@takumi-stack/core 1.0.1 → 1.0.3

package/script/config-command/destroy.ts

@@ -1,49 +0,0 @@
-/* eslint-disable no-console */
-import { execSync } from 'child_process';
-
-import {
-  BaseEnvName,
-  BaseGlobalEnv,
-  BaseDeployTargetName,
-  BaseGlobalConstConfig,
-  BaseGlobalEnvConfig,
-  BaseGlobalDeployTargetConfig,
-  preScript,
-} from '../../common';
-
-import { ConfigCommand } from '..';
-
-export const destroy: ConfigCommand = async <
-  GlobalConst,
-  AllowedEnv extends BaseEnvName = BaseEnvName,
-  GlobalEnv extends BaseGlobalEnv = BaseGlobalEnv,
-  DeployTargetName extends BaseDeployTargetName = BaseDeployTargetName,
->(
-  globalConstConfig: BaseGlobalConstConfig<GlobalConst>,
-  globalEnvConfig: BaseGlobalEnvConfig<AllowedEnv, GlobalEnv>,
-  globalDeployTargetConfig: BaseGlobalDeployTargetConfig<AllowedEnv, DeployTargetName>,
-  args: string[]
-): Promise<void> => {
-  try {
-    console.log('<< Destroy Started >>');
-
-    const { envNameInput, roleName, outputFile, servicesNames, accountMap } = await preScript(
-      globalConstConfig,
-      globalEnvConfig,
-      globalDeployTargetConfig,
-      args
-    );
-    const command = `npx cdk destroy \
-      --require-approval='never' \
-      --cloudformation-execution-policies=arn:aws:iam::aws:policy/AdministratorAccess \
-      --context env=${envNameInput} \
-      --context assume-role-credentials:writeIamRoleName=${roleName} \
-      --context assume-role-credentials:readIamRoleName=${roleName} \
-      --outputs-file ${outputFile} \
-      ${accountMap} ${servicesNames}`;
-
-    execSync(command, { stdio: 'inherit', env: process.env });
-  } catch (error: any) {
-    process.exit(1);
-  }
-};

package/script/config-command/env-ssr.ts

@@ -1,85 +0,0 @@
-/* eslint-disable no-console */
-import { GetParameterCommand, SSMClient } from '@aws-sdk/client-ssm';
-
-import { writeFileSync } from 'fs';
-
-import {
-  BaseEnvName,
-  BaseGlobalEnv,
-  BaseDeployTargetName,
-  BaseGlobalConstConfig,
-  BaseGlobalEnvConfig,
-  BaseGlobalDeployTargetConfig,
-  preScript,
-  assumeRole,
-  getResourceName,
-} from '../../common';
-
-import { ConfigCommand } from '..';
-
-export const envSSR: ConfigCommand = async <
-  GlobalConst,
-  AllowedEnv extends BaseEnvName = BaseEnvName,
-  GlobalEnv extends BaseGlobalEnv = BaseGlobalEnv,
-  DeployTargetName extends BaseDeployTargetName = BaseDeployTargetName,
->(
-  globalConstConfig: BaseGlobalConstConfig<GlobalConst>,
-  globalEnvConfig: BaseGlobalEnvConfig<AllowedEnv, GlobalEnv>,
-  globalDeployTargetConfig: BaseGlobalDeployTargetConfig<AllowedEnv, DeployTargetName>,
-  args: string[]
-): Promise<void> => {
-  try {
-    console.log('<< Env SSR Started >>');
-
-    const { envName, ephemeralEnvName, servicesNamesInput, envNameInput, roleName, accountMap, isSingleProjectAccount } = await preScript(
-      globalConstConfig,
-      globalEnvConfig,
-      globalDeployTargetConfig,
-      args
-    );
-
-    console.log('>> STEP: (1/2) => LOADING CONFIGS');
-    const projectName = globalConstConfig.projectName;
-
-    const account =
-      accountMap
-        .split(' ')
-        .find((a) => a.includes('services'))
-        ?.split('=')[1] || '';
-
-    const region = globalDeployTargetConfig[envName as AllowedEnv]['services' as DeployTargetName]['region'];
-
-    console.log('>> STEP: (2/2) => RENDERING ENV');
-
-    const getParamName = (name: string) =>
-      getResourceName(name, {
-        isSingleProjectAccount,
-        projectName,
-        envName,
-        ephemeralEnvName,
-        serviceName: servicesNamesInput[0]!,
-      });
-
-    const role = await assumeRole({ account, region }, roleName);
-
-    const ssm = new SSMClient(role);
-    const deployConfig = await ssm.send(new GetParameterCommand({ Name: getParamName('config') }));
-    if (!deployConfig.Parameter?.Value) throw new Error('Invalid Config');
-    const { baseDir } = JSON.parse(deployConfig.Parameter?.Value);
-
-    const calculatedEnv = await ssm.send(new GetParameterCommand({ Name: getParamName('env-calculated') }));
-    if (!calculatedEnv.Parameter?.Value) throw new Error('Invalid CalculatedEnv');
-
-    const manualEnv = await ssm.send(new GetParameterCommand({ Name: getParamName('env-manual') }));
-    if (!manualEnv.Parameter?.Value) throw new Error('Invalid CalculatedEnv');
-
-    const envFile = `${calculatedEnv.Parameter?.Value}\n${manualEnv.Parameter?.Value}`;
-
-    writeFileSync(`${process.cwd()}/${baseDir}/.env.${envNameInput}`, envFile);
-
-    console.log(`>> Env Created => ${process.cwd()}/${baseDir}/.env.${envNameInput}`);
-  } catch (error: any) {
-    console.log(error);
-    process.exit(1);
-  }
-};

