@docupace/pipeline 1.0.4-4.8 → 1.0.4-6.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/package.json +1 -1
  2. package/src/auth0/metadata.js +133 -132
  3. package/src/next/connect.js +227 -224
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@docupace/pipeline",
3
- "version": "1.0.44.8",
3
+ "version": "1.0.46.0.1",
4
4
  "description": "",
5
5
  "main": "index.js",
6
6
  "type": "module",
package/src/auth0/metadata.js CHANGED
@@ -1,132 +1,133 @@
1
- import fs from 'fs-extra';
2
- import axios from 'axios';
3
- import path from 'path';
4
- import { cloneRepository } from '../next/deploy.js';
5
- import { getAuth0AuthToken } from './configure.js';
6
- import { getVaultSecrets } from './vault.js';
7
- import { getVaultSecretsConfigs } from '../next/config.js';
8
- import { pushDeployConfig } from '../next/deploy.js';
9
-
10
- export async function getAuth0Metadata(site, env) {
11
- try {
12
- const connectDeployRepoPath = await cloneRepository('connect-deploy');
13
-
14
- if (env === 'qa') {
15
- console.log(
16
- `The environment is: (${env}), but connect-deploy has preprod instead`,
17
- );
18
- process.chdir(`${connectDeployRepoPath}/envs/preprod/${site}`);
19
- } else {
20
- process.chdir(`${connectDeployRepoPath}/envs/${env}/${site}`);
21
- }
22
-
23
- const configPath = path.join('conf', 'application.conf');
24
- const appConf = await fs.readFile(configPath, 'utf-8');
25
- const connectContext = appConf.match(
26
- /application\.context\s*=\s*"(.*?)"/,
27
- )?.[1];
28
-
29
- if (!connectContext) {
30
- console.error('connectContext not found in application.conf. Exiting...');
31
- process.exit(1);
32
- }
33
-
34
- const siteHost = appConf.match(
35
- /docupace\.baseUrlClient\s*=\s*"?https?:\/\/([^/]+)"?/,
36
- )?.[1];
37
-
38
- if (!siteHost) {
39
- console.error('siteHost not found in application.conf. Exiting...');
40
- process.exit(1);
41
- }
42
-
43
- const connectEndpoint = `https://${siteHost}${connectContext}`;
44
- console.log('CONNECT_ENDPOINT:', connectEndpoint);
45
-
46
- console.log('Requesting token from Auth0...');
47
- const siteCommonSecretsPath =
48
- getVaultSecretsConfigs(site).siteCommonSecretsPath;
49
- console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
50
- const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
51
- const auth0Domain = `docupace-${env}-${site}.us.auth0.com`;
52
- const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
53
- const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
54
- const auth0Token = await getAuth0AuthToken(
55
- auth0Domain,
56
- auth0ClientId,
57
- auth0ClientSecret,
58
- );
59
-
60
- const auth0Response = await axios.get(
61
- `https://${auth0Domain}/api/v2/clients`,
62
- {
63
- headers: { authorization: `Bearer ${auth0Token}` },
64
- },
65
- );
66
-
67
- const connectClient = auth0Response.data.find(
68
- (client) => client.name === 'docupace-connect',
69
- );
70
-
71
- if (!connectClient) {
72
- console.error('Client "docupace-connect" not found.');
73
- process.exit(1);
74
- }
75
-
76
- const clientId = connectClient.client_id;
77
- console.log('Found client_id:', clientId);
78
-
79
- const metadataRes = await axios.get(
80
- `https://${auth0Domain}/samlp/metadata/${clientId}`,
81
- {
82
