@prism-d1/cli 1.0.49 → 1.0.52
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/assets/gitlab-workflows/prism-agent-eval.yml +20 -7
- package/dist/assets/gitlab-workflows/prism-ai-metrics.yml +20 -7
- package/dist/assets/gitlab-workflows/prism-dora-weekly.yml +20 -7
- package/dist/assets/gitlab-workflows/prism-eval-gate.yml +20 -7
- package/dist/src/commands/bootstrapper/install-gitlab-workflows.d.ts +1 -0
- package/dist/src/commands/bootstrapper/install-gitlab-workflows.d.ts.map +1 -1
- package/dist/src/commands/bootstrapper/install-gitlab-workflows.js +8 -4
- package/dist/src/commands/bootstrapper/install-gitlab-workflows.js.map +1 -1
- package/dist/src/commands/bootstrapper/setup-gitlab-oidc.js +1 -1
- package/dist/src/commands/bootstrapper/setup-gitlab-oidc.js.map +1 -1
- package/package.json +1 -1
|
@@ -16,7 +16,7 @@ prism-agent-eval:
|
|
|
16
16
|
image: python:3.12-slim
|
|
17
17
|
id_tokens:
|
|
18
18
|
GITLAB_OIDC_TOKEN:
|
|
19
|
-
aud: https://gitlab.
|
|
19
|
+
aud: https://gitlab.com
|
|
20
20
|
rules:
|
|
21
21
|
- if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
|
|
22
22
|
changes:
|
|
@@ -26,7 +26,7 @@ prism-agent-eval:
|
|
|
26
26
|
- "**/*agent*.py"
|
|
27
27
|
- "**/*agent*.ts"
|
|
28
28
|
variables:
|
|
29
|
-
AWS_DEFAULT_REGION:
|
|
29
|
+
AWS_DEFAULT_REGION: us-west-2
|
|
30
30
|
before_script:
|
|
31
31
|
- apt-get update -qq && apt-get install -y -qq jq bc git curl unzip
|
|
32
32
|
- curl -s "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o /tmp/awscliv2.zip
|
|
@@ -36,18 +36,31 @@ prism-agent-eval:
|
|
|
36
36
|
- |
|
|
37
37
|
# Assume AWS role via GitLab OIDC
|
|
38
38
|
if [[ -n "${PRISM_METRICS_ROLE_ARN}" && -n "${GITLAB_OIDC_TOKEN}" ]]; then
|
|
39
|
-
|
|
39
|
+
echo "Assuming role via OIDC: ${PRISM_METRICS_ROLE_ARN}"
|
|
40
|
+
if CREDS=$(aws sts assume-role-with-web-identity \
|
|
40
41
|
--role-arn "${PRISM_METRICS_ROLE_ARN}" \
|
|
41
42
|
--role-session-name "gitlab-ci-${CI_JOB_ID}" \
|
|
42
43
|
--web-identity-token "${GITLAB_OIDC_TOKEN}" \
|
|
43
44
|
--query 'Credentials.[AccessKeyId,SecretAccessKey,SessionToken]' \
|
|
44
|
-
--output text)
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
45
|
+
--output text 2>&1); then
|
|
46
|
+
export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
|
|
47
|
+
export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
|
|
48
|
+
export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
|
|
49
|
+
echo "✓ OIDC credentials acquired."
|
|
50
|
+
else
|
|
51
|
+
echo "⚠️ OIDC assume-role failed: ${CREDS}"
|
|
52
|
+
fi
|
|
53
|
+
elif [[ -n "${PRISM_METRICS_ROLE_ARN}" ]]; then
|
|
54
|
+
echo "⚠️ PRISM_METRICS_ROLE_ARN set but GITLAB_OIDC_TOKEN is empty."
|
|
48
55
|
fi
|
|
49
56
|
script:
|
|
50
57
|
- |
|
|
58
|
+
# Skip if no AWS credentials available
|
|
59
|
+
if ! aws sts get-caller-identity &>/dev/null; then
|
|
60
|
+
echo "⚠️ No AWS credentials. Set PRISM_METRICS_ROLE_ARN or configure AWS access."
