@docupace/pipeline 1.0.4-4.5 → 1.0.4-4.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bin/azuread_update_callbacks_for_app.sh +58 -0
- package/package.json +1 -1
- package/src/auth0/cli.js +76 -76
- package/src/next/apache.js +73 -73
- package/src/next/config.js +100 -99
- package/src/next/connect.js +224 -224
- package/src/next/haproxy.js +71 -67
|
@@ -0,0 +1,58 @@
|
|
|
1
|
+
#!/bin/bash
|
|
2
|
+
set -e
|
|
3
|
+
|
|
4
|
+
ENV=$1
|
|
5
|
+
|
|
6
|
+
if [ -z "$ENV" ]; then
|
|
7
|
+
echo "Usage: $0 <environment>"
|
|
8
|
+
exit 1
|
|
9
|
+
fi
|
|
10
|
+
|
|
11
|
+
TENANT_ID="docupace.onmicrosoft.com"
|
|
12
|
+
CLIENT_ID=$ARM_CLIENT_ID
|
|
13
|
+
CLIENT_SECRET=$ARM_CLIENT_SECRET
|
|
14
|
+
NEW_REDIRECT="https://docupace-$ENV-$SITE_NAME.us.auth0.com/login/callback"
|
|
15
|
+
APP_ID="auth0-$ENV-docupace"
|
|
16
|
+
APP_SCOPE="https://graph.microsoft.com/.default"
|
|
17
|
+
GRAPH_API="https://graph.microsoft.com/v1.0"
|
|
18
|
+
|
|
19
|
+
ACCESS_TOKEN=$(curl -s -X POST \
|
|
20
|
+
-H "Content-Type: application/x-www-form-urlencoded" \
|
|
21
|
+
-d "grant_type=client_credentials&client_id=$CLIENT_ID&client_secret=$CLIENT_SECRET&scope=$APP_SCOPE" \
|
|
22
|
+
https://login.microsoftonline.com/$TENANT_ID/oauth2/v2.0/token | jq -r '.access_token')
|
|
23
|
+
|
|
24
|
+
APP_DETAILS=$(curl -s -G "https://graph.microsoft.com/v1.0/applications" \
|
|
25
|
+
-H "Authorization: Bearer $ACCESS_TOKEN" \
|
|
26
|
+
-H "Content-Type: application/json" \
|
|
27
|
+
--data-urlencode "\$filter=appId eq '$CLIENT_ID'")
|
|
28
|
+
|
|
29
|
+
APP_ID=$(echo "$APP_DETAILS" | jq -r '.value[0].id')
|
|
30
|
+
echo "Application ID: $APP_ID"
|
|
31
|
+
|
|
32
|
+
CURRENT_REDIRECTS=$(echo "$APP_DETAILS" | jq -r '.value[0].web.redirectUris // []')
|
|
33
|
+
echo "Current redirect URIs: $CURRENT_REDIRECTS"
|
|
34
|
+
|
|
35
|
+
if echo "$CURRENT_REDIRECTS" | jq -e --arg uri "$NEW_REDIRECT" 'index($uri)' > /dev/null; then
|
|
36
|
+
echo "Redirect URI '$NEW_REDIRECT' already exists. No update needed."
|
|
37
|
+
else
|
|
38
|
+
UPDATED_REDIRECTS=$(echo "$CURRENT_REDIRECTS" | jq --arg uri "$NEW_REDIRECT" '. + [$uri]')
|
|
39
|
+
echo "Updated redirect URIs: $UPDATED_REDIRECTS"
|
|
40
|
+
|
|
41
|
+
UPDATE_REDIRECTS=$(curl -fs -X PATCH \
|
|
42
|
+
-H "Authorization: Bearer $ACCESS_TOKEN" \
|
|
43
|
+
-H "Content-Type: application/json" \
|
|
44
|
+
-d "{
|
|
45
|
+
\"web\": {
|
|
46
|
+
\"redirectUris\": $UPDATED_REDIRECTS
|
|
47
|
+
}
|
|
48
|
+
}" \
|
|
49
|
+
"https://graph.microsoft.com/v1.0/applications/$APP_ID")
|
|
50
|
+
|
|
51
|
+
if [ $? -eq 0 ]; then
|
|
52
|
+
echo "Successfully updated redirect URIs"
|
|
53
|
+
echo $UPDATE_REDIRECTS
|
|
54
|
+
else
|
|
55
|
+
echo "Failed to update redirect URIs"
|
|
56
|
+
echo $UPDATE_REDIRECTS
|
|
57
|
+
fi
|
|
58
|
+
fi
|
package/package.json
CHANGED
package/src/auth0/cli.js
CHANGED
|
@@ -1,76 +1,76 @@
|
|
|
1
|
-
#!/usr/bin/env node
|
|
2
|
-
|
|
3
|
-
import { Command } from 'commander';
|
|
4
|
-
import { configureFromSite } from './configure.js';
|
|
5
|
-
import { getVaultSecrets } from './vault.js';
|
|
6
|
-
|
|
7
|
-
import dotenv from 'dotenv';
|
|
8
|
-
import { configureAlias } from './alias.js';
|
|
9
|
-
import { exportConf } from './export.js';
|
|
10
|
-
import { getAuth0Metadata } from './metadata.js';
|
|
11
|
-
|
|
12
|
-
dotenv.config({ path: ['.env.pipeline.local', 'config/.env.pipeline.local'] });
|
|
13
|
-
|
|
14
|
-
const program = new Command();
|
|
15
|
-
|
|
16
|
-
program
|
|
17
|
-
.command(
|
|
18
|
-
'configureFromSite <fromSite> <toSite> <fromEnv> <toEnv> <deployUI> <deployGraphQLServer> <useNewDomain> <useS3> <deployCCUI>',
|
|
19
|
-
)
|
|
20
|
-
.description('Configure the Auth0 tenants in env for the given site')
|
|
21
|
-
.action(
|
|
22
|
-
async (
|
|
23
|
-
fromSite,
|
|
24
|
-
toSite,
|
|
25
|
-
fromEnv,
|
|
26
|
-
toEnv,
|
|
27
|
-
deployUI,
|
|
28
|
-
deployGraphQLServer,
|
|
29
|
-
useNewDomain,
|
|
30
|
-
useS3,
|
|
31
|
-
deployCCUI,
|
|
32
|
-
) => {
|
|
33
|
-
await configureFromSite(
|
|
34
|
-
fromSite,
|
|
35
|
-
toSite,
|
|
36
|
-
fromEnv,
|
|
37
|
-
toEnv,
|
|
38
|
-
deployUI,
|
|
39
|
-
deployGraphQLServer,
|
|
40
|
-
useNewDomain,
|
|
41
|
-
useS3 === 'true' || useS3 === true,
|
|
42
|
-
deployCCUI,
|
|
43
|
-
);
|
|
44
|
-
},
|
|
45
|
-
);
|
|
46
|
-
|
|
47
|
-
program
|
|
48
|
-
.command('getVaultSecrets <vaultPath>')
|
|
49
|
-
.description('Get Secrets for Vault PATH')
|
|
50
|
-
.action(async (vaultPath) => {
|
|
51
|
-
const data = await getVaultSecrets(vaultPath);
|
|
52
|
-
console.log(JSON.stringify(data, 'null', 2));
|
|
53
|
-
});
|
|
54
|
-
|
|
55
|
-
program
|
|
56
|
-
.command('configureAlias <site> <env> <username> <password> <realm>')
|
|
57
|
-
.description('Configure Core Alias for the given site')
|
|
58
|
-
.action(async (site, env, username, password, realm) => {
|
|
59
|
-
await configureAlias(site, env, username, password, realm);
|
|
60
|
-
});
|
|
61
|
-
|
|
62
|
-
program
|
|
63
|
-
.command('exportConf <site> <env>')
|
|
64
|
-
.description('Export Auth0 configuration for the given site')
|
|
65
|
-
.action(async (site, env) => {
|
|
66
|
-
await exportConf(site, env);
|
|
67
|
-
});
|
|
68
|
-
|
|
69
|
-
program
|
|
70
|
-
.command('getAuth0Metadata <site> <env>')
|
|
71
|
-
.description('Get Auth0 metadata for the given site')
|
|
72
|
-
.action(async (site, env) => {
|
|
73
|
-
await getAuth0Metadata(site, env);
|
|
74
|
-
});
|
|
75
|
-
|
|
76
|
-
program.parse(process.argv);
