@leverege/build-tools 2.89.2 → 2.90.0-quinn.2

package/lib/web/unleash.js

@@ -0,0 +1,50 @@
+#!/usr/bin/env node
+"use strict";
+
+var _execa = _interopRequireDefault(require("execa"));
+var _simpleGit = _interopRequireDefault(require("simple-git"));
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+const git = new _simpleGit.default();
+const getCurrentBranchName = async () => {
+  const branchInfo = await git.branch();
+
+  // first check to see if there are no branches - new repo?
+  if (Object.keys(branchInfo.branches).length === 0) {
+    return '';
+  }
+  return Object.entries(branchInfo.branches).find(([name, info]) => info.current)[0];
+};
+const isProtected = async () => {
+  const theBranch = await getCurrentBranchName();
+  const protectedBranches = ['main', 'master', 'development'];
+  const additionalProtectedBranches = [...process.argv.slice(2)];
+
+  // Check if the current branch starts with any of the additional
+  // protected branch name
+  let matchesAdditionalBranch = false;
+  for (let i = 0; i < additionalProtectedBranches.length; i++) {
+    matchesAdditionalBranch = matchesAdditionalBranch || theBranch.startsWith(additionalProtectedBranches[i]);
+  }
+  return protectedBranches.includes(theBranch) || matchesAdditionalBranch;
+};
+const npmRunner = async script => {
+  try {
+    const results = await (0, _execa.default)('npm', ['run', script], {
+      stdio: 'inherit'
+    });
+    return results;
+  } catch (err) {
+    process.exit(1);
+  }
+  return undefined;
+};
+(async () => {
+  if (await isProtected()) {
+    const script = ['test', 'lint'];
+    for (let i = 0; i < script.length; i++) {
+      await npmRunner(script[i]); // eslint-disable-line no-await-in-loop
+    }
+  } else {
+    process.exit(0);
+  }
+})();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leverege/build-tools",
-  "version": "2.89.2",
+  "version": "2.90.0-quinn.2",
   "description": "A collection of build / support tools for Leverege developers",
   "main": "index.js",
   "repository": {
@@ -11,23 +11,25 @@
     "clean": "rm -rf lib",
     "lint": "find ./src -name \\*.\\*js | xargs npx eslint --report-unused-disable-directives",
     "prepare": "[ $SKIP_PREPARE ] && exit 0 || ./src/hook-and-release.mjs",
-    "test": "echo \"no tests specified\" && exit 0"
+    "test": "echo \"no tests specified\" && exit 0",
+    "prepack": "npm exec prepack"
   },
   "bin": {
-    "build-tools": "src/build-tools.mjs",
     "build-and-push": "src/build-and-push.sh",
     "build-cnpg-image": "src/build-cnpg-image.mjs",
+    "build-tools": "src/build-tools.mjs",
     "chart-to-museum": "src/chart-to-museum.mjs",
     "chart-to-registry": "src/chart-to-registry.mjs",
+    "prepack": "src/prepack.mjs",
     "circleate": "src/circleate.sh",
     "clone-cnpg-from-snapshot": "src/clone-cnpg-from-snapshot.mjs",
     "count-lines-of-code": "src/count-lines-of-code.mjs",
     "decrypt-secrets": "src/decrypt-secrets.sh",
     "dirty-git": "src/dirty-git.sh",
-    "dockreate": "src/dockreate.sh",
-    "docker-to-registry": "src/docker-to-registry.mjs",
     "docker-to-registry-py": "src/docker-to-registry-py.mjs",
     "docker-to-registry.sh": "src/docker-to-registry.sh",
+    "docker-to-registry": "src/docker-to-registry.mjs",
+    "dockreate": "src/dockreate.sh",
     "encrypt-secrets": "src/encrypt-secrets.sh",
     "firebaseDeploy": "src/firebaseDeploy.mjs",
     "firebaseServe": "src/firebaseServe.mjs",
@@ -38,8 +40,8 @@
     "helm-audit": "src/helm-audit.mjs",
     "helmcycle": "src/helmup.sh",
     "helmdn": "src/helmdn.sh",
-    "helmup": "src/helmup.sh",
     "helminit": "src/helmup.sh",
+    "helmup": "src/helmup.sh",
     "helmwhat": "src/helmup.sh",
     "hook-and-release": "src/hook-and-release.mjs",
     "init-my-chart": "src/init-my-chart.mjs",
@@ -76,18 +78,18 @@
     "glob": "^11.0.3",
     "handlebars": "^4.7.8",
     "ignore": "^7.0.5",
-    "inquirer": "^12.10.0",
-    "js-yaml": "^4.1.0",
+    "inquirer": "^12.11.1",
+    "js-yaml": "^4.1.1",
     "jsdoc": "^4.0.5",
     "ms": "^2.1.3",
-    "npm-registry-fetch": "^19.0.0",
+    "npm-registry-fetch": "^19.1.0",
     "ora": "^9.0.0",
     "p-limit": "^7.2.0",
     "package-up": "^5.0.0",
     "readline-sync": "^1.4.10",
     "semver": "^7.7.3",
     "shell-quote": "^1.8.3",
-    "simple-git": "^3.28.0",
+    "simple-git": "^3.30.0",
     "sloc": "^0.3.2",
     "toml": "^3.0.0",
     "zx": "^8.8.5"

