@govuk-pay/cli 0.0.21 → 0.0.23

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@govuk-pay/cli",
-  "version": "0.0.21",
+  "version": "0.0.23",
   "description": "GOV.UK Pay Command Line Interface",
   "bin": {
     "pay": "bin/cli.js",

package/readme.md

@@ -40,6 +40,21 @@ use the command `legacy`, for example:
 
 Please add an issue any time you need to fall back on legacy behaviour so we can improve the typescript implementation.
 
+### Config files
+
+Config files needed by the pay cli will go in `$HOME/.pay-cli"
+
+#### Pay Local Config Files
+
+You can override environment variables set in the the .env files in [the pay local services local config directory](https://github.com/alphagov/pay-cli/tree/main/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/services` for
+specific containers by placing files in `$HOME/.pay-cli/local/environment-overrides/<app_name>.env`.
+
+For example to override an environment variable for connector which was set in [connector.env](https://github.com/alphagov/pay-cli/blob/main/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/services/connector.env)
+you could create the file `$HOME/.pay-cli/local/environment-overrides/connector.env`
+
+Note: This will only override variables set in the .env files, it will not override any variables which get declared in an `environment` configuration option in the generated docker-compose files. These are generated from the
+[docker-compose.erb](https://github.com/alphagov/pay-cli/blob/main/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/docker-compose.erb#L5) template.
+
 ## Vulnerability Disclosure
 
 GOV.UK Pay aims to stay secure for everyone. If you are a security researcher and have discovered a security vulnerability in this code, we appreciate your help in disclosing it to us in a responsible manner. Please refer to our [vulnerability disclosure policy](https://www.gov.uk/help/report-vulnerability) and our [security.txt](https://vdp.cabinetoffice.gov.uk/.well-known/security.txt) file for details.

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/app_client.rb

@@ -85,7 +85,7 @@ module PayCLI::Commands::Local::AppClient
 
   def self.create_service()
     service_data = {
-        service_name: 'My service'
+        service_name: {en: 'My service', cy: 'Welsh name for My service'}
     }
 
     post("#{base_url 'adminusers'}/v1/api/services", service_data)

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/config.yaml

@@ -122,6 +122,7 @@ selfservice:
     - admin
     - endtoend
     - webhooks
+    - toolbox
 products-ui:
   name: products-ui
   proxy: true

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/all.yaml

@@ -3,6 +3,7 @@ services:
     adminusers_db:
       image: postgres:15.6
       environment:
+        - BIND_HOST=0.0.0.0
         - POSTGRES_PASSWORD=mysecretpassword
       mem_limit: 250M
       logging:
@@ -23,6 +24,7 @@ services:
     connector_db:
       image: postgres:15.6
       environment:
+        - BIND_HOST=0.0.0.0
         - POSTGRES_PASSWORD=mysecretpassword
       mem_limit: 250M
       logging:
@@ -43,6 +45,7 @@ services:
     publicauth_db:
       image: postgres:15.6
       environment:
+        - BIND_HOST=0.0.0.0
         - POSTGRES_PASSWORD=mysecretpassword
       mem_limit: 250M
       logging:
@@ -63,6 +66,7 @@ services:
     products_db:
       image: postgres:15.6
       environment:
+        - BIND_HOST=0.0.0.0
         - POSTGRES_PASSWORD=mysecretpassword
       mem_limit: 250M
       logging:
@@ -83,6 +87,7 @@ services:
     ledger_db:
       image: postgres:15.6
       environment:
+        - BIND_HOST=0.0.0.0
         - POSTGRES_PASSWORD=mysecretpassword
       mem_limit: 250M
       logging:
@@ -103,6 +108,7 @@ services:
     webhooks_db:
       image: postgres:15.6
       environment:
+        - BIND_HOST=0.0.0.0
         - POSTGRES_PASSWORD=mysecretpassword
       mem_limit: 250M
       logging:
@@ -132,6 +138,7 @@ services:
         - services/java_app.env
         - services/adminusers.env
       environment:
+        - BIND_HOST=0.0.0.0
         - RUN_MIGRATION=true
         - RUN_APP=true
         - PORT=9700
@@ -194,6 +201,7 @@ services:
         - services/java_app.env
         - services/connector.env
       environment:
+        - BIND_HOST=0.0.0.0
         - RUN_MIGRATION=true
         - RUN_APP=true
         - PORT=9300
@@ -255,6 +263,7 @@ services:
         - services/java_app.env
         - services/cardid.env
       environment:
+        - BIND_HOST=0.0.0.0
         - RUN_MIGRATION=true
         - RUN_APP=true
         - PORT=9900
@@ -303,6 +312,7 @@ services:
         - services/java_app.env
         - services/publicauth.env
       environment:
+        - BIND_HOST=0.0.0.0
         - RUN_MIGRATION=true
         - RUN_APP=true
         - PORT=9600
@@ -352,6 +362,7 @@ services:
         - services/java_app.env
         - services/publicapi.env
       environment:
+        - BIND_HOST=0.0.0.0
         - RUN_MIGRATION=true
         - RUN_APP=true
         - PORT=9100
@@ -401,6 +412,7 @@ services:
         - services/java_app.env
         - services/products.env
       environment:
+        - BIND_HOST=0.0.0.0
         - RUN_MIGRATION=true
         - RUN_APP=true
         - PORT=18000
@@ -454,6 +466,7 @@ services:
         - services/java_app.env
         - services/ledger.env
       environment:
+        - BIND_HOST=0.0.0.0
         - RUN_MIGRATION=true
         - RUN_APP=true
         - PORT=10700
@@ -514,8 +527,9 @@ services:
       networks:
         - pay_local_mimic_aws_vpc
   