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
|
|
3
|
+
import { Command } from 'commander';
|
|
4
|
+
import { configureFromSite } from './configure.js';
|
|
5
|
+
import { getVaultSecrets } from './vault.js';
|
|
6
|
+
|
|
7
|
+
import dotenv from 'dotenv';
|
|
8
|
+
import { configureAlias } from './alias.js';
|
|
9
|
+
import { exportConf } from './export.js';
|
|
10
|
+
import { getAuth0Metadata } from './metadata.js';
|
|
11
|
+
|
|
12
|
+
dotenv.config({ path: ['.env.pipeline.local', 'config/.env.pipeline.local'] });
|
|
13
|
+
|
|
14
|
+
const program = new Command();
|
|
15
|
+
|
|
16
|
+
program
|
|
17
|
+
.command(
|
|
18
|
+
'configureFromSite <fromSite> <toSite> <fromEnv> <toEnv> <deployUI> <deployGraphQLServer> <useNewDomain> <useS3> <deployCCUI>',
|
|
19
|
+
)
|
|
20
|
+
.description('Configure the Auth0 tenants in env for the given site')
|
|
21
|
+
.action(
|
|
22
|
+
async (
|
|
23
|
+
fromSite,
|
|
24
|
+
toSite,
|
|
25
|
+
fromEnv,
|
|
26
|
+
toEnv,
|
|
27
|
+
deployUI,
|
|
28
|
+
deployGraphQLServer,
|
|
29
|
+
useNewDomain,
|
|
30
|
+
useS3,
|
|
31
|
+
deployCCUI,
|
|
32
|
+
) => {
|
|
33
|
+
await configureFromSite(
|
|
34
|
+
fromSite,
|
|
35
|
+
toSite,
|
|
36
|
+
fromEnv,
|
|
37
|
+
toEnv,
|
|
38
|
+
deployUI,
|
|
39
|
+
deployGraphQLServer,
|
|
40
|
+
useNewDomain,
|
|
41
|
+
useS3 === 'true' || useS3 === true,
|
|
42
|
+
deployCCUI,
|
|
43
|
+
);
|
|
44
|
+
},
|
|
45
|
+
);
|
|
46
|
+
|
|
47
|
+
program
|
|
48
|
+
.command('getVaultSecrets <vaultPath>')
|
|
49
|
+
.description('Get Secrets for Vault PATH')
|
|
50
|
+
.action(async (vaultPath) => {
|
|
51
|
+
const data = await getVaultSecrets(vaultPath);
|
|
52
|
+
console.log(JSON.stringify(data, 'null', 2));
|
|
53
|
+
});
|
|
54
|
+
|
|
55
|
+
program
|
|
56
|
+
.command('configureAlias <site> <env> <username> <password> <realm>')
|
|
57
|
+
.description('Configure Core Alias for the given site')
|
|
58
|
+
.action(async (site, env, username, password, realm) => {
|
|
59
|
+
await configureAlias(site, env, username, password, realm);
|
|
60
|
+
});
|
|
61
|
+
|
|
62
|
+
program
|
|
63
|
+
.command('exportConf <site> <env>')
|
|
64
|
+
.description('Export Auth0 configuration for the given site')
|
|
65
|
+
.action(async (site, env) => {
|
|
66
|
+
await exportConf(site, env);
|
|
67
|
+
});
|
|
68
|
+
|
|
69
|
+
program
|
|
70
|
+
.command('getAuth0Metadata <site> <env>')
|
|
71
|
+
.description('Get Auth0 metadata for the given site')
|
|
72
|
+
.action(async (site, env) => {
|
|
73
|
+
await getAuth0Metadata(site, env);
|
|
74
|
+
});
|
|
75
|
+
|
|
76
|
+
program.parse(process.argv);
|
package/src/next/apache.js
CHANGED
|
@@ -1,73 +1,73 @@
|
|
|
1
|
-
import fs from 'fs-extra';
|
|
2
|
-
import { $ } from 'zx';
|
|
3
|
-
|
|
4
|
-
function log(msg) {
|
|
5
|
-
console.log(`[*] ${msg}`);
|
|
6
|
-
}
|
|
7
|
-
|
|
8
|
-
export async function addApacheSite() {
|
|
9
|
-
if (
|
|
10
|
-
!process.env.ENVIRONMENT ||
|
|
11
|
-
!['dev', 'qa', 'uat', 'stage','www3'].includes(process.env.ENVIRONMENT)
|
|
12
|
-
) {
|
|
13
|
-
log('Error: wront ENVIRONMENT');
|
|
14
|
-
process.exit(1);
|
|
15
|
-
}
|
|
16
|
-
if (!process.env.SITE) {
|
|
17
|
-
log('Error: SITE cannot be empty.');
|
|
18
|
-
process.exit(1);
|
|
19
|
-
}
|
|
20
|
-
|
|
21
|
-
const apacheEnvHostMap = {
|
|
22
|
-
dev: {
|
|
23
|
-
host1: 'dev-apalb01a.corp.docupace.com',
|
|
24
|
-
host2: 'dev-apalb01b.corp.docupace.com',
|
|
25
|
-
repo: 'iis-preprod',
|
|
26
|
-
},
|
|
27
|
-
qa: {
|
|
28
|
-
host1: 'qa-apalb01a.corp.docupace.com',
|
|
29
|
-
host2: 'qa-apalb01b.corp.docupace.com',
|
|
30
|
-
repo: 'iis-preprod',
|
|
31
|
-
},
|
|
32
|
-
uat: {
|
|
33
|
-
host1: 'uat-apalb01a.edc.docupace.internal',
|
|
34
|
-
host2: 'uat-apalb01b.edc.docupace.internal',
|
|
35
|
-
repo: 'iis-www2',
|
|
36
|
-
},
|
|
37
|
-
stage: {
|
|
38
|
-
host1: 'stg-apalb01a.edc.docupace.internal',
|
|
39
|
-
host2: 'stg-apalb01b.edc.docupace.internal',
|
|
40
|
-
repo: 'iis-www2',
|
|
41
|
-
},
|
|
42
|
-
www3: {
|
|
43
|
-
host1: 'prd-apalb05a.edc.docupace.internal',
|
|
44
|
-
host2: 'prd-apalb05b.edc.docupace.internal',
|
|
45
|
-
repo: 'iis-www2',
|
|
46
|
-
},
|
|
47
|
-
};
|
|
48
|
-
|
|
49
|
-
// Save private key from base64
|
|
50
|
-
const haproxyPrivateKey = process.env.HAPROXY_PRIVATE_KEY;
|
|
51
|
-
if (!haproxyPrivateKey) {
|
|
52
|
-
log('Error: HAPROXY_PRIVATE_KEY not set.');
|
|
53
|
-
process.exit(1);
|
|
54
|
-
}
|
|
55
|
-
|
|
56
|
-
await fs.writeFile('private.key', Buffer.from(haproxyPrivateKey, 'base64'));
|
|
57
|
-
await fs.chmod('private.key', 0o600);
|
|
58
|
-
|
|
59
|
-
console.log('Running command');
|
|
60
|
-
const sshCmd = (server, script) =>
|
|
61
|
-
$`ssh -i private.key -o StrictHostKeyChecking=no root@${server} ${script}`;
|
|
62
|
-
|
|
63
|
-
// The script is run twice in the Bash version
|
|
64
|
-
await sshCmd(
|
|
65
|
-
apacheEnvHostMap[process.env.ENVIRONMENT].host1,
|
|
66
|
-
`/root/repo/${apacheEnvHostMap[process.env.ENVIRONMENT].repo}/scripts/addsite/add_core_site.sh ${process.env.ENVIRONMENT} ${process.env.SITE}`,
|
|
67
|
-
);
|
|
68
|
-
|
|
69
|
-
await sshCmd(
|
|
70
|
-
apacheEnvHostMap[process.env.ENVIRONMENT].host2,
|
|
71
|
-
`/root/repo/${apacheEnvHostMap[process.env.ENVIRONMENT].repo}/scripts/addsite/add_core_site.sh ${process.env.ENVIRONMENT} ${process.env.SITE}`,
|
|
72
|
-
);
|
|
73
|
-
}
|
|
1
|
+
import fs from 'fs-extra';
|
|
2
|
+
import { $ } from 'zx';
|
|
3
|
+
|
|
4
|
+
function log(msg) {
|
|
5
|
+
console.log(`[*] ${msg}`);
