@leverege/build-tools 2.5.5 → 2.5.8

package/README.md

@@ -15,16 +15,15 @@ npm install -g @leverege/build-tools
 ### General Tools:
 * **build-tools**: A command to get the root of this repo, a latest version check, or bash functions to source
 * **circleate**: bootstrap .circleci config repo
-* **decrypt-secrets**: decrypts secrets (env, service accounts)
-* **dockreate**: bootstrap docker repo
-* **encrypt-secrets**: encrypts secrets (env, service accounts)
+* **decrypt/encrypt-secrets**: decrypts/encrypts secrets (env, service accounts)
+* **dockreate**: used to build and deploy docker images to the GCP image area
 * **repo-init**: A repository bootstrapping tool
 
 ### Helm Helpers:
 * **overwhelm**: A k8s context helper and yaml replacer *OVH:<REPLACE_ME>*
 * **helmify**: DESCRIPTION
 * **helmup**: A context safe helm deployment tool
-* **helmdn**: A destroyer of helm deplotments (danger zone)
+* **helmdn**: A destroyer of helm deployments (danger zone)
 
 ### Kubernetes Helpers:
 * **k8x**: A script to help run commands on active pods in a k8s cluster.

package/lib/server/build-tools.js

@@ -113,7 +113,7 @@ const checkForLatest = async (pkg = '@leverege/build-tools') => {
   }
 };
 
-if (args.latest) {
+const checkAndAnnounce = () => {
   checkForLatest().then(latestVersion => {
     if (semverLt(thisVersion, latestVersion)) {
       console.log(chalk.white`
@@ -125,11 +125,15 @@ if (args.latest) {
       process.exit(0);
     }
   }).catch(err => {});
+};
+
+if (args.latest) {
+  checkAndAnnounce();
 }
 
 if (args.version) {
   console.log(`build-tools version ${thisVersion}`);
-  process.exit(0);
+  checkAndAnnounce();
 }
 
 if (args.help) {

package/lib/server/unleash.js

@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+"use strict";
+
+const execa = require('execa');
+
+const SimpleGit = require('simple-git');
+
+const git = new SimpleGit();
+
+const getCurrentBranchName = async () => {
+  const branchInfo = await git.branch();
+  return Object.entries(branchInfo.branches).find(([name, info]) => info.current)[0];
+};
+
+const isProtected = async () => {
+  const protectedBranches = ['master', 'development', ...process.argv.slice(2)];
+  const theBranch = await getCurrentBranchName();
+  return protectedBranches.includes(theBranch);
+};
+
+const npmRunner = async script => {
+  try {
+    const results = await execa('npm', ['run', script], {
+      stdio: 'inherit'
+    });
+    return results;
+  } catch (err) {
+    process.exit(1);
+  }
+};
+
+(async () => {
+  if (await isProtected()) {
+    const script = ['test', 'lint'];
+
+    for (let i = 0; i < script.length; i++) {
+      await npmRunner(script[i]);
+    }
+  } else {
+    process.exit(0);
+  }
+})();

package/lib/web/build-tools.js

@@ -113,7 +113,7 @@ const checkForLatest = async (pkg = '@leverege/build-tools') => {
   }
 };
 
-if (args.latest) {
+const checkAndAnnounce = () => {
   checkForLatest().then(latestVersion => {
     if (semverLt(thisVersion, latestVersion)) {
       console.log(chalk.white`
@@ -125,11 +125,15 @@ if (args.latest) {
       process.exit(0);
     }
   }).catch(err => {});
+};
+
+if (args.latest) {
+  checkAndAnnounce();
 }
 
 if (args.version) {
   console.log(`build-tools version ${thisVersion}`);
-  process.exit(0);
+  checkAndAnnounce();
 }
 