- responseType: 'text',
83
- },
84
- );
85
-
86
- const metadata = metadataRes.data;
87
-
88
- if (metadata.length < 2000) {
89
- console.error(
90
- 'Downloaded metadata looks incorrect (too small). Exiting...',
91
- );
92
- process.exit(1);
93
- }
94
- await fs.ensureDir('conf/saml');
95
- await fs.writeFile('conf/saml/auth0.xml', metadata);
96
- console.log('SAML metadata written to conf/saml/auth0.xml');
97
-
98
- let newConfig = appConf;
99
-
100
- if (/useSAML\s*=/.test(appConf)) {
101
- newConfig = newConfig.replace(/useSAML\s*=.*/, 'useSAML=true');
102
- } else {
103
- newConfig += '\nuseSAML=true';
104
- }
105
-
106
- const replacements = {
107
- 'saml.clients.auth0.idpMetadataPath': '${samlEnvPath}"/auth0.xml"',
108
- 'saml.clients.auth0.spEntityId': `"${connectEndpoint}"`,
109
- 'saml.clients.auth0.redirectFormInput': '"RelayState"',
110
- 'saml.clients.auth0.idpLoginUrl': `"https://${auth0Domain}/v2/logout?client_id=${clientId}&returnTo=${connectEndpoint}"`,
111
- };
112
-
113
- for (const [key, value] of Object.entries(replacements)) {
114
- const pattern = new RegExp(`${key}\\s*=.*`, 'g');
115
- if (pattern.test(newConfig)) {
116
- newConfig = newConfig.replace(pattern, `${key}=${value}`);
117
- } else {
118
- newConfig += `\n${key}=${value}`;
119
- }
120
- }
121
-
122
- await fs.writeFile(configPath, newConfig);
123
- console.log('The application.conf has been updated.');
124
- await pushDeployConfig(
125
- connectDeployRepoPath,
126
- `Auth0 SAML metadata update for site: (${site}) in env: (${env})`,
127
- );
128
- } catch (error) {
129
- console.error('Error:', error.message);
130
- process.exit(1);
131
- }
132
- }
1
+ import fs from 'fs-extra';
2
+ import axios from 'axios';
3
+ import path from 'path';
4
+ import { cloneRepository } from '../next/deploy.js';
5
+ import { getAuth0AuthToken } from './configure.js';
6
+ import { getVaultSecrets } from './vault.js';
7
+ import { getVaultSecretsConfigs } from '../next/config.js';
8
+ import { pushDeployConfig } from '../next/deploy.js';
9
+
10
+ export async function getAuth0Metadata(site, env) {
11
+ try {
12
+ const connectDeployRepoPath = await cloneRepository('connect-deploy');
13
+
14
+ // mapping of env to env
15
+ const envMap = {
16
+ dev: 'dev',
17
+ preprod: 'qa',
18
+ stage: 'stage',
19
+ uat: 'uat',
20
+ 'prod-www3': 'prod',
21
+ };
22
+ process.chdir(`${connectDeployRepoPath}/envs/${env}/${site}`);
23
+
24
+ const configPath = path.join('conf', 'application.conf');
25
+ const appConf = await fs.readFile(configPath, 'utf-8');
26
+ const connectContext = appConf.match(
27
+ /application\.context\s*=\s*"(.*?)"/,
28
+ )?.[1];
29
+
30
+ if (!connectContext) {
31
+ console.error('connectContext not found in application.conf. Exiting...');
32
+ process.exit(1);
33
+ }
34
+
35
+ const siteHost = appConf.match(
36
+ /docupace\.baseUrlClient\s*=\s*"?https?:\/\/([^/]+)"?/,
37
+ )?.[1];
38
+
39
+ if (!siteHost) {
40
+ console.error('siteHost not found in application.conf. Exiting...');
41
+ process.exit(1);
42
+ }
43
+
44
+ const connectEndpoint = `https://${siteHost}${connectContext}`;
45
+ console.log('CONNECT_ENDPOINT:', connectEndpoint);
46
+
47
+ console.log('Requesting token from Auth0...');
48
+ const siteCommonSecretsPath =
