@docupace/pipeline 1.0.5-alpha.25.ervins.21 → 1.0.5-alpha.25.ervins.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@docupace/pipeline",
-  "version": "1.0.5-alpha.25.ervins.21",
+  "version": "1.0.5-alpha.25.ervins.3",
   "description": "",
   "main": "index.js",
   "type": "module",

package/src/next/cli.js

@@ -8,9 +8,6 @@ import { deployFromSite } from './deploy.js';
 import { deployTemplate } from './deploy.js';
 import { copy } from './copy.js';
 import { vaultAddSiteData } from './vault.js';
-import { addApacheSite } from './apache.js';
-import { haproxySync }  from './haproxy.js';
-import { connectClone } from './connect.js';
 import dotenv from 'dotenv';
 
 dotenv.config({ path: ['.env.pipeline.local', 'config/.env.pipeline.local'] });
@@ -38,30 +35,6 @@ program
     await sonar(GIT_SHA);
   });
 
-program
-.command('addApacheSite')
-.description('Add site to apache')
-.action(async () => {
-  await addApacheSite();
-});
-
-program
-.command('connectClone')
-.description('Clone connect site')
-.action(async () => {
-  await connectClone();
-});
-
-
-program
-.command('haproxySync')
-.description('Sync haproxy config')
-.action(async () => {
-  await haproxySync();
-});
-
-
-
 program
   .command('vaultAddSiteData')
   .description('Add m2m auth0 data to vault')

package/src/next/apache.js

@@ -1,36 +0,0 @@
-import { $ } from 'zx';
-
-export async function addApacheSite() {
-    if (
-      !process.env.ENVIRONMENT ||
-      (process.env.ENVIRONMENT !== 'dev' && process.env.ENVIRONMENT !== 'qa')
-    ) {
-      log("Error: ENVIRONMENT must be either 'dev' or 'qa'.");
-      process.exit(1);
-    }
-    if (!process.env.SITE) {
-      log('Error: SITE cannot be empty.');
-      process.exit(1);
-    }
-  
-    // Save private key from base64
-    const haproxyPrivateKey = process.env.HAPROXY_PRIVATE_KEY;
-    if (!haproxyPrivateKey) {
-      log('Error: HAPROXY_PRIVATE_KEY not set.');
-      process.exit(1);
-    }
-  
-    await fs.writeFile('private.key', Buffer.from(haproxyPrivateKey, 'base64'));
-    await fs.chmod('private.key', 0o600);
-  
-    const server = `${process.env.ENVIRONMENT}-apalb01a.corp.docupace.com`;
-    console.log("Running command");
-    const sshCmd = (script) =>
-      $`ssh -i private.key -o StrictHostKeyChecking=no root@${server} ${script}`;
-  
-    // The script is run twice in the Bash version
-    await sshCmd(`/root/repo/iis-preprod/scripts/addsite/add_core_site.sh ${process.env.ENVIRONMENT} ${process.env.SITE}`);
-    //await sshCmd(`/root/repo/iis-preprod/scripts/addsite/add_core_site.sh ${process.env.ENVIRONMENT} ${process.env.SITE}`);
-  }
-  
-  

