@openstax/ts-utils 1.34.0 → 1.35.0

package/app.json

@@ -1,23 +0,0 @@
-{
-  "name": "project-template",
-  "scripts": {
-  },
-  "env": {
-    "NODE_ENV": "development",
-    "REACT_APP_API_BASE_URL": "/"
-  },
-  "formation": {
-    "web": {
-      "size": "hobby"
-    }
-  },
-  "addons": [
-
-  ],
-  "buildpacks": [
-    {
-      "url": "heroku/nodejs"
-    }
-  ],
-  "stack": "heroku-22"
-}

package/cspell.json

@@ -1,32 +0,0 @@
-{
-  "version": "0.2",
-  "$schema": "https://raw.githubusercontent.com/streetsidesoftware/cspell/master/cspell.schema.json",
-  "language": "en",
-  "words": [
-    "buildpacks",
-    "cloudformation",
-    "cookieyes",
-    "herokuapp",
-    "Jwks",
-    "jwks",
-    "ltijs",
-    "openstax",
-    "signup",
-    "stax",
-    "subcontent",
-    "subrequest",
-    "subrequests",
-    "systemsmanager",
-    "unversioned",
-    "Xapi"
-  ],
-  "flagWords": [],
-  "ignorePaths": [
-    "*.spec.ts.snap",
-    "coverage",
-    "package.json",
-    "yarn.lock",
-    "node_modules/**",
-    "*.svg"
-  ]
-}

package/deploy/constants.env

@@ -1,21 +0,0 @@
-#!/usr/bin/env bash
-# spell-checker: ignore pipefail
-set -euo pipefail; if [ -n "${DEBUG-}" ]; then set -x; fi
-
-# These constants also get applied as tags to CloudFormation stacks and SSM parameters
-# APPLICATION should probably be lower-case, dash-separated, since it's used to create stack names
-export APPLICATION=project-template
-export OWNER=tom
-export PROJECT=DISCO
-
-# List all parameter names to upload here
-PARAMS=(
-  AccountsBase
-  CookieName # for decrypt authorization
-  EncryptionPrivateKey # for decrypt authorization
-  SignaturePublicKey # for decrypt authorization
-)
-export PARAMS
-
-export AWS_DEFAULT_REGION=us-east-1
-export AWS_ALT_REGION=us-east-2

