAME="connect-next-prd-eks-cluster"
|
|
22
|
+
CURRENT_ENVIRONMENT="prod"
|
|
23
|
+
elif [ "$CURRENT_ENVIRONMENT" == "stg" ]; then
|
|
24
|
+
export EKS_CLUSTER_NAME="connect-next-stg-eks-cluster"
|
|
25
|
+
CURRENT_ENVIRONMENT="stage"
|
|
26
|
+
else
|
|
27
|
+
export EKS_CLUSTER_NAME="connect-next-${CURRENT_ENVIRONMENT}-eks-cluster"
|
|
28
|
+
fi
|
|
29
|
+
|
|
30
|
+
echo "Using EKS cluster: $EKS_CLUSTER_NAME"
|
|
31
|
+
|
|
20
32
|
export SESSION_NAME="EKSAdminSession"
|
|
21
|
-
export EKS_CLUSTER_NAME="connect-next-${CURRENT_ENVIRONMENT}-eks-cluster"
|
|
22
33
|
export ROLE_ARN="arn:aws:iam::$(aws sts get-caller-identity | jq -r '.Account'):role/$ROLE_NAME"
|
|
23
34
|
export ASSUME_ROLE_OUTPUT=$(aws sts assume-role --role-arn $ROLE_ARN --role-session-name $SESSION_NAME)
|
|
24
35
|
export AWS_ACCESS_KEY_ID=$(echo $ASSUME_ROLE_OUTPUT | jq -r '.Credentials.AccessKeyId')
|
package/terraform/plan.sh
CHANGED
|
@@ -17,8 +17,19 @@ if [[ -z "$CURRENT_ENVIRONMENT" ]]; then
|
|
|
17
17
|
exit 1
|
|
18
18
|
fi
|
|
19
19
|
|
|
20
|
+
if [ "$CURRENT_ENVIRONMENT" == "prd" ]; then
|
|
21
|
+
export EKS_CLUSTER_NAME="connect-next-prd-eks-cluster"
|
|
22
|
+
CURRENT_ENVIRONMENT="prod"
|
|
23
|
+
elif [ "$CURRENT_ENVIRONMENT" == "stg" ]; then
|
|
24
|
+
export EKS_CLUSTER_NAME="connect-next-stg-eks-cluster"
|
|
25
|
+
CURRENT_ENVIRONMENT="stage"
|
|
26
|
+
else
|
|
27
|
+
export EKS_CLUSTER_NAME="connect-next-${CURRENT_ENVIRONMENT}-eks-cluster"
|
|
28
|
+
fi
|
|
29
|
+
|
|
30
|
+
echo "Using EKS cluster: $EKS_CLUSTER_NAME"
|
|
31
|
+
|
|
20
32
|
export SESSION_NAME="EKSAdminSession"
|
|
21
|
-
export EKS_CLUSTER_NAME="connect-next-${CURRENT_ENVIRONMENT}-eks-cluster"
|
|
22
33
|
export ROLE_ARN="arn:aws:iam::$(aws sts get-caller-identity | jq -r '.Account'):role/$ROLE_NAME"
|
|
23
34
|
export ASSUME_ROLE_OUTPUT=$(aws sts assume-role --role-arn $ROLE_ARN --role-session-name $SESSION_NAME)
|
|
24
35
|
export AWS_ACCESS_KEY_ID=$(echo $ASSUME_ROLE_OUTPUT | jq -r '.Credentials.AccessKeyId')
|
|
@@ -31,33 +42,35 @@ cd "$BITBUCKET_CLONE_DIR/${PROJECT}"
|
|
|
31
42
|
|
|
32
43
|
if [[ "$PROJECT" == "bb-build-agent-shell" ]]; then
|
|
33
44
|
if [[ "$CURRENT_ENVIRONMENT" == "dev" ]]; then
|
|
34
|
-
echo "$dev_build_agent_configuration" | base64 -d
|
|
45
|
+
echo "$dev_build_agent_configuration" | base64 -d >./env/${CURRENT_ENVIRONMENT}/us-west-2/build_agent_configuration.tfvars.json
|
|
35
46
|
elif [[ "$CURRENT_ENVIRONMENT" == "qa" ]]; then
|
|
36
|
-
echo "$qa_build_agent_configuration" | base64 -d
|
|
47
|
+
echo "$qa_build_agent_configuration" | base64 -d >./env/${CURRENT_ENVIRONMENT}/us-west-2/build_agent_configuration.tfvars.json
|
|
37
48
|
fi
|
|
38
49
|
|
|
39
50
|
terraform plan -var-file="./env/${CURRENT_ENVIRONMENT}/us-west-2/terraform.tfvars" \
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
elif [[ "$PROJECT" == "s3" ]];then
|
|
51
|
+
-var-file="./env/${CURRENT_ENVIRONMENT}/us-west-2/build_agent_configuration.tfvars.json" \
|
|
52
|
+
-out .tfplan
|
|
53
|
+
elif [[ "$PROJECT" == "s3" ]]; then
|
|
43
54
|
terraform plan -var-file="./env/${CURRENT_ENVIRONMENT}/us-west-2/terraform.tfvars" \
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
elif [[ "$PROJECT" == "idp" ]];then
|
|
55
|
+
-var="site=${SITE_NAME}" \
|
|
56
|
+
-var="env=${CURRENT_ENVIRONMENT}" \
|
|
57
|
+
-out .tfplan
|
|
58
|
+
elif [[ "$PROJECT" == "idp" ]]; then
|
|
48
59
|
terraform plan -var-file="./env/${CURRENT_ENVIRONMENT}/us-west-2/terraform.tfvars" \
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
60
|
+
-var="site=${SITE_NAME}" \
|
|
61
|
+
-var="env=${CURRENT_ENVIRONMENT}" \
|
|
62
|
+
-var="docupace_domain=${DOCUPACE_DOMAIN}" \
|
|
63
|
+
-var="docupace_next_domain=${DOCUPACE_NEXT_DOMAIN}" \
|
|
64
|
+
-var="old_page_design=${USE_OLD_PAGE_DESIGN}" \
|
|
65
|
+
-var="use_new_domain=${USE_NEW_DOMAIN}" \
|
|
66
|
+
-var="configure_autologin=${CONFIGURE_AUTOLOGIN}" \
|
|
67
|
+
-var="configure_enterprise_ui=${CONFIGURE_ENTERPRISE_UI}" \
|
|
68
|
+
-var="enable_mfa=${ENABLE_MFA}" \
|
|
69
|
+
-var="configure_ui_cc=${CONFIGURE_UI_CC}" \
|
|
70
|
+
-var="configure_precisefp_client_credentials=${CONFIGURE_PRECISEFP_CLIENT_CREDENTIALS}" \
|
|
71
|
+
-var="use_azuread_app=${USE_AZUREAD_APP}" \
|
|
72
|
+
-var="deploy_azuread_app=${DEPLOY_AZUREAD_APP}" \
|
|
73
|
+
-out .tfplan
|
|
61
74
|
else
|
|
62
75
|
terraform plan -var-file="./env/${CURRENT_ENVIRONMENT}/us-west-2/terraform.tfvars" -out .tfplan
|
|
63
76
|
fi
|