@docupace/pipeline 1.0.4 → 1.0.5-4.ervins

package/next/execute.sh

@@ -1,117 +1,123 @@
-#!/bin/bash
-
-# Usage: ./pipeline.sh <function> <BITBUCKET_REPO_SLUG>
-# Example: ./pipeline.sh build docupace-ui-main
-
-set -e  # Enable command tracing
-GIT_SHA=$(git log --pretty=format:'%h' -n 1)
-JF_REGISTRY_FULL_URL="${JF_REGISTRY_URL}/${JF_REGISTRY_REPO_NAME}"
-PARAM1=$2
-PARAM2=$3
-
-pull() {
-  IMAGE_NAME=$2
-  docker pull "${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}"
-}
-
-# Function to run Sonar analysis
-sonar() {
-    export DOCKER_HOST=""
-    IMAGE_NAME="${BITBUCKET_REPO_SLUG}:sha-${GIT_SHA}"
-    SONAR_CONTAINER_NAME="${BITBUCKET_REPO_SLUG}-${GIT_SHA}"
-
-    echo "Running Sonar analysis on Docker image ${IMAGE_NAME}..."
-
-    # Remove any existing container with the same name
-    if [ "$(docker ps -a --filter "name=$SONAR_CONTAINER_NAME" --format "{{.Names}}")" ]; then
-        docker rm -f $SONAR_CONTAINER_NAME
-    fi
-
-    cd "$ROOT_DIR"
-    docker run --rm \
-      -e BRANCH=$BITBUCKET_BRANCH \
-      -e PR_ID=$BITBUCKET_PR_ID \
-      -e PR_DESTINATION_BRANCH=$BITBUCKET_PR_DESTINATION_BRANCH \
-      -e SONAR_TOKEN=$SONAR_TOKEN \
-      --name $SONAR_CONTAINER_NAME $IMAGE_NAME pnpm sonar
-}
-
-# Function to publish the Docker image
-
-
-loginRegistry() {
-    echo ${JF_REGISTRY_PASSWORD_DEV} | docker login --username ${JF_REGISTRY_USER_DEV} --password-stdin ${JF_REGISTRY_URL}
-}
-
-logoutRegistry() {
-    docker logout ${JF_REGISTRY_URL}
-}
-
-copy() {
-    DIR="$(dirname "$0")"
-    bash $DIR/copy.sh
-}
-
-publish() {
-    BUILD_IMAGE_NAME="${BITBUCKET_REPO_SLUG}:build-${BITBUCKET_BUILD_NUMBER}"
-    IMAGE_NAME="${BITBUCKET_REPO_SLUG}:sha-${GIT_SHA}"
-    export DOCKER_HOST=""
-
-    echo "Publishing Docker image ${IMAGE_NAME}..."
-
-    loginRegistry
-
-    # Check if the image already exists in the registry
-    if docker manifest inspect ${JF_REGISTRY_FULL_URL}/${IMAGE_NAME} >/dev/null 2>&1; then
-        echo "Tag sha-${GIT_SHA} already exists in the remote repository. Skipping push."
-    else
-        docker tag ${IMAGE_NAME} "${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}"
-        docker push "${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}"
-    fi
-
-    # Tag and push the build image
-    docker tag ${IMAGE_NAME} "${JF_REGISTRY_FULL_URL}/${BUILD_IMAGE_NAME}"
-    docker push "${JF_REGISTRY_FULL_URL}/${BUILD_IMAGE_NAME}"
-
-    # Tag and push each Git tag as a Docker tag
-    GIT_TAGS=$(git tag --points-at HEAD)
-    for GIT_TAG in ${GIT_TAGS}; do
-        docker tag ${IMAGE_NAME} "${JF_REGISTRY_FULL_URL}/${BITBUCKET_REPO_SLUG}:${GIT_TAG}"
-        docker push "${JF_REGISTRY_FULL_URL}/${BITBUCKET_REPO_SLUG}:${GIT_TAG}"
-    done
-
-    # Logout from Docker registry
-    loginRegistry
-}
-
-# Function to deploy
-# application - ui|graphql
-# site
-deploy() {
-    echo "Deploying $PARAM1 application for site $PARAM2..."
-    DIR="$(dirname "$0")"
-    bash $DIR/deploy.sh $PARAM1 $PARAM2
-}
-
-# Main logic to call the appropriate function
-case "$1" in
-    build)
-        build
-        ;;
-    sonar)
-        sonar
-        ;;
-    publish)
-        publish
-        ;;
-    deploy)
-        deploy
-        ;;
-    copy)
-        copy
-        ;;
-    *)
-        echo "Usage: $0 {build|sonar|publish|deploy|copy} <BITBUCKET_REPO_SLUG>"
-        exit 1
-        ;;
-esac
+#!/bin/bash
