npm - @leverege/build-tools - Versions diffs - 2.8.12 → 2.8.13 - Mend

@leverege/build-tools 2.8.12 → 2.8.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (76) hide show

package/src/sa-tools/roles/baseline/leveregeBigQueryWriter.json DELETED Viewed

@@ -1,10 +0,0 @@
-{
-  "description": "Leverege Big Query Writer",
-  "includedPermissions": [
-    "bigquery.datasets.get",
-    "bigquery.tables.get",
-    "bigquery.tables.updateData"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Big Query Writer"
-}

package/src/sa-tools/roles/baseline/leveregeCloudFunctionsAdmin.json DELETED Viewed

@@ -1,12 +0,0 @@
-{
-  "description": "Leverege limited Cloud Functions Admin",
-  "includedPermissions": [
-    "cloudfunctions.functions.create",
-    "cloudfunctions.functions.delete",
-    "cloudfunctions.functions.get",
-    "cloudfunctions.functions.sourceCodeSet",
-    "cloudfunctions.functions.update"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Cloud Functions Admin"
-}

package/src/sa-tools/roles/baseline/leveregeFirebaseUpdates.json DELETED Viewed

@@ -1,8 +0,0 @@
-{
-  "description": "Leverege Firebase Updates Access",
-  "includedPermissions": [
-    "firebasedatabase.instances.update"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Firebase Updates"
-}

package/src/sa-tools/roles/baseline/leveregeLogsViewer.json DELETED Viewed

@@ -1,8 +0,0 @@
-{
-  "description": "Leverege view access to logs",
-  "includedPermissions": [
-    "logging.logEntries.list"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Logs Viewer"
-}

package/src/sa-tools/roles/baseline/leveregePubSub.json DELETED Viewed

@@ -1,13 +0,0 @@
-{
-  "description": "Leverege Pub/Sub",
-  "includedPermissions": [
-    "pubsub.subscriptions.consume",
-    "pubsub.subscriptions.create",
-    "pubsub.topics.attachSubscription",
-    "pubsub.topics.create",
-    "pubsub.topics.list",
-    "pubsub.topics.publish"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Pub/Sub"
-}

package/src/sa-tools/roles/baseline/leveregeSecretsViewer.json DELETED Viewed

@@ -1,8 +0,0 @@
-{
-  "description": "Custom Secrets Manager Access",
-  "includedPermissions": [
-    "secretmanager.versions.access"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Secret Viewer"
-}

package/src/sa-tools/roles/baseline/leveregeStorageObjectAccess.json DELETED Viewed

@@ -1,10 +0,0 @@
-{
-  "description": "Leverege read / write access to Storage Objects",
-  "includedPermissions": [
-    "storage.objects.create",
-    "storage.objects.delete",
-    "storage.objects.get"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Storage Object Admin"
-}

package/src/sa-tools/roles/baseline/leveregeSvcAcctActor.json DELETED Viewed

@@ -1,8 +0,0 @@
-{
-  "description": "Leverege service account act as other user",
-  "includedPermissions": [
-    "iam.serviceAccounts.actAs"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Svc Acct Impersonation"
-}

package/src/sa-tools/roles/baseline/leveregeSvcAcctTokenCreator.json DELETED Viewed

@@ -1,8 +0,0 @@
-{
-  "description": "Leverege IAM blob signing access",
-  "includedPermissions": [
-    "iam.serviceAccounts.signBlob"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Svc Acct Token Creator"
-}

package/src/sa-tools/roles/leverege-dev-john/20220113-121423/leveregeBigQueryReader.json DELETED Viewed

@@ -1,10 +0,0 @@
-{
-  "description": "Leverege BQ data accessor",
-  "includedPermissions": [
-    "bigquery.jobs.create",
-    "bigquery.tables.create",
-    "bigquery.tables.getData"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Big Query Reader"
-}

package/src/sa-tools/roles/leverege-dev-john/20220113-121423/leveregeBigQueryWriter.json DELETED Viewed