package/src/next/connect.js

@@ -1,198 +0,0 @@
-import 'zx/globals'; // npm i zx
-import fs from 'fs-extra';
-import path from 'path';
-import axios from 'axios';
-import { $ } from 'zx';
-
-
-process.env.COMMON_VAULT_PATH = process.env.COMMON_VAULT_PATH || 'secret/data/common/config';
-process.env.VAULT_SKIP_VERIFY = process.env.VAULT_SKIP_VERIFY || 'true';
-process.env.CONNECT_DIR = process.env.CONNECT_DIR || 'connect';
-
-
-function log(msg) {
-    console.log(`[*] ${msg}`);
-  }
-  
-  /* --------------------------------
-   * 1. GIT CHECKOUT
-   * -------------------------------- */
-  async function gitCheckout(repository, destDir, branch = 'master') {
-    if (!(await fs.pathExists(destDir))) {
-      log(`Directory ${destDir} does not exist. Cloning repository...`);
-    } else {
-      log(`Directory ${destDir} exists. Removing it...`);
-      await fs.remove(destDir);
-      log(`Cloning ${destDir} repository...`);
-    }
-    
-    // Since we use zx, the environment variables can be read from process.env
-    // e.g. $BITBUCKET_USERNAME, $BITBUCKET_APP_PASSWORD
-    const username = process.env.BITBUCKET_USERNAME;
-    const password = process.env.BITBUCKET_APP_PASSWORD;
-  
-    // Construct clone command
-    const cloneUrl = `https://${username}:${password}@bitbucket.org/dp-cloud/${repository}.git`;
-  
-    // Perform the clone
-    await $`git clone --branch=${branch} --depth 1 ${cloneUrl} ${destDir}`;
-  }
-  
-  
-  /* --------------------------------
-   * 3. GET VAULT SECRETS
-   * -------------------------------- */
-   async function getVaultSecrets(vaultPath) {
-    if (!vaultPath) {
-      console.error("Error: VAULT_PATH is required.");
-      throw new Error("VAULT_PATH is required.");
-    }
-  
-    const vaultToken = process.env.VAULT_TOKEN;
-    const vaultAddr = process.env.VAULT_ADDR;
-  
-    if (!vaultToken || !vaultAddr) {
-      console.error("Error: VAULT_TOKEN and VAULT_ADDR must be set.");
-      throw new Error("VAULT_TOKEN and VAULT_ADDR must be set.");
-    }
-  
-    try {
-      // Disable SSL verification globally by setting environment variable
-      if (process.env.VAULT_SKIP_VERIFY === 'true') {
-        process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
-      }
-  
-      // Fetch the secret from Vault
-      const response = await axios.get(`${vaultAddr}/v1/${vaultPath}`, {
-        headers: {
-          'X-Vault-Token': vaultToken,
-        },
-      });
-  
-      // Validate the response contains JSON data
-      const data = response.data;
-      if (data && typeof data === 'object') {
-        // console.log(`Secrets fetched successfully from Vault at ${JSON.stringify(data.data.data)})`);
-        return data.data.data;
-      } else {
-        console.error("Error: Invalid JSON received from Vault.");
-        throw new Error("Invalid JSON received from Vault.");
-      }
-    } catch (error) {
-      if (error.response) {
-        console.error(
-          `Error: Failed to connect to Vault server at ${vaultAddr}. Response: ${error.response.status} ${error.response.statusText}`
-        );
-      } else {
-        console.error(`Error: ${error.message}`);
-      }
-      // throw error;
-    }
-  }
-
-export async function connectClone() {
-    console.log("Vault address:",process.env.VAULT_ADDR);
-    await $`curl -I -L  ${process.env.VAULT_ADDR}`;
-    console.log('base64');
-    const out1 = await $`echo  ${process.env.VAULT_TOKEN} | base64`;
-    console.log('base64:',out1);
-
-    const site = process.env.BUILD_SITE;
-    if (!site) {
-      log('Error: BUILD_SITE is not set');
-      process.exit(1);
-    }
-    const siteCommonVaultPath = `secret/data/${site}/common/config`;
-  
-  
-    // 2) getVaultSecrets
-    const secretsJson = await getVaultSecrets(siteCommonVaultPath);
-    if (!secretsJson?.data?.data) {
-      log('Failed to retrieve secret data.');
-      process.exit(1);
-    }
-    const siteCommonSecrets = secretsJson.data.data;
-  
-    // 3) Export secrets as environment variables
-    process.env.AUTH0_CLIENT_ID = siteCommonSecrets.AUTH0_CLIENT_ID;
-    process.env.AUTH0_CLIENT_SECRET = siteCommonSecrets.AUTH0_CLIENT_SECRET;
-  
-    process.env.AUTH0_SUBDOMAIN="docupace-${BUILD_ENVIRONMENT}-${BUILD_SITE}"
-    process.env.AUTH0_REGION_DOMAIN="us.auth0.com"
-
-    log(`BUILD_ENVIRONMENT: ${process.env.BUILD_ENVIRONMENT}`);
-    log(`BUILD_SITE: ${process.env.BUILD_SITE}`);
-    log(`AUTH0_SUBDOMAIN: ${process.env.AUTH0_SUBDOMAIN}`);
-    log(`AUTH0_REGION_DOMAIN: ${process.env.AUTH0_REGION_DOMAIN}`);
-    log(`AUTH0_CLIENT_ID: ${process.env.AUTH0_CLIENT_ID}`);
-  
-    process.env.AUTH0_DOMAIN = `${process.env.AUTH0_SUBDOMAIN}.${process.env.AUTH0_REGION_DOMAIN}`;
-  
-    // 4) Clone 'connect-deploy' into CONNECT_DIR
-    await gitCheckout('connect-deploy', process.env.CONNECT_DIR);
-  
-    // 5) Create site clone (emulating the dock.sh call)
-    const cloneFrom = `${process.env.FROM_BUILD_ENVIRONMENT}/${process.env.FROM_BUILD_SITE}`;
-    const projectHome = path.resolve(process.env.CONNECT_DIR);
-  
-    const cloneFromPath = path.join(projectHome, 'envs', cloneFrom);
-    if (!(await fs.pathExists(cloneFromPath))) {
-      log('Clone template directory not found');
-      process.exit(1);
-    }
-  
-    const newSitePath = path.join(
-      projectHome,
-      'envs',
-      process.env.BUILD_ENVIRONMENT,
-      process.env.BUILD_SITE
-    );
-  
-    if (!(await fs.pathExists(newSitePath))) {
-      log('New site does not exist. Performing cloning...');
-      // This is where the bash script does: bash dock.sh clone ...
-      // We'll replicate with zx:
-      process.env.IMAGE_VERSION=$`cd ${cloneFromPath} && grep -E '^IMAGE_VERSION=' dock.sh | cut -f2 -d=`
-      await $`bash dock.sh clone ${process.env.BUILD_ENVIRONMENT} ${process.env.BUILD_SITE} ${process.env.IMAGE_VERSION}`;
-    } else {
-      log('Site already exists. Continuing Auth0 setup...');
-    }
-  
-    // 6) Retrieve Auth0 metadata
-    const targetSitePath = path.join(
-      projectHome,
-      'envs',
-      process.env.BUILD_ENVIRONMENT,
-      process.env.BUILD_SITE
-    );
-    await $`cd ${targetSitePath} && bash dock.sh getAuth0Metadata`;
-  
-    // 7) Check conf files, print logs
-    await $`grep "auth0" ${path.join(targetSitePath, 'conf/application.conf')}`;
-    await $`ls -all ${path.join(targetSitePath, 'conf')}`;
-    await $`ls -all ${path.join(targetSitePath, 'conf/saml')}`;
-    await $`cat ${path.join(targetSitePath, 'conf/saml/auth0.xml')}`;
-  
-    // 8) Git add, commit, push
-    await $`cd ${targetSitePath} && git checkout master && git pull --ff-only`;
-    await $`cd ${targetSitePath} && git remote -v`;
-    await $`cd ${targetSitePath} && git branch`;
-    await $`cd ${targetSitePath} && git status`;
-    await $`cd ${targetSitePath} && git add . ../sites.sh`;
-    await $`cd ${targetSitePath} && git status`;
-  
-    const numChanges = (
-      await $`cd ${targetSitePath} && git diff-index HEAD`
-    ).stdout.split('\n').filter(Boolean).length;
-  
-    if (numChanges > 0) {
-      const jiraTicket = process.env.JIRA_TICKET || 'NO_JIRA';
-      const message = `${jiraTicket} usdoc-s-builui job download_auth0_metadata for ${process.env.BUILD_ENVIRONMENT}/${process.env.BUILD_SITE}`;
-      log('About to commit changes to git');
-      await $`cd ${targetSitePath} && git commit -m ${message}`;
-      await $`cd ${targetSitePath} && git push -u origin master`;
-    } else {
-      log('No changes have been made. The site likely already has the correct configuration.');
-    }
-  }
-  