+
+# Usage: ./pipeline.sh <function> <BITBUCKET_REPO_SLUG>
+# Example: ./pipeline.sh build docupace-ui-main
+
+set -e  # Enable command tracing
+GIT_SHA=$(git log --pretty=format:'%h' -n 1)
+JF_REGISTRY_FULL_URL="${JF_REGISTRY_URL}/${JF_REGISTRY_REPO_NAME}"
+PARAM1=$2
+PARAM2=$3
+
+pull() {
+  IMAGE_NAME=$2
+  docker pull "${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}"
+}
+
+# Function to run Sonar analysis
+sonar() {
+    export DOCKER_HOST=""
+    IMAGE_NAME="${BITBUCKET_REPO_SLUG}:sha-${GIT_SHA}"
+    SONAR_CONTAINER_NAME="${BITBUCKET_REPO_SLUG}-${GIT_SHA}"
+
+    echo "Running Sonar analysis on Docker image ${IMAGE_NAME}..."
+
+    # Remove any existing container with the same name
+    if [ "$(docker ps -a --filter "name=$SONAR_CONTAINER_NAME" --format "{{.Names}}")" ]; then
+        docker rm -f $SONAR_CONTAINER_NAME
+    fi
+
+    cd "$ROOT_DIR"
+    docker run --rm \
+      -e BRANCH=$BITBUCKET_BRANCH \
+      -e PR_ID=$BITBUCKET_PR_ID \
+      -e PR_DESTINATION_BRANCH=$BITBUCKET_PR_DESTINATION_BRANCH \
+      -e SONAR_TOKEN=$SONAR_TOKEN \
+      --name $SONAR_CONTAINER_NAME $IMAGE_NAME pnpm sonar
+}
+
+# Function to publish the Docker image
+
+
+loginRegistry() {
+    echo ${JF_REGISTRY_PASSWORD_DEV} | docker login --username ${JF_REGISTRY_USER_DEV} --password-stdin ${JF_REGISTRY_URL}
+}
+
+logoutRegistry() {
+    docker logout ${JF_REGISTRY_URL}
+}
+
+copy() {
+    DIR="$(dirname "$0")"
+    bash $DIR/copy.sh
+}
+
+publish() {
+    SLUG_SUFFIX=""
+    if [ -n "$APP_NAME" ]; then
+      SLUG_SUFFIX="-${APP_NAME}"
+    fi
+
+    BUILD_IMAGE_NAME="${BITBUCKET_REPO_SLUG}${SLUG_SUFFIX}:build-${BITBUCKET_BUILD_NUMBER}"
+    IMAGE_NAME="${BITBUCKET_REPO_SLUG}${SLUG_SUFFIX}:sha-${GIT_SHA}"
+
+    export DOCKER_HOST=""
+
+    echo "Publishing Docker image ${IMAGE_NAME}..."
+
+    loginRegistry
+
+    # Check if the image already exists in the registry
+    if docker manifest inspect ${JF_REGISTRY_FULL_URL}/${IMAGE_NAME} >/dev/null 2>&1; then
+        echo "Tag sha-${GIT_SHA} already exists in the remote repository. Skipping push."
+    else
+        docker tag ${IMAGE_NAME} "${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}"
+        docker push "${JF_REGISTRY_FULL_URL}/${IMAGE_NAME}"
+    fi
+
+    # Tag and push the build image
+    docker tag ${IMAGE_NAME} "${JF_REGISTRY_FULL_URL}/${BUILD_IMAGE_NAME}"
+    docker push "${JF_REGISTRY_FULL_URL}/${BUILD_IMAGE_NAME}"
+
+    # Tag and push each Git tag as a Docker tag
+    GIT_TAGS=$(git tag --points-at HEAD)
+    for GIT_TAG in ${GIT_TAGS}; do
+        docker tag ${IMAGE_NAME} "${JF_REGISTRY_FULL_URL}/${BITBUCKET_REPO_SLUG}:${GIT_TAG}"
+        docker push "${JF_REGISTRY_FULL_URL}/${BITBUCKET_REPO_SLUG}:${GIT_TAG}"
+    done
+
+    # Logout from Docker registry
+    loginRegistry
+}
+
+# Function to deploy
+# application - ui|graphql
+# site
+deploy() {
+    echo "Deploying $PARAM1 application for site $PARAM2..."
+    DIR="$(dirname "$0")"
+    bash $DIR/deploy.sh $PARAM1 $PARAM2
+}
+
+# Main logic to call the appropriate function
+case "$1" in
+    build)
+        build
+        ;;
+    sonar)
+        sonar
+        ;;
+    publish)
+        publish
+        ;;
+    deploy)
+        deploy
+        ;;
+    copy)
+        copy
+        ;;
+    *)
+        echo "Usage: $0 {build|sonar|publish|deploy|copy} <BITBUCKET_REPO_SLUG>"
+        exit 1
+        ;;
+esac

