@govuk-pay/cli 0.0.7 → 0.0.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (18) hide show
  1. package/package.json +1 -1
  2. package/resources/legacy-ruby-cli/Gemfile.lock +2 -2
  3. package/resources/legacy-ruby-cli/config/secrets.yml +81 -9
  4. package/resources/legacy-ruby-cli/config/service_secrets.yml +25 -9
  5. package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/config.yaml +3 -0
  6. package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/all.yaml +760 -0
  7. package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/card.yaml +508 -0
  8. package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/custom.yaml +71 -0
  9. package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/java.yaml +456 -0
  10. package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/services/ssl/certs/publicapi-proxy.crt +18 -0
  11. package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/services/ssl/keys/publicapi-proxy.key +28 -0
  12. package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/toolbox.yaml +473 -0
  13. package/resources/legacy-ruby-cli/lib/pay_cli/commands/local.rb +3 -2
  14. package/resources/legacy-ruby-cli/rds_access/connect.sh +30 -4
  15. package/resources/legacy-ruby-cli/vulnerability_scan/generate_vulnerability_report.js +52 -55
  16. package/resources/legacy-ruby-cli/vulnerability_scan/package.json +15 -0
  17. package/resources/legacy-ruby-cli/vulnerability_scan/scan.sh +56 -25
  18. package/resources/legacy-ruby-cli/vulnerability_scan/reports/.gitkeep +0 -0
package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/card.yaml ADDED
@@ -0,0 +1,508 @@
1
+ version: '2.1'
2
+
3
+ services:
4
+
5
+ adminusers_db:
6
+ image: postgres:15.2
7
+ environment:
8
+ - POSTGRES_PASSWORD=mysecretpassword
9
+ mem_limit: 250M
10
+ logging:
11
+ driver: "json-file"
12
+ container_name: adminusers_db
13
+ healthcheck:
14
+ test: ["CMD-SHELL", "pg_isready"]
15
+ interval: 10s
16
+ timeout: 5s
17
+ retries: 5
18
+ volumes:
19
+ - ./postgres/docker-entrypoint-initdb.d:/docker-entrypoint-initdb.d
20
+ ports:
21
+ - "19700:5432"
22
+
23
+ connector_db:
24
+ image: postgres:15.2
25
+ environment:
26
+ - POSTGRES_PASSWORD=mysecretpassword
27
+ mem_limit: 250M
28
+ logging:
29
+ driver: "json-file"
30
+ container_name: connector_db
31
+ healthcheck:
32
+ test: ["CMD-SHELL", "pg_isready"]
33
+ interval: 10s
34
+ timeout: 5s
35
+ retries: 5
36
+ volumes:
37
+ - ./postgres/docker-entrypoint-initdb.d:/docker-entrypoint-initdb.d
38
+ ports:
39
+ - "19300:5432"
40
+
41
+ publicauth_db:
42
+ image: postgres:15.2
43
+ environment:
44
+ - POSTGRES_PASSWORD=mysecretpassword
45
+ mem_limit: 250M
46
+ logging:
47
+ driver: "json-file"
48
+ container_name: publicauth_db
49
+ healthcheck:
50
+ test: ["CMD-SHELL", "pg_isready"]
51
+ interval: 10s
