@ossy/deployment-tools 1.19.0 → 1.20.1

package/src/infrastructure/container-deployment-target/ossy-website-plexus-sanitas.service.js

@@ -1,52 +0,0 @@
-// TODO: remove this service once www.plexus-sanitas.com traffic flows through the platform runtime.
-// The platform runtime (ghcr.io/ossy-se/platform) is the long-term host for all
-// tenant sites including plexus-sanitas. This service is a stopgap while the CMS-based
-// publish flow is validated in production.
-
-const systemdServiceFile = `
-[Unit]
-Description=Ossy Website (www.plexus-sanitas.com)
-After=network.target docker.service
-Requires=docker.service
-
-[Service]
-EnvironmentFile=/etc/environment
-ExecStartPre=-/usr/bin/docker rm -f ossy-website-plexus-sanitas
-ExecStartPre=/usr/bin/docker pull ghcr.io/ossy-se/website-plexus-sanitas:latest
-ExecStart=/usr/bin/docker run --name ossy-website-plexus-sanitas \\
-  --network ossy-network \\
-  -p 3003:3000 \\
-  -e PORT=3000 \\
-  -e OSSY_API_URL=http://ossy-api:3001 \\
-  -e OSSY_COOKIE_SECRET=\${OSSY_COOKIE_SECRET} \\
-  ghcr.io/ossy-se/website-plexus-sanitas:latest
-ExecStop=/usr/bin/docker stop ossy-website-plexus-sanitas
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-`
-
-/**
-  * @class
-*/
-class OssyWebsitePlexusSanitasService {
-
-  static install() {
-    return [`sudo tee /etc/systemd/system/ossy-website-plexus-sanitas.service > /dev/null << 'EOF'\n${systemdServiceFile}\nEOF`]
-  }
-
-  static enable() {
-    return ['sudo systemctl enable ossy-website-plexus-sanitas']
-  }
-
-  static start() {
-    return ['sudo systemctl start ossy-website-plexus-sanitas']
-  }
-
-}
-
-module.exports = {
-  OssyWebsitePlexusSanitasService
-}

package/src/infrastructure/trust-ci-stack.js

@@ -1,76 +0,0 @@
-const { Stack, Duration, CfnOutput } = require('aws-cdk-lib')
-const {
-  OpenIdConnectProvider,
-  OpenIdConnectPrincipal,
-  Role,
-  Effect,
-  PolicyDocument,
-  PolicyStatement
-} = require('aws-cdk-lib/aws-iam')
-
-/**
-  * @class
-*/
-class TrustCiStack extends Stack {
-  /**
-   * Establishes trust between GithHub and Amazon Web Services.
-   * This is needed so that we can interact with Amazon Web Services through
-   * GitHub Actions without having to manually provide credentials every time we
-   * run a workflow
-   *
-   * @param {object} scope - scope
-   * @param {string} id - id
-   * @param {PlatformTemplate} props - PlatformTemplate
-   */
-  constructor(scope, id, props) {
-    super(scope, id, props)
-
-    const provider = new OpenIdConnectProvider(this, 'GitHubProvider', {
-      url: 'https://token.actions.githubusercontent.com',
-      clientIds: ['sts.amazonaws.com']
-    })
-
-    const GitHubPrincipal = new OpenIdConnectPrincipal(provider)
-      .withConditions({
-        StringLike: {
-          'token.actions.githubusercontent.com:sub': `repo:${props.config.ciGithubActionsRepo}:*`
-        },
-        StringEquals: {
-            'token.actions.githubusercontent.com:aud': 'sts.amazonaws.com'
-        }
-      })
-
-    // eslint-disable-next-line no-new
-    const role = new Role(this, 'GitHubActionsRole', {
-      assumedBy: GitHubPrincipal,
-      description: 'Role assumed by GitHubPrincipal for deploying from CI using aws cdk',
-      maxSessionDuration: Duration.hours(1),
-      inlinePolicies: {
-        CdkDeploymentPolicy: new PolicyDocument({
-          assignSids: true,
-          statements: [
-            new PolicyStatement({
-              effect: Effect.ALLOW,
-              actions: ['sts:AssumeRole', 'sqs:SendMessage'],
-              resources: [
-                `arn:aws:iam::${props.config.awsAccountId}:role/cdk-*`,
-                `arn:aws:sqs:${props.config.awsRegion}:${props.config.awsAccountId}:*`
-              ]
-            })
-          ]
-        })
-      }
-    })
-
-    new CfnOutput(this, 'CiAwsRoleToAssume', {
-      value: role.roleName,
-      description: 'Name of role to be assumed in CI/CD pipelines on github',
-      exportName: 'awsRoleToAssume'
-    })
-
-  }
-}
-
-module.exports = {
-  TrustCiStack
-}

package/src/template/cli.js

@@ -1,24 +0,0 @@
-const arg = require('arg')
-const { PlatformTemplateService } = require('./platform-template')
-
-const { logInfo, logError } = require('../log')
-
-const validate = options => {
-  logInfo({ message: 'Running validate command' })
-
-  const parsedArgs = arg({
-    '--platforms': String,
-    '-p': '--platforms'
-  }, { argv: options })
-
-  PlatformTemplateService.readFromFile(parsedArgs['--platforms'])
-    .then(() => logInfo({ message: 'Template is valid' }))
-}
-
-module.exports = {
-  handler: ([command, ...options]) => {
-    !!command
-      ? { validate }[command](options)
-      : logError({ message: 'No command provided' })
-  }
-}