package/next/sonar.sh

@@ -1,23 +1,23 @@
-#!/bin/bash
-
-# Initialize sonar-scanner command with common parameters
-SONAR_CMD="npx sonarqube-scanner"
-
-echo "PR_ID=$PR_ID"
-echo "BRANCH=$BRANCH"
-echo "PR_DESTINATION_BRANCH=$PR_DESTINATION_BRANCH"
-
-# Determine the type of scan based on environment variables
-if [[ ! -z "$PR_ID" ]]; then
-  SONAR_CMD+=" \
-    -Dsonar.pullrequest.key=$PR_ID \
-    -Dsonar.pullrequest.branch=$BRANCH \
-    -Dsonar.pullrequest.base=$PR_DESTINATION_BRANCH"
-else
-  SONAR_CMD+=" \
-    -Dsonar.branch.name=$BRANCH"
-fi
-
-# Execute the sonar-scanner command
-echo "Running: $SONAR_CMD"
-$SONAR_CMD
+#!/bin/bash
+
+# Initialize sonar-scanner command with common parameters
+SONAR_CMD="npx sonarqube-scanner"
+
+echo "PR_ID=$PR_ID"
+echo "BRANCH=$BRANCH"
+echo "PR_DESTINATION_BRANCH=$PR_DESTINATION_BRANCH"
+
+# Determine the type of scan based on environment variables
+if [[ ! -z "$PR_ID" ]]; then
+  SONAR_CMD+=" \
+    -Dsonar.pullrequest.key=$PR_ID \
+    -Dsonar.pullrequest.branch=$BRANCH \
+    -Dsonar.pullrequest.base=$PR_DESTINATION_BRANCH"
+else
+  SONAR_CMD+=" \
+    -Dsonar.branch.name=$BRANCH"
+fi
+
+# Execute the sonar-scanner command
+echo "Running: $SONAR_CMD"
+$SONAR_CMD