52
+ timeout: 5s
53
+ retries: 5
54
+ volumes:
55
+ - ./postgres/docker-entrypoint-initdb.d:/docker-entrypoint-initdb.d
56
+ ports:
57
+ - "19600:5432"
58
+
59
+ ledger_db:
60
+ image: postgres:15.2
61
+ environment:
62
+ - POSTGRES_PASSWORD=mysecretpassword
63
+ mem_limit: 250M
64
+ logging:
65
+ driver: "json-file"
66
+ container_name: ledger_db
67
+ healthcheck:
68
+ test: ["CMD-SHELL", "pg_isready"]
69
+ interval: 10s
70
+ timeout: 5s
71
+ retries: 5
72
+ volumes:
73
+ - ./postgres/docker-entrypoint-initdb.d:/docker-entrypoint-initdb.d
74
+ ports:
75
+ - "20700:5432"
76
+
77
+ webhooks_db:
78
+ image: postgres:15.2
79
+ environment:
80
+ - POSTGRES_PASSWORD=mysecretpassword
81
+ mem_limit: 250M
82
+ logging:
83
+ driver: "json-file"
84
+ container_name: webhooks_db
85
+ healthcheck:
86
+ test: ["CMD-SHELL", "pg_isready"]
87
+ interval: 10s
88
+ timeout: 5s
89
+ retries: 5
90
+ volumes:
91
+ - ./postgres/docker-entrypoint-initdb.d:/docker-entrypoint-initdb.d
92
+ ports:
93
+ - "20800:5432"
94
+
95
+
96
+
97
+ adminusers:
98
+ image: governmentdigitalservice/pay-adminusers:local
99
+
100
+ depends_on:
101
+ adminusers_db:
102
+ condition: service_healthy
103
+
104
+ env_file:
105
+ - services/java_app.env
106
+ - services/adminusers.env
107
+ environment:
108
+ - RUN_MIGRATION=true
109
+ - RUN_APP=true
110
+ - PORT=9700
111
+ - DISABLE_INTERNAL_HTTPS=true
112
+
113
+ - DB_HOST=adminusers_db
114
+ - DB_USER=adminusers
115
+ - DB_PASSWORD=mysecretpassword
116
+ - DB_SSL_OPTION=ssl=none
117
+
118
+
119
+
120
+ - AWS_ACCESS_KEY=mockAccessKey
121
+ - AWS_SECRET_ACCESS_KEY=mockSecretAccessKey
122
+
123
+
124
+
125
+ - AWS_SQS_REGION=eu-west-1
126
+ - AWS_SQS_MESSAGE_MAXIMUM_WAIT_TIME_IN_SECONDS=20
127
+ - AWS_SQS_NON_STANDARD_SERVICE_ENDPOINT=true
128
+ - AWS_SQS_ENDPOINT=http://localstack:4566
129
+ - AWS_SQS_CONNECTOR_TASKS_QUEUE_URL=http://localstack:4566/000000000000/connector_tasks_queue
130
+
131
+
132
+
133
+
134
+ - ADMINUSERS_URL=http://adminusers:9700
135
+ - CONNECTOR_URL=http://connector:9300
136
+ - CARDID_URL=http://cardid:9900
137
+ - PUBLICAUTH_URL=http://publicauth:9600
138
+ - PUBLICAPI_URL=http://publicapi:9100
139
+ - LEDGER_URL=http://ledger:10700
140
+ - WEBHOOKS_URL=http://webhooks:10800
141
+ - FRONTEND_URL=http://localhost:9000
142
+ working_dir: '/app'
143
+ mem_limit: 2G
144
+ user: root
145
+ logging:
146
+ driver: "json-file"
147
+ ports:
148
+ - "9700:9700"
149
+ - "9701:9701"
150
+ container_name: adminusers
151
+
152
+ connector:
153
+ image: governmentdigitalservice/pay-connector:local
154
+
155
+ depends_on:
156
+ connector_db:
157
+ condition: service_healthy
158
+
159
+ env_file:
160
+ - services/java_app.env
161
+ - services/connector.env
162
+ environment:
163
+ - RUN_MIGRATION=true
164
+ - RUN_APP=true
165
+ - PORT=9300
