@leverege/build-tools 2.52.0-pedro.11 → 2.52.0-pedro.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leverege/build-tools",
-  "version": "2.52.0-pedro.11",
+  "version": "2.52.0-pedro.2",
   "description": "A collection of build / support tools for Leverege developers",
   "main": "index.js",
   "repository": {
@@ -47,6 +47,7 @@
     "pull-git": "src/pull-git.sh",
     "push-my-chart": "src/push-my-chart.mjs",
     "refresh-npm-token": "src/refresh-npm-token.mjs",
+    "refresh-py-idx-sa": "src/refresh-py-idx-sa.sh",
     "refresh-py-idx": "src/refresh-py-idx.sh",
     "send-to-slack": "src/send-to-slack.mjs",
     "tag-release": "src/tag-release.mjs",

package/src/refresh-py-idx-sa.sh

@@ -0,0 +1,89 @@
+#!/bin/bash
+# Description: Refreshes the service account key for the leverege-python-packages artifact registry repository and updates current configuration.
+
+GCP_ORGANIZATION_ID=741866105355
+GCP_PROJECT_ID=leverege-registry
+GCP_LOCATION=us
+
+echo "GCP Organization ID: $GCP_ORGANIZATION_ID"
+echo "GCP Project ID: $GCP_PROJECT_ID"
+echo "GCP Location: $GCP_LOCATION"
+
+# Get account from gcloud core config and set everything before the @ as the name variable and replace . with -.
+NAME=$(gcloud config get-value account | cut -d'@' -f1 | sed 's/\./-/g')
+SERVICE_ACCOUNT_NAME="$NAME-py"
+
+echo "GCP Service Account Name: $SERVICE_ACCOUNT_NAME"
+echo ""
+
+# Fetch or create service account
+SERVICE_ACCOUNTS=$(gcloud iam service-accounts list --format="value(email)" --filter="email:$SERVICE_ACCOUNT_NAME@$GCP_PROJECT_ID.iam.gserviceaccount.com" 2>/dev/null)
+
+# If service account does not exist, create it
+if [ -z "$SERVICE_ACCOUNTS" ]; then
+  gcloud iam service-accounts create $SERVICE_ACCOUNT_NAME --display-name "$SERVICE_ACCOUNT_NAME"
+  echo "Service Account Created: $SERVICE_ACCOUNT_NAME"
+echo ""
+fi
+
+# Enable service account
+gcloud iam service-accounts enable $SERVICE_ACCOUNT_NAME@$GCP_PROJECT_ID.iam.gserviceaccount.com
+echo "Service Account Enabled: $SERVICE_ACCOUNT_NAME"
+echo ""
+
+# Permission key against the leverege-python-packages artifact registry repository
+gcloud artifacts repositories add-iam-policy-binding leverege-python-packages \
+    --location=$GCP_LOCATION \
+    --member="serviceAccount:$SERVICE_ACCOUNT_NAME@$GCP_PROJECT_ID.iam.gserviceaccount.com" \
+    --role="organizations/$GCP_ORGANIZATION_ID/roles/leveregeRegistryAccess" >/dev/null
+echo "Service Account Permission Granted: $SERVICE_ACCOUNT_NAME"
+echo ""
+
+# List service account keys
+SERVICE_ACCOUNT_KEYS=$(gcloud iam service-accounts keys list --iam-account=$SERVICE_ACCOUNT_NAME@$GCP_PROJECT_ID.iam.gserviceaccount.com --format="value(name)")
+
+# If service account keys exist, delete them
+if [ ! -z "$SERVICE_ACCOUNT_KEYS" ]; then
+    for key in $SERVICE_ACCOUNT_KEYS; do
+        echo ""
+        gcloud iam service-accounts keys delete $key --iam-account=$SERVICE_ACCOUNT_NAME@$GCP_PROJECT_ID.iam.gserviceaccount.com --quiet
+        echo "Service Account Key Deleted: $key"
+    done
+fi
+
+echo ""
+
+SERVICE_ACCOUNT_KEY_PATH=$HOME/.config/gcloud/$SERVICE_ACCOUNT_NAME.json
+
+# Silence the command
+gcloud iam service-accounts keys create $SERVICE_ACCOUNT_KEY_PATH --iam-account=$SERVICE_ACCOUNT_NAME@$GCP_PROJECT_ID.iam.gserviceaccount.com
+echo "Service Account Key Created and Saved: $SERVICE_ACCOUNT_KEY_PATH"
+echo ""
+
+# Encode key to base64
+ENCODED_KEY=$(base64 -i $SERVICE_ACCOUNT_KEY_PATH -o -)
+
+# Write to pip.conf
+mkdir -p $HOME/.config/pip
+cat <<EOF > $HOME/.config/pip/pip.conf
+[global]
+extra-index-url = https://_json_key_base64:$ENCODED_KEY@us-python.pkg.dev/leverege-registry/leverege-python-packages/simple/
+EOF
+echo "Updated $HOME/.config/pip/pip.conf"
+
+# Write to pypirc
+cat <<EOF > $HOME/.pypirc
+[distutils]
+index-servers =
+    leverege-python-packages
+
+[leverege-python-packages]
+repository: https://us-python.pkg.dev/leverege-registry/leverege-python-packages/
+username: _json_key_base64
+password: $ENCODED_KEY
+EOF
+echo "Updated $HOME/.pypirc"
+
+# Set UV_EXTRA_INDEX_URL env var
+export UV_EXTRA_INDEX_URL="https://_json_key_base64:$ENCODED_KEY@us-python.pkg.dev/leverege-registry/leverege-python-packages/simple"
+echo "Updated UV_EXTRA_INDEX_URL"

package/src/refresh-py-idx.sh

@@ -1,20 +1,21 @@
-#!/bin/bash
+# Description: Refresh service account key using gcloud cli
 