49
+ getVaultSecretsConfigs(site).siteCommonSecretsPath;
50
+ console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
51
+ const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
52
+ const auth0Domain = `docupace-${envMap[env]}-${site}.us.auth0.com`;
53
+ const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
54
+ const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
55
+ const auth0Token = await getAuth0AuthToken(
56
+ auth0Domain,
57
+ auth0ClientId,
58
+ auth0ClientSecret,
59
+ );
60
+
61
+ const auth0Response = await axios.get(
62
+ `https://${auth0Domain}/api/v2/clients`,
63
+ {
64
+ headers: { authorization: `Bearer ${auth0Token}` },
65
+ },
66
+ );
67
+
68
+ const connectClient = auth0Response.data.find(
69
+ (client) => client.name === 'docupace-connect',
70
+ );
71
+
72
+ if (!connectClient) {
73
+ console.error('Client "docupace-connect" not found.');
74
+ process.exit(1);
75
+ }
76
+
77
+ const clientId = connectClient.client_id;
78
+ console.log('Found client_id:', clientId);
79
+
80
+ const metadataRes = await axios.get(
81
+ `https://${auth0Domain}/samlp/metadata/${clientId}`,
82
+ {
83
+ responseType: 'text',
84
+ },
85
+ );
86
+
87
+ const metadata = metadataRes.data;
88
+
89
+ if (metadata.length < 2000) {
90
+ console.error(
91
+ 'Downloaded metadata looks incorrect (too small). Exiting...',
92
+ );
93
+ process.exit(1);
94
+ }
95
+ await fs.ensureDir('conf/saml');
96
+ await fs.writeFile('conf/saml/auth0.xml', metadata);
97
+ console.log('SAML metadata written to conf/saml/auth0.xml');
98
+
99
+ let newConfig = appConf;
100
+
101
+ if (/useSAML\s*=/.test(appConf)) {
102
+ newConfig = newConfig.replace(/useSAML\s*=.*/, 'useSAML=true');
103
+ } else {
104
+ newConfig += '\nuseSAML=true';
105
+ }
106
+
107
+ const replacements = {
108
+ 'saml.clients.auth0.idpMetadataPath': '${samlEnvPath}"/auth0.xml"',
109
+ 'saml.clients.auth0.spEntityId': `"${connectEndpoint}"`,
110
+ 'saml.clients.auth0.redirectFormInput': '"RelayState"',
111
+ 'saml.clients.auth0.idpLoginUrl': `"https://${auth0Domain}/v2/logout?client_id=${clientId}&returnTo=${connectEndpoint}"`,
112
+ };
113
+
114
+ for (const [key, value] of Object.entries(replacements)) {
115
+ const pattern = new RegExp(`${key}\\s*=.*`, 'g');
116
+ if (pattern.test(newConfig)) {
117
+ newConfig = newConfig.replace(pattern, `${key}=${value}`);
118
+ } else {
119
+ newConfig += `\n${key}=${value}`;
120
+ }
121
+ }
122
+
123
+ await fs.writeFile(configPath, newConfig);
124
+ console.log('The application.conf has been updated.');
125
+ await pushDeployConfig(
126
+ connectDeployRepoPath,
127
+ `Auth0 SAML metadata update for site: (${site}) in env: (${env})`,
128
+ );
129
+ } catch (error) {
130
+ console.error('Error:', error.message);
131
+ process.exit(1);
132
+ }
133
+ }
package/src/next/connect.js CHANGED
@@ -1,224 +1,227 @@
1
- import 'zx/globals'; // npm i zx
2
- import fs from 'fs-extra';
3
- import path from 'path';
4
- import { $ } from 'zx';
5
-
6
- import { getVaultSecrets } from '../auth0/vault.js';
7
-
8
- process.env.COMMON_VAULT_PATH =
9
- process.env.COMMON_VAULT_PATH || 'secret/data/common/config';
10
- process.env.VAULT_SKIP_VERIFY = process.env.VAULT_SKIP_VERIFY || 'true';
11