package/src/prepack.mjs

@@ -0,0 +1,74 @@
+#!/usr/bin/env node
+/* eslint-disable no-console */
+
+import path from 'node:path'
+
+import { parse as semverParse } from 'semver'
+import { $, fs, minimist, chalk } from 'zx'
+
+process.env.FORCE_COLOR = '1'
+
+console.log( process.env.npm_config_workspace, process.env.npm_config_workspaces )
+
+const { compile, 'manual-tag' : manualTag } = minimist( process.argv.slice( 2 ), {
+  default : {
+    compile : true,
+    'manual-tag' : false
+  },
+  boolean : [ 'compile', 'manual-tag' ]
+} )
+
+try {
+  await $`git diff --exit-code --quiet`
+} catch ( err ) {
+  console.log( chalk.redBright( 'Your git index is not clean. Stage and/or commit all changes before attempting to publish a version to npm.' ) )
+  process.exit( err.exitCode )
+}
+
+const isYarn = ( await fs.exists( path.join( process.cwd(), 'yarn.lock' ) ) ) || ( await fs.exists( path.join( process.cwd(), '.yarn' ) ) )
+const packageJson = await fs.readJSON( path.join( process.cwd(), 'package.json' ) )
+
+if ( compile && packageJson.scripts?.compile != null ) {
+  try {
+    await compileCmd( { isYarn } )
+  } catch ( error ) {
+    process.stderr.write( chalk.redBright( 'Compile command failed with error:\n' ) )
+    process.stderr.write( error.text() )
+    process.exit( error.exitCode )
+  }
+}
+
+const name = packageJson.name.replace( /^@leverege\//, '' )
+const version = packageJson.version
+const semanticVersion = semverParse( version )
+const isPrerelease = semanticVersion.prerelease.length > 0
+
+if ( !isPrerelease ) {
+  const tagName = `${name}/v${semanticVersion.version}`
+  const cmd = [ 'git', 'tag', '-a', tagName ]
+  if ( !manualTag ) {
+    cmd.push( '-m', `"NPM version ${tagName}"` )
+  }
+
+  try {
+    await $( {
+      quiet : true
+    } )`${cmd}`
+  } catch ( error ) {
+    process.stderr.write( chalk.redBright( 'Failed to create git tag with error:\n' ) )
+    process.stderr.write( error.text() )
+    process.exit( error.exitCode )
+  }
+}
+
+function compileCmd( { isYarn } ) {
+  if ( isYarn ) {
+    return $( {
+      quiet : true
+    } )`yarn compile`
+  }
+
+  return $( {
+    quiet : true
+  } )`npm run compile`
+}