package/deploy/deploy.bash

@@ -1,157 +0,0 @@
-#!/usr/bin/env bash
-# spell-checker: ignore pipefail
-set -euo pipefail; if [ -n "${DEBUG-}" ]; then set -x; fi
-
-SCRIPT_DIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
-
-if [ -z "${ENVIRONMENT:-}" ]; then echo "run this command with 'yarn -s ts-utils deploy' instead of executing it directly" > /dev/stderr; exit 1; fi
-
-timestamp=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
-gitVersion=$(git rev-parse HEAD)
-stackName="$ENVIRONMENT-$APPLICATION"
-
-# =======
-# shared setup is one per aws account for this project, currently only used for
-# lambda code zip archives and SNS topics for PagerDuty notifications
-# =======
-if ! yarn -s ts-utils stack-exists "subdomain-$APPLICATION-dns"; then
-  echo 'DNS stack not found. create one by following the instructions here: https://github.com/openstax/subdomains' > /dev/stderr
-  exit 1
-fi
-if ! yarn -s ts-utils stack-exists "subdomain-$APPLICATION-cert"; then
-  echo 'SSL cert stack not found. create one by following the instructions here: https://github.com/openstax/subdomains' > /dev/stderr
-  exit 1
-fi
-
-pagerDutyAnytimeEndpoint=$(aws ssm get-parameter --name "/external/pager_duty/$APPLICATION/anytime_endpoint" \
-   --with-decryption --query 'Parameter.Value' --output text 2>/dev/null || true)
-pagerDutyWorkdayEndpoint=$(aws ssm get-parameter --name "/external/pager_duty/$APPLICATION/workday_endpoint" \
-   --with-decryption --query 'Parameter.Value' --output text 2>/dev/null || true)
-
-if [ -z "$pagerDutyAnytimeEndpoint" ] || [ -z "$pagerDutyWorkdayEndpoint" ]; then
-  echo "Warning: PagerDuty endpoint(s) not set. You can set them by running: 'yarn -s ts-utils upload-pager-duty-endpoints'" > /dev/stderr
-fi
-
-yarn --check-files
-
-if [ -n "$(git status --porcelain=v1 2>/dev/null)" ]; then
-  echo "please stash, commit, gitignore, or reset your changes before deploying" > /dev/stderr
-  exit 1
-fi
-
-bucketPrefix=
-if [ "$AWS_ACCOUNT" != "openstax" ]; then
-  bucketPrefix="$AWS_ACCOUNT-"
-fi
-
-aws cloudformation deploy \
-  --region "$AWS_DEFAULT_REGION" \
-  --no-fail-on-empty-changeset \
-  --template-file "$SCRIPT_DIR/shared.cfn.yml" \
-  --stack-name "$APPLICATION-shared" \
-  --parameter-overrides "BucketPrefix=$bucketPrefix" \
-    "PagerDutyAnytimeEndpoint=$pagerDutyAnytimeEndpoint" \
-    "PagerDutyWorkdayEndpoint=$pagerDutyWorkdayEndpoint" \
-  --tags "Project=$PROJECT" "Application=$APPLICATION" 'Environment=shared' "Owner=$OWNER"
-
-codeBucket=$(yarn -s ts-utils get-stack-param "$APPLICATION-shared" BucketName)
-
-# =======
-# build utils code if the package exists in this repo
-# =======
-if [ -d "$SCRIPT_DIR"/../packages/utils ]; then
-  cd "$SCRIPT_DIR"/../packages/utils
-  yarn build:clean
-fi
-
-# =======
-# build api code and upload to code bucket
-# =======
-cd "$SCRIPT_DIR"/../packages/lambda
-
-export CODE_VERSION="$gitVersion"
-export APPLICATION;
-
-yarn archive:clean
-
-apiCodeKey="api-$timestamp.zip"
-aws s3 cp "dist/serviceApi.zip" "s3://$codeBucket/$apiCodeKey"
-
-# =======
-# build frontend and upload to static site bucket
-# =======
-cd "$SCRIPT_DIR"/../packages/frontend
-
-export REACT_APP_CODE_VERSION="$CODE_VERSION"
-export REACT_APP_NAME="$APPLICATION"
-export PUBLIC_URL="/build"
-
-# =======
-# try to read domainName from the stack
-# =======
-if yarn -s ts-utils stack-exists "$stackName"; then
-  previouslyDeployed=1
-  bucketName=$(yarn -s ts-utils get-stack-param "$stackName" StaticBucketName)
-  domainName=$(yarn -s ts-utils get-stack-param "$stackName" DistributionDomainName)
-  export REACT_APP_API_BASE_URL="https://${domainName}"
-  yarn build:clean
-  aws s3 sync build "s3://${bucketName}${PUBLIC_URL}" --region "$AWS_DEFAULT_REGION"
-else
-  previouslyDeployed=0
-fi
-
-cd "$SCRIPT_DIR"
-
-# Get values from SSM parameters
-cookieName=$(yarn -s ts-utils get-env-param "$ENVIRONMENT" "CookieName")
-accountsBase=$(yarn -s ts-utils get-env-param "$ENVIRONMENT" "AccountsBase")
-signaturePublicKey=$(yarn -s ts-utils get-env-param "$ENVIRONMENT" "SignaturePublicKey")
-
-cd "$SCRIPT_DIR"/../packages/lambda
-
-# =======
-# main deployment includes alt region for fail over
-# =======
-aws cloudformation deploy \
-  --region "$AWS_ALT_REGION" \
-  --no-fail-on-empty-changeset \
-  --template-file "$SCRIPT_DIR/deployment-alt-region.cfn.yml" \
-  --stack-name "$stackName" \
-  --parameter-overrides "BucketPrefix=$bucketPrefix" \
-  --tags "Project=$PROJECT" "Application=$APPLICATION" "Environment=$ENVIRONMENT" "Owner=$OWNER"
-
-# cloudformation cannot reference exports across regions, so these are applied like this
-replicaBucketWebsiteURL=$(AWS_DEFAULT_REGION="$AWS_ALT_REGION" yarn -s ts-utils get-stack-param "$stackName" ReplicaBucketWebsiteURL)
-
-aws cloudformation deploy \
-  --region "$AWS_DEFAULT_REGION" \
-  --template-file "$SCRIPT_DIR/deployment.cfn.yml" \
-  --stack-name "$stackName" \
-  --capabilities CAPABILITY_NAMED_IAM \
-  --parameter-overrides "BucketPrefix=$bucketPrefix" "CodeBucket=$codeBucket" \
-    "EnvName=$ENVIRONMENT" "Application=$APPLICATION" "ReplicaBucketWebsiteURL=$replicaBucketWebsiteURL" \
-    "ApiCodeKey=$apiCodeKey" \
-    "AccountsBase=$accountsBase" "CookieName=$cookieName" "SignaturePublicKey=$signaturePublicKey" \
-  --tags "Project=$PROJECT" "Application=$APPLICATION" "Environment=$ENVIRONMENT" "Owner=$OWNER"
-
-bucketName=$(yarn -s ts-utils get-stack-param "$stackName" StaticBucketName)
-domainName=$(yarn -s ts-utils get-stack-param "$stackName" DistributionDomainName)
-distributionId=$(yarn -s ts-utils get-stack-param "$stackName" DistributionId)
-
-# =======
-# build frontend and upload to static site bucket
-# =======
-export REACT_APP_API_BASE_URL="https://${domainName}"
-
-cd "$SCRIPT_DIR"/../packages/frontend
-if [ $previouslyDeployed -eq 0 ]; then
-  yarn build:clean
-fi
-aws s3 sync build "s3://${bucketName}${PUBLIC_URL}" --delete --region "$AWS_DEFAULT_REGION"
-
-aws cloudfront create-invalidation --distribution-id "$distributionId" --paths "/*" --output text --query "Invalidation.Status"
-
-# =======
-# done
-# =======
-echo "deployed: $domainName";