|
|
6
|
+
}
|
|
7
|
+
|
|
8
|
+
export async function addApacheSite() {
|
|
9
|
+
if (
|
|
10
|
+
!process.env.ENVIRONMENT ||
|
|
11
|
+
!['dev', 'qa', 'uat', 'stage','www3'].includes(process.env.ENVIRONMENT)
|
|
12
|
+
) {
|
|
13
|
+
log('Error: wront ENVIRONMENT');
|
|
14
|
+
process.exit(1);
|
|
15
|
+
}
|
|
16
|
+
if (!process.env.SITE) {
|
|
17
|
+
log('Error: SITE cannot be empty.');
|
|
18
|
+
process.exit(1);
|
|
19
|
+
}
|
|
20
|
+
|
|
21
|
+
const apacheEnvHostMap = {
|
|
22
|
+
dev: {
|
|
23
|
+
host1: 'dev-apalb01a.corp.docupace.com',
|
|
24
|
+
host2: 'dev-apalb01b.corp.docupace.com',
|
|
25
|
+
repo: 'iis-preprod',
|
|
26
|
+
},
|
|
27
|
+
qa: {
|
|
28
|
+
host1: 'qa-apalb01a.corp.docupace.com',
|
|
29
|
+
host2: 'qa-apalb01b.corp.docupace.com',
|
|
30
|
+
repo: 'iis-preprod',
|
|
31
|
+
},
|
|
32
|
+
uat: {
|
|
33
|
+
host1: 'uat-apalb01a.edc.docupace.internal',
|
|
34
|
+
host2: 'uat-apalb01b.edc.docupace.internal',
|
|
35
|
+
repo: 'iis-www2',
|
|
36
|
+
},
|
|
37
|
+
stage: {
|
|
38
|
+
host1: 'stg-apalb01a.edc.docupace.internal',
|
|
39
|
+
host2: 'stg-apalb01b.edc.docupace.internal',
|
|
40
|
+
repo: 'iis-www2',
|
|
41
|
+
},
|
|
42
|
+
www3: {
|
|
43
|
+
host1: 'prd-apalb05a.edc.docupace.internal',
|
|
44
|
+
host2: 'prd-apalb05b.edc.docupace.internal',
|
|
45
|
+
repo: 'iis-www2',
|
|
46
|
+
},
|
|
47
|
+
};
|
|
48
|
+
|
|
49
|
+
// Save private key from base64
|
|
50
|
+
const haproxyPrivateKey = process.env.HAPROXY_PRIVATE_KEY;
|
|
51
|
+
if (!haproxyPrivateKey) {
|
|
52
|
+
log('Error: HAPROXY_PRIVATE_KEY not set.');
|
|
53
|
+
process.exit(1);
|
|
54
|
+
}
|
|
55
|
+
|
|
56
|
+
await fs.writeFile('private.key', Buffer.from(haproxyPrivateKey, 'base64'));
|
|
57
|
+
await fs.chmod('private.key', 0o600);
|
|
58
|
+
|
|
59
|
+
console.log('Running command');
|
|
60
|
+
const sshCmd = (server, script) =>
|
|
61
|
+
$`ssh -i private.key -o StrictHostKeyChecking=no root@${server} ${script}`;
|
|
62
|
+
|
|
63
|
+
// The script is run twice in the Bash version
|
|
64
|
+
await sshCmd(
|
|
65
|
+
apacheEnvHostMap[process.env.ENVIRONMENT].host1,
|
|
66
|
+
`/root/repo/${apacheEnvHostMap[process.env.ENVIRONMENT].repo}/scripts/addsite/add_core_site.sh ${process.env.ENVIRONMENT} ${process.env.SITE}`,
|
|
67
|
+
);
|
|
68
|
+
|
|
69
|
+
await sshCmd(
|
|
70
|
+
apacheEnvHostMap[process.env.ENVIRONMENT].host2,
|
|
71
|
+
`/root/repo/${apacheEnvHostMap[process.env.ENVIRONMENT].repo}/scripts/addsite/add_core_site.sh ${process.env.ENVIRONMENT} ${process.env.SITE}`,
|
|
72
|
+
);
|
|
73
|
+
}
|
package/src/next/config.js
CHANGED
|
@@ -1,99 +1,100 @@
|
|
|
1
|
-
export const environments = ['dev', 'qa', 'uat', 'stage', 'prod'];
|
|
2
|
-
|
|
3
|
-
export const environmentConfig = {
|
|
4
|
-
dev: {
|
|
5
|
-
newUrl: (site) => `https://${site}.dev.dpai.tech`,
|
|
6
|
-
oldUrl: (site) => `https://www.dev.docupaceinc.com/${site}`,
|
|
7
|
-
docupaceHost: () => 'www.dev.docupaceinc.com',
|
|
8
|
-
ccUrl: (site) => `https://${site}-cc.dev.dpai.tech`,
|
|
9
|
-
},
|
|
10
|
-
qa: {
|
|
11
|
-
newUrl: (site) => `https://${site}.qa.dpai.tech`,
|
|
12
|
-
oldUrl: (site) => `https://www.preprod.docupaceinc.com/${site}`,
|
|
13
|
-
docupaceHost: () => 'www.preprod.docupaceinc.com',
|
|
14
|
-
ccUrl: (site) => `https://${site}-cc.qa.dpai.tech`,
|
|
15
|
-
},
|
|
16
|
-
uat: {
|
|
17
|
-
newUrl: (site) => `https://${site}.uat.dpai.tech`,
|
|
18
|
-
oldUrl: (site) => `https://www2.paperout.com/${site}_uat`,
|
|
19
|
-
docupaceHost: () => 'www2.paperout.com',
|
|
20
|
-
ccUrl: (site) => `https://${site}-cc.uat.dpai.tech`,
|
|
21
|
-
},
|
|
22
|
-
stage: {
|
|
23
|
-
newUrl: (site) => `https://${site}.stg.dpai.tech`,
|
|
24
|
-
oldUrl: (site) => `https://www2.paperout.com/${site}_staging`,
|
|
25
|
-
docupaceHost: () => 'www2.paperout.com',
|
|
26
|
-
ccUrl: (site) => `https://${site}-cc.stg.dpai.tech`,
|
|
27
|
-
},
|
|
28
|
-
prod: {
|
|
29
|
-
newUrl: (site) => `https://${site}.dpai.tech`,
|
|
30
|
-
oldUrl: (site) => `https://www2.paperout.com/${site}`,
|
|
31
|
-
docupaceHost: () => 'www2.paperout.com',
|
|
32
|
-
ccUrl: (site) => `https://${site}-cc.dpai.tech`,
|
|
33
|
-
},
|
|
34
|
-
};
|
|
35
|
-
|
|
36
|
-
export const appInfo = {
|
|
37
|
-
'graphql-server': {
|
|
38
|
-
repositoryName: 'docupace-graphql-server',
|
|
39
|
-
deployAttributes: [
|
|
40
|
-
'image.tag',
|
|
41
|
-
'graphqlServer.siteConfigRemoteBranch',
|
|
42
|
-
'graphqlServer.standardConfigRemoteBranch',
|
|
43
|
-
],
|
|
44
|
-
},
|
|
45
|
-
ui: {
|
|
46
|
-
repositoryName: 'docupace-ui-main',
|
|
47
|
-
deployAttributes: ['image.tag'],
|
|
48
|
-
},
|
|
49
|
-
};
|
|
50
|
-
|
|
51
|
-
export const getEnvInfo = () => {
|
|
52
|
-
const envInfo = Object.fromEntries(
|
|
53
|
-
environments.map((env) => [
|
|
54
|
-
env,
|
|
55
|
-
{
|
|
56
|
-
jfrog: {
|
|
57
|
-
username: process.env[`JF_REGISTRY_${env.toUpperCase()}_USERNAME`],
|
|
58
|
-
password: process.env[`JF_REGISTRY_${env.toUpperCase()}_PASSWORD`],
|
|
59
|
-
},
|
|
60
|
-
},
|
|
61
|
-
]),
|
|
62
|
-
);
|
|
63
|
-
|
|
64
|
-
return envInfo;
|
|
65
|
-
};
|
|
66
|
-
|
|
67
|
-
export const getBitbucketInfo = () => {
|
|
68
|
-
return {
|
|
69
|
-
username: process.env.BITBUCKET_USERNAME,
|
|
70
|
-
password: process.env.BITBUCKET_APP_PASSWORD,
|
|
71
|
-
workspace: 'dp-cloud',
|
|
72
|
-
};
|
|
73
|
-
};
|
|
74
|
-
|
|
75
|
-
export const getRepUrl = (repoName) => {
|
|
76
|
-
const { username, password, workspace } = getBitbucketInfo();
|
|
77
|
-