package/src/init-my-chart/Chart.yaml

@@ -1,5 +0,0 @@
-name: {{appChartName}}
-version: 0.1.0
-appVersion: v0.1.0
-apiVersion: v2
-icon: https://raw.githubusercontent.com/kubernetes/kubernetes/master/logo/logo.svg

package/src/init-my-chart/templates/NOTES.txt

@@ -1,5 +0,0 @@
--------------------------------------------------------------------------------
-
-Deploying => {{ .Chart.Name }}
-
--------------------------------------------------------------------------------

package/src/init-my-chart/templates/_helpers.tpl

@@ -1,135 +0,0 @@
-{{/*
-Expand the name of the chart.
-*/}}
-{{- define "leverege.name" -}}
-{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
-{{- end }}
-
-{{/*
-Create a default fully qualified app name.
-We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
-If release name contains chart name it will be used as a full name.
-*/}}
-{{- define "leverege.fullname" -}}
-{{- if .Values.fullnameOverride }}
-{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
-{{- else }}
-{{- $name := default .Chart.Name .Values.nameOverride }}
-{{- if contains $name .Release.Name }}
-{{- .Release.Name | trunc 63 | trimSuffix "-" }}
-{{- else }}
-{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
-{{- end }}
-{{- end }}
-{{- end }}
-
-{{/*
-Create chart name and version as used by the chart label.
-*/}}
-{{- define "leverege.chart" -}}
-{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
-{{- end }}
-
-{{/*
-Common labels
-*/}}
-{{- define "leverege.labels" -}}
-helm.sh/chart: {{ include "leverege.chart" . }}
-{{ include "leverege.selectorLabels" . }}
-{{- if .Chart.AppVersion }}
-app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
-{{- end }}
-app.kubernetes.io/managed-by: {{ .Release.Service }}
-{{- if .Values.partOf }}
-app.kubernetes.io/part-of: {{ .Values.partOf }}
-{{- end }}
-{{- end }}
-
-{{/*
-Selector labels
-*/}}
-{{- define "leverege.selectorLabels" -}}
-app.kubernetes.io/name: {{ include "leverege.name" . }}
-app.kubernetes.io/instance: {{ .Release.Name }}
-{{- end }}
-
-{{/*
-Create the name of the service account to use
-*/}}
-{{- define "leverege.serviceAccountName" -}}
-{{- if .Values.serviceAccount.create }}
-{{- default (include "leverege.fullname" .) .Values.serviceAccount.name }}
-{{- else }}
-{{- default "default" .Values.serviceAccount.name }}
-{{- end }}
-{{- end }}
-
-{{/*
-Define reusable container ports configuration for deployments.
-*/}}
-{{- define "leverege.deploymentPorts" -}}
-- name: http
-  containerPort: {{ .Values.config.HTTP_SERVER_PORT }}
-  protocol: TCP
-- name: node-metrics
-  containerPort: {{ .Values.config.METRICS_PORT }}
-  protocol: TCP
-{{- end }}
-
-{{/*
-Define reusable service ports configuration for services.
-*/}}
-{{- define "leverege.servicePorts" -}}
-- name: http
-  port: {{ .Values.config.HTTP_SERVER_PORT }}
-  targetPort: http
-  protocol: TCP
-- name: node-metrics
-  port: {{ .Values.config.METRICS_PORT }}
-  targetPort: node-metrics
-  protocol: TCP
-{{- end }}
-
-{{/*
-Define reusable service monitors for the prometheus operator.
-*/}}
-{{- define "leverege.serviceMonitorEndpoints" -}}
-- port: node-metrics
-  interval: {{ default "60s" .Values.serviceMonitor.interval }}
-  honorLabels: true # prom-operator config setting
-  relabelings:
-    - action: labelmap
-      regex: __meta_kubernetes_pod_label_(.+)
-    - action: labelmap
-      regex: __meta_kubernetes_service_label_(.+)
-{{- end }}
-
-{{/*
-Reusable initContainers block, currently supports modelInit pattern.
-*/}}
-{{- define "leverege.initContainers" -}}
-{{- if .Values.modelInit.enabled }}
-- name: {{ .Values.modelInit.name | default "fetch-models" }}
-  image: {{ .Values.modelInit.image }}
-  securityContext:
-    runAsUser: {{ .Values.modelInit.runAsUser }}
-    runAsGroup: {{ .Values.modelInit.runAsGroup }}
-  command: ["/bin/bash", "-c"]
-  args:
-    {{- if .Values.modelInit.args }}
-    {{- toYaml .Values.modelInit.args | nindent 4 }}
-    {{- else }}
-    - >-
-      exec > /proc/1/fd/1 2>&1; set -ex;
-      {{- range $name, $uri := .Values.modelInit.sources }}
-      echo "Syncing {{$name}} from {{$uri}}...";
-      mkdir -p {{ $.Values.modelInit.targetDir }}/{{$name}};
-      gsutil -m rsync -r {{$uri}} {{ $.Values.modelInit.targetDir }}/{{$name}};
-      {{- end }}
-    {{- end }}
-  volumeMounts:
-    - name: model-volume
-      mountPath: {{ .Values.modelInit.targetDir }}
-{{- end }}
-{{- end }}
-