package/package.json

@@ -1,28 +1,50 @@
-{
-  "name": "@docupace/pipeline",
-  "version": "1.0.4",
-  "description": "",
-  "main": "index.js",
-  "type": "module",
-  "bin": {
-    "dp-changeset-cli": "src/changeset/cli.js",
-    "dp-next-cli": "src/next/cli.js"
-  },
-  "keywords": [
-    "bash"
-  ],
-  "author": "",
-  "license": "ISC",
-  "dependencies": {
-    "@changesets/cli": "^2.27.10",
-    "commander": "^12.1.0",
-    "dotenv": "^16.4.7",
-    "js-yaml": "^4.1.0",
-    "openai": "^4.76.3",
-    "zod": "^3.24.1",
-    "zx": "^8.2.4"
-  },
-  "devDependencies": {
-    "esbuild": "^0.24.0"
-  }
-}
+{
+  "name": "@docupace/pipeline",
+  "version": "1.0.54.ervins",
+  "description": "",
+  "main": "index.js",
+  "type": "module",
+  "scripts": {
+    "test-deploy-core": "dp-next-cli deploy-core-pipeline dev template",
+    "test-deploy-from-site": "dp-next-cli deploy-from-site --from-env dev --to-env dev --from-site financialdev --to-site template --deploy-core true",
+    "test-run-pipline": "dp-next-cli run-pipeline -r docupace-next-e2e -b master -p run-tests-qa",
+    "test-validate": "dp-changset-cli validate",
+    "test-create": "dp-changset-cli create-changeset"
+  },
+  "bin": {
+    "dp-changeset-cli": "src/changeset/cli.js",
+    "dp-next-cli": "src/next/cli.js",
+    "dp-auth0-cli": "src/auth0/cli.js"
+  },
+  "keywords": [
+    "bash"
+  ],
+  "author": "",
+  "license": "ISC",
+  "dependencies": {
+    "@changesets/cli": "^2.27.10",
+    "@docupace/core-client": "^0.1.59",
+    "@docupace/pipeline": "^1.0.33-alpha-2",
+    "auth0-deploy-cli": "^8.8.0",
+    "axios": "^1.7.9",
+    "commander": "^12.1.0",
+    "dotenv": "^16.4.7",
+    "fs-extra": "^11.3.0",
+    "inquirer": "^12.6.1",
+    "js-yaml": "^4.1.0",
+    "lodash": "^4.17.21",
+    "openai": "^4.76.3",
+    "semver": "^7.7.2",
+    "zod": "^3.24.1",
+    "zx": "^8.3.0"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.17.0",
+    "esbuild": "^0.24.0",
+    "eslint": "^9.17.0",
+    "eslint-config-prettier": "^9.1.0",
+    "eslint-plugin-prettier": "^5.2.1",
+    "globals": "^15.14.0",
+    "prettier": "^3.4.2"
+  }
+}