return `https://${username}:${password}@bitbucket.org/${workspace}/${repoName}.git`;
|
|
78
|
-
};
|
|
79
|
-
|
|
80
|
-
export const jfRegistryUrl = 'registry.paperout.com';
|
|
81
|
-
|
|
82
|
-
export const getVaultSecretsConfigs = (site) => {
|
|
83
|
-
return {
|
|
84
|
-
commonSecretsPath: 'secret/data/common/config',
|
|
85
|
-
siteCommonSecretsPath: `secret/data/${site}/common/config`,
|
|
86
|
-
graphqlServerSecretsPath: `secret/data/${site}/graphql-server/config`,
|
|
87
|
-
uiSecretsPath: `secret/data/${site}/ui/config`,
|
|
88
|
-
ccUISecretsPath: `secret/data/${site}/ui-cc/config`,
|
|
89
|
-
awsSecretsPath: `secret/data/${site}/aws/config`,
|
|
90
|
-
};
|
|
91
|
-
};
|
|
92
|
-
|
|
93
|
-
export const coreSiteEnvMap = {
|
|
94
|
-
dev: 'dev',
|
|
95
|
-
qa: 'preprod',
|
|
96
|
-
stg: 'staging',
|
|
97
|
-
uat: 'uat',
|
|
98
|
-
prd: 'prod',
|
|
99
|
-
|
|
1
|
+
export const environments = ['dev', 'qa', 'uat', 'stage', 'prod'];
|
|
2
|
+
|
|
3
|
+
export const environmentConfig = {
|
|
4
|
+
dev: {
|
|
5
|
+
newUrl: (site) => `https://${site}.dev.dpai.tech`,
|
|
6
|
+
oldUrl: (site) => `https://www.dev.docupaceinc.com/${site}`,
|
|
7
|
+
docupaceHost: () => 'www.dev.docupaceinc.com',
|
|
8
|
+
ccUrl: (site) => `https://${site}-cc.dev.dpai.tech`,
|
|
9
|
+
},
|
|
10
|
+
qa: {
|
|
11
|
+
newUrl: (site) => `https://${site}.qa.dpai.tech`,
|
|
12
|
+
oldUrl: (site) => `https://www.preprod.docupaceinc.com/${site}`,
|
|
13
|
+
docupaceHost: () => 'www.preprod.docupaceinc.com',
|
|
14
|
+
ccUrl: (site) => `https://${site}-cc.qa.dpai.tech`,
|
|
15
|
+
},
|
|
16
|
+
uat: {
|
|
17
|
+
newUrl: (site) => `https://${site}.uat.dpai.tech`,
|
|
18
|
+
oldUrl: (site) => `https://www2.paperout.com/${site}_uat`,
|
|
19
|
+
docupaceHost: () => 'www2.paperout.com',
|
|
20
|
+
ccUrl: (site) => `https://${site}-cc.uat.dpai.tech`,
|
|
21
|
+
},
|
|
22
|
+
stage: {
|
|
23
|
+
newUrl: (site) => `https://${site}.stg.dpai.tech`,
|
|
24
|
+
oldUrl: (site) => `https://www2.paperout.com/${site}_staging`,
|
|
25
|
+
docupaceHost: () => 'www2.paperout.com',
|
|
26
|
+
ccUrl: (site) => `https://${site}-cc.stg.dpai.tech`,
|
|
27
|
+
},
|
|
28
|
+
prod: {
|
|
29
|
+
newUrl: (site) => `https://${site}.dpai.tech`,
|
|
30
|
+
oldUrl: (site) => `https://www2.paperout.com/${site}`,
|
|
31
|
+
docupaceHost: () => 'www2.paperout.com',
|
|
32
|
+
ccUrl: (site) => `https://${site}-cc.dpai.tech`,
|
|
33
|
+
},
|
|
34
|
+
};
|
|
35
|
+
|
|
36
|
+
export const appInfo = {
|
|
37
|
+
'graphql-server': {
|
|
38
|
+
repositoryName: 'docupace-graphql-server',
|
|
39
|
+
deployAttributes: [
|
|
40
|
+
'image.tag',
|
|
41
|
+
'graphqlServer.siteConfigRemoteBranch',
|
|
42
|
+
'graphqlServer.standardConfigRemoteBranch',
|
|
43
|
+
],
|
|
44
|
+
},
|
|
45
|
+
ui: {
|
|
46
|
+
repositoryName: 'docupace-ui-main',
|
|
47
|
+
deployAttributes: ['image.tag'],
|
|
48
|
+
},
|
|
49
|
+
};
|
|
50
|
+
|
|
51
|
+
export const getEnvInfo = () => {
|
|
52
|
+
const envInfo = Object.fromEntries(
|
|
53
|
+
environments.map((env) => [
|
|
54
|
+
env,
|
|
55
|
+
{
|
|
56
|
+
jfrog: {
|
|
57
|
+
username: process.env[`JF_REGISTRY_${env.toUpperCase()}_USERNAME`],
|
|
58
|
+
password: process.env[`JF_REGISTRY_${env.toUpperCase()}_PASSWORD`],
|
|
59
|
+
},
|
|
60
|
+
},
|
|
61
|
+
]),
|
|
62
|
+
);
|
|
63
|
+
|
|
64
|
+
return envInfo;
|
|
65
|
+
};
|
|
66
|
+
|
|
67
|
+
export const getBitbucketInfo = () => {
|
|
68
|
+
return {
|
|
69
|
+
username: process.env.BITBUCKET_USERNAME,
|
|
70
|
+
password: process.env.BITBUCKET_APP_PASSWORD,
|
|
71
|
+
workspace: 'dp-cloud',
|
|
72
|
+
};
|
|
73
|
+
};
|
|
74
|
+
|
|
75
|
+
export const getRepUrl = (repoName) => {
|
|
76
|
+
const { username, password, workspace } = getBitbucketInfo();
|
|
77
|
+
return `https://${username}:${password}@bitbucket.org/${workspace}/${repoName}.git`;
|
|
78
|
+
};
|
|
79
|
+
|
|
80
|
+
export const jfRegistryUrl = 'registry.paperout.com';
|
|
81
|
+
|
|
82
|
+
export const getVaultSecretsConfigs = (site) => {
|
|
83
|
+
return {
|
|
84
|
+
commonSecretsPath: 'secret/data/common/config',
|
|
85
|
+
siteCommonSecretsPath: `secret/data/${site}/common/config`,
|
|
86
|
+
graphqlServerSecretsPath: `secret/data/${site}/graphql-server/config`,
|
|
87
|
+
uiSecretsPath: `secret/data/${site}/ui/config`,
|
|
88
|
+
ccUISecretsPath: `secret/data/${site}/ui-cc/config`,
|
|
89
|
+
awsSecretsPath: `secret/data/${site}/aws/config`,
|
|
90
|
+
};
|
|
91
|
+
};
|
|
92
|
+
|
|
93
|
+
export const coreSiteEnvMap = {
|
|
94
|
+
dev: 'dev',
|
|
95
|
+
qa: 'preprod',
|
|
96
|
+
stg: 'staging',
|
|
97
|
+
uat: 'uat',
|
|
98
|
+
prd: 'prod',
|
|
99
|
+
prod: 'prod',
|
|
100
|
+
};
|
package/src/next/connect.js
CHANGED
|
@@ -1,224 +1,224 @@
|
|
|
1
|
-
import 'zx/globals'; // npm i zx
|
|
2
|
-
import fs from 'fs-extra';
|
|
3
|
-
import path from 'path';
|
|
4
|
-
import { $ } from 'zx';
|
|
5
|
-
|
|
6
|
-
import { getVaultSecrets } from '../auth0/vault.js';
|
|
7
|
-
|
|
8
|
-
process.env.COMMON_VAULT_PATH =
|
|
9
|
-
process.env.COMMON_VAULT_PATH || 'secret/data/common/config';
|
|
10
|
-
process.env.VAULT_SKIP_VERIFY = process.env.VAULT_SKIP_VERIFY || 'true';
|
|
11
|
-
process.env.CONNECT_DIR = process.env.CONNECT_DIR || 'connect';
|
|
12
|
-
const vaultToken = process.env.VAULT_TOKEN;
|
|
13
|
-
const vaultAddr = process.env.VAULT_ADDR;
|
|
14
|
-
|
|
15
|
-
const connectUIEnvMap = {
|
|
16
|
-
dev: 'dev',
|
|
17
|
-
qa: 'preprod',
|
|
18
|
-
stage: 'stg',
|
|
19
|
-
uat: 'uat',
|
|
20
|
-
prod: 'prod-www3',
|
|
21
|
-
};