- process.env.CONNECT_DIR = process.env.CONNECT_DIR || 'connect';
12
- const vaultToken = process.env.VAULT_TOKEN;
13
- const vaultAddr = process.env.VAULT_ADDR;
14
-
15
- const connectUIEnvMap = {
16
- dev: 'dev',
17
- qa: 'preprod',
18
- stage: 'stg',
19
- uat: 'uat',
20
- prod: 'prod-www3',
21
- };
22
-
23
-
24
- const siteSettingsEnvMap = {
25
- dev: 'dev',
26
- preprod: 'preprod',
27
- qa: 'preprod',
28
- stage: 'staging',
29
- stg: 'staging',
30
- uat: 'uat',
31
- prd: 'prod',
32
- prod: 'prod',
33
- 'prod-www3': 'prod',
34
- 'prod-las': 'prod',
35
- 'prod-lax': 'prod',
36
- 'prod-athene': 'prod',
37
- 'prod-staging': 'prod',
38
- };
39
-
40
- const idpEnvMap = {
41
- dev: 'dev',
42
- preprod: 'qa',
43
- qa: 'qa',
44
- stage: 'stage',
45
- stg: 'stage',
46
- uat: 'uat',
47
- prd: 'prod',
48
- prod: 'prod',
49
- 'prod-www3': 'prod',
50
- 'prod-las': 'prod',
51
- 'prod-lax': 'prod',
52
- 'prod-athene': 'prod',
53
- 'prod-staging': 'prod',
54
- };
55
-
56
- function log(msg) {
57
- console.log(`[*] ${msg}`);
58
- }
59
-
60
- /* --------------------------------
61
- * 1. GIT CHECKOUT
62
- * -------------------------------- */
63
- async function gitCheckout(repository, destDir, branch = 'master') {
64
- if (!(await fs.pathExists(destDir))) {
65
- log(`Directory ${destDir} does not exist. Cloning repository...`);
66
- } else {
67
- log(`Directory ${destDir} exists. Removing it...`);
68
- await fs.remove(destDir);
69
- log(`Cloning ${destDir} repository...`);
70
- }
71
-
72
- const username = process.env.BITBUCKET_USERNAME;
73
- const password = process.env.BITBUCKET_APP_PASSWORD;
74
-
75
- // Construct clone command
76
- const cloneUrl = `https://${username}:${password}@bitbucket.org/dp-cloud/${repository}.git`;
77
-
78
- log(`Perform cloning`);
79
- await $`git clone --branch=${branch} --depth 1 ${cloneUrl} ${destDir}`;
80
- }
81
-
82
- export async function connectClone() {
83
- // const connectFromEnv = connectUIEnvMap[process.env.FROM_BUILD_ENVIRONMENT];
84
- const connectFromEnv = process.env.FROM_BUILD_ENVIRONMENT;
85
- const connectToEnv = process.env.BUILD_ENVIRONMENT;
86
-
87
- if (!vaultToken || !vaultAddr) {
88
- console.error('Error: VAULT_TOKEN and VAULT_ADDR must be set.');
89
- throw new Error('VAULT_TOKEN and VAULT_ADDR must be set.');
90
- }
91
-
92
- const site = process.env.BUILD_SITE;
93
- if (!site) {
94
- log('Error: BUILD_SITE is not set');
95
- process.exit(1);
96
- }
97
- const siteCommonVaultPath = `secret/data/${site}/common/config`;
98
-
99
- // 2) getVaultSecrets
100
- const secretsJson = await getVaultSecrets(siteCommonVaultPath);
101
- if (!secretsJson.AUTH0_CLIENT_ID) {
102
- log('Failed to retrieve secret data.');
103
- process.exit(1);
104
- }
105
- const siteCommonSecrets = secretsJson;
106
-
107
- // 3) Export secrets as environment variables
108
- process.env.AUTH0_CLIENT_ID = siteCommonSecrets.AUTH0_CLIENT_ID;
109
- process.env.AUTH0_CLIENT_SECRET = siteCommonSecrets.AUTH0_CLIENT_SECRET;
110
-
111
- process.env.AUTH0_REGION_DOMAIN = 'us.auth0.com';
112
-
113
- log(`BUILD_ENVIRONMENT: ${connectToEnv}`);
114
- log(`BUILD_SITE: ${process.env.BUILD_SITE}`);
115
- log(`AUTH0_SUBDOMAIN: ${process.env.AUTH0_SUBDOMAIN}`);
116
- log(`AUTH0_REGION_DOMAIN: ${process.env.AUTH0_REGION_DOMAIN}`);