@@ -1,10 +0,0 @@
-{
-  "description": "Leverege Big Query Writer",
-  "includedPermissions": [
-    "bigquery.datasets.get",
-    "bigquery.tables.get",
-    "bigquery.tables.updateData"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Big Query Writer"
-}

package/src/sa-tools/roles/leverege-dev-john/20220113-121423/leveregeCloudFunctionsAdmin.json DELETED Viewed

@@ -1,12 +0,0 @@
-{
-  "description": "Leverege limited Cloud Functions Admin",
-  "includedPermissions": [
-    "cloudfunctions.functions.create",
-    "cloudfunctions.functions.delete",
-    "cloudfunctions.functions.get",
-    "cloudfunctions.functions.sourceCodeSet",
-    "cloudfunctions.functions.update"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Cloud Functions Admin"
-}

package/src/sa-tools/roles/leverege-dev-john/20220113-121423/leveregeFirebaseUpdates.json DELETED Viewed

@@ -1,8 +0,0 @@
-{
-  "description": "Leverege Firebase Updates Access",
-  "includedPermissions": [
-    "firebasedatabase.instances.update"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Firebase Updates"
-}

package/src/sa-tools/roles/leverege-dev-john/20220113-121423/leveregeLogsViewer.json DELETED Viewed

@@ -1,8 +0,0 @@
-{
-  "description": "Leverege view access to logs",
-  "includedPermissions": [
-    "logging.logEntries.list"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Logs Viewer"
-}

package/src/sa-tools/roles/leverege-dev-john/20220113-121423/leveregePubSub.json DELETED Viewed

@@ -1,13 +0,0 @@
-{
-  "description": "Leverege Pub/Sub",
-  "includedPermissions": [
-    "pubsub.subscriptions.consume",
-    "pubsub.subscriptions.create",
-    "pubsub.topics.attachSubscription",
-    "pubsub.topics.create",
-    "pubsub.topics.list",
-    "pubsub.topics.publish"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Pub/Sub"
-}

package/src/sa-tools/roles/leverege-dev-john/20220113-121423/leveregeSecretsViewer.json DELETED Viewed

@@ -1,8 +0,0 @@
-{
-  "description": "Custom Secrets Manager Access",
-  "includedPermissions": [
-    "secretmanager.versions.access"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Secret Viewer"
-}

package/src/sa-tools/roles/leverege-dev-john/20220113-121423/leveregeStorageObjectAccess.json DELETED Viewed

@@ -1,10 +0,0 @@
-{
-  "description": "Leverege read / write access to Storage Objects",
-  "includedPermissions": [
-    "storage.objects.create",
-    "storage.objects.delete",
-    "storage.objects.get"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Storage Object Admin"
-}

package/src/sa-tools/roles/leverege-dev-john/20220113-121423/leveregeSvcAcctActor.json DELETED Viewed

@@ -1,8 +0,0 @@
-{
-  "description": "Leverege service account act as other user",
-  "includedPermissions": [
-    "iam.serviceAccounts.actAs"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Svc Acct Impersonation"
-}

package/src/sa-tools/roles/leverege-dev-john/20220113-121423/leveregeSvcAcctTokenCreator.json DELETED Viewed

@@ -1,8 +0,0 @@
-{
-  "description": "Leverege IAM blob signing access",
-  "includedPermissions": [
-    "iam.serviceAccounts.signBlob"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Svc Acct Token Creator"
-}

package/src/sa-tools/roles/prd-indoor-zoning/20220113-121935/leveregeBigQueryReader.json DELETED Viewed

@@ -1,10 +0,0 @@
-{
-  "description": "Leverege BQ data accessor",
-  "includedPermissions": [
-    "bigquery.jobs.create",
-    "bigquery.tables.create",
-    "bigquery.tables.getData"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Big Query Reader"
-}

package/src/sa-tools/roles/prd-indoor-zoning/20220113-121935/leveregeBigQueryWriter.json DELETED Viewed

@@ -1,10 +0,0 @@
-{
-  "description": "Leverege Big Query Writer",
-  "includedPermissions": [
-    "bigquery.datasets.get",
-    "bigquery.tables.get",
-    "bigquery.tables.updateData"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Big Query Writer"
-}

package/src/sa-tools/roles/prd-indoor-zoning/20220113-121935/leveregeCloudFunctionsAdmin.json DELETED Viewed