166
+ - DISABLE_INTERNAL_HTTPS=true
167
+
168
+ - DB_HOST=connector_db
169
+ - DB_USER=connector
170
+ - DB_PASSWORD=mysecretpassword
171
+ - DB_SSL_OPTION=ssl=none
172
+
173
+
174
+
175
+ - AWS_ACCESS_KEY=mockAccessKey
176
+ - AWS_SECRET_ACCESS_KEY=mockSecretAccessKey
177
+
178
+
179
+
180
+ - AWS_SQS_REGION=eu-west-1
181
+ - AWS_SQS_MESSAGE_MAXIMUM_WAIT_TIME_IN_SECONDS=20
182
+ - AWS_SQS_NON_STANDARD_SERVICE_ENDPOINT=true
183
+ - AWS_SQS_ENDPOINT=http://localstack:4566
184
+ - AWS_SQS_CAPTURE_QUEUE_URL=http://localstack:4566/000000000000/pay_capture_queue
185
+ - AWS_SQS_PAYMENT_EVENT_QUEUE_URL=http://localstack:4566/000000000000/pay_event_queue
186
+ - AWS_SQS_PAYOUT_RECONCILE_QUEUE_URL=http://localstack:4566/000000000000/payout_reconcile_queue
187
+ - AWS_SQS_CONNECTOR_TASKS_QUEUE_URL=http://localstack:4566/000000000000/connector_tasks_queue
188
+
189
+
190
+
191
+
192
+ - ADMINUSERS_URL=http://adminusers:9700
193
+ - CONNECTOR_URL=http://connector:9300
194
+ - CARDID_URL=http://cardid:9900
195
+ - PUBLICAUTH_URL=http://publicauth:9600
196
+ - PUBLICAPI_URL=http://publicapi:9100
197
+ - LEDGER_URL=http://ledger:10700
198
+ - WEBHOOKS_URL=http://webhooks:10800
199
+ - FRONTEND_URL=http://localhost:9000
200
+ working_dir: '/app'
201
+ mem_limit: 2G
202
+ user: root
203
+ logging:
204
+ driver: "json-file"
205
+ ports:
206
+ - "9300:9300"
207
+ - "9301:9301"
208
+ container_name: connector
209
+
210
+ cardid:
211
+ image: governmentdigitalservice/pay-cardid:local
212
+
213
+ env_file:
214
+ - services/java_app.env
215
+ - services/cardid.env
216
+ environment:
217
+ - RUN_MIGRATION=true
218
+ - RUN_APP=true
219
+ - PORT=9900
220
+ - DISABLE_INTERNAL_HTTPS=true
221
+
222
+
223
+
224
+
225
+
226
+
227
+
228
+
229
+ - ADMINUSERS_URL=http://adminusers:9700
230
+ - CONNECTOR_URL=http://connector:9300
231
+ - CARDID_URL=http://cardid:9900
232
+ - PUBLICAUTH_URL=http://publicauth:9600
233
+ - PUBLICAPI_URL=http://publicapi:9100
234
+ - LEDGER_URL=http://ledger:10700
235
+ - WEBHOOKS_URL=http://webhooks:10800
236
+ - FRONTEND_URL=http://localhost:9000
237
+ working_dir: '/app'
238
+ mem_limit: 2G
239
+ user: root
240
+ logging:
241
+ driver: "json-file"
242
+ ports:
243
+ - "9900:9900"
244
+ - "9901:9901"
245
+ container_name: cardid
246
+
247
+ publicauth:
248
+ image: governmentdigitalservice/pay-publicauth:local
249
+
250
+ depends_on:
251
+ publicauth_db:
252
+ condition: service_healthy
253
+
254
+ env_file:
255
+ - services/java_app.env
256
+ - services/publicauth.env
257
+ environment:
258
+ - RUN_MIGRATION=true
259
+ - RUN_APP=true
260
+ - PORT=9600
261
+ - DISABLE_INTERNAL_HTTPS=true
262
+
263
+ - DB_HOST=publicauth_db
264
+ - DB_USER=publicauth
265
+ - DB_PASSWORD=mysecretpassword
266
+ - DB_SSL_OPTION=ssl=none
267
+
268
+
269
+
270
+
271
+
272
+
273
+
274