117
- log(`AUTH0_CLIENT_ID: ${process.env.AUTH0_CLIENT_ID}`);
118
-
119
- process.env.AUTH0_DOMAIN = `docupace-${idpEnvMap[process.env.BUILD_ENVIRONMENT]}-${process.env.BUILD_SITE}.${process.env.AUTH0_REGION_DOMAIN}`;
120
-
121
- const projectRoot = process.cwd();
122
- // 4) Clone 'connect-deploy' into CONNECT_DIR
123
-
124
- await gitCheckout('connect-deploy', process.env.CONNECT_DIR);
125
-
126
- await gitCheckout(
127
- `${siteSettingsEnvMap[connectToEnv]}-site-settings`,
128
- `${process.env.CONNECT_DIR}/${siteSettingsEnvMap[connectToEnv]}-site-settings`,
129
- );
130
-
131
- // 5) Create site clone (emulating the dock.sh call)
132
- const cloneFrom = path.join(
133
- projectRoot,
134
- process.env.CONNECT_DIR,
135
- `envs`,
136
- `${connectFromEnv}/${process.env.FROM_BUILD_SITE}`,
137
- );
138
- const cloneTo = path.join(
139
- projectRoot,
140
- process.env.CONNECT_DIR,
141
- `envs`,
142
- `${connectToEnv}/${process.env.BUILD_SITE}`,
143
- );
144
-
145
- if (!(await fs.pathExists(cloneFrom))) {
146
- log('Clone template directory not found:');
147
- process.exit(1);
148
- }
149
-
150
- if (!(await fs.pathExists(cloneTo))) {
151
- log('New site does not exist. Performing cloning...');
152
-
153
- process.env.IMAGE_VERSION =
154
- await $`cd ${cloneFrom} && grep -E '^IMAGE_VERSION=' dock.sh | cut -f2 -d=`;
155
- log(`Image version: ${process.env.IMAGE_VERSION}`);
156
- //await $`cd ${cloneFrom} && bash dock.sh clone ${process.env.BUILD_ENVIRONMENT} ${process.env.BUILD_SITE} ${process.env.IMAGE_VERSION}`;
157
- await (async () => {
158
- try {
159
- // Execute the shell command
160
- const result =
161
- await $`cd ${cloneFrom} && bash dock.sh clone ${connectToEnv} ${process.env.BUILD_SITE} ${process.env.IMAGE_VERSION}`;
162
- await $`cd ${cloneTo} && git checkout master && git pull --ff-only`;
163
- await $`cd ${cloneTo} && git remote -v`;
164
- await $`cd ${cloneTo} && git branch`;
165
- await $`cd ${cloneTo} && git status`;
166
- await $`cd ${cloneTo} && git add . ../sites.sh`;
167
-
168
- console.log('Command succeeded:');
169
- console.log('stdout:', result.stdout); // Standard output
170
- console.log('stderr:', result.stderr); // Standard error
171
- } catch (error) {
172
- console.error('Command failed:');
173
- console.error('Exit Code:', error._code); // Exit code of the command
174
- console.error('Signal:', error._signal); // Signal that caused termination (if any)
175
- console.error('stdout:', error._stdout); // Standard output
176
- console.error('stderr:', error._stderr); // Standard error
177
- }
178
- })();
179
- } else {
180
- log('Site already exists. Continuing Auth0 setup...');
181
- }
182
-
183
- await (async () => {
184
- try {
185
- // Execute the shell command
186
- const result = await $`cd ${cloneTo} && bash dock.sh getAuth0Metadata`;
187
- console.log('Command succeeded:');
188
- console.log('stdout:', result.stdout); // Standard output
189
- console.log('stderr:', result.stderr); // Standard error
190
- } catch (error) {
191
- console.error('Command failed:');
192
- console.error('Exit Code:', error._code); // Exit code of the command
193
- console.error('Signal:', error._signal); // Signal that caused termination (if any)
194