@@ -1,12 +0,0 @@
-{
-  "description": "Leverege limited Cloud Functions Admin",
-  "includedPermissions": [
-    "cloudfunctions.functions.create",
-    "cloudfunctions.functions.delete",
-    "cloudfunctions.functions.get",
-    "cloudfunctions.functions.sourceCodeSet",
-    "cloudfunctions.functions.update"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Cloud Functions Admin"
-}

package/src/sa-tools/roles/prd-indoor-zoning/20220113-121935/leveregeFirebaseUpdates.json DELETED Viewed

@@ -1,8 +0,0 @@
-{
-  "description": "Leverege Firebase Updates Access",
-  "includedPermissions": [
-    "firebasedatabase.instances.update"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Firebase Updates"
-}

package/src/sa-tools/roles/prd-indoor-zoning/20220113-121935/leveregeLogsViewer.json DELETED Viewed

@@ -1,8 +0,0 @@
-{
-  "description": "Leverege view access to logs",
-  "includedPermissions": [
-    "logging.logEntries.list"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Logs Viewer"
-}

package/src/sa-tools/roles/prd-indoor-zoning/20220113-121935/leveregePubSub.json DELETED Viewed

@@ -1,13 +0,0 @@
-{
-  "description": "Leverege Pub/Sub",
-  "includedPermissions": [
-    "pubsub.subscriptions.consume",
-    "pubsub.subscriptions.create",
-    "pubsub.topics.attachSubscription",
-    "pubsub.topics.create",
-    "pubsub.topics.list",
-    "pubsub.topics.publish"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Pub/Sub"
-}

package/src/sa-tools/roles/prd-indoor-zoning/20220113-121935/leveregeSecretsViewer.json DELETED Viewed

@@ -1,8 +0,0 @@
-{
-  "description": "Custom Secrets Manager Access",
-  "includedPermissions": [
-    "secretmanager.versions.access"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Secret Viewer"
-}

package/src/sa-tools/roles/prd-indoor-zoning/20220113-121935/leveregeStorageObjectAccess.json DELETED Viewed

@@ -1,10 +0,0 @@
-{
-  "description": "Leverege read / write access to Storage Objects",
-  "includedPermissions": [
-    "storage.objects.create",
-    "storage.objects.delete",
-    "storage.objects.get"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Storage Object Admin"
-}

package/src/sa-tools/roles/prd-indoor-zoning/20220113-121935/leveregeSvcAcctActor.json DELETED Viewed

@@ -1,8 +0,0 @@
-{
-  "description": "Leverege service account act as other user",
-  "includedPermissions": [
-    "iam.serviceAccounts.actAs"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Svc Acct Impersonation"
-}

package/src/sa-tools/roles/prd-indoor-zoning/20220113-121935/leveregeSvcAcctTokenCreator.json DELETED Viewed

@@ -1,8 +0,0 @@
-{
-  "description": "Leverege IAM blob signing access",
-  "includedPermissions": [
-    "iam.serviceAccounts.signBlob"
-  ],
-  "stage": "BETA",
-  "title": "Leverege Svc Acct Token Creator"
-}

package/src/sa-tools/roles-grab DELETED Viewed

@@ -1,30 +0,0 @@
-#!/bin/bash
-#
-# To fetch Leverege custom role names:
-#   gcloud --project=<PROJ_NAME> iam roles list --filter=Leverege | grep name
-#
-LEVEREGE_ROLES=(
-  leveregeBigQueryReader
-  leveregeBigQueryWriter
-  leveregeCloudFunctionsAdmin
-  leveregeFirebaseUpdates
-  leveregeLogsViewer
-  leveregePubSub
-  leveregeSecretsViewer
-  leveregeStorageObjectAccess
-  leveregeSvcAcctActor
-  leveregeSvcAcctTokenCreator
-)
-PROJ=${1:-leverege-sandbox}
-DTS="`date +\"%Y%m%d-%H%M%S\"`"
-ROLESDIR="roles/${PROJ}/${DTS}"
-mkdir -p $ROLESDIR
-for ROLE in "${LEVEREGE_ROLES[@]}";
-do
-  JSON="${ROLESDIR}/${ROLE}.json"
-  printf "Fetching role $ROLE\n"
-  gcloud --project leverege-sandbox iam roles describe $ROLE \
-    --format=json | jq '{description,includedPermissions,stage,title}' > $JSON
-done