+  
     webhooks:
-      image: governmentdigitalservice/pay-webhooks:latest-master
+      image: governmentdigitalservice/pay-webhooks:local
       
       depends_on:
         webhooks_db:
@@ -525,6 +539,7 @@ services:
         - services/java_app.env
         - services/webhooks.env
       environment:
+        - BIND_HOST=192.168.0.111
         - RUN_MIGRATION=true
         - RUN_APP=true
         - PORT=10800
@@ -566,23 +581,25 @@ services:
         - PRODUCTS-UI_URL=http://localhost:10400
         - STUBS_URL=http://localhost:3030
         - TOOLBOX_URL=http://localhost:3040
+      working_dir: '/app'
       mem_limit: 2G
+      user: root
       logging:
         driver: "json-file"
       ports:
-        - "10800:10800"
-        - "10801:10801"
+          - "10800:10800"
+          - "10801:10801"
       container_name: webhooks
       networks:
         - pay_local_mimic_aws_vpc
   
   
-  
     frontend:
       image: governmentdigitalservice/pay-frontend:latest-master
       
       env_file: services/frontend.env
       environment:
+        - BIND_HOST=0.0.0.0
         - SECURE_COOKIE_OFF=true
         - RUN_APP=true
         - DISABLE_INTERNAL_HTTPS=true
@@ -625,6 +642,7 @@ services:
       
       env_file: services/selfservice.env
       environment:
+        - BIND_HOST=0.0.0.0
         - SECURE_COOKIE_OFF=true
         - RUN_APP=true
         - DISABLE_INTERNAL_HTTPS=true
@@ -667,6 +685,7 @@ services:
       
       env_file: services/products-ui.env
       environment:
+        - BIND_HOST=0.0.0.0
         - SECURE_COOKIE_OFF=true
         - RUN_APP=true
         - DISABLE_INTERNAL_HTTPS=true
@@ -709,6 +728,7 @@ services:
       
       env_file: services/stubs.env
       environment:
+        - BIND_HOST=0.0.0.0
         - SECURE_COOKIE_OFF=true
         - RUN_APP=true
         - DISABLE_INTERNAL_HTTPS=true
@@ -751,6 +771,7 @@ services:
       
       env_file: services/toolbox.env
       environment:
+        - BIND_HOST=0.0.0.0
         - SECURE_COOKIE_OFF=true
         - RUN_APP=true
         - DISABLE_INTERNAL_HTTPS=true