- console.error('stdout:', error._stdout); // Standard output
195
- console.error('stderr:', error._stderr); // Standard error
196
- }
197
- })();
198
-
199
- // 7) Check conf files, print logs
200
- await $`grep "auth0" ${path.join(cloneTo, 'conf/application.conf')}`;
201
- await $`ls -all ${path.join(cloneTo, 'conf')}`;
202
- await $`ls -all ${path.join(cloneTo, 'conf/saml')}`;
203
- await $`cat ${path.join(cloneTo, 'conf/saml/auth0.xml')}`;
204
-
205
- // 8) Git add, commit, push
206
- await $`cd ${cloneTo} && git add ./conf/application.conf ./conf/saml/auth0.xml`;
207
- await $`cd ${cloneTo} && git status`;
208
-
209
- const numChanges = (await $`cd ${cloneTo} && git diff-index HEAD`).stdout
210
- .split('\n')
211
- .filter(Boolean).length;
212
-
213
- if (numChanges > 0) {
214
- const jiraTicket = process.env.JIRA_TICKET || 'NO_JIRA';
215
- const message = `${jiraTicket} usdoc-s-builui job download_auth0_metadata for ${connectToEnv}/${process.env.BUILD_SITE}`;
216
- log('About to commit changes to git');
217
- await $`cd ${cloneTo} && git commit -m ${message}`;
218
- await $`cd ${cloneTo} && git push -u origin master`;
219
- } else {
220
- log(
221
- 'No changes have been made. The site likely already has the correct configuration.',
222
- );
223
- }
224
- }
1
+ import 'zx/globals'; // npm i zx
2
+ import fs from 'fs-extra';
3
+ import path from 'path';
4
+ import { $ } from 'zx';
5
+ import { getAuth0Metadata } from '../auth0/metadata.js';
6
+ import { getVaultSecrets } from '../auth0/vault.js';
7
+
8
+ process.env.COMMON_VAULT_PATH =
9
+ process.env.COMMON_VAULT_PATH || 'secret/data/common/config';
10
+ process.env.VAULT_SKIP_VERIFY = process.env.VAULT_SKIP_VERIFY || 'true';
11
+ process.env.CONNECT_DIR = process.env.CONNECT_DIR || 'connect';
12
+ const vaultToken = process.env.VAULT_TOKEN;
13
+ const vaultAddr = process.env.VAULT_ADDR;
14
+
15
+ const connectUIEnvMap = {
16
+ dev: 'dev',
17
+ qa: 'preprod',
18
+ stage: 'stg',
19
+ uat: 'uat',
20
+ prod: 'prod-www3',
21
+ };
22
+
23
+
24
+ const siteSettingsEnvMap = {
25
+ dev: 'dev',
26
+ preprod: 'preprod',
27
+ qa: 'preprod',
28
+ stage: 'staging',
29
+ stg: 'staging',
30
+ uat: 'uat',
31
+ prd: 'prod',
32
+ prod: 'prod',
33
+ 'prod-www3': 'prod',
34
+ 'prod-las': 'prod',
35
+ 'prod-lax': 'prod',
36
+ 'prod-athene': 'prod',
37
+ 'prod-staging': 'prod',
38
+ };
39
+
40
+ const idpEnvMap = {
41
+ dev: 'dev',
42
+ preprod: 'qa',
43
+ qa: 'qa',
44
+ stage: 'stage',
45
+ stg: 'stage',
46
+ uat: 'uat',
47
+ prd: 'prod',
48
+ prod: 'prod',
49
+ 'prod-www3': 'prod',
50
+ 'prod-las': 'prod',
51
+ 'prod-lax': 'prod',
52
+ 'prod-athene': 'prod',
53
+ 'prod-staging': 'prod',
54
+ };
55
+
56
+ function log(msg) {
57
+ console.log(`[*] ${msg}`);
58
+ }
59
+
60
+ /* --------------------------------
61
+ * 1. GIT CHECKOUT
62
+ * -------------------------------- */
63
+ async function gitCheckout(repository, destDir, branch = 'master') {
64
+ if (!(await fs.pathExists(destDir))) {
65
+ log(`Directory ${destDir} does not exist. Cloning repository...`);
66
+ } else {
67
+ log(`Directory ${destDir} exists. Removing it...`);
68
+ await fs.remove(destDir);
69
+ log(`Cloning ${destDir} repository...`);
70
+ }
71
+
72
+ const username = process.env.BITBUCKET_USERNAME;
73