package/src/next/haproxy.js

@@ -1,50 +0,0 @@
-import { $ } from 'zx';
-
-
-export async function haproxySync() {
-    const repoPath = '/root/repo/docupace-ansible';
-    const inventory = path.join(repoPath, 'inventories/preprod/inventory');
-  
-    // Create haproxy.sh
-    const scriptContent = `
-  #!/bin/bash
-  
-  [[ ! -f ${inventory} ]] && ( echo "Alert: no inventory file: ${inventory}" ; exit 1 )
-  cd ${repoPath}
-  pwd
-  git stash
-  git pull origin master
-  git checkout master
-  git submodule update --remote
-  git submodule foreach --recursive git checkout master
-  git submodule foreach --recursive git pull origin master
-  
-  ansible-playbook -i inventories/preprod/inventory haproxy.yml -e "cluster=preprod"
-  
-  echo "proceeding"
-  echo "committing changes"
-  git add preprod-haproxy.cfg
-  git commit -m "Sync haproxy"
-  git push origin master
-  `;
-  
-    await fs.writeFile('haproxy.sh', scriptContent);
-  
-    // Private key
-    const haproxyPrivateKey = process.env.HAPROXY_PRIVATE_KEY;
-    if (!haproxyPrivateKey) {
-      log('Error: HAPROXY_PRIVATE_KEY not set.');
-      process.exit(1);
-    }
-  
-    await fs.writeFile('private.key', Buffer.from(haproxyPrivateKey, 'base64'));
-    await fs.chmod('private.key', 0o600);
-  
-    await $`cat private.key`; // Just to mimic the script's behavior
-  
-    // Copy script to remote
-    await $`scp -i private.key -o StrictHostKeyChecking=no haproxy.sh root@10.10.28.198:/tmp/haproxy.sh`;
-  
-    // Execute script on remote
-    await $`ssh -i private.key -o StrictHostKeyChecking=no root@10.10.28.198 "bash /tmp/haproxy.sh"`;
-  }