@leverege/build-tools 2.5.40 → 2.5.42

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leverege/build-tools",
-  "version": "2.5.40",
+  "version": "2.5.42",
   "description": "A collection of build / support tools for Leverege developers",
   "main": "index.js",
   "scripts": {
@@ -53,32 +53,33 @@
     "chalk": "^4.1.1",
     "clear": "^0.1.0",
     "clipboardy": "^2.3.0",
-    "command-line-args": "^5.1.1",
+    "command-line-args": "^5.1.3",
     "command-line-usage": "^6.1.1",
-    "dotenv": "^9.0.2",
-    "execa": "^5.0.0",
+    "deepmerge": "^4.2.2",
+    "dotenv": "^10.0.0",
+    "execa": "^5.1.1",
     "figlet": "^1.5.0",
     "git-branch": "^2.0.1",
     "glob": "^7.1.7",
-    "inquirer": "^7.3.3",
+    "inquirer": "^8.1.2",
     "js-yaml": "^4.1.0",
     "kubernetes-client": "^9.0.0",
     "ncp": "^2.0.0",
-    "npm-check-updates": "^11.5.12",
-    "npm-registry-fetch": "^9.0.0",
-    "open": "^8.0.8",
-    "ora": "^5.4.0",
+    "npm-check-updates": "^11.8.3",
+    "npm-registry-fetch": "^11.0.0",
+    "open": "^8.2.1",
+    "ora": "^5.4.1",
     "parse-gitignore": "^1.0.1",
     "readline-sync": "^1.4.10",
     "semver": "^7.3.5",
-    "simple-git": "^2.39.0"
+    "simple-git": "^2.41.1"
   },
   "devDependencies": {
-    "@babel/cli": "^7.13.16",
-    "@babel/core": "^7.14.2",
-    "@babel/node": "^7.14.2",
-    "@leverege/babel-preset-leverege-node": "^1.1.1",
-    "@leverege/eslint-config-leverege": "^2.2.0",
-    "npm": "^7.13.0"
+    "@babel/cli": "^7.14.5",
+    "@babel/core": "^7.14.6",
+    "@babel/node": "^7.14.7",
+    "@leverege/babel-preset-leverege-node": "^1.2.0",
+    "@leverege/eslint-config-leverege": "^3.0.0",
+    "npm": "^7.19.1"
   }
 }

package/src/bash-funcs

@@ -70,3 +70,16 @@ function setOrUnset() {
   [ ! -z "$1" ] && setting=`color g $1`
   echo "$setting"
 }
+
+function getManagedSecret() {
+  local SECNAME=$1
+  local PROJECT="${2:-leverege-docker-images}"
+  SECRET=$(gcloud secrets versions access latest --secret="$SECNAME" --project=$PROJECT)
+  if [ $? -ne 0 ];
+  then
+    printf "This failed=>[gcloud secrets versions access latest --secret="$SECNAME" --project=$PROJECT]\n"
+    printf "Returned   =>[$SECRET]\n\n"
+    exit 1
+  fi
+  echo $SECRET
+}

package/src/circleate

@@ -99,7 +99,7 @@ jobs:
 
   install:
     docker:
-      - image: circleci/node:erbium
+      - image: circleci/node:fermium
     steps:
       - checkout
       - restore_cache:
@@ -125,7 +125,7 @@ jobs:
 
   security-check:
     docker:
-      - image: circleci/node:erbium
+      - image: circleci/node:fermium
     steps:
       - checkout
       - attach_workspace:
@@ -136,7 +136,7 @@ jobs:
   
   license-check:
     docker:
-      - image: circleci/node:erbium
+      - image: circleci/node:fermium
     steps:
       - checkout
       - attach_workspace:
@@ -151,7 +151,7 @@ jobs:
 
   lint: 
     docker:
-      - image: circleci/node:erbium
+      - image: circleci/node:fermium
     steps:
       - checkout
       - attach_workspace:
@@ -165,7 +165,7 @@ jobs:
 