|
|
61
|
+
exit 0
|
|
62
|
+
fi
|
|
63
|
+
|
|
51
64
|
TEAM_ID=$(jq -r '.team_id // "no_team"' .prism/config.json 2>/dev/null || echo "no_team")
|
|
52
65
|
BASE_SHA="${CI_MERGE_REQUEST_DIFF_BASE_SHA}"
|
|
53
66
|
HEAD_SHA="${CI_COMMIT_SHA}"
|
|
@@ -17,29 +17,42 @@ prism-ai-metrics:
|
|
|
17
17
|
entrypoint: [""]
|
|
18
18
|
id_tokens:
|
|
19
19
|
GITLAB_OIDC_TOKEN:
|
|
20
|
-
aud: https://gitlab.
|
|
20
|
+
aud: https://gitlab.com
|
|
21
21
|
rules:
|
|
22
22
|
- if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_PIPELINE_SOURCE == "push"'
|
|
23
23
|
variables:
|
|
24
|
-
AWS_DEFAULT_REGION:
|
|
24
|
+
AWS_DEFAULT_REGION: us-west-2
|
|
25
25
|
before_script:
|
|
26
26
|
- yum install -y -q jq bc git
|
|
27
27
|
- git fetch --unshallow || true
|
|
28
28
|
- |
|
|
29
29
|
# Assume AWS role via GitLab OIDC
|
|
30
30
|
if [[ -n "${PRISM_METRICS_ROLE_ARN}" && -n "${GITLAB_OIDC_TOKEN}" ]]; then
|
|
31
|
-
|
|
31
|
+
echo "Assuming role via OIDC: ${PRISM_METRICS_ROLE_ARN}"
|
|
32
|
+
if CREDS=$(aws sts assume-role-with-web-identity \
|
|
32
33
|
--role-arn "${PRISM_METRICS_ROLE_ARN}" \
|
|
33
34
|
--role-session-name "gitlab-ci-${CI_JOB_ID}" \
|
|
34
35
|
--web-identity-token "${GITLAB_OIDC_TOKEN}" \
|
|
35
36
|
--query 'Credentials.[AccessKeyId,SecretAccessKey,SessionToken]' \
|
|
36
|
-
--output text)
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
37
|
+
--output text 2>&1); then
|
|
38
|
+
export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
|
|
39
|
+
export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
|
|
40
|
+
export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
|
|
41
|
+
echo "✓ OIDC credentials acquired."
|
|
42
|
+
else
|
|
43
|
+
echo "⚠️ OIDC assume-role failed: ${CREDS}"
|
|
44
|
+
fi
|
|
45
|
+
elif [[ -n "${PRISM_METRICS_ROLE_ARN}" ]]; then
|
|
46
|
+
echo "⚠️ PRISM_METRICS_ROLE_ARN set but GITLAB_OIDC_TOKEN is empty."
|
|
40
47
|
fi
|
|
41
48
|
script:
|
|
42
49
|
- |
|
|
50
|
+
# Skip if no AWS credentials available
|
|
51
|
+
if ! aws sts get-caller-identity &>/dev/null; then
|
|
52
|
+
echo "⚠️ No AWS credentials. Set PRISM_METRICS_ROLE_ARN or configure AWS access."
|
|
53
|
+
exit 0
|
|
54
|
+
fi
|
|
55
|
+
|
|
43
56
|
# Read team ID
|
|
44
57
|
TEAM_ID=$(jq -r '.team_id // "no_team"' .prism/config.json 2>/dev/null || echo "no_team")
|
|
45
58
|
|
|
@@ -17,31 +17,44 @@ prism-dora-weekly:
|
|
|
17
17
|
entrypoint: [""]
|
|
18
18
|
id_tokens:
|
|
19
19
|
GITLAB_OIDC_TOKEN:
|
|
20
|
-
aud: https://gitlab.