+ const password = process.env.BITBUCKET_APP_PASSWORD;
74
+
75
+ // Construct clone command
76
+ const cloneUrl = `https://${username}:${password}@bitbucket.org/dp-cloud/${repository}.git`;
77
+
78
+ log(`Perform cloning`);
79
+ await $`git clone --branch=${branch} --depth 1 ${cloneUrl} ${destDir}`;
80
+ }
81
+
82
+ export async function connectClone() {
83
+ // const connectFromEnv = connectUIEnvMap[process.env.FROM_BUILD_ENVIRONMENT];
84
+ const connectFromEnv = process.env.FROM_BUILD_ENVIRONMENT;
85
+ const connectToEnv = process.env.BUILD_ENVIRONMENT;
86
+
87
+ if (!vaultToken || !vaultAddr) {
88
+ console.error('Error: VAULT_TOKEN and VAULT_ADDR must be set.');
89
+ throw new Error('VAULT_TOKEN and VAULT_ADDR must be set.');
90
+ }
91
+
92
+ const site = process.env.BUILD_SITE;
93
+ if (!site) {
94
+ log('Error: BUILD_SITE is not set');
95
+ process.exit(1);
96
+ }
97
+ const siteCommonVaultPath = `secret/data/${site}/common/config`;
98
+
99
+ // 2) getVaultSecrets
100
+ const secretsJson = await getVaultSecrets(siteCommonVaultPath);
101
+ if (!secretsJson.AUTH0_CLIENT_ID) {
102
+ log('Failed to retrieve secret data.');
103
+ process.exit(1);
104
+ }
105
+ const siteCommonSecrets = secretsJson;
106
+
107
+ // 3) Export secrets as environment variables
108
+ process.env.AUTH0_CLIENT_ID = siteCommonSecrets.AUTH0_CLIENT_ID;
109
+ process.env.AUTH0_CLIENT_SECRET = siteCommonSecrets.AUTH0_CLIENT_SECRET;
110
+
111
+ process.env.AUTH0_REGION_DOMAIN = 'us.auth0.com';
112
+
113
+ log(`BUILD_ENVIRONMENT: ${connectToEnv}`);
114
+ log(`BUILD_SITE: ${process.env.BUILD_SITE}`);
115
+ log(`AUTH0_SUBDOMAIN: ${process.env.AUTH0_SUBDOMAIN}`);
116
+ log(`AUTH0_REGION_DOMAIN: ${process.env.AUTH0_REGION_DOMAIN}`);
117
+ log(`AUTH0_CLIENT_ID: ${process.env.AUTH0_CLIENT_ID}`);
118
+
119
+ process.env.AUTH0_DOMAIN = `docupace-${idpEnvMap[process.env.BUILD_ENVIRONMENT]}-${process.env.BUILD_SITE}.${process.env.AUTH0_REGION_DOMAIN}`;
120
+
121
+ const projectRoot = process.cwd();
122
+ // 4) Clone 'connect-deploy' into CONNECT_DIR
123
+
124
+ await gitCheckout('connect-deploy', process.env.CONNECT_DIR);
125
+
126
+ await gitCheckout(
127
+ `${siteSettingsEnvMap[connectToEnv]}-site-settings`,
128
+ `${process.env.CONNECT_DIR}/${siteSettingsEnvMap[connectToEnv]}-site-settings`,
129
+ );
130
+
131
+ // 5) Create site clone (emulating the dock.sh call)
132
+ const cloneFrom = path.join(
133
+ projectRoot,
134
+ process.env.CONNECT_DIR,
135
+ `envs`,
136
+ `${connectFromEnv}/${process.env.FROM_BUILD_SITE}`,
137
+ );
138
+ const cloneTo = path.join(
139
+ projectRoot,
140
+ process.env.CONNECT_DIR,
141
+ `envs`,
142
+ `${connectToEnv}/${process.env.BUILD_SITE}`,
143
+ );
144
+
145
+ if (!(await fs.pathExists(cloneFrom))) {
146
+ log('Clone template directory not found:');
147
+ process.exit(1);
148
+ }
149
+
150
+ if (!(await fs.pathExists(cloneTo))) {
151
+ log('New site does not exist. Performing cloning...');
152
+
153
+ process.env.IMAGE_VERSION =
154
+ await $`cd ${cloneFrom} && grep -E '^IMAGE_VERSION=' dock.sh | cut -f2 -d=`;
155
+ log(`Image version: ${process.env.IMAGE_VERSION}`);
156
+ //await $`cd ${cloneFrom} && bash dock.sh clone ${process.env.BUILD_ENVIRONMENT} ${process.env.BUILD_SITE} ${process.env.IMAGE_VERSION}`;