package/src/sa-tools/roles-push DELETED Viewed

@@ -1,19 +0,0 @@
-#!/bin/bash
-PROJ="${1:-leverege-sandbox}"
-printf "\n   Create/Update IAM Roles for => $PROJ\n\n"
-cd roles/baseline
-for JSON in leverege*.json;
-do
-  ROLE=`basename $JSON .json`
-  IAM_VERB="create"
-  gcloud --project $PROJ iam roles describe $ROLE &>/dev/null
-  [ "$?" == "0" ] && IAM_VERB="update"
-  printf "Attempting to $IAM_VERB role $ROLE on $PROJ\n"
-  gcloud --project $PROJ iam roles $IAM_VERB $ROLE --file $JSON
-done
-cd -

package/src/sa-tools/sh-make-sa DELETED Viewed

@@ -1,58 +0,0 @@
-#!/bin/bash
-SVC_PROJ="leverege-dev-john"
-SVC_NAME="terraform"
-SVC_ACCT="${SVC_NAME}@${SVC_PROJ}.iam.gserviceaccount.com"
-function countdown() {
-  local SEC=${1}
-  shift
-  local MSG=${@}
-  while [ $SEC -ne 0 ];
-  do
-    printf "\r\033[KWaiting %.d seconds $MSG" $((SEC--))
-    sleep 1
-  done
-}
-gcloud config unset auth/impersonate_service_account
-gcloud iam service-accounts create ${SVC_NAME} \
-  --project=${SVC_PROJ} --quiet \
-  --description="${SVC_NAME} SA" \
-  --display-name="${SVC_NAME}" &> /dev/null
-gcloud projects add-iam-policy-binding ${SVC_PROJ} \
-  --project=${SVC_PROJ} --quiet \
-  --member=serviceAccount:${SVC_ACCT}              \
-  --role=roles/editor &> /dev/null
-gcloud projects add-iam-policy-binding ${SVC_PROJ} \
-  --project=${SVC_PROJ} --quiet \
-  --member=serviceAccount:${SVC_ACCT}              \
-  --role=roles/iam.securityAdmin &> /dev/null
-gcloud projects add-iam-policy-binding ${SVC_PROJ} \
-  --project=${SVC_PROJ} --quiet \
-  --member=serviceAccount:${SVC_ACCT}              \
-  --role=roles/iam.serviceAccountTokenCreator &> /dev/null
-countdown 30 "will delete ${SVC_NAME} service account"
-gcloud projects remove-iam-policy-binding ${SVC_PROJ} \
-  --project=${SVC_PROJ} --quiet \
-  --member=serviceAccount:${SVC_ACCT}              \
-  --role=roles/iam.serviceAccountTokenCreator &> /dev/null
-gcloud projects remove-iam-policy-binding ${SVC_PROJ} \
-  --project=${SVC_PROJ} --quiet \
-  --member=serviceAccount:${SVC_ACCT}              \
-  --role=roles/iam.securityAdmin &> /dev/null
-gcloud projects remove-iam-policy-binding ${SVC_PROJ} \
-  --project=${SVC_PROJ} --quiet \
-  --member=serviceAccount:${SVC_ACCT}              \
-  --role=roles/editor &> /dev/null
-gcloud iam service-accounts delete ${SVC_ACCT} --quiet &> /dev/null