package/src/init-my-chart/templates/configmap.yaml

@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: {{ include "leverege.fullname" . }}-configs
-  labels:
-    {{- include "leverege.labels" . | nindent 4 }}
-data:
-{{- with .Values.config }}
-  {{- toYaml . | nindent 2 }}
-{{- end }}

package/src/init-my-chart/templates/deployment.yaml

@@ -1,125 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: {{ include "leverege.fullname" . }}
-  labels:
-    {{- include "leverege.labels" . | nindent 4 }}
-    app: {{ include "leverege.fullname" . }}
-    redis-client: {{ .Values.redis.enabled | quote }}
-spec:
-  replicas: {{ default 1 .Values.staticscaling.replicas }}
-  selector:
-    matchLabels:
-      {{- include "leverege.selectorLabels" . | nindent 6 }}
-  template:
-    metadata:
-      labels:
-        {{- include "leverege.selectorLabels" . | nindent 8 }}
-        app: {{ include "leverege.fullname" . }}
-        redis-client: {{ .Values.redis.enabled | quote }}
-      annotations:
-        checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
-        prometheus.io/port: '{{ default "5111" .Values.config.METRICS_PORT }}'
-        prometheus.io/scrape: "true"
-        configmap.reloader.stakater.com/reload: "default-configs"
-        {{- if .Values.service.preemptible }}
-        cluster-autoscaler.kubernetes.io/safe-to-evict: "true"
-        {{- end }}
-    spec:
-      serviceAccountName: {{ include "leverege.fullname" . }}
-      volumes:
-      - name: tmpfs
-        emptyDir: {}
-      {{- if .Values.workloadIdentity.disabled }}
-      - name: google-cloud-key
-        secret:
-          secretName: {{ .Chart.Name }}-sa-key
-      {{- end }}
-      affinity:
-        podAntiAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - weight: 100
-            podAffinityTerm:
-              labelSelector:
-                matchExpressions:
-                - key: app.kubernetes.io/name
-                  operator: In
-                  values:
-                  - {{ include "leverege.fullname" . }}
-              topologyKey: "kubernetes.io/hostname"
-      {{- if .Values.service.preemptible }}
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-            - matchExpressions:
-              - key: target-env
-                operator: In
-                values:
-                - preemptible
-      tolerations:
-      - key: "preemptible"
-        operator: "Equal"
-        value: "true"
-        effect: "NoSchedule"
-      {{- end }}
-      {{- if .Values.modelInit.enabled }}
-      initContainers:
-        - name: {{ default "fetch-models" .Values.modelInit.name }}
-          image: {{ .Values.modelInit.image }}
-          securityContext:
-            runAsUser: {{ .Values.modelInit.runAsUser }}
-            runAsGroup: {{ .Values.modelInit.runAsGroup }}
-          command: ["/bin/sh","-c"]
-          args:
-            {{- if .Values.modelInit.args }}
-            {{- toYaml .Values.modelInit.args | nindent 6 }}