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
const siteSettingsEnvMap = {
|
|
25
|
-
dev: 'dev',
|
|
26
|
-
preprod: 'preprod',
|
|
27
|
-
qa: 'preprod',
|
|
28
|
-
stage: 'staging',
|
|
29
|
-
stg: 'staging',
|
|
30
|
-
uat: 'uat',
|
|
31
|
-
prd: 'prod',
|
|
32
|
-
prod: 'prod',
|
|
33
|
-
'prod-www3': 'prod',
|
|
34
|
-
'prod-las': 'prod',
|
|
35
|
-
'prod-lax': 'prod',
|
|
36
|
-
'prod-athene': 'prod',
|
|
37
|
-
'prod-staging': 'prod',
|
|
38
|
-
};
|
|
39
|
-
|
|
40
|
-
const idpEnvMap = {
|
|
41
|
-
dev: 'dev',
|
|
42
|
-
preprod: 'qa',
|
|
43
|
-
qa: 'qa',
|
|
44
|
-
stage: 'stage',
|
|
45
|
-
stg: 'stage',
|
|
46
|
-
uat: 'uat',
|
|
47
|
-
prd: 'prod',
|
|
48
|
-
prod: 'prod',
|
|
49
|
-
'prod-www3': 'prod',
|
|
50
|
-
'prod-las': 'prod',
|
|
51
|
-
'prod-lax': 'prod',
|
|
52
|
-
'prod-athene': 'prod',
|
|
53
|
-
'prod-staging': 'prod',
|
|
54
|
-
};
|
|
55
|
-
|
|
56
|
-
function log(msg) {
|
|
57
|
-
console.log(`[*] ${msg}`);
|
|
58
|
-
}
|
|
59
|
-
|
|
60
|
-
/* --------------------------------
|
|
61
|
-
* 1. GIT CHECKOUT
|
|
62
|
-
* -------------------------------- */
|
|
63
|
-
async function gitCheckout(repository, destDir, branch = 'master') {
|
|
64
|
-
if (!(await fs.pathExists(destDir))) {
|
|
65
|
-
log(`Directory ${destDir} does not exist. Cloning repository...`);
|
|
66
|
-
} else {
|
|
67
|
-
log(`Directory ${destDir} exists. Removing it...`);
|
|
68
|
-
await fs.remove(destDir);
|
|
69
|
-
log(`Cloning ${destDir} repository...`);
|
|
70
|
-
}
|
|
71
|
-
|
|
72
|
-
const username = process.env.BITBUCKET_USERNAME;
|
|
73
|
-
const password = process.env.BITBUCKET_APP_PASSWORD;
|
|
74
|
-
|
|
75
|
-
// Construct clone command
|
|
76
|
-
const cloneUrl = `https://${username}:${password}@bitbucket.org/dp-cloud/${repository}.git`;
|
|
77
|
-
|
|
78
|
-
log(`Perform cloning`);
|
|
79
|
-
await $`git clone --branch=${branch} --depth 1 ${cloneUrl} ${destDir}`;
|
|
80
|
-
}
|
|
81
|
-
|
|
82
|
-
export async function connectClone() {
|
|
83
|
-
// const connectFromEnv = connectUIEnvMap[process.env.FROM_BUILD_ENVIRONMENT];
|
|
84
|
-
const connectFromEnv = process.env.FROM_BUILD_ENVIRONMENT;
|
|
85
|
-
const connectToEnv = process.env.BUILD_ENVIRONMENT;
|
|
86
|
-
|
|
87
|
-
if (!vaultToken || !vaultAddr) {
|
|
88
|
-
console.error('Error: VAULT_TOKEN and VAULT_ADDR must be set.');
|
|
89
|
-
throw new Error('VAULT_TOKEN and VAULT_ADDR must be set.');
|
|
90
|
-
}
|
|
91
|
-
|
|
92
|
-
const site = process.env.BUILD_SITE;
|
|
93
|
-
if (!site) {
|
|
94
|
-
log('Error: BUILD_SITE is not set');
|
|
95
|
-
process.exit(1);
|
|
96
|
-
}
|
|
97
|
-
const siteCommonVaultPath = `secret/data/${site}/common/config`;
|
|
98
|
-
|
|
99
|
-
// 2) getVaultSecrets
|
|
100
|
-
const secretsJson = await getVaultSecrets(siteCommonVaultPath);
|
|
101
|
-
if (!secretsJson.AUTH0_CLIENT_ID) {
|
|
102
|
-
log('Failed to retrieve secret data.');
|
|
103
|
-
process.exit(1);
|
|
104
|
-
}
|
|
105
|
-
const siteCommonSecrets = secretsJson;
|
|
106
|
-
|
|
107
|
-
// 3) Export secrets as environment variables
|
|
108
|
-
process.env.AUTH0_CLIENT_ID = siteCommonSecrets.AUTH0_CLIENT_ID;
|
|
109
|
-
process.env.AUTH0_CLIENT_SECRET = siteCommonSecrets.AUTH0_CLIENT_SECRET;
|
|
110
|
-
|
|
111
|
-
process.env.AUTH0_REGION_DOMAIN = 'us.auth0.com';
|
|
112
|
-
|
|
113
|
-
log(`BUILD_ENVIRONMENT: ${connectToEnv}`);
|
|
114
|
-
log(`BUILD_SITE: ${process.env.BUILD_SITE}`);
|
|
115
|
-
log(`AUTH0_SUBDOMAIN: ${process.env.AUTH0_SUBDOMAIN}`);
|
|
116
|
-
log(`AUTH0_REGION_DOMAIN: ${process.env.AUTH0_REGION_DOMAIN}`);
|
|
117
|
-
log(`AUTH0_CLIENT_ID: ${process.env.AUTH0_CLIENT_ID}`);
|
|
118
|
-
|
|
119
|
-
process.env.AUTH0_DOMAIN = `docupace-${idpEnvMap[process.env.BUILD_ENVIRONMENT]}-${process.env.BUILD_SITE}.${process.env.AUTH0_REGION_DOMAIN}`;
|
|
120
|
-
|
|
121
|
-
const projectRoot = process.cwd();
|
|
122
|
-
// 4) Clone 'connect-deploy' into CONNECT_DIR
|
|
123
|
-
|
|
124
|
-
await gitCheckout('connect-deploy', process.env.CONNECT_DIR);
|
|
125
|
-
|
|
126
|
-
await gitCheckout(
|
|
127
|
-
`${siteSettingsEnvMap[connectToEnv]}-site-settings`,
|
|
128
|
-
`${process.env.CONNECT_DIR}/${siteSettingsEnvMap[connectToEnv]}-site-settings`,
|
|
129
|
-
);
|
|
130
|
-
|
|
131
|
-
// 5) Create site clone (emulating the dock.sh call)
|
|
132
|
-
const cloneFrom = path.join(
|
|
133
|
-
projectRoot,
|
|
134
|
-
process.env.CONNECT_DIR,
|
|
135
|
-
`envs`,
|
|
136
|
-
`${connectFromEnv}/${process.env.FROM_BUILD_SITE}`,
|
|
137
|
-
);
|
|
138
|
-
const cloneTo = path.join(
|
|
139
|
-
projectRoot,
|
|
140
|
-
process.env.CONNECT_DIR,
|
|
141
|
-
`envs`,
|
|
142
|
-
`${connectToEnv}/${process.env.BUILD_SITE}`,
|
|
143
|
-
);
|
|
144
|
-
|
|
145
|
-
if (!(await fs.pathExists(cloneFrom))) {
|
|
146
|
-
log('Clone template directory not found:');
|
|
147
|
-
process.exit(1);
|
|
148
|
-
}
|
|
149
|
-
|
|
150
|
-
if (!(await fs.pathExists(cloneTo))) {
|
|
151
|
-
log('New site does not exist. Performing cloning...');
|
|
152
|
-
|
|
153
|
-
process.env.IMAGE_VERSION =
|
|
154
|
-
await $`cd ${cloneFrom} && grep -E '^IMAGE_VERSION=' dock.sh | cut -f2 -d=`;
|
|
155
|
-
log(`Image version: ${process.env.IMAGE_VERSION}`);
|
|
156
|
-
//await $`cd ${cloneFrom} && bash dock.sh clone ${process.env.BUILD_ENVIRONMENT} ${process.env.BUILD_SITE} ${process.env.IMAGE_VERSION}`;
|
|
157
|
-
await (async () => {
|
|
158
|
-
try {
|
|
159
|
-
// Execute the shell command
|
|
160
|
-
const result =
|
|
161
|
-
