@fishawack/lab-env 4.36.0 → 4.37.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 ## Changelog
 
+### 4.37.0 (2024-10-22)
+
+#### Features
+
+* added fullstack permission type that attaches eb permissions ([f98ccaa](https://bitbucket.org/fishawackdigital/lab-env/commits/f98ccaa600f6417e1bf0764ea45f2c512c438ecd))
+* permissions now accepted for IAM users to narrow down access ([507eceb](https://bitbucket.org/fishawackdigital/lab-env/commits/507ecebbabd2feb2d9ced604975a5f86ca9c1aaa))
+
+#### Build Updates
+
+* bumped nodemailer to fix punycode deprecation warning ([db4fd29](https://bitbucket.org/fishawackdigital/lab-env/commits/db4fd294fc39e0455e30319f796f3813f65c2bdc))
+* **core/1:** Bumped lab-env-core-1 ([6d706a9](https://bitbucket.org/fishawackdigital/lab-env/commits/6d706a95e09d75de8758a5b8703056ace009191e))
+
 ### 4.36.0 (2024-10-08)
 
 #### Features

package/commands/create/cmds/key.js

@@ -85,7 +85,7 @@ module.exports = [
                     credentials[user] = {};
                 }
 
-                let res = await aws.iam.createFWIAMUser(`fw-automation-${user}`, client);
+                let res = await aws.iam.createFWIAMUser(`fw-automation-${user}`, client, _.config.users.find(d => d.username === user).permissions);
 
                 credentials[user][client] = {
                     key: res.AccessKey && res.AccessKey.AccessKeyId || res.AccessKeyMetadata[0].AccessKeyId,

package/commands/create/services/aws/iam.js

@@ -24,10 +24,10 @@ module.exports.createIAMUser = async (UserName, account, tags = []) => {
     return res;
 };
 
-module.exports.createFWIAMUser = async (UserName, account) => {
+module.exports.createFWIAMUser = async (UserName, account, permissions) => {
     await module.exports.createIAMUser(UserName, account);
 
-    await module.exports.syncFWIAMPolicies(UserName, account);
+    await module.exports.syncFWIAMPolicies(UserName, account, permissions);
 
     let res = await module.exports.createAccessKeySafe(UserName, account);
 
@@ -73,10 +73,20 @@ module.exports.attachIAMPolicy = async (UserName, account, policy) => {
     return res;
 };
 
-module.exports.syncFWIAMPolicies = async (UserName, account) => {
+module.exports.syncFWIAMPolicies = async (UserName, account, permissions = ["auto-content", "deploy-static"]) => {
     await module.exports.removeAllIAMPolicies(UserName, account);
-    await module.exports.attachIAMPolicy(UserName, account, 'arn:aws:iam::aws:policy/AmazonS3FullAccess');
-    await module.exports.attachIAMPolicy(UserName, account, 'arn:aws:iam::aws:policy/CloudFrontFullAccess');
+
+    if(permissions.includes("auto-content") || permissions.includes("deploy-static")){
+        await module.exports.attachIAMPolicy(UserName, account, 'arn:aws:iam::aws:policy/AmazonS3FullAccess');
+    }
+
+    if(permissions.includes("deploy-static")){
+        await module.exports.attachIAMPolicy(UserName, account, 'arn:aws:iam::aws:policy/CloudFrontFullAccess');
+    }
+    
+    if(permissions.includes("deploy-fullstack")){
+        await module.exports.attachIAMPolicy(UserName, account, 'arn:aws:iam::aws:policy/AdministratorAccess-AWSElasticBeanstalk');
+    }
 };
 
 module.exports.removeIAMPolicy = async (UserName, account, policy) => {

package/core/1/CHANGELOG.md

@@ -1,5 +1,11 @@
 ## Changelog
 
+### 1.6.0 (2024-10-22)
+
+#### Features
+
+* own global node_modules folder so local modules can be linked ([82f84fa](https://bitbucket.org/fishawackdigital/lab-env-core-1/commits/82f84faa5dfa7c009458bec4fe3a9f2b437c34bf))
+
 ### 1.5.2 (2024-10-08)
 
 #### Bug Fixes

package/core/1/entrypoint.sh

@@ -8,6 +8,9 @@ if [ -z "$FW_ROOT" ]; then
     # Own the node_modules folder otherwise it'll be owned by root/previous node id which will prevent writing
     chown node /app/node_modules
 
+    # Own the global node_modules folder otherwise it'll be owned by root/previous node id which will prevent writing
+    chown node /usr/local/lib/node_modules
+
     # Default arguments will always be bash -l, if nothing follows this just start an non login interactive shell
     if [ -z "${@:3}" ]; then
         exec su node

package/core/1/package.json

@@ -1,6 +1,6 @@
 {
   "name": "core",
-  "version": "1.5.2",
+  "version": "1.6.0",
   "description": "lab-env docker config for the @fishawack/core/1 npm module",
   "scripts": {
     "image": "docker buildx build --ssh default --platform linux/amd64,linux/arm64 -t fishawack/lab-env-core-1:$npm_package_version -t fishawack/lab-env-core-1:latest --push . && docker buildx build --ssh default --target alpine --platform linux/amd64,linux/arm64 -t fishawack/lab-env-core-1-alpine:$npm_package_version -t fishawack/lab-env-core-1-alpine:latest --push ."

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fishawack/lab-env",
-  "version": "4.36.0",
+  "version": "4.37.0",
   "description": "Docker manager for FW",
   "main": "cli.js",
   "scripts": {
@@ -35,7 +35,7 @@
     "glob": "7.1.7",
     "inquirer": "8.1.2",
     "lodash": "^4.17.21",
-    "nodemailer": "^6.7.8",
+    "nodemailer": "^6.9.15",
     "ora": "5.4.1",
     "semver": "7.3.4",
     "update-notifier": "^6.0.2",