+
275
+ - ADMINUSERS_URL=http://adminusers:9700
276
+ - CONNECTOR_URL=http://connector:9300
277
+ - CARDID_URL=http://cardid:9900
278
+ - PUBLICAUTH_URL=http://publicauth:9600
279
+ - PUBLICAPI_URL=http://publicapi:9100
280
+ - LEDGER_URL=http://ledger:10700
281
+ - WEBHOOKS_URL=http://webhooks:10800
282
+ - FRONTEND_URL=http://localhost:9000
283
+ working_dir: '/app'
284
+ mem_limit: 2G
285
+ user: root
286
+ logging:
287
+ driver: "json-file"
288
+ ports:
289
+ - "9600:9600"
290
+ - "9601:9601"
291
+ container_name: publicauth
292
+
293
+ publicapi:
294
+ image: governmentdigitalservice/pay-publicapi:local
295
+
296
+ env_file:
297
+ - services/java_app.env
298
+ - services/publicapi.env
299
+ environment:
300
+ - RUN_MIGRATION=true
301
+ - RUN_APP=true
302
+ - PORT=9100
303
+ - DISABLE_INTERNAL_HTTPS=true
304
+
305
+
306
+
307
+
308
+
309
+
310
+
311
+
312
+ - ADMINUSERS_URL=http://adminusers:9700
313
+ - CONNECTOR_URL=http://connector:9300
314
+ - CARDID_URL=http://cardid:9900
315
+ - PUBLICAUTH_URL=http://publicauth:9600
316
+ - PUBLICAPI_URL=http://publicapi:9100
317
+ - LEDGER_URL=http://ledger:10700
318
+ - WEBHOOKS_URL=http://webhooks:10800
319
+ - FRONTEND_URL=http://localhost:9000
320
+ - REDIS_URL=redis
321
+ working_dir: '/app'
322
+ mem_limit: 2G
323
+ user: root
324
+ logging:
325
+ driver: "json-file"
326
+ ports:
327
+ - "9100:9100"
328
+ - "9101:9101"
329
+ container_name: publicapi
330
+
331
+ ledger:
332
+ image: governmentdigitalservice/pay-ledger:local
333
+
334
+ depends_on:
335
+ ledger_db:
336
+ condition: service_healthy
337
+
338
+ env_file:
339
+ - services/java_app.env
340
+ - services/ledger.env
341
+ environment:
342
+ - RUN_MIGRATION=true
343
+ - RUN_APP=true
344
+ - PORT=10700
345
+ - DISABLE_INTERNAL_HTTPS=true
346
+
347
+ - DB_HOST=ledger_db
348
+ - DB_USER=ledger
349
+ - DB_PASSWORD=mysecretpassword
350
+ - DB_SSL_OPTION=ssl=none
351
+
352
+
353
+
354
+ - AWS_ACCESS_KEY=mockAccessKey
355
+ - AWS_SECRET_ACCESS_KEY=mockSecretAccessKey
356
+
357
+
358
+
359
+ - AWS_SQS_REGION=eu-west-1
360
+ - AWS_SQS_MESSAGE_MAXIMUM_WAIT_TIME_IN_SECONDS=20
361
+ - AWS_SQS_NON_STANDARD_SERVICE_ENDPOINT=true
362
+ - AWS_SQS_ENDPOINT=http://localstack:4566
363
+ - AWS_SQS_PAYMENT_EVENT_QUEUE_URL=http://localstack:4566/000000000000/pay_event_queue
364
+
365
+
366
+
367
+ - AWS_SNS_NON_STANDARD_SERVICE_ENDPOINT=true
368
+ - AWS_SNS_ENDPOINT=http://localstack:4566
369
+ - AWS_SNS_REGION=eu-west-1
370
+ - SNS_TOPIC_CARD_PAYMENT_EVENTS_ARN=arn:aws:sns:eu-west-1:000000000000:card-payment-events-topic
371
+ - SNS_TOPIC_CARD_PAYMENT_DISPUTE_EVENTS_ARN=arn:aws:sns:eu-west-1:000000000000:card-payment-dispute-events-topic
372
+
373
+
374
+ - ADMINUSERS_URL=http://adminusers:9700
375
+ - CONNECTOR_URL=http://connector:9300
376
+ - CARDID_URL=http://cardid:9900