await $`cd ${cloneFrom} && bash dock.sh clone ${connectToEnv} ${process.env.BUILD_SITE} ${process.env.IMAGE_VERSION}`;
|
|
162
|
-
await $`cd ${cloneTo} && git checkout master && git pull --ff-only`;
|
|
163
|
-
await $`cd ${cloneTo} && git remote -v`;
|
|
164
|
-
await $`cd ${cloneTo} && git branch`;
|
|
165
|
-
await $`cd ${cloneTo} && git status`;
|
|
166
|
-
await $`cd ${cloneTo} && git add . ../sites.sh`;
|
|
167
|
-
|
|
168
|
-
console.log('Command succeeded:');
|
|
169
|
-
console.log('stdout:', result.stdout); // Standard output
|
|
170
|
-
console.log('stderr:', result.stderr); // Standard error
|
|
171
|
-
} catch (error) {
|
|
172
|
-
console.error('Command failed:');
|
|
173
|
-
console.error('Exit Code:', error._code); // Exit code of the command
|
|
174
|
-
console.error('Signal:', error._signal); // Signal that caused termination (if any)
|
|
175
|
-
console.error('stdout:', error._stdout); // Standard output
|
|
176
|
-
console.error('stderr:', error._stderr); // Standard error
|
|
177
|
-
}
|
|
178
|
-
})();
|
|
179
|
-
} else {
|
|
180
|
-
log('Site already exists. Continuing Auth0 setup...');
|
|
181
|
-
}
|
|
182
|
-
|
|
183
|
-
await (async () => {
|
|
184
|
-
try {
|
|
185
|
-
// Execute the shell command
|
|
186
|
-
const result = await $`cd ${cloneTo} && bash dock.sh getAuth0Metadata`;
|
|
187
|
-
console.log('Command succeeded:');
|
|
188
|
-
console.log('stdout:', result.stdout); // Standard output
|
|
189
|
-
console.log('stderr:', result.stderr); // Standard error
|
|
190
|
-
} catch (error) {
|
|
191
|
-
console.error('Command failed:');
|
|
192
|
-
console.error('Exit Code:', error._code); // Exit code of the command
|
|
193
|
-
console.error('Signal:', error._signal); // Signal that caused termination (if any)
|
|
194
|
-
console.error('stdout:', error._stdout); // Standard output
|
|
195
|
-
console.error('stderr:', error._stderr); // Standard error
|
|
196
|
-
}
|
|
197
|
-
})();
|
|
198
|
-
|
|
199
|
-
// 7) Check conf files, print logs
|
|
200
|
-
await $`grep "auth0" ${path.join(cloneTo, 'conf/application.conf')}`;
|
|
201
|
-
await $`ls -all ${path.join(cloneTo, 'conf')}`;
|
|
202
|
-
await $`ls -all ${path.join(cloneTo, 'conf/saml')}`;
|
|
203
|
-
await $`cat ${path.join(cloneTo, 'conf/saml/auth0.xml')}`;
|
|
204
|
-
|
|
205
|
-
// 8) Git add, commit, push
|
|
206
|
-
await $`cd ${cloneTo} && git add ./conf/application.conf ./conf/saml/auth0.xml`;
|
|
207
|
-
await $`cd ${cloneTo} && git status`;
|
|
208
|
-
|
|
209
|
-
const numChanges = (await $`cd ${cloneTo} && git diff-index HEAD`).stdout
|
|
210
|
-
.split('\n')
|
|
211
|
-
.filter(Boolean).length;
|
|
212
|
-
|
|
213
|
-
if (numChanges > 0) {
|
|
214
|
-
const jiraTicket = process.env.JIRA_TICKET || 'NO_JIRA';
|
|
215
|
-
const message = `${jiraTicket} usdoc-s-builui job download_auth0_metadata for ${connectToEnv}/${process.env.BUILD_SITE}`;
|
|
216
|
-
log('About to commit changes to git');
|
|
217
|
-
await $`cd ${cloneTo} && git commit -m ${message}`;
|
|
218
|
-
await $`cd ${cloneTo} && git push -u origin master`;
|
|
219
|
-
} else {
|
|
220
|
-
log(
|
|
221
|
-
'No changes have been made. The site likely already has the correct configuration.',
|
|
222
|
-
);
|
|
223
|
-
}
|
|
224
|
-
}
|
|
1
|
+
import 'zx/globals'; // npm i zx
|
|
2
|
+
import fs from 'fs-extra';
|
|
3
|
+
import path from 'path';
|
|
4
|
+
import { $ } from 'zx';
|
|
5
|
+
|
|
6
|
+
import { getVaultSecrets } from '../auth0/vault.js';
|
|
7
|
+
|
|
8
|
+
process.env.COMMON_VAULT_PATH =
|
|
9
|
+
process.env.COMMON_VAULT_PATH || 'secret/data/common/config';
|
|
10
|
+
process.env.VAULT_SKIP_VERIFY = process.env.VAULT_SKIP_VERIFY || 'true';
|
|
11
|
+
process.env.CONNECT_DIR = process.env.CONNECT_DIR || 'connect';
|
|
12
|
+
const vaultToken = process.env.VAULT_TOKEN;
|
|
13
|
+
const vaultAddr = process.env.VAULT_ADDR;
|
|
14
|
+
|
|
15
|
+
const connectUIEnvMap = {
|
|
16
|
+
dev: 'dev',
|
|
17
|
+
qa: 'preprod',
|
|
18
|
+
stage: 'stg',
|
|
19
|
+
uat: 'uat',
|
|
20
|
+
prod: 'prod-www3',
|
|
21
|
+
};
|
|
22
|
+
|
|
23
|
+
|
|
24
|
+
const siteSettingsEnvMap = {
|
|
25
|
+
dev: 'dev',
|
|
26
|
+
preprod: 'preprod',
|
|
27
|
+
qa: 'preprod',
|
|
28
|
+
stage: 'staging',
|
|
29
|
+
stg: 'staging',
|
|
30
|
+
uat: 'uat',
|
|
31
|
+
prd: 'prod',
|
|
32
|
+
prod: 'prod',
|
|
33
|
+
'prod-www3': 'prod',
|
|
34
|
+
'prod-las': 'prod',
|
|
35
|
+
'prod-lax': 'prod',
|
|
36
|
+
'prod-athene': 'prod',
|
|
37
|
+
'prod-staging': 'prod',
|
|
38
|
+
};
|
|
39
|
+
|
|
40
|
+
const idpEnvMap = {
|
|
41
|
+
dev: 'dev',
|
|
42
|
+
preprod: 'qa',
|
|
43
|
+
qa: 'qa',
|
|
44
|
+
stage: 'stage',
|
|
45
|
+
stg: 'stage',
|
|
46
|
+
uat: 'uat',
|
|
47
|
+
prd: 'prod',
|
|
48
|
+
prod: 'prod',
|
|
49
|
+
'prod-www3': 'prod',
|
|
50
|
+
'prod-las': 'prod',
|
|
51
|
+
'prod-lax': 'prod',
|
|
52
|
+
'prod-athene': 'prod',
|
|
53
|
+
'prod-staging': 'prod',
|
|
54
|
+
};
|
|
55
|
+
|
|
56
|
+
function log(msg) {
|
|
57
|
+
console.log(`[*] ${msg}`);
|
|
58
|
+
}
|
|
59
|
+
|
|
60
|
+
/* --------------------------------
|
|
61
|
+
* 1. GIT CHECKOUT
|
|
62
|
+
* -------------------------------- */
|
|
63
|
+
async function gitCheckout(repository, destDir, branch = 'master') {
|
|
64
|
+
if (!(await fs.pathExists(destDir))) {
|
|
65
|
+
log(`Directory ${destDir} does not exist. Cloning repository...`);
|
|
66
|
+
} else {
|
|
67
|
+
log(`Directory ${destDir} exists. Removing it...`);
|
|
68
|
+
await fs.remove(destDir);
|
|
69
|
+
log(`Cloning ${destDir} repository...`);
|
|
70
|
+
}
|
|
71
|
+
|
|
72
|
+