package/src/auth0/alias.js

@@ -0,0 +1,72 @@
+import axios from 'axios';
+
+import { createAlias } from '../next/alias.js';
+
+import { getAuth0AuthToken } from './configure.js';
+
+import { getVaultSecrets } from './vault.js';
+
+import { getVaultSecretsConfigs } from '../next/config.js';
+
+import { cloneEnvRepository, readDeployConfig } from '../next/deploy.js';
+
+export async function getCCAlias({ application, auth0Domain, auth0AuthToken }) {
+  console.log(`Forming alias name for application ${application}...`);
+
+  try {
+    const auth0Response = await axios.get(
+      `https://${auth0Domain}/api/v2/clients`,
+      {
+        headers: { authorization: `Bearer ${auth0AuthToken}` },
+      },
+    );
+
+    const appAuth0ClientIdData = auth0Response.data.find(
+      (client) => client.name === `${application}`,
+    );
+    const appAuth0ClientId = appAuth0ClientIdData.client_id;
+
+    console.log(`Client Credentials Alias: ${appAuth0ClientId}@clients`);
+    return `${appAuth0ClientId}@clients`;
+  } catch (err) {
+    console.error(
+      `Failed to form alias name for application: ${application}: ${err.message}`,
+    );
+  }
+}
+
+export async function configureAlias(site, env, username, password, realm) {
+  console.log(`Creating alias for site: ${site} in env: ${env}`);
+  // Site Common Secrets
+  const siteCommonSecretsPath =
+    getVaultSecretsConfigs(site).siteCommonSecretsPath;
+  console.log(`siteCommonSecretsPath => ${siteCommonSecretsPath}`);
+  const siteCommonSecrets = await getVaultSecrets(siteCommonSecretsPath);
+
+  const auth0Domain = `docupace-${env}-${site}.us.auth0.com`;
+  const auth0ClientId = siteCommonSecrets.AUTH0_CLIENT_ID;
+  const auth0ClientSecret = siteCommonSecrets.AUTH0_CLIENT_SECRET;
+  const auth0Token = await getAuth0AuthToken(
+    auth0Domain,
+    auth0ClientId,
+    auth0ClientSecret,
+  );
+
+  await cloneEnvRepository(env);
+
+  const { deployConfig: deployGraphQLServerConfig } = await readDeployConfig(
+    'graphql-server',
+    env,
+    site,
+    'values',
+  );
+  const coreUrl = deployGraphQLServerConfig.graphqlServer.coreUrl;
+
+  const clientCredentialsAlias = await getCCAlias({
+    application: 'docupace-graphql-client-credentials',
+    auth0Domain: auth0Domain,
+    auth0AuthToken: auth0Token,
+  });
+
+  await createAlias(coreUrl, username, password, realm, clientCredentialsAlias);
+}

package/src/auth0/cli.js

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+
+import { Command } from 'commander';
+import { configureFromSite } from './configure.js';
+import { getVaultSecrets } from './vault.js';
+
+import dotenv from 'dotenv';
+import { configureAlias } from './alias.js';
+import { exportConf } from './export.js';
+import { getAuth0Metadata } from './metadata.js';
+
+dotenv.config({ path: ['.env.pipeline.local', 'config/.env.pipeline.local'] });
+
+const program = new Command();
+
+program
+  .command(
+    'configureFromSite <fromSite> <toSite> <fromEnv> <toEnv> <deployUI> <deployGraphQLServer> <useNewDomain> <useS3> <deployCCUI>',
+  )
+  .description('Configure the Auth0 tenants in env for the given site')
+  .action(
+    async (
+      fromSite,
+      toSite,
+      fromEnv,
+      toEnv,
+      deployUI,
+      deployGraphQLServer,
+      useNewDomain,
+      useS3,
+      deployCCUI,
+    ) => {
+      await configureFromSite(
+        fromSite,
+        toSite,
+        fromEnv,
+        toEnv,
+        deployUI,
+        deployGraphQLServer,
+        useNewDomain,
+        useS3 === 'true' || useS3 === true,
+        deployCCUI,
+      );
+    },
+  );
+
+program
+  .command('getVaultSecrets <vaultPath>')
+  .description('Get Secrets for Vault PATH')
+  .action(async (vaultPath) => {
+    const data = await getVaultSecrets(vaultPath);
+    console.log(JSON.stringify(data, 'null', 2));
+  });
+
+program
+  .command('configureAlias <site> <env> <username> <password> <realm>')
+  .description('Configure Core Alias for the given site')
+  .action(async (site, env, username, password, realm) => {
+    await configureAlias(site, env, username, password, realm);
+  });
+
+program
+  .command('exportConf <site> <env>')
+  .description('Export Auth0 configuration for the given site')
+  .action(async (site, env) => {
+    await exportConf(site, env);
+  });
+
+program
+  .command('getAuth0Metadata <site> <env>')
+  .description('Get Auth0 metadata for the given site')
+  .action(async (site, env) => {
+    await getAuth0Metadata(site, env);
+  });
+
+program.parse(process.argv);