|
|
20
|
+
aud: https://gitlab.com
|
|
21
21
|
rules:
|
|
22
22
|
- if: '$CI_PIPELINE_SOURCE == "schedule"'
|
|
23
23
|
- if: '$CI_PIPELINE_SOURCE == "web"'
|
|
24
24
|
when: manual
|
|
25
25
|
variables:
|
|
26
|
-
AWS_DEFAULT_REGION:
|
|
26
|
+
AWS_DEFAULT_REGION: us-west-2
|
|
27
27
|
before_script:
|
|
28
28
|
- yum install -y -q jq bc git
|
|
29
29
|
- git fetch --unshallow || true
|
|
30
30
|
- |
|
|
31
31
|
# Assume AWS role via GitLab OIDC
|
|
32
32
|
if [[ -n "${PRISM_METRICS_ROLE_ARN}" && -n "${GITLAB_OIDC_TOKEN}" ]]; then
|
|
33
|
-
|
|
33
|
+
echo "Assuming role via OIDC: ${PRISM_METRICS_ROLE_ARN}"
|
|
34
|
+
if CREDS=$(aws sts assume-role-with-web-identity \
|
|
34
35
|
--role-arn "${PRISM_METRICS_ROLE_ARN}" \
|
|
35
36
|
--role-session-name "gitlab-ci-${CI_JOB_ID}" \
|
|
36
37
|
--web-identity-token "${GITLAB_OIDC_TOKEN}" \
|
|
37
38
|
--query 'Credentials.[AccessKeyId,SecretAccessKey,SessionToken]' \
|
|
38
|
-
--output text)
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
39
|
+
--output text 2>&1); then
|
|
40
|
+
export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
|
|
41
|
+
export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
|
|
42
|
+
export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
|
|
43
|
+
echo "✓ OIDC credentials acquired."
|
|
44
|
+
else
|
|
45
|
+
echo "⚠️ OIDC assume-role failed: ${CREDS}"
|
|
46
|
+
fi
|
|
47
|
+
elif [[ -n "${PRISM_METRICS_ROLE_ARN}" ]]; then
|
|
48
|
+
echo "⚠️ PRISM_METRICS_ROLE_ARN set but GITLAB_OIDC_TOKEN is empty."
|
|
42
49
|
fi
|
|
43
50
|
script:
|
|
44
51
|
- |
|
|
52
|
+
# Skip if no AWS credentials available
|
|
53
|
+
if ! aws sts get-caller-identity &>/dev/null; then
|
|
54
|
+
echo "⚠️ No AWS credentials. Set PRISM_METRICS_ROLE_ARN or configure AWS access."
|
|
55
|
+
exit 0
|
|
56
|
+
fi
|
|
57
|
+
|
|
45
58
|
TEAM_ID=$(jq -r '.team_id // "no_team"' .prism/config.json 2>/dev/null || echo "no_team")
|
|
46
59
|
SINCE_DATE=$(date -u -d '7 days ago' +"%Y-%m-%d")
|
|
47
60
|
REPO="${CI_PROJECT_PATH}"
|
|
@@ -17,29 +17,42 @@ prism-eval-gate:
|
|
|
17
17
|
entrypoint: [""]
|
|
18
18
|
id_tokens:
|
|
19
19
|
GITLAB_OIDC_TOKEN:
|
|
20
|
-
aud: https://gitlab.
|
|
20
|
+
aud: https://gitlab.com
|
|
21
21
|
rules:
|
|
22
22
|
- if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
|
|
23
23
|
variables:
|
|
24
|
-
AWS_DEFAULT_REGION:
|
|
24
|
+
AWS_DEFAULT_REGION: us-west-2
|
|
25
25
|
before_script:
|
|
26
26
|
- yum install -y -q jq bc git
|
|
27
27
|
- git fetch --unshallow || true
|
|
28
28
|
- |
|
|
29
29
|
# Assume AWS role via GitLab OIDC
|
|
30
30
|
if [[ -n "${PRISM_METRICS_ROLE_ARN}" && -n "${GITLAB_OIDC_TOKEN}" ]]; then
|
|
31
|
-
|
|
31
|
+
echo "Assuming role via OIDC: ${PRISM_METRICS_ROLE_ARN}"
|
|
32
|
+
if CREDS=$(aws sts assume-role-with-web-identity \
|
|
32
33
|
--role-arn "${PRISM_METRICS_ROLE_ARN}" \
|
|
33
34
|
--role-session-name "gitlab-ci-${CI_JOB_ID}" \
|
|
34
35
|
--web-identity-token "${GITLAB_OIDC_TOKEN}" \
|
|
35
36
|
--query 'Credentials.[AccessKeyId,SecretAccessKey,SessionToken]' \
|
|
36
|
-
--output text)
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
37
|
+
--output text 2>&1); then
|
|
38
|
+
export AWS_ACCESS_KEY_ID=$(echo "${CREDS}" | awk '{print $1}')
|
|
39
|
+
export AWS_SECRET_ACCESS_KEY=$(echo "${CREDS}" | awk '{print $2}')
|
|
40
|
+
export AWS_SESSION_TOKEN=$(echo "${CREDS}" | awk '{print $3}')
|
|
41
|
+
echo "✓ OIDC credentials acquired."