const username = process.env.BITBUCKET_USERNAME;
|
|
73
|
+
const password = process.env.BITBUCKET_APP_PASSWORD;
|
|
74
|
+
|
|
75
|
+
// Construct clone command
|
|
76
|
+
const cloneUrl = `https://${username}:${password}@bitbucket.org/dp-cloud/${repository}.git`;
|
|
77
|
+
|
|
78
|
+
log(`Perform cloning`);
|
|
79
|
+
await $`git clone --branch=${branch} --depth 1 ${cloneUrl} ${destDir}`;
|
|
80
|
+
}
|
|
81
|
+
|
|
82
|
+
export async function connectClone() {
|
|
83
|
+
// const connectFromEnv = connectUIEnvMap[process.env.FROM_BUILD_ENVIRONMENT];
|
|
84
|
+
const connectFromEnv = process.env.FROM_BUILD_ENVIRONMENT;
|
|
85
|
+
const connectToEnv = process.env.BUILD_ENVIRONMENT;
|
|
86
|
+
|
|
87
|
+
if (!vaultToken || !vaultAddr) {
|
|
88
|
+
console.error('Error: VAULT_TOKEN and VAULT_ADDR must be set.');
|
|
89
|
+
throw new Error('VAULT_TOKEN and VAULT_ADDR must be set.');
|
|
90
|
+
}
|
|
91
|
+
|
|
92
|
+
const site = process.env.BUILD_SITE;
|
|
93
|
+
if (!site) {
|
|
94
|
+
log('Error: BUILD_SITE is not set');
|
|
95
|
+
process.exit(1);
|
|
96
|
+
}
|
|
97
|
+
const siteCommonVaultPath = `secret/data/${site}/common/config`;
|
|
98
|
+
|
|
99
|
+
// 2) getVaultSecrets
|
|
100
|
+
const secretsJson = await getVaultSecrets(siteCommonVaultPath);
|
|
101
|
+
if (!secretsJson.AUTH0_CLIENT_ID) {
|
|
102
|
+
log('Failed to retrieve secret data.');
|
|
103
|
+
process.exit(1);
|
|
104
|
+
}
|
|
105
|
+
const siteCommonSecrets = secretsJson;
|
|
106
|
+
|
|
107
|
+
// 3) Export secrets as environment variables
|
|
108
|
+
process.env.AUTH0_CLIENT_ID = siteCommonSecrets.AUTH0_CLIENT_ID;
|
|
109
|
+
process.env.AUTH0_CLIENT_SECRET = siteCommonSecrets.AUTH0_CLIENT_SECRET;
|
|
110
|
+
|
|
111
|
+
process.env.AUTH0_REGION_DOMAIN = 'us.auth0.com';
|
|
112
|
+
|
|
113
|
+
log(`BUILD_ENVIRONMENT: ${connectToEnv}`);
|
|
114
|
+
log(`BUILD_SITE: ${process.env.BUILD_SITE}`);
|
|
115
|
+
log(`AUTH0_SUBDOMAIN: ${process.env.AUTH0_SUBDOMAIN}`);
|
|
116
|
+
log(`AUTH0_REGION_DOMAIN: ${process.env.AUTH0_REGION_DOMAIN}`);
|
|
117
|
+
log(`AUTH0_CLIENT_ID: ${process.env.AUTH0_CLIENT_ID}`);
|
|
118
|
+
|
|
119
|
+
process.env.AUTH0_DOMAIN = `docupace-${idpEnvMap[process.env.BUILD_ENVIRONMENT]}-${process.env.BUILD_SITE}.${process.env.AUTH0_REGION_DOMAIN}`;
|
|
120
|
+
|
|
121
|
+
const projectRoot = process.cwd();
|
|
122
|
+
// 4) Clone 'connect-deploy' into CONNECT_DIR
|
|
123
|
+
|
|
124
|
+
await gitCheckout('connect-deploy', process.env.CONNECT_DIR);
|
|
125
|
+
|
|
126
|
+
await gitCheckout(
|
|
127
|
+
`${siteSettingsEnvMap[connectToEnv]}-site-settings`,
|
|
128
|
+
`${process.env.CONNECT_DIR}/${siteSettingsEnvMap[connectToEnv]}-site-settings`,
|
|
129
|
+
);
|
|
130
|
+
|
|
131
|
+
// 5) Create site clone (emulating the dock.sh call)
|
|
132
|
+
const cloneFrom = path.join(
|
|
133
|
+
projectRoot,
|
|
134
|
+
process.env.CONNECT_DIR,
|
|
135
|
+
`envs`,
|
|
136
|
+
`${connectFromEnv}/${process.env.FROM_BUILD_SITE}`,
|
|
137
|
+
);
|
|
138
|
+
const cloneTo = path.join(
|
|
139
|
+
projectRoot,
|
|
140
|
+
process.env.CONNECT_DIR,
|
|
141
|
+
`envs`,
|
|
142
|
+
`${connectToEnv}/${process.env.BUILD_SITE}`,
|
|
143
|
+
);
|
|
144
|
+
|
|
145
|
+
if (!(await fs.pathExists(cloneFrom))) {
|
|
146
|
+
log('Clone template directory not found:');
|
|
147
|
+
process.exit(1);
|
|
148
|
+
}
|
|
149
|
+
|
|
150
|
+
if (!(await fs.pathExists(cloneTo))) {
|
|
151
|
+
log('New site does not exist. Performing cloning...');
|
|
152
|
+
|
|
153
|
+
process.env.IMAGE_VERSION =
|
|
154
|
+
await $`cd ${cloneFrom} && grep -E '^IMAGE_VERSION=' dock.sh | cut -f2 -d=`;
|
|
155
|
+
log(`Image version: ${process.env.IMAGE_VERSION}`);
|
|
156
|
+
//await $`cd ${cloneFrom} && bash dock.sh clone ${process.env.BUILD_ENVIRONMENT} ${process.env.BUILD_SITE} ${process.env.IMAGE_VERSION}`;
|
|
157
|
+
await (async () => {
|
|
158
|
+
try {
|
|
159
|
+
// Execute the shell command
|
|
160
|
+
const result =
|
|
161
|
+
await $`cd ${cloneFrom} && bash dock.sh clone ${connectToEnv} ${process.env.BUILD_SITE} ${process.env.IMAGE_VERSION}`;
|
|
162
|
+
await $`cd ${cloneTo} && git checkout master && git pull --ff-only`;
|
|
163
|
+
await $`cd ${cloneTo} && git remote -v`;
|
|
164
|
+
await $`cd ${cloneTo} && git branch`;
|
|
165
|
+
await $`cd ${cloneTo} && git status`;
|
|
166
|
+
await $`cd ${cloneTo} && git add . ../sites.sh`;
|
|
167
|
+
|
|
168
|
+
console.log('Command succeeded:');
|
|
169
|
+
console.log('stdout:', result.stdout); // Standard output
|
|
170
|
+
console.log('stderr:', result.stderr); // Standard error
|
|
171
|
+
} catch (error) {
|
|
172
|
+
console.error('Command failed:');
|
|
173
|
+
console.error('Exit Code:', error._code); // Exit code of the command
|
|
174
|
+
console.error('Signal:', error._signal); // Signal that caused termination (if any)
|
|
175
|
+
console.error('stdout:', error._stdout); // Standard output
|
|
176
|
+
console.error('stderr:', error._stderr); // Standard error
|
|
177
|
+
}
|
|
178
|
+
})();
|
|
179
|
+
} else {
|
|
180
|
+
log('Site already exists. Continuing Auth0 setup...');
|
|
181
|
+
}
|
|
182
|
+
|
|
183
|
+
await (async () => {
|
|
184
|
+
try {
|
|
185
|
+
// Execute the shell command
|
|
186
|
+
const result = await $`cd ${cloneTo} && bash dock.sh getAuth0Metadata`;
|
|
187
|
+
console.log('Command succeeded:');
|
|
188
|
+
console.log('stdout:', result.stdout); // Standard output
|
|
189
|
+
console.log('stderr:', result.stderr); // Standard error
|
|
190
|
+
} catch (error) {
|
|
191
|
+