   docs: 
     docker:
-      - image: circleci/node:erbium
+      - image: circleci/node:fermium
     steps:
       - checkout
       - attach_workspace:
@@ -182,7 +182,7 @@ jobs:
     environment:
       TZ: 'America/New_York'
     docker:
-      - image: circleci/node:erbium
+      - image: circleci/node:fermium
       # IF YOU NEED ANY OF THESE, UNCOMMENT TO USE
       # - image: redis
       # - image: circleci/mysql:5.7
@@ -227,7 +227,7 @@ jobs:
   build:
     # build should make dist image and prepare docker file
     docker:
-      - image: circleci/node:erbium
+      - image: circleci/node:fermium
 
     steps:
       - checkout
@@ -325,7 +325,7 @@ version: 2.1
 jobs:
   install:
     docker:
-      - image: circleci/node:erbium
+      - image: circleci/node:fermium
     steps:
       - checkout
       - restore_cache:
@@ -351,7 +351,7 @@ jobs:
 
   security-check:
     docker:
-      - image: circleci/node:erbium
+      - image: circleci/node:fermium
     steps:
       - checkout
       - attach_workspace:
@@ -362,7 +362,7 @@ jobs:
   
   license-check:
     docker:
-      - image: circleci/node:erbium
+      - image: circleci/node:fermium
     steps:
       - checkout
       - attach_workspace:
@@ -377,7 +377,7 @@ jobs:
 
   lint: 
     docker:
-      - image: circleci/node:erbium
+      - image: circleci/node:fermium
     steps:
       - checkout
       - attach_workspace:
@@ -391,7 +391,7 @@ jobs:
 
   docs: 
     docker:
-      - image: circleci/node:erbium
+      - image: circleci/node:fermium
     steps:
       - checkout
       - attach_workspace:
@@ -408,7 +408,7 @@ jobs:
     environment:
       TZ: 'America/New_York'
     docker:
-      - image: circleci/node:erbium
+      - image: circleci/node:fermium
       # IF YOU NEED ANY OF THESE, UNCOMMENT TO USE
       # - image: redis
       # - image: circleci/mysql:5.7
@@ -538,7 +538,7 @@ jobs:
 
   build:
     docker:
-      - image: circleci/node:erbium
+      - image: circleci/node:fermium
     steps:
       - checkout
       - restore_cache:
@@ -572,7 +572,7 @@ jobs:
 
   deploy-dev: 
     docker:
-      - image: circleci/node:erbium
+      - image: circleci/node:fermium
     steps:
       - attach_workspace:
           at: ~/project
@@ -583,7 +583,7 @@ jobs:
 
   deploy-prod: 
     docker:
-      - image: circleci/node:erbium
+      - image: circleci/node:fermium
     steps:
       - attach_workspace:
           at: ~/project

package/src/dockreate

@@ -4,6 +4,8 @@ if [ -z "$1" ]; then
   exit 1
 fi
 
+printf "----HERE----\n" # XXX
+
 # Global Vars
 pluginFile="Dockerfile.plugin"
 
@@ -122,8 +124,6 @@ alias h=history
 alias ls='ls -CF --color=auto'
 alias ll='ls -lh'
 alias lla='ls -lha'
-alias ltr='ls -CF --color=auto -lthr'
-alias genv='env | grep -i'
 alias glep='grep -l -s'
 alias m=less
 alias menv='env | sort | less'
@@ -149,20 +149,6 @@ cmclear()
 {
   cmstat /status/clear
 }
-
-loglev()
-{
-  local wget='wget -q -O- localhost:5111'
-  local logl=''
-
-  if [ "\$1" != "" ];
-  then
-    logl="logLevel/\$1"
-  fi
-
-  printf "Running=> \$wget/\${logl}\n"
-  printf "\n\`\$wget/\$logl\`\n\n"
-}
 EOBASHRC
 } # end of create_bashrc
 