-            {{- else }}
-            - |
-              exec > /proc/1/fd/1 2>&1  # Send both stdout and stderr to container's stdout
-              set -ex
-              {{- range $name, $uri := .Values.modelInit.sources }}
-              echo "Syncing {{$name}} from {{$uri}}..."
-              mkdir -p {{ $.Values.modelInit.targetDir }}/{{$name}}
-              gsutil -m rsync -r {{$uri}} {{ $.Values.modelInit.targetDir }}/{{$name}}
-              {{- end }}
-            {{- end }}
-          volumeMounts:
-            - name: model-volume
-              mountPath: {{ .Values.modelInit.targetDir }}
-      {{- end }}
-      containers:
-      - name: {{ include "leverege.fullname" . }}
-        imagePullPolicy: {{ .Values.image.pullPolicy }}
-        image: {{ .Values.image.registry }}/{{ .Chart.Name }}:{{ default .Chart.AppVersion .Values.image.tag }}
-        securityContext:
-          readOnlyRootFilesystem: {{ .Values.securityContext.readOnlyRootFs }}
-          runAsNonRoot: true
-          runAsUser: 1000
-          allowPrivilegeEscalation: false
-        {{ if .Values.probes.enabled }}
-        livenessProbe:
-          {{- toYaml .Values.probes.livenessProbe | nindent 10 }}
-        readinessProbe:
-          {{- toYaml .Values.probes.readinessProbe | nindent 10 }}
-        {{- end }}
-        resources:
-          {{- toYaml .Values.resources | nindent 10 }}
-        ports:
-          {{- include "leverege.deploymentPorts" . | nindent 8 }}
-        volumeMounts:
-        - name: tmpfs
-          mountPath: "/tmp"
-        {{- if .Values.workloadIdentity.disabled }}
-        - name: google-cloud-key
-          mountPath: /var/secrets/google
-        {{- end }}
-        envFrom: 
-        - configMapRef:
-            name: default-configs
-        - configMapRef:
-            name: {{ include "leverege.fullname" . }}-configs
-        env:
-        {{- if .Values.workloadIdentity.disabled }}
-        - name: GOOGLE_APPLICATION_CREDENTIALS
-          value: /var/secrets/google/key.json
-        {{- end }}

package/src/init-my-chart/templates/hpa.yaml

@@ -1,26 +0,0 @@
-{{- if .Values.autoscaling.enabled }}
-{{ if lt .Capabilities.KubeVersion.Minor "23" }}
-apiVersion: autoscaling/v2beta2
-{{ else }}
-apiVersion: autoscaling/v2
-{{ end }}
-kind: HorizontalPodAutoscaler
-metadata:
-  name: {{ include "leverege.fullname" . }}
-  labels:
-    {{- include "leverege.labels" . | nindent 4 }}
-spec:
-  scaleTargetRef:
-    apiVersion: apps/v1
-    kind: Deployment
-    name: {{ include "leverege.fullname" . }}
-  minReplicas: {{ .Values.autoscaling.minReplicas }}
-  maxReplicas: {{ .Values.autoscaling.maxReplicas }}
-  metrics: # https://cloud.google.com/kubernetes-engine/docs/how-to/horizontal-pod-autoscaling#multiple-metrics
-  - type: Resource
-    resource:
-      name: cpu
-      target:
-        type: Utilization
-        averageUtilization: {{ .Values.autoscaling.averageCPU }}
-{{- end }}