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/docker-compose.erb

@@ -3,6 +3,7 @@ services:
     <%= db[:name] %>:
       image: postgres:15.6
       environment:
+        - BIND_HOST=0.0.0.0
         - POSTGRES_PASSWORD=mysecretpassword
       mem_limit: 250M
       logging:
@@ -31,7 +32,11 @@ services:
       env_file:
         - services/java_app.env
         - services/<%= app[:name] %>.env
+        <% if File.exist?(File.join(Dir.home, ".pay-cli", "local", "environment-overrides", "#{app[:name]}.env")) %>
+        - <%= File.join(Dir.home, ".pay-cli", "local", "environment-overrides", "#{app[:name]}.env") %>
+        <% end %>
       environment:
+        - BIND_HOST=0.0.0.0
         - RUN_MIGRATION=true
         - RUN_APP=true
         - PORT=<%= app[:port] %>
@@ -114,7 +119,11 @@ services:
       env_file:
         - services/java_app.env
         - services/<%= app[:name] %>.env
+        <% if File.exist?(File.join(Dir.home, ".pay-cli", "local", "environment-overrides", "#{app[:name]}.env")) %>
+        - <%= File.join(Dir.home, ".pay-cli", "local", "environment-overrides", "#{app[:name]}.env") %>
+        <% end %>
       environment:
+        - BIND_HOST=0.0.0.0
         - RUN_MIGRATION=true
         - RUN_APP=true
         - PORT=<%= app[:port] %>
@@ -196,8 +205,13 @@ services:
         <%= app[:name] %>_db:
           condition: service_healthy
       <% end %>
-      env_file: services/<%= app[:name] %>.env
+      env_file:
+        - services/<%= app[:name] %>.env
+        <% if File.exist?(File.join(Dir.home, ".pay-cli", "local", "environment-overrides", "#{app[:name]}.env")) %>
+        - <%= File.join(Dir.home, ".pay-cli", "local", "environment-overrides", "#{app[:name]}.env") %>
+        <% end %>
       environment:
+        - BIND_HOST=0.0.0.0
         - SECURE_COOKIE_OFF=true
         - RUN_APP=true
         - DISABLE_INTERNAL_HTTPS=true
@@ -250,12 +264,17 @@ services:
         <%= app[:name] %>_db:
           condition: service_healthy
       <% end %>
-      env_file: services/<%= app[:name] %>.env
+      env_file:
+        - services/<%= app[:name] %>.env
+        <% if File.exist?(File.join(Dir.home, ".pay-cli", "local", "environment-overrides", "#{app[:name]}.env")) %>
+        - <%= File.join(Dir.home, ".pay-cli", "local", "environment-overrides", "#{app[:name]}.env") %>
+        <% end %>
       <% if @mount_local_node_apps %>
       volumes:
         - "$WORKSPACE/pay-<%= app[:name] %>:/app"
       <% end %>
       environment:
+        - BIND_HOST=0.0.0.0
         - SECURE_COOKIE_OFF=true
         - RUN_APP=true
         - DISABLE_APPMETRICS=true
@@ -306,6 +325,7 @@ services:
     <%= app[:name] %>:
       image: governmentdigitalservice/pay-docker-nginx-proxy:latest-master
       environment:
+        - BIND_HOST=0.0.0.0
         - PROXY_SERVICE_HOST=http://<%= app[:proxy_host] %>
         - PROXY_SERVICE_PORT=<%= app[:proxy_port] %>
         - HTTPS_LISTEN_PORT=<%= app[:port] %>

package/resources/legacy-ruby-cli/lib/pay_cli/commands/local.rb

@@ -89,7 +89,6 @@ class PayCLI::Commands::Local < Thor
       threads = []
       (@local_java_apps + @local_node_apps).each do |app|
         check_for_local_repo("pay-#{app[:name]}")
-        check_cardid_data if app[:name] == 'cardid'
 
         threads << Thread.new do
           ws_dir = Pathname.new(ENV['WORKSPACE']).join("pay-#{app[:name]}")
@@ -406,16 +405,6 @@ class PayCLI::Commands::Local < Thor
       end
     end
 
-    def check_cardid_data
-      cardid_path = File.join(ENV['WORKSPACE'], 'pay-cardid')
-
-      unless Dir.exist?(File.join(cardid_path, 'data', 'sources'))
-        abort '❌ pay-cardid does not have the cardid-data submodule updated. '\
-          'Run `git submodule update --init && git -C data pull origin master` in '\
-          "#{cardid_path} to init and update the cardid-data submodule"
-      end
-    end
-
     def npm_install(repo_name)
       repo_path = File.join(ENV['WORKSPACE'], repo_name)
       `cd #{repo_path} && npm install >>/dev/null 2>&1`