@@ -205,7 +191,7 @@ NOPROJ
 fi
 
 nodeimg=$(strip_undefined "`node -p \"require('../package.json').leverege.nodeimg\"`")
-nodeimg="${nodeimg:-erbium-alpine}"
+nodeimg="${nodeimg:-fermium-alpine}"
 apkadds=$(strip_undefined "`node -p \"require('../package.json').leverege.apkadds\"`")
 runuser=$(strip_undefined "`node -p \"require('../package.json').leverege.runuser\"`")
 [ -z "${runuser}" ] && runuser='node'

package/src/iam-roles

@@ -0,0 +1,70 @@
+#!/usr/bin/env node
+
+const chalk = require( 'chalk' )
+const execa = require( 'execa' )
+
+const condir = ( log, thing, depth = 8 ) => {
+  console.dir( { log, thing }, { depth, colors : true } ) // eslint-disable-line
+}
+
+const PLATFORM=[
+  "authz-server",
+  "api-server",
+  "db-curator",
+  "emailer",
+  "geotile-server",
+  "imagine",
+  "message-processor",
+  "messenger",
+  "reason",
+  "resource-server",
+  "scheduler",
+  "transponder-bq",
+  "transponder-rt",
+  "transponder-postgres",
+]
+
+// gcloud projects get-iam-policy ${PROJECT} \
+//   --flatten="bindings[].members" \
+//   --filter="bindings.members:${SVCACCT}@prd-recovr-auto.iam.gserviceaccount.com" \
+//   --format="table(bindings.role)"
+
+const gcloudProject = 'prd-recovr-auto'
+const gcloudFetchIam = [ 'projects', 'get-iam-policy', gcloudProject, '--format=json' ]
+
+const runner = async ( x, y ) => {
+  const patternSvcAcct = new RegExp( /(?<type>serviceAccount):(?<sa>\S+)@(?<project>\S+).iam.gserviceaccount.com/ )
+  const patternUser = new RegExp( /(?<type>user):(?<email>\S+)/ )
+  try {
+    const { stdout } = await execa( 'gcloud', gcloudFetchIam )
+    const bindings = JSON.parse( stdout ).bindings
+    // condir( 'All Bindings', bindings )// XXX
+    const iamRoles = {}
+    bindings.forEach( binding => {
+      const role = binding.role.replace( 'roles/', '' )
+      for( let i = 0; i < binding.members.length; i++ ) {
+        const member = binding.members[i]
+        const svcacct = member.match( patternSvcAcct )
+        if ( svcacct?.groups ) {
+          const { type, sa } = svcacct.groups
+          iamRoles[ sa ] = iamRoles[ sa ] || []
+          iamRoles[ sa ].push( role )
+          continue
+        }
+        const user = member.match( patternUser )
+        if ( user?.groups ) {
+          const { type, email } = user.groups
+          iamRoles[ email ] = iamRoles[ email ] || []
+          iamRoles[ email ].push( role )
+          continue
+        }
+        console.log( `Dont Care? [${member}]` )
+      }
+    } )
+    console.log( iamRoles )
+  } catch ( err ) {
+    console.log( err, 'what went wrong?' )
+  }
+}
+
+runner() 

package/CHANGELOG.md

@@ -1,46 +0,0 @@
-# Changelog
-All notable changes to this project will be documented in this file.
-
-## [2.3.1] = 2020-05-10
-### Updated
-- (Circleate) Updated support for UI circle config
-
-## [2.2.3] = 2020-04-22
-### Updated
-- (Helmify) Added a CLI interface for Helmup
-
-## [2.1.5] - 2020-03-08
-### Updated
-- (Helmup) Simplified Timescale installation process
-
-## [2.0.0] - 2020-02-12
-### Added
-- (encrypt/decrypt) Allow for external KMS (BREAKING!!!)
-
-## [1.6.3] - 2019-07-02
-### Added
-- (pkglint) Added pkglint check for valid files
-
-## [1.5.0] - 2019-06-07
-### Added
-- (Dnsify) Added new Dnsify script to add new DNS records to cloudflare
-
-## [1.4.0] - 2019-05-02
-### Added
-- (Helmify) Added new Helmify script to bootstrap helm templates
-
-## [0.7.1] - 2019-03-07
-### Updated
-- (Overwhelm) Replaced glob library to fix vulnerability issue
-
-## [0.5.0] - 2019-03-04
-### Replaced
-- (Encrypt/Decrypt) Deprecate OpenSSL for GCP KMS encryption method
-
-## [0.4.0] - 2019-02-21
-### Added
-- (Circleate) Added smoke test step to do security audit
-- (Circleate) Account for edge cases with non-standard container name
-
-### Removed
-- (Circleate) Deleted junit reporter for test coverage