package/src/init-my-chart/templates/ingressroute.yaml

@@ -1,18 +0,0 @@
-{{- if .Values.ingressRoute.host }}
-{{- $fullName := include "leverege.fullname" . -}}
-{{- $svcPort := .Values.config.HTTP_SERVER_PORT -}}
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: {{ $fullName }}
-  namespace: default
-spec:
-  entryPoints:
-    - websecure
-  routes:
-  - match: Host(`{{ .Values.ingressRoute.host }}`)
-    kind: Rule
-    services:
-    - name: {{ $fullName }}
-      port: {{ $svcPort }}
-{{- end }}

package/src/init-my-chart/templates/pdb.yaml

@@ -1,22 +0,0 @@
-{{- if .Values.pdb.create }}
-{{ if lt .Capabilities.KubeVersion.Minor "21" }}
-apiVersion: policy/v1beta1
-{{ else }}
-apiVersion: policy/v1
-{{ end }}
-kind: PodDisruptionBudget
-metadata:
-  name: {{ include "leverege.fullname" . }}
-  labels:
-    {{- include "leverege.labels" . | nindent 4 }}
-spec:
-  {{- if .Values.pdb.minAvailable }}
-  minAvailable: {{ .Values.pdb.minAvailable }}
-  {{- end }}
-  {{- if .Values.pdb.maxUnavailable }}
-  maxUnavailable: {{ .Values.pdb.maxUnavailable }}
-  {{- end }}
-  selector:
-    matchLabels:
-      {{ include "leverege.selectorLabels" . | nindent 6 }}
-{{- end }}

package/src/init-my-chart/templates/service.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: {{ include "leverege.fullname" . }}
-  labels:
-    {{- include "leverege.labels" . | nindent 4 }}
-spec:
-  type: {{ .Values.service.type }}
-{{- if .Values.loadbalancer.ip }}
-  loadBalancerIP: {{ .Values.loadbalancer.ip }}
-{{- end }}
-  ports:
-    {{- include "leverege.servicePorts" . | nindent 6 }}
-  selector:
-    {{- include "leverege.selectorLabels" . | nindent 4 }}

package/src/init-my-chart/templates/serviceaccount.yaml

@@ -1,13 +0,0 @@
-{{- if .Values.serviceAccount.create -}}
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: {{ include "leverege.serviceAccountName" . }}
-  labels:
-    {{- include "leverege.labels" . | nindent 4 }}
-  annotations:
-    iam.gke.io/gcp-service-account: {{ .Chart.Name }}@{{ .Values.service.project_id }}.iam.gserviceaccount.com
-    {{- with .Values.serviceAccount.annotations }}
-      {{- toYaml . | nindent 4 }}
-    {{- end }}
-{{- end }}

package/src/init-my-chart/templates/servicemonitor.yaml

@@ -1,23 +0,0 @@
-# plugs us into the prometheus operator
-{{- if .Values.serviceMonitor.enabled }}
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-{{- if .Values.partOf }}
-  name: {{ .Values.partOf }}-{{ include "leverege.fullname" . }}
-{{ else }}
-  name: {{ include "leverege.fullname" . }}
-{{- end }}
-  labels:
-    {{- include "leverege.labels" . | nindent 4 }}
-  namespace: prometheus
-spec:
-  selector:
-    matchLabels:
-      {{ include "leverege.selectorLabels" . | nindent 6 }}
-  namespaceSelector:
-    matchNames:
-      - {{ default "default" .Values.serviceMonitor.namespace }}
-  endpoints:
-    {{- include "leverege.serviceMonitorEndpoints" . | nindent 4 }}
-{{- end }}