package/script/config-command/invalidation-ssr.ts

@@ -1,88 +0,0 @@
-/* eslint-disable no-console */
-import { CloudFrontClient, CreateInvalidationCommand } from '@aws-sdk/client-cloudfront';
-import { GetParameterCommand, SSMClient } from '@aws-sdk/client-ssm';
-
-import {
-  BaseEnvName,
-  BaseGlobalEnv,
-  BaseDeployTargetName,
-  BaseGlobalConstConfig,
-  BaseGlobalEnvConfig,
-  BaseGlobalDeployTargetConfig,
-  preScript,
-  assumeRole,
-  getResourceName,
-} from '../../common';
-
-import { ConfigCommand } from '..';
-
-export const invalidationSSR: ConfigCommand = async <
-  GlobalConst,
-  AllowedEnv extends BaseEnvName = BaseEnvName,
-  GlobalEnv extends BaseGlobalEnv = BaseGlobalEnv,
-  DeployTargetName extends BaseDeployTargetName = BaseDeployTargetName,
->(
-  globalConstConfig: BaseGlobalConstConfig<GlobalConst>,
-  globalEnvConfig: BaseGlobalEnvConfig<AllowedEnv, GlobalEnv>,
-  globalDeployTargetConfig: BaseGlobalDeployTargetConfig<AllowedEnv, DeployTargetName>,
-  args: string[]
-): Promise<void> => {
-  try {
-    console.log('<< Invalidation SSR Started >>');
-
-    const { envName, ephemeralEnvName, servicesNamesInput, roleName, accountMap, isSingleProjectAccount } = await preScript(
-      globalConstConfig,
-      globalEnvConfig,
-      globalDeployTargetConfig,
-      args
-    );
-
-    console.log('>> STEP: (1/3) => LOADING CONFIGS');
-    const projectName = globalConstConfig.projectName;
-
-    const account =
-      accountMap
-        .split(' ')
-        .find((a) => a.includes('services'))
-        ?.split('=')[1] || '';
-    const region = globalDeployTargetConfig[envName as AllowedEnv]['services' as DeployTargetName]['region'];
-
-    console.log('>> STEP: (2/3) => RENDERING ENV');
-
-    const getParamName = (name: string) =>
-      getResourceName(name, {
-        isSingleProjectAccount,
-        projectName,
-        envName,
-        ephemeralEnvName,
-        serviceName: servicesNamesInput[0]!,
-      });
-
-    const role = await assumeRole({ account, region }, roleName);
-
-    const ssm = new SSMClient(role);
-    const deployConfig = await ssm.send(new GetParameterCommand({ Name: getParamName('config') }));
-    if (!deployConfig.Parameter?.Value) throw new Error('Invalid Config');
-    const { distributionId } = JSON.parse(deployConfig.Parameter?.Value);
-
-    console.log('STEP: (3/3) => CREATING INVALIDATION');
-
-    const cf = new CloudFrontClient(role);
-    await cf.send(
-      new CreateInvalidationCommand({
-        DistributionId: distributionId,
-        InvalidationBatch: {
-          CallerReference: Date.now().toString(),
-          Paths: {
-            Items: ['/*'],
-            Quantity: 1,
-          },
-        },
-      })
-    );
-    console.log(`>> Invalidation Created =>  DistributionId ${distributionId}`);
-  } catch (error: any) {
-    console.log(error);
-    process.exit(1);
-  }
-};