377
+ - PUBLICAUTH_URL=http://publicauth:9600
378
+ - PUBLICAPI_URL=http://publicapi:9100
379
+ - LEDGER_URL=http://ledger:10700
380
+ - WEBHOOKS_URL=http://webhooks:10800
381
+ - FRONTEND_URL=http://localhost:9000
382
+ - SNS_ENABLED=true
383
+ - PUBLISH_CARD_PAYMENT_EVENTS_TO_SNS=true
384
+ - PUBLISH_CARD_PAYMENT_DISPUTE_EVENTS_TO_SNS=true
385
+ working_dir: '/app'
386
+ mem_limit: 2G
387
+ user: root
388
+ logging:
389
+ driver: "json-file"
390
+ ports:
391
+ - "10700:10700"
392
+ - "10701:10701"
393
+ container_name: ledger
394
+
395
+ webhooks:
396
+ image: governmentdigitalservice/pay-webhooks:local
397
+
398
+ depends_on:
399
+ webhooks_db:
400
+ condition: service_healthy
401
+
402
+ env_file:
403
+ - services/java_app.env
404
+ - services/webhooks.env
405
+ environment:
406
+ - RUN_MIGRATION=true
407
+ - RUN_APP=true
408
+ - PORT=10800
409
+ - DISABLE_INTERNAL_HTTPS=true
410
+
411
+ - DB_HOST=webhooks_db
412
+ - DB_USER=webhooks
413
+ - DB_PASSWORD=mysecretpassword
414
+ - DB_SSL_OPTION=ssl=none
415
+
416
+
417
+
418
+ - AWS_ACCESS_KEY=mockAccessKey
419
+ - AWS_SECRET_ACCESS_KEY=mockSecretAccessKey
420
+
421
+
422
+
423
+ - AWS_SQS_REGION=eu-west-1
424
+ - AWS_SQS_MESSAGE_MAXIMUM_WAIT_TIME_IN_SECONDS=20
425
+ - AWS_SQS_NON_STANDARD_SERVICE_ENDPOINT=true
426
+ - AWS_SQS_ENDPOINT=http://localstack:4566
427
+ - AWS_SQS_PAYMENT_EVENT_QUEUE_URL=http://localstack:4566/000000000000/webhooks-events-subscriber-queue
428
+
429
+
430
+
431
+
432
+ - ADMINUSERS_URL=http://adminusers:9700
433
+ - CONNECTOR_URL=http://connector:9300
434
+ - CARDID_URL=http://cardid:9900
435
+ - PUBLICAUTH_URL=http://publicauth:9600
436
+ - PUBLICAPI_URL=http://publicapi:9100
437
+ - LEDGER_URL=http://ledger:10700
438
+ - WEBHOOKS_URL=http://webhooks:10800
439
+ - FRONTEND_URL=http://localhost:9000
440
+ working_dir: '/app'
441
+ mem_limit: 2G
442
+ user: root
443
+ logging:
444
+ driver: "json-file"
445
+ ports:
446
+ - "10800:10800"
447
+ - "10801:10801"
448
+ container_name: webhooks
449
+
450
+
451
+
452
+ frontend:
453
+ image: node:18.18.2-alpine3.18
454
+
455
+ env_file: services/frontend.env
456
+ environment:
457
+ - SECURE_COOKIE_OFF=true
458
+ - RUN_APP=true
459
+ - DISABLE_APPMETRICS=true
460
+ - DISABLE_INTERNAL_HTTPS=true
461
+ - PORT=9000
462
+
463
+ - ADMINUSERS_URL=http://adminusers:9700
464
+
465
+ - CONNECTOR_URL=http://connector:9300
466
+
467
+ - CARDID_URL=http://cardid:9900
468
+
469
+ - PUBLICAUTH_URL=http://publicauth:9600
470
+
471
+ - PUBLICAPI_URL=http://publicapi:9100
472
+
473
+ - LEDGER_URL=http://ledger:10700
474
+
475
+ - WEBHOOKS_URL=http://webhooks:10800
476
+ - FRONTEND_URL=http://localhost:9000
477
+ volumes:
478
+ - "$WORKSPACE/pay-frontend:/app"
479
+ mem_limit: 1G
480
+ working_dir: '/app'
481
+ entrypoint: npx nodemon --inspect=0.0.0.0:9001 start.js