|
|
42
|
+
else
|
|
43
|
+
echo "⚠️ OIDC assume-role failed: ${CREDS}"
|
|
44
|
+
fi
|
|
45
|
+
elif [[ -n "${PRISM_METRICS_ROLE_ARN}" ]]; then
|
|
46
|
+
echo "⚠️ PRISM_METRICS_ROLE_ARN set but GITLAB_OIDC_TOKEN is empty."
|
|
40
47
|
fi
|
|
41
48
|
script:
|
|
42
49
|
- |
|
|
50
|
+
# Skip if no AWS credentials available
|
|
51
|
+
if ! aws sts get-caller-identity &>/dev/null; then
|
|
52
|
+
echo "⚠️ No AWS credentials. Set PRISM_METRICS_ROLE_ARN or configure AWS access."
|
|
53
|
+
exit 0
|
|
54
|
+
fi
|
|
55
|
+
|
|
43
56
|
TEAM_ID=$(jq -r '.team_id // "no_team"' .prism/config.json 2>/dev/null || echo "no_team")
|
|
44
57
|
BASE_SHA="${CI_MERGE_REQUEST_DIFF_BASE_SHA}"
|
|
45
58
|
HEAD_SHA="${CI_COMMIT_SHA}"
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"install-gitlab-workflows.d.ts","sourceRoot":"","sources":["../../../../src/commands/bootstrapper/install-gitlab-workflows.ts"],"names":[],"mappings":";;;;;;;
|
|
1
|
+
{"version":3,"file":"install-gitlab-workflows.d.ts","sourceRoot":"","sources":["../../../../src/commands/bootstrapper/install-gitlab-workflows.ts"],"names":[],"mappings":";;;;;;;iBAuBqB;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;;AAP/E,wBA+CE"}
|
|
@@ -15,22 +15,26 @@ function prompt(question, defaultValue) {
|
|
|
15
15
|
export default {
|
|
16
16
|
description: 'Install GitLab CI workflow templates into the current repo',
|
|
17
17
|
options: [
|
|
18
|
-
{ flags: '--gitlab-url <url>', description: 'GitLab instance URL for OIDC audience', default: 'https://gitlab.
|
|
18
|
+
{ flags: '--gitlab-url <url>', description: 'GitLab instance URL for OIDC audience', default: 'https://gitlab.com' },
|
|
19
|
+
{ flags: '--region <region>', description: 'AWS region for EventBridge/CloudWatch', default: 'us-west-2' },
|
|
19
20
|
{ flags: '--output-dir <dir>', description: 'Output directory', default: '.prism/gitlab-workflows' },
|
|
20
21
|
],
|
|
21
22
|
async action(opts) {
|
|
22
|
-
const gitlabUrl = opts.gitlabUrl || await prompt('GitLab instance URL', 'https://gitlab.
|
|
23
|
+
const gitlabUrl = opts.gitlabUrl || await prompt('GitLab instance URL', 'https://gitlab.com');
|
|
24
|
+
const region = opts.region || 'us-west-2';
|
|
23
25
|
const outputDir = opts.outputDir;
|
|
24
26
|
console.log(`\n📦 Installing GitLab CI workflows`);
|
|
25
27
|
console.log(` Audience: ${gitlabUrl}`);
|
|
28
|
+
console.log(` Region: ${region}`);
|
|
26
29
|
console.log(` Output: ${outputDir}/\n`);
|
|
27
30
|
mkdirSync(outputDir, { recursive: true });
|
|
28
31
|
const assetDir = getAssetPath(import.meta.url, 'gitlab-workflows/.gitlab-ci.yml').replace('/.gitlab-ci.yml', '');
|
|
29
32
|
const files = readdirSync(assetDir).filter(f => f.endsWith('.yml'));
|
|
30
33
|
for (const file of files) {
|
|
31
34
|
let content = readFileSync(join(assetDir, file), 'utf-8');
|
|
32
|
-
// Template the audience
|
|
33
|
-
content = content.replace(/aud: https:\/\/gitlab\.