console.error('Command failed:');
|
|
192
|
+
console.error('Exit Code:', error._code); // Exit code of the command
|
|
193
|
+
console.error('Signal:', error._signal); // Signal that caused termination (if any)
|
|
194
|
+
console.error('stdout:', error._stdout); // Standard output
|
|
195
|
+
console.error('stderr:', error._stderr); // Standard error
|
|
196
|
+
}
|
|
197
|
+
})();
|
|
198
|
+
|
|
199
|
+
// 7) Check conf files, print logs
|
|
200
|
+
await $`grep "auth0" ${path.join(cloneTo, 'conf/application.conf')}`;
|
|
201
|
+
await $`ls -all ${path.join(cloneTo, 'conf')}`;
|
|
202
|
+
await $`ls -all ${path.join(cloneTo, 'conf/saml')}`;
|
|
203
|
+
await $`cat ${path.join(cloneTo, 'conf/saml/auth0.xml')}`;
|
|
204
|
+
|
|
205
|
+
// 8) Git add, commit, push
|
|
206
|
+
await $`cd ${cloneTo} && git add ./conf/application.conf ./conf/saml/auth0.xml`;
|
|
207
|
+
await $`cd ${cloneTo} && git status`;
|
|
208
|
+
|
|
209
|
+
const numChanges = (await $`cd ${cloneTo} && git diff-index HEAD`).stdout
|
|
210
|
+
.split('\n')
|
|
211
|
+
.filter(Boolean).length;
|
|
212
|
+
|
|
213
|
+
if (numChanges > 0) {
|
|
214
|
+
const jiraTicket = process.env.JIRA_TICKET || 'NO_JIRA';
|
|
215
|
+
const message = `${jiraTicket} usdoc-s-builui job download_auth0_metadata for ${connectToEnv}/${process.env.BUILD_SITE}`;
|
|
216
|
+
log('About to commit changes to git');
|
|
217
|
+
await $`cd ${cloneTo} && git commit -m ${message}`;
|
|
218
|
+
await $`cd ${cloneTo} && git push -u origin master`;
|
|
219
|
+
} else {
|
|
220
|
+
log(
|
|
221
|
+
'No changes have been made. The site likely already has the correct configuration.',
|
|
222
|
+
);
|
|
223
|
+
}
|
|
224
|
+
}
|
package/src/next/haproxy.js
CHANGED
|
@@ -1,67 +1,71 @@
|
|
|
1
|
-
import { $ } from 'zx';
|
|
2
|
-
import fs from 'fs-extra';
|
|
3
|
-
import path from 'path';
|
|
4
|
-
|
|
5
|
-
export async function haproxySync() {
|
|
6
|
-
const cluster = process.env.HAPROXY_CLUSTER;
|
|
7
|
-
if (cluster !== 'preprod' && cluster !== 'stage') {
|
|
8
|
-
console.log('Error: Cluster must be preprod or stage');
|
|
9
|
-
process.exit(1);
|
|
10
|
-
}
|
|
11
|
-
|
|
12
|
-
const repoPath = '/root/repo/docupace-ansible';
|
|
13
|
-
const inventory = path.join(repoPath, `inventories/${cluster}/inventory`);
|
|
14
|
-
|
|
15
|
-
// Create haproxy.sh
|
|
16
|
-
const cluserHostMap = {
|
|
17
|
-
preprod: {
|
|
18
|
-
host: '10.10.28.198',
|
|
19
|
-
branch: 'master',
|
|
20
|
-
},
|
|
21
|
-
stage: {
|
|
22
|
-
host: '10.12.28.10',
|
|
23
|
-
branch: 'INFP-6565-haproxy-prod-implementation',
|
|
24
|
-
},
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
git
|
|
38
|
-
git
|
|
39
|
-
git
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
await
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
}
|
|
1
|
+
import { $ } from 'zx';
|
|
2
|
+
import fs from 'fs-extra';
|
|
3
|
+
import path from 'path';
|
|
4
|
+
|
|
5
|
+
export async function haproxySync() {
|
|
6
|
+
const cluster = process.env.HAPROXY_CLUSTER;
|
|
7
|
+
if (cluster !== 'preprod' && cluster !== 'stage' && cluster !== 'prod-www3') {
|
|
8
|
+
console.log('Error: Cluster must be preprod or stage');
|
|
9
|
+
process.exit(1);
|
|
10
|
+
}
|
|
11
|
+
|
|
12
|
+
const repoPath = '/root/repo/docupace-ansible';
|
|
13
|
+
const inventory = path.join(repoPath, `inventories/${cluster}/inventory`);
|
|
14
|
+
|
|
15
|
+
// Create haproxy.sh
|
|
16
|
+
const cluserHostMap = {
|
|
17
|
+
preprod: {
|
|
18
|
+
host: '10.10.28.198',
|
|
19
|
+
branch: 'master',
|
|
20
|
+
},
|
|
21
|
+
stage: {
|
|
22
|
+
host: '10.12.28.10',
|
|
23
|
+
branch: 'INFP-6565-haproxy-prod-implementation',
|
|
24
|
+
},
|
|
25
|
+
'prod-www3': {
|
|
26
|
+
host: '10.13.28.45',
|
|
27
|
+
branch: 'INFP-6565-haproxy-prod-implementation',
|
|
28
|
+
},
|
|
29
|
+
};
|
|
30
|
+
|
|
31
|
+
const scriptContent = `
|
|
32
|
+
#!/bin/bash
|
|
33
|
+
|
|
34
|
+
[[ ! -f ${inventory} ]] && ( echo "Alert: no inventory file: ${inventory}" ; exit 1 )
|
|
35
|
+
cd ${repoPath}
|
|
36
|
+
pwd
|
|
37
|
+
git stash
|
|
38
|
+
git fetch --all
|
|
39
|
+
git pull origin master
|
|
40
|
+
git checkout ${cluserHostMap[cluster].branch}
|
|
41
|
+
git submodule update --remote
|
|
42
|
+
git submodule foreach --recursive git checkout master
|
|
43
|
+
git submodule foreach --recursive git pull origin master
|
|
44
|
+
|
|
45
|
+
ansible-playbook -i inventories/${cluster}/inventory haproxy.yml -e "cluster=${cluster} -e build=true"
|
|
46
|
+
|
|
47
|
+
echo "proceeding"
|
|
48
|
+
echo "committing changes"
|
|
49
|
+
git add ${cluster}-haproxy.cfg
|
|
50
|
+
git commit -m "Sync haproxy"
|
|
51
|
+
git push origin master
|
|
52
|
+
`;
|
|
53
|
+
|
|
54
|
+
await fs.writeFile('haproxy.sh', scriptContent);
|
|
55
|
+
|
|
56
|
+
// Private key
|
|
57
|
+
const haproxyPrivateKey = process.env.HAPROXY_PRIVATE_KEY;
|
|
58
|
+
if (!haproxyPrivateKey) {
|
|
59
|
+
console.log('Error: HAPROXY_PRIVATE_KEY not set.');
|
|
60
|
+
process.exit(1);
|
|
61
|
+
}
|
|
62
|
+
|
|
63
|
+
await fs.writeFile('private.key', Buffer.from(haproxyPrivateKey, 'base64'));
|
|
64
|
+
await fs.chmod('private.key', 0o600);
|
|
65
|
+
|
|
66
|
+
// Copy script to remote
|
|
67
|
+
await $`scp -i private.key -o StrictHostKeyChecking=no haproxy.sh root@${cluserHostMap[cluster].host}:/tmp/haproxy.sh`;
|
|
68
|
+
|
|
69
|
+
// Execute script on remote
|
|
70
|
+
await $`ssh -i private.key -o StrictHostKeyChecking=no root@${cluserHostMap[cluster].host} "bash /tmp/haproxy.sh"`;
|
|
71
|
+
}
|