482
+ ports:
483
+ - "9000:9000"
484
+ - "9001:9001"
485
+ logging:
486
+ driver: "json-file"
487
+ container_name: frontend
488
+
489
+
490
+
491
+ localstack:
492
+ image: localstack/localstack:3
493
+ container_name: localstack
494
+ environment:
495
+ - EAGER_SERVICE_LOADING=1
496
+ - SERVICES=sns,sqs
497
+ ports:
498
+ - "4566:4566" # All AWS services exposed on this port
499
+ volumes:
500
+ - /Users/jonathan.harden/gitdevel/github.com/alphagov/pay-infra/cli/lib/pay_cli/commands/local/files/localstack/init-aws.sh:/etc/localstack/init/ready.d/init-aws.sh
501
+
502
+
503
+ redis:
504
+ image: redis:latest
505
+ container_name: localRedis
506
+ ports:
507
+ - "6379:6379"
508
+
package/resources/legacy-ruby-cli/lib/pay_cli/commands/local/files/custom.yaml ADDED
@@ -0,0 +1,71 @@
1
+ version: '2.1'
2
+
3
+ services:
4
+ connector:
5
+ image: governmentdigitalservice/pay-connector:local
6
+
7
+ env_file:
8
+ - services/java_app.env
9
+ - services/connector.env
10
+ environment:
11
+ - RUN_MIGRATION=true
12
+ - RUN_APP=true
13
+ - PORT=9300
14
+ - DISABLE_INTERNAL_HTTPS=true
15
+
16
+ # - DB_HOST=connector_db
17
+ # - DB_USER=connector
18
+ # - DB_PASSWORD=mysecretpassword
19
+ - DB_SSL_OPTION=ssl=true&sslmode=require
20
+ - DB_SSL_FACTORY=org.postgresql.ssl.NonValidatingFactory
21
+
22
+
23
+
24
+ - AWS_ACCESS_KEY=mockAccessKey
25
+ - AWS_SECRET_ACCESS_KEY=mockSecretAccessKey
26
+
27
+
28
+
29
+ - AWS_SQS_REGION=eu-west-1
30
+ - AWS_SQS_MESSAGE_MAXIMUM_WAIT_TIME_IN_SECONDS=20
31
+ - AWS_SQS_NON_STANDARD_SERVICE_ENDPOINT=true
32
+ - AWS_SQS_ENDPOINT=http://localstack:4566
33
+ - AWS_SQS_CAPTURE_QUEUE_URL=http://localstack:4566/000000000000/pay_capture_queue
34
+ - AWS_SQS_PAYMENT_EVENT_QUEUE_URL=http://localstack:4566/000000000000/pay_event_queue
35
+ - AWS_SQS_PAYOUT_RECONCILE_QUEUE_URL=http://localstack:4566/000000000000/payout_reconcile_queue
36
+ - AWS_SQS_CONNECTOR_TASKS_QUEUE_URL=http://localstack:4566/000000000000/connector_tasks_queue
37
+
38
+
39
+
40
+
41
+ - CONNECTOR_URL=http://connector:9300
42
+ - DB_HOST=docker.for.mac.localhost
43
+ - DB_PORT=65432
44
+ - DB_USER=connector
45
+ - DB_PASSWORD=fgNGieFzGgKdH]qvJwks8DRN
46
+ working_dir: '/app'
47
+ mem_limit: 2G
48
+ user: root
49
+ logging:
50
+ driver: "json-file"
51
+ ports:
52
+ - "9300:9300"
53
+ - "9301:9301"
54
+ container_name: connector
55
+
56
+
57
+
58
+
59
+
60
+ localstack:
61
+ image: localstack/localstack:3
62
+ container_name: localstack
63
+ environment:
64
+ - EAGER_SERVICE_LOADING=1
65
+ - SERVICES=sns,sqs
66
+ ports:
67
+ - "4566:4566" # All AWS services exposed on this port
68
+ volumes:
69
+ - /Users/jonathan.harden/gitdevel/github.com/alphagov/pay-infra/cli/lib/pay_cli/commands/local/files/localstack/init-aws.sh:/etc/localstack/init/ready.d/init-aws.sh
70
+
71
+