157
+ await (async () => {
158
+ try {
159
+ // Execute the shell command
160
+ const result =
161
+ await $`cd ${cloneFrom} && bash dock.sh clone ${connectToEnv} ${process.env.BUILD_SITE} ${process.env.IMAGE_VERSION}`;
162
+ await $`cd ${cloneTo} && git checkout master && git pull --ff-only`;
163
+ await $`cd ${cloneTo} && git remote -v`;
164
+ await $`cd ${cloneTo} && git branch`;
165
+ await $`cd ${cloneTo} && git status`;
166
+ await $`cd ${cloneTo} && git add . ../sites.sh`;
167
+
168
+ console.log('Command succeeded:');
169
+ console.log('stdout:', result.stdout); // Standard output
170
+ console.log('stderr:', result.stderr); // Standard error
171
+ } catch (error) {
172
+ console.error('Command failed:');
173
+ console.error('Exit Code:', error._code); // Exit code of the command
174
+ console.error('Signal:', error._signal); // Signal that caused termination (if any)
175
+ console.error('stdout:', error._stdout); // Standard output
176
+ console.error('stderr:', error._stderr); // Standard error
177
+ }
178
+ })();
179
+ } else {
180
+ log('Site already exists. Continuing Auth0 setup...');
181
+ }
182
+
183
+ // await (async () => {
184
+ // try {
185
+ // // Execute the shell command
186
+ // //await getAuth0Metadata(process.env.BUILD_SITE, connectToEnv);
187
+ // const result = await $`cd ${cloneTo} && bash dock.sh getAuth0Metadata`;
188
+ // console.log('Command succeeded:');
189
+ // console.log('stdout:', result.stdout); // Standard output
190
+ // console.log('stderr:', result.stderr); // Standard error
191
+ // } catch (error) {
192
+ // console.error('Command failed:');
193
+ // console.error('Exit Code:', error._code); // Exit code of the command
194
+ // console.error('Signal:', error._signal); // Signal that caused termination (if any)
195
+ // console.error('stdout:', error._stdout); // Standard output
196
+ // console.error('stderr:', error._stderr); // Standard error
197
+ // }
198
+ // })();
199
+
200
+ // 7) Check conf files, print logs
201
+ // await $`grep "auth0" ${path.join(cloneTo, 'conf/application.conf')}`;
202
+ // await $`ls -all ${path.join(cloneTo, 'conf')}`;
203
+ // await $`ls -all ${path.join(cloneTo, 'conf/saml')}`;
204
+ // await $`cat ${path.join(cloneTo, 'conf/saml/auth0.xml')}`;
205
+
206
+ // 8) Git add, commit, push
207
+ // await $`cd ${cloneTo} && git add ./conf/application.conf ./conf/saml/auth0.xml`;
208
+ //await $`cd ${cloneTo} && git add ./conf/application.conf`;
209
+ //await $`cd ${cloneTo} && git status`;
210
+
211
+ const numChanges = (await $`cd ${cloneTo} && git diff-index HEAD`).stdout
212
+ .split('\n')
213
+ .filter(Boolean).length;
214
+
215
+ if (numChanges > 0) {
216
+ const jiraTicket = process.env.JIRA_TICKET || 'NO_JIRA';
217
+ const message = `${jiraTicket} usdoc-s-builui job download_auth0_metadata for ${connectToEnv}/${process.env.BUILD_SITE}`;
218
+ log('About to commit changes to git');
219
+ await $`cd ${cloneTo} && git commit -m ${message}`;
220
+ await $`cd ${cloneTo} && git push -u origin master`;
221
+ //await getAuth0Metadata(process.env.BUILD_SITE, connectToEnv);
222
+ } else {
223
+ log(
224
+ 'No changes have been made. The site likely already has the correct configuration.',
225
+ );
226
+ }
227
+ }