 if (args.help) {

package/lib/web/unleash.js

@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+"use strict";
+
+const execa = require('execa');
+
+const SimpleGit = require('simple-git');
+
+const git = new SimpleGit();
+
+const getCurrentBranchName = async () => {
+  const branchInfo = await git.branch();
+  return Object.entries(branchInfo.branches).find(([name, info]) => info.current)[0];
+};
+
+const isProtected = async () => {
+  const protectedBranches = ['master', 'development', ...process.argv.slice(2)];
+  const theBranch = await getCurrentBranchName();
+  return protectedBranches.includes(theBranch);
+};
+
+const npmRunner = async script => {
+  try {
+    const results = await execa('npm', ['run', script], {
+      stdio: 'inherit'
+    });
+    return results;
+  } catch (err) {
+    process.exit(1);
+  }
+};
+
+(async () => {
+  if (await isProtected()) {
+    const script = ['test', 'lint'];
+
+    for (let i = 0; i < script.length; i++) {
+      await npmRunner(script[i]);
+    }
+  } else {
+    process.exit(0);
+  }
+})();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leverege/build-tools",
-  "version": "2.5.5",
+  "version": "2.5.8",
   "description": "A collection of build / support tools for Leverege developers",
   "main": "index.js",
   "scripts": {
@@ -33,6 +33,7 @@
     "helminit-dp": "src/helminit-dp",
     "helminit-scaler": "src/helminit-scaler",
     "helmup": "src/helmup",
+    "husky-check": "src/husky-check.js",
     "k8scale": "src/k8scale",
     "k8x": "src/k8x",
     "npm-link": "src/npm-link",
@@ -42,7 +43,8 @@
     "pkglint": "src/pkglint",
     "prune-git": "src/prune-git",
     "pull-git": "src/pull-git",
-    "repo-init": "lib/server/repo-init/index.js"
+    "repo-init": "lib/server/repo-init/index.js",
+    "unleash": "src/unleash.js"
   },
   "author": "Leverege Devs",
   "license": "SEE LICENSE IN LICENSE.md",
@@ -60,20 +62,21 @@
     "inquirer": "^7.3.3",
     "js-yaml": "^3.14.0",
     "ncp": "^2.0.0",
-    "npm-check-updates": "^7.1.1",
-    "npm-registry-fetch": "^8.1.4",
-    "open": "^7.2.0",
-    "ora": "^5.0.0",
+    "npm-check-updates": "^9.1.0",
+    "npm-registry-fetch": "^8.1.5",
+    "open": "^7.3.0",
+    "ora": "^5.1.0",
     "parse-gitignore": "^1.0.1",
     "readline-sync": "^1.4.10",
     "semver": "^7.3.2",
-    "simple-git": "^2.20.1"
+    "simple-git": "^2.21.0"
   },
   "devDependencies": {
-    "@babel/cli": "^7.10.5",
-    "@babel/core": "^7.11.4",
-    "@babel/node": "^7.10.5",
-    "@leverege/babel-preset-leverege-node": "^1.1.0",
-    "@leverege/eslint-config-leverege": "^2.0.10"
+    "@babel/cli": "^7.12.1",
+    "@babel/core": "^7.12.3",
+    "@babel/node": "^7.12.1",
+    "@leverege/babel-preset-leverege-node": "^1.1.1",
+    "@leverege/eslint-config-leverege": "^2.1.0",
+    "npm": "^6.14.8"
   }
 }

package/src/build-tools.js

@@ -104,7 +104,7 @@ const checkForLatest = async ( pkg = '@leverege/build-tools' ) => {
   }
 }
 
-if ( args.latest ) {
+const checkAndAnnounce = () => {
   checkForLatest()
     .then( ( latestVersion ) => {
       if ( semverLt( thisVersion, latestVersion ) ) {
@@ -122,9 +122,13 @@ if ( args.latest ) {
     } )
 }
 
+if ( args.latest ) {
+  checkAndAnnounce()
+}
+
 if ( args.version ) {
   console.log( `build-tools version ${thisVersion}` )
-  process.exit( 0 )
+  checkAndAnnounce()
 }
 
 if ( args.help ) {

package/src/helmup

@@ -333,10 +333,10 @@ function installVelero() {
     --set schedules.timescale.template.labelSelector.matchLabels.release="timescale-db" \
     --set schedules.timescale.template.labelSelector.matchLabels.app="postgresql" \
     --set schedules.timescale.template.snapshotVolumes="true" \
-    --set schedules.timescale.schedule="0 2 * * *" \
-    --set schedules.timescale.template.ttl="720h" \
-    --set schedules.timescale.template.labelSelector.matchLabels.app="mysql" \
-    --set schedules.timescale.template.snapshotVolumes="true" 
+    --set schedules.mysql.schedule="0 2 * * *" \
+    --set schedules.mysql.template.ttl="720h" \
+    --set schedules.mysql.template.labelSelector.matchLabels.app="mysql" \
+    --set schedules.mysql.template.snapshotVolumes="true" 
 