|
|
35
|
+
// Template the audience and region
|
|
36
|
+
content = content.replace(/aud: https:\/\/gitlab\.com/g, `aud: ${gitlabUrl}`);
|
|
37
|
+
content = content.replace(/AWS_DEFAULT_REGION: us-west-2/g, `AWS_DEFAULT_REGION: ${region}`);
|
|
34
38
|
writeFileSync(join(outputDir, file), content);
|
|
35
39
|
console.log(` ✓ ${file}`);
|
|
36
40
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"install-gitlab-workflows.js","sourceRoot":"","sources":["../../../../src/commands/bootstrapper/install-gitlab-workflows.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,SAAS,MAAM,CAAC,QAAgB,EAAE,YAAqB;IACrD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,YAAY,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,eAAe;IACb,WAAW,EAAE,4DAA4D;IACzE,OAAO,EAAE;QACP,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,uCAAuC,EAAE,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"install-gitlab-workflows.js","sourceRoot":"","sources":["../../../../src/commands/bootstrapper/install-gitlab-workflows.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,SAAS,MAAM,CAAC,QAAgB,EAAE,YAAqB;IACrD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,YAAY,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,eAAe;IACb,WAAW,EAAE,4DAA4D;IACzE,OAAO,EAAE;QACP,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,uCAAuC,EAAE,OAAO,EAAE,oBAAoB,EAAE;QACpH,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,uCAAuC,EAAE,OAAO,EAAE,WAAW,EAAE;QAC1G,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,kBAAkB,EAAE,OAAO,EAAE,yBAAyB,EAAE;KACrG;IACD,KAAK,CAAC,MAAM,CAAC,IAAgE;QAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,MAAM,CAAC,qBAAqB,EAAE,oBAAoB,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAEjC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,gBAAgB,SAAS,KAAK,CAAC,CAAC;QAE5C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1C,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACjH,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAEpE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAC1D,mCAAmC;YACnC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,6BAA6B,EAAE,QAAQ,SAAS,EAAE,CAAC,CAAC;YAC9E,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,gCAAgC,EAAE,uBAAuB,MAAM,EAAE,CAAC,CAAC;YAC7F,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC7B,CAAC;QAED,sCAAsC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,IAAI,EAAE,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACvC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,4BAA4B,EAAE,SAAS,CAAC,CAAC;YACzD,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,MAAM,sBAAsB,SAAS,GAAG,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,aAAa,SAAS,mCAAmC,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;CACF,CAAC"}
|
|
@@ -25,7 +25,7 @@ export default {
|
|
|
25
25
|
console.log('\n🔐 GitLab OIDC Setup for AWS\n');
|
|
26
26
|
console.log('This will create an IAM OIDC identity provider and a role');
|
|
27
27
|
console.log('that GitLab CI/CD can assume to deploy to your AWS account.\n');
|
|
28
|
-
const gitlabUrl = await prompt('GitLab instance URL', 'https://gitlab.