package/deploy/deployment-alt-region.cfn.yml

@@ -1,70 +0,0 @@
-Metadata:
-  cfn-lint:
-    config:
-      ignore_checks:
-        - W6001
-        - E3031 # we do this on purpose
-        - E3033 # we do this on purpose
-
-Parameters:
-  BucketPrefix:
-    Description: A prefix to prevent collisions between buckets in different accounts, e.g. sandbox-
-    Type: String
-
-Conditions:
-  # Lambda@Edge functions need to be created in us-east-1; in order for this to be redundant it must be somewhere else
-  WrongRegion: !Equals [!Ref 'AWS::Region', us-east-1]
-
-Resources:
-  # ==============
-  # Region validation
-  # ==============
-  YouAreInTheWrongRegion:
-    Type: "AWS::SSM::Parameter"
-    Condition: WrongRegion
-    Properties:
-      Name: '' # Leave name empty to force a fail
-      Type: String
-      Value: ''
-  # ==============
-  # static frontend S3 / Cloudfront
-  # ==============
-  ReplicaBucket:
-    Type: "AWS::S3::Bucket"
-    Properties:
-      BucketName: !Sub ${BucketPrefix}${AWS::StackName}-ui-replica-bucket
-      VersioningConfiguration:
-        Status: "Enabled"
-      LifecycleConfiguration:
-        Rules:
-          - Id: MustHaveVersioningButDoNotWantOldVersions
-            NoncurrentVersionExpirationInDays: 1
-            Status: "Enabled"
-      PublicAccessBlockConfiguration:
-        BlockPublicPolicy: false
-      WebsiteConfiguration:
-        IndexDocument: "does-not-exist.html"
-      OwnershipControls:
-        Rules:
-          - ObjectOwnership: BucketOwnerEnforced
-
-  ReplicaBucketPolicy:
-    Type: AWS::S3::BucketPolicy
-    Properties:
-      PolicyDocument:
-        Version: "2012-10-17"
-        Statement:
-          - Sid: PublicReadForGetBucketObjects
-            Effect: Allow
-            Principal: '*'
-            Action: s3:GetObject
-            Resource: !Sub ${ReplicaBucket.Arn}/*
-
-      Bucket: !Ref ReplicaBucket
-
-Outputs:
-  ReplicaBucketName:
-    Value: !Ref ReplicaBucket
-
-  ReplicaBucketWebsiteURL:
-    Value: !GetAtt ReplicaBucket.WebsiteURL