-# Execute gcloud command to get the token
+# SERVICE_ACCOUNT_NAME="leverege-py-index"
+# GCP_PROJECT_ID="leverege-registry"
+
+# TOKEN=$(gcloud auth print-access-token --impersonate-service-account $SERVICE_ACCOUNT_NAME@$GCP_PROJECT_ID.iam.gserviceaccount.com --lifetime=12h)
 TOKEN=$(gcloud auth print-access-token)
 
 # Write to pip.conf
-PIP_CONFIG_DIR="$HOME/.config/pip"
-mkdir -p "$PIP_CONFIG_DIR"
-PIP_CONFIG_CONTENT="
+mkdir -p $HOME/.config/pip
+cat <<EOF > $HOME/.config/pip/pip.conf
 [global]
-extra-index-url = https://oauth2accesstoken:${TOKEN}@us-python.pkg.dev/leverege-registry/leverege-python-packages/simple/
-"
-echo "$PIP_CONFIG_CONTENT" > "$PIP_CONFIG_DIR/pip.conf"
-echo "Updated ~/.config/pip/pip.conf"
+extra-index-url = https://oauth2accesstoken:$TOKEN@us-python.pkg.dev/leverege-registry/leverege-python-packages/simple/
+EOF
+echo "Updated $HOME/.config/pip/pip.conf"
 
 # Write to pypirc
-PYPIRC_CONTENT="
+cat <<EOF > $HOME/.pypirc
 [distutils]
 index-servers =
     leverege-python-packages
@@ -22,97 +23,10 @@ index-servers =
 [leverege-python-packages]
 repository: https://us-python.pkg.dev/leverege-registry/leverege-python-packages/
 username: oauth2accesstoken
-password: ${TOKEN}
-"
-echo "$PYPIRC_CONTENT" > "$HOME/.pypirc"
-echo "Updated ~/.pypirc"
-
-# Escape for sed
-UV_EXTRA_INDEX_URL="https://foo:${TOKEN}@us-python.pkg.dev/leverege-registry/leverege-python-packages/simple"
-
-SHELLS=("bash" "dash" "zsh" "fish")
-
-for shell in "${SHELLS[@]}"; do
-  if command -v "$shell" > /dev/null 2>&1; then
-    case "$shell" in
-      bash)
-        CONFIG_FILE="$HOME/.bashrc"
-        ;;
-      dash)
-        CONFIG_FILE="$HOME/.profile"
-        ;;
-      zsh)
-        CONFIG_FILE="$HOME/.zshrc"
-        ;;
-      fish)
-        CONFIG_FILE="$HOME/.config/fish/config.fish"
-        ;;
-      *)
-        echo "Shell $shell is not supported."
-        continue
-        ;;
-    esac
-
-    echo "Updating shell configuration in $CONFIG_FILE"
-
-    if [ -f "$CONFIG_FILE" ]; then
-      if grep -q "export UV_EXTRA_INDEX_URL=" "$CONFIG_FILE"; then
-        sed -i "s|export UV_EXTRA_INDEX_URL=.*|export UV_EXTRA_INDEX_URL=${UV_EXTRA_INDEX_URL}|" "$CONFIG_FILE"
-      else
-        echo -e "\nexport UV_EXTRA_INDEX_URL=${UV_EXTRA_INDEX_URL}\n" >> "$CONFIG_FILE"
-      fi
-    else
-      echo -e "\nexport UV_EXTRA_INDEX_URL=${UV_EXTRA_INDEX_URL}\n" >> "$CONFIG_FILE"
-    fi
-  else
-    echo "Shell $shell is not installed."
-  fi
-done
-
-function get_parent_shell() {
-  local ppid=$(ps -p $$ -o ppid= | tr -d ' ')
-  local shell=$(ps -p $ppid -o comm= | tr -d ' ')
-
-  while [ "$ppid" != "1" ]; do
-    ppid=$(ps -p $ppid -o ppid= | tr -d ' ')
-    shell=$(ps -p $ppid -o comm= | tr -d ' ')
-
-    if [[ "$shell" =~ bash|dash|zsh|fish ]]; then
-      echo "$shell"
-      return
-    fi
-  done
-
-  echo ""
-}
-
-shell=$(get_parent_shell)
-
-if [ -z "$shell" ]; then
-  echo -e "\nCould not determine parent shell. Please source your shell configuration to apply the changes.\n"
-  echo "Example (bash): source ~/.bashrc"
-  echo "Example (dash): source ~/.profile"
-  echo "Example (zsh): source ~/.zshrc"
-  echo "Example (fish): source ~/.config/fish/config.fish"
-  exit 1
-fi
-
-echo -e "\nReloading $shell shell with new configuration.\n"
+password: $TOKEN
+EOF
+echo "Updated $HOME/.pypirc"
 
-case "$shell" in
-  bash)
-    source "$HOME/.bashrc"
-    ;;
-  dash)
-    source "$HOME/.profile"
-    ;;
-  zsh)
-    source "$HOME/.zshrc"
-    ;;
-  fish)
-    source "$HOME/.config/fish/config.fish"
-    ;;
-  *)
-    echo "Shell $shell is not supported."
-    ;;
-esac
+# Set UV_EXTRA_INDEX_URL env var
+export UV_EXTRA_INDEX_URL="https://oauth2accesstoken:$TOKEN@us-python.pkg.dev/leverege-registry/leverege-python-packages/simple"
+echo "Updated UV_EXTRA_INDEX_URL"