|
|
28
|
+
const gitlabUrl = await prompt('GitLab instance URL', 'https://gitlab.com');
|
|
29
29
|
const projectPath = await prompt('GitLab project path (e.g. group/repo)');
|
|
30
30
|
if (!projectPath) {
|
|
31
31
|
console.error('Error: Project path is required.');
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"setup-gitlab-oidc.js","sourceRoot":"","sources":["../../../../src/commands/bootstrapper/setup-gitlab-oidc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,SAAS,MAAM,CAAC,QAAgB,EAAE,YAAqB;IACrD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,YAAY,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,GAAG,CAAC,GAAW;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACrF,CAAC;AACH,CAAC;AAED,eAAe;IACb,WAAW,EAAE,oEAAoE;IACjF,KAAK,CAAC,MAAM;QACV,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;QAE7E,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,qBAAqB,EAAE,
|
|
1
|
+
{"version":3,"file":"setup-gitlab-oidc.js","sourceRoot":"","sources":["../../../../src/commands/bootstrapper/setup-gitlab-oidc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,SAAS,MAAM,CAAC,QAAgB,EAAE,YAAqB;IACrD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,YAAY,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,GAAG,CAAC,GAAW;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACrF,CAAC;AACH,CAAC;AAED,eAAe;IACb,WAAW,EAAE,oEAAoE;IACjF,KAAK,CAAC,MAAM;QACV,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;QAE7E,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,qBAAqB,EAAE,oBAAoB,CAAC,CAAC;QAC5E,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,uCAAuC,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,2BAA2B,WAAW,OAAO,SAAS,EAAE,CAAC,CAAC;QAEtE,wBAAwB;QACxB,MAAM,GAAG,GAAG,GAAG,CAAC,2DAA2D,CAAC,CAAC;QAC7E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,gBAAgB,SAAS,IAAI,CAAC,CAAC;QAE3C,oCAAoC;QACpC,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,gBAAgB,SAAS,kBAAkB,YAAY,EAAE,CAAC;QAE9E,mCAAmC;QACnC,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACjE,MAAM,gBAAgB,GAAG,GAAG,CAAC,uEAAuE,WAAW,EAAE,CAAC,CAAC;QACnH,IAAI,gBAAgB,CAAC,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,MAAM,cAAc,GAAG,GAAG,CACxB,0CAA0C;gBAC1C,SAAS,SAAS,GAAG;gBACrB,oBAAoB,SAAS,GAAG;gBAChC,4DAA4D,CAC7D,CAAC;YACF,IAAI,cAAc,CAAC,EAAE,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,uCAAuC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC;QACzD,MAAM,QAAQ,GAAG,YAAY,QAAQ,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,gCAAgC,QAAQ,MAAM,CAAC,CAAC;QAE5D,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC;YACjC,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE;gBACT;oBACE,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE;oBACrC,MAAM,EAAE,+BAA+B;oBACvC,SAAS,EAAE;wBACT,YAAY,EAAE;4BACZ,CAAC,GAAG,YAAY,MAAM,CAAC,EAAE,SAAS;yBACnC;wBACD,UAAU,EAAE;4BACV,CAAC,GAAG,YAAY,MAAM,CAAC,EAAE,gBAAgB,WAAW,IAAI;yBACzD;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,GAAG,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;QACrE,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,4CAA4C,CAAC,CAAC;YAC/E,MAAM,MAAM,GAAG,GAAG,CAAC,iDAAiD,QAAQ,uBAAuB,WAAW,GAAG,CAAC,CAAC;YACnH,IAAI,MAAM,CAAC,EAAE;gBAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;iBACnD,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,GAAG,CACpB,mCAAmC,QAAQ,GAAG;gBAC9C,kCAAkC,WAAW,IAAI;gBACjD,0CAA0C,WAAW,GAAG,CACzD,CAAC;YACF,IAAI,UAAU,CAAC,EAAE;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,YAAY,CAAC,CAAC;iBAC7D,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,eAAe,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QAC9E,CAAC;QAED,oCAAoC;QACpC,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC;YACpC,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE;gBACT;oBACE,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,kBAAkB;oBAC1B,QAAQ,EAAE,4BAA4B,SAAS,6BAA6B;iBAC7E;gBACD;oBACE,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,qBAAqB;oBAC7B,QAAQ,EAAE,GAAG;iBACd;aACF;SACF,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,uBAAuB,CAAC;QAC3C,MAAM,SAAS,GAAG,GAAG,CACnB,uCAAuC,QAAQ,kBAAkB,UAAU,uBAAuB,cAAc,GAAG,CACpH,CAAC;QACF,IAAI,SAAS,CAAC,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,UAAU,aAAa,CAAC,CAAC;aACxE,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,eAAe,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAE3E,UAAU;QACV,MAAM,OAAO,GAAG,gBAAgB,SAAS,SAAS,QAAQ,EAAE,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,eAAe,WAAW,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,SAAS,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;QACrF,OAAO,CAAC,GAAG,CAAC,yBAAyB,SAAS,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;CACF,CAAC"}
|