package/src/service-man/Config.js DELETED Viewed

@@ -1,40 +0,0 @@
-const chalk = require( 'chalk' )
-const fs = require( 'fs' )
-class Config {
-  constructor() {
-    this.configDir = `${__dirname}/config`
-    const jsonText = fs.readFileSync( `${this.configDir}/config.json` )
-    this.config = JSON.parse( jsonText )
-    this.verifyConfig( this.config )
-  }
-  verifyConfig( config ) {
-    /**
-     * Verify reference sources exist.
-     */
-    let errors
-    config.templates.forEach( ( template ) => {
-      if ( !template.enabled ) return
-      template.sources.forEach( ( source ) => {
-        if ( typeof source === 'object' ) {
-          console.log( source, 'STILL TODO' )
-        } else {
-          const fullName = `${this.configDir}/${source}`
-          if ( !fs.existsSync( fullName ) ) {
-            console.log( chalk.red(
-              `***ERROR: missing source ${fullName}`
-            ) )
-            errors = true
-          }
-        }
-      } )
-    } )
-    if ( errors ) { process.exit( 1 ) }
-  }
-}
-module.exports = {
-  Config,
-}

package/src/service-man/ServiceMan.js DELETED Viewed

@@ -1,32 +0,0 @@
-const chalk = require( 'chalk' )
-const cliArgs = require( 'command-line-args' )
-const cliHelp = require( 'command-line-usage' )
-const execa = require( 'execa' )
-const figlet = require( 'figlet' )
-const { Config } = require( './Config' )
-const { clear, condir, proceed, Shell, VersionCheck } = require( './utils' )
-const greet = async () => {
-  clear()
-  console.log(
-    chalk.keyword( 'orange' ).bold(
-      figlet.textSync( 'service-man', { horizontalLayout : 'full' } )
-    ), chalk.green`
-  This utility attempts to ease the pain of managing IAM roles and the
-  creation of service accounts for new clusters and services.
-`
-  )
-}
-const start = async () => {
-  await greet()
-  await proceed()
-  console.log( 'Weeeeee....' )
-}
-exports.start = start

package/src/service-man/index.js DELETED Viewed

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-const ServiceMan = require( './ServiceMan' )
-ServiceMan.start()

package/src/service-man/utils/Shell.js DELETED Viewed

@@ -1,95 +0,0 @@
-/**
- * Shell like things can go in here. I mostly created this to make it
- * easier to push and pop around the directory trees for repo-init. It
- * might make sense to add other things in here to make writing node CLI
- * commands a little less painful.
- */
-const fs = require( 'fs' )
-const process = require( 'process' )
-const dirStack = []
-/**
- * Simple wrapper functions for debugging.
- */
-const cwd = () => {
-  return process.cwd()
-}
-const chdir = ( dir ) => {
-  return process.chdir( dir )
-}
-const dirs = () => {
-  console.log( dirStack )
-}
-const pushd = ( dir ) => {
-  if ( !dir ) {
-    throw new Error( 'pushd: no other directory' )
-  }
-  dirStack.push( cwd() )
-  chdir( dir )
-}
-const throwIfEmptyStack = () => {
-  if ( dirStack.length === 0 ) {
-    throw new Error( 'popd: directory stack empty' )
-  }
-}
-const popd = ( all ) => {
-  throwIfEmptyStack()
-  chdir( dirStack.pop() )
-}
-const popdAll = () => {
-  throwIfEmptyStack()
-  chdir( dirStack[0] )
-  dirStack.length = 0
-}
-/**
- * This function will do an upwards traversal of a file tree looking for the
- * specified file. An error will be thrown if the file is not found within
- * maxLevels.
- */
-const reverseFindFile = ( findFile, options ) => {
-  pushd( options.startDir || cwd() )
-  let maxLevels = options.maxLevels || 5
-  let fileRoot
-  while ( maxLevels > 0 ) {
-    if ( fs.existsSync( findFile ) ) {
-      fileRoot = cwd()
-      break
-    }
-    pushd( '..' ) // walk up the tree
-    maxLevels -= 1
-  }
-  popdAll()
-  if ( !fileRoot ) {
-    throw new Error( `reverseFindFile: ${findFile} not found` )
-  }
-  return fileRoot
-}
-const findRepoRoot = () => {
-  return reverseFindFile( 'package.json', { startDir : __dirname } )
-}
-module.exports = {
-  dirs,
-  pushd,
-  popd,
-  popdAll,
-  reverseFindFile,
-  findRepoRoot,
-  cwd,
-  chdir,
-}