   ## Instruct users to move velero keys
   printf "\n$YELO_WARN MOVE THE SERVICE ACCOUNT TO YOUR KEYS FOLDER"

package/src/sa-tools/imp-sa

@@ -0,0 +1,23 @@
+#!/bin/bash
+
+IMPERSONATE='gcloud config set auth/impersonate_service_account'
+impersonate() {
+ sa=$1
+ echo "Impersonating $sa"
+ $IMPERSONATE $sa
+}
+
+case $1 in
+gke)
+ impersonate k8s@project.iam.gserviceaccount.com
+ ;;
+admin)
+ impersonate admin@other-project.iam.gserviceaccount.com
+ ;;
+clear)
+ gcloud config unset auth/impersonate_service_account
+ ;;
+*)
+ echo "Usage: Updates impersonated service account"
+ echo "  imp-sa [gke|admin|clear]"
+esac

package/src/sa-tools/make-sa

@@ -0,0 +1,46 @@
+#!/bin/bash
+
+SVC_PROJ="leverege-dev-john"
+
+SVC_NAME="terraformer"
+SVC_ACCT="${SVC_NAME}@${SVC_PROJ}.iam.gserviceaccount.com"
+
+function countdown() {
+  local SEC=${1}
+  shift
+  local MSG=${@}
+  while [ $SEC -ne 0 ];
+  do
+    printf "\r\033[KWaiting %.d seconds $MSG" $((SEC--))
+    sleep 1
+  done
+}
+
+gcloud iam service-accounts create ${SVC_NAME} \
+  --project=${SVC_PROJ} --quiet \
+  --description="the terraforming account" \
+  --display-name="terraformer" &> /dev/null
+
+gcloud projects add-iam-policy-binding ${SVC_PROJ} \
+  --project=${SVC_PROJ} --quiet \
+  --member=serviceAccount:${SVC_ACCT}              \
+  --role=roles/editor &> /dev/null
+
+gcloud projects add-iam-policy-binding ${SVC_PROJ} \
+  --project=${SVC_PROJ} --quiet \
+  --member=serviceAccount:${SVC_ACCT}              \
+  --role=roles/iam.securityAdmin &> /dev/null
+
+countdown 30 "will delete ${SVC_NAME} service account"
+
+gcloud projects remove-iam-policy-binding ${SVC_PROJ} \
+  --project=${SVC_PROJ} --quiet \
+  --member=serviceAccount:${SVC_ACCT}              \
+  --role=roles/iam.securityAdmin &> /dev/null
+
+gcloud projects remove-iam-policy-binding ${SVC_PROJ} \
+  --project=${SVC_PROJ} --quiet \
+  --member=serviceAccount:${SVC_ACCT}              \
+  --role=roles/editor &> /dev/null
+
+gcloud iam service-accounts delete ${SVC_ACCT} --quiet &> /dev/null

package/src/unleash.js

@@ -0,0 +1,38 @@
+#!/usr/bin/env node
+
+const execa = require( 'execa' )
+const SimpleGit = require( 'simple-git' )
+const git = new SimpleGit()
+
+const getCurrentBranchName = async () => {
+  const branchInfo = await git.branch()
+  return Object
+    .entries( branchInfo.branches )
+    .find( ( [ name, info ] ) => ( info.current ) )[0]
+}
+
+const isProtected = async () => {
+  const protectedBranches = [ 'master', 'development', ...process.argv.slice( 2 ) ]
+  const theBranch = await getCurrentBranchName()
+  return protectedBranches.includes( theBranch )
+}
+
+const npmRunner = async ( script ) => {
+  try {
+    const results = await execa( 'npm', [ 'run', script ], { stdio : 'inherit' } )
+    return results
+  } catch ( err ) {
+    process.exit( 1 )
+  }
+}
+
+( async () => {
+  if ( await isProtected() ) {
+    const script = [ 'test', 'lint' ]
+    for( let i = 0; i < script.length; i++ ) {
+      await npmRunner( script[ i ] )
+    }
+  } else {
+    process.exit( 0 )
+  }
+} )()