@leverege/build-tools 2.5.5 → 2.5.6

package/lib/server/husky-check.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+"use strict";
+
+const SimpleGit = require('simple-git');
+
+const git = new SimpleGit();
+
+const getCurrentBranchName = async () => {
+  const branchInfo = await git.branch();
+  return Object.entries(branchInfo.branches).find(([name, info]) => info.current)[0];
+};
+
+const isProtected = async () => {
+  const protectedBranches = ['master', 'development'];
+  const theBranch = await getCurrentBranchName();
+  return protectedBranches.includes(theBranch);
+};
+
+(async () => {
+  try {
+    const active = await isProtected();
+    process.exit(active ? 0 : 1);
+  } catch (err) {
+    console.error(err);
+  }
+})();

package/lib/web/husky-check.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+"use strict";
+
+const SimpleGit = require('simple-git');
+
+const git = new SimpleGit();
+
+const getCurrentBranchName = async () => {
+  const branchInfo = await git.branch();
+  return Object.entries(branchInfo.branches).find(([name, info]) => info.current)[0];
+};
+
+const isProtected = async () => {
+  const protectedBranches = ['master', 'development'];
+  const theBranch = await getCurrentBranchName();
+  return protectedBranches.includes(theBranch);
+};
+
+(async () => {
+  try {
+    const active = await isProtected();
+    process.exit(active ? 0 : 1);
+  } catch (err) {
+    console.error(err);
+  }
+})();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leverege/build-tools",
-  "version": "2.5.5",
+  "version": "2.5.6",
   "description": "A collection of build / support tools for Leverege developers",
   "main": "index.js",
   "scripts": {
@@ -33,6 +33,7 @@
     "helminit-dp": "src/helminit-dp",
     "helminit-scaler": "src/helminit-scaler",
     "helmup": "src/helmup",
+    "husky-check": "src/husky-check.js",
     "k8scale": "src/k8scale",
     "k8x": "src/k8x",
     "npm-link": "src/npm-link",

package/src/husky-check.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+
+const SimpleGit = require( 'simple-git' )
+const git = new SimpleGit()
+
+const getCurrentBranchName = async () => {
+  const branchInfo = await git.branch()
+  return Object
+    .entries( branchInfo.branches )
+    .find( ( [ name, info ] ) => ( info.current ) )[0]
+}
+
+const isProtected = async () => {
+  const protectedBranches = [ 'master', 'development' ]
+  const theBranch = await getCurrentBranchName()
+  return protectedBranches.includes( theBranch )
+}
+
+( async () => {
+  try {
+    const active = await isProtected()
+    process.exit( active ? 0 : 1 )
+  } catch ( err ) {
+    console.error( err )
+  }
+} )()

package/src/sa-tools/imp-sa

@@ -0,0 +1,23 @@
+#!/bin/bash
+
+IMPERSONATE='gcloud config set auth/impersonate_service_account'
+impersonate() {
+ sa=$1
+ echo "Impersonating $sa"
+ $IMPERSONATE $sa
+}
+
+case $1 in
+gke)
+ impersonate k8s@project.iam.gserviceaccount.com
+ ;;
+admin)
+ impersonate admin@other-project.iam.gserviceaccount.com
+ ;;
+clear)
+ gcloud config unset auth/impersonate_service_account
+ ;;
+*)
+ echo "Usage: Updates impersonated service account"
+ echo "  imp-sa [gke|admin|clear]"
+esac

package/src/sa-tools/make-sa

@@ -0,0 +1,46 @@
+#!/bin/bash
+
+SVC_PROJ="leverege-dev-john"
+
+SVC_NAME="terraformer"
+SVC_ACCT="${SVC_NAME}@${SVC_PROJ}.iam.gserviceaccount.com"
+
+function countdown() {
+  local SEC=${1}
+  shift
+  local MSG=${@}
+  while [ $SEC -ne 0 ];
+  do
+    printf "\r\033[KWaiting %.d seconds $MSG" $((SEC--))
+    sleep 1
+  done
+}
+
+gcloud iam service-accounts create ${SVC_NAME} \
+  --project=${SVC_PROJ} --quiet \
+  --description="the terraforming account" \
+  --display-name="terraformer" &> /dev/null
+
+gcloud projects add-iam-policy-binding ${SVC_PROJ} \
+  --project=${SVC_PROJ} --quiet \
+  --member=serviceAccount:${SVC_ACCT}              \
+  --role=roles/editor &> /dev/null
+
+gcloud projects add-iam-policy-binding ${SVC_PROJ} \
+  --project=${SVC_PROJ} --quiet \
+  --member=serviceAccount:${SVC_ACCT}              \
+  --role=roles/iam.securityAdmin &> /dev/null
+
+countdown 30 "will delete ${SVC_NAME} service account"
+
+gcloud projects remove-iam-policy-binding ${SVC_PROJ} \
+  --project=${SVC_PROJ} --quiet \
+  --member=serviceAccount:${SVC_ACCT}              \
+  --role=roles/iam.securityAdmin &> /dev/null
+
+gcloud projects remove-iam-policy-binding ${SVC_PROJ} \
+  --project=${SVC_PROJ} --quiet \
+  --member=serviceAccount:${SVC_ACCT}              \
+  --role=roles/editor &> /dev/null
+
+gcloud iam service-accounts delete ${SVC_ACCT} --quiet &> /dev/null