package/script/config-command/rds-migration.ts

@@ -1,177 +0,0 @@
-/* eslint-disable no-console */
-import { GetSecretValueCommand, SecretsManagerClient } from '@aws-sdk/client-secrets-manager';
-import { SSMClient, GetParameterCommand } from '@aws-sdk/client-ssm';
-
-import { CustomDataSourceOptions, Secret } from '@takumi-stack/sdk';
-import { ExecSyncOptions, execSync } from 'child_process';
-import { log } from 'console';
-import { unlinkSync, writeFileSync } from 'fs';
-import { DataSource } from 'typeorm';
-
-import {
-  BaseEnvName,
-  BaseGlobalEnv,
-  BaseDeployTargetName,
-  BaseGlobalConstConfig,
-  BaseGlobalEnvConfig,
-  BaseGlobalDeployTargetConfig,
-  preScript,
-  assumeRole,
-  getResourceName,
-} from '../../common';
-
-import { ConfigCommand } from '..';
-
-export let dataSource: DataSource;
-
-export const rdsMigration: ConfigCommand = async <
-  GlobalConst,
-  AllowedEnv extends BaseEnvName = BaseEnvName,
-  GlobalEnv extends BaseGlobalEnv = BaseGlobalEnv,
-  DeployTargetName extends BaseDeployTargetName = BaseDeployTargetName,
->(
-  globalConstConfig: BaseGlobalConstConfig<GlobalConst>,
-  globalEnvConfig: BaseGlobalEnvConfig<AllowedEnv, GlobalEnv>,
-  globalDeployTargetConfig: BaseGlobalDeployTargetConfig<AllowedEnv, DeployTargetName>,
-  args: string[]
-): Promise<void> => {
-  try {
-    console.log('<< Migration RDS Started >>');
-
-    const commandArg = args[5] || 'generate';
-
-    if (!['generate', 'run', 'revert'].includes(commandArg)) throw new Error('Action not allowed, you can use: generate, run or revert');
-
-    const { envName, ephemeralEnvName, servicesNamesInput, roleName, accountMap, isSingleProjectAccount } = await preScript(
-      globalConstConfig,
-      globalEnvConfig,
-      globalDeployTargetConfig,
-      args
-    );
-
-    console.log('>> STEP: (1/2) => LOADING CONFIGS');
-    const projectName = globalConstConfig.projectName;
-
-    const account =
-      accountMap
-        .split(' ')
-        .find((a) => a.includes('services'))
-        ?.split('=')[1] || '';
-    const region = globalDeployTargetConfig[envName as AllowedEnv]['services' as DeployTargetName]['region'];
-
-    const role = await assumeRole({ account, region }, roleName);
-
-    const getParamName = (name: string) =>
-      getResourceName(name, {
-        isSingleProjectAccount,
-        projectName,
-        envName,
-        ephemeralEnvName,
-        serviceName: servicesNamesInput[0]!,
-      });
-
-    const ssm = new SSMClient(role);
-    const configs = await ssm.send(new GetParameterCommand({ Name: getParamName('config') }));
-
-    if (!configs.Parameter?.Value) throw new Error('Invalid Config');
-    const { baseDir, clusterSecretArn, publicAccess } = JSON.parse(configs.Parameter?.Value);
-
-    const sm: SecretsManagerClient = new SecretsManagerClient(role);
-    const response = await sm.send(
-      new GetSecretValueCommand({
-        SecretId: clusterSecretArn,
-      })
-    );
-
-    const DbSecrets: Secret['payload'] = JSON.parse(response.SecretString!);
-    const { username, password, host, port } = DbSecrets;
-    const localHost = '127.0.0.1';
-    const localPort = 1433;
-
-    const rdsConfigPath = `${process.cwd()}/${baseDir}/config/rds.ts`;
-    const rdsConfigValue = (await import(rdsConfigPath))['default'] as CustomDataSourceOptions;
-
-    const migrationsDefault = `${process.cwd()}/${baseDir}/migrations/*.{ts, js}`;
-
-    if (commandArg === 'generate') {
-      log('>> STEP: (2/2) => GENERATING MIGRATION');
-
-      writeFileSync(
-        `${process.cwd()}/${baseDir}/config/ormconfig.ts`,
-        `import { DataSource } from 'typeorm';
-
-      export const connectionSource = new DataSource({
-        type: 'postgres',
-        database: 'postgres',
-        host: process.env.CC_HOST,
-        port: Number(process.env.CC_PORT),
-        username: process.env.CC_USER,
-        password: process.env.CC_PASS,
-        entities: [...process.env.CC_ENTITIES!.split(',')],
-        migrations: [process.env.CC_MIGRATIONS!],
-      });`
-      );
-
-      const command = `npx typeorm-ts-node-esm migration:generate ./${baseDir}/migrations/m -d ./${baseDir}/config/ormconfig.ts`;
-
-      const execOptions: ExecSyncOptions = {
-        stdio: 'inherit',
-        cwd: `${process.cwd()}`,
-        env: {
-          ...process.env,
-          CC_HOST: publicAccess ? host : localHost,
-          CC_PORT: publicAccess ? `${port}` : `${localPort}`,
-          CC_USER: username,
-          CC_PASS: password,
-          CC_ENTITIES: rdsConfigValue.entities as any,
-          CC_MIGRATIONS: migrationsDefault,
-        },
-      };
-
-      try {
-        execSync(command, execOptions);
-        unlinkSync(`${process.cwd()}/${baseDir}/config/ormconfig.ts`);
-      } catch (error) {
-        unlinkSync(`${process.cwd()}/${baseDir}/config/ormconfig.ts`);
-        throw error;
-      }
-    }
-
-    if (commandArg === 'run') {
-      log('>> STEP: (2/2) => RUNNING MIGRATION');
-      const dataSource = new DataSource({
-        type: 'postgres',
-        database: 'postgres',
-        host: publicAccess ? host : localHost,
-        port: publicAccess ? port : localPort,
-        username,
-        password,
-        entities: rdsConfigValue.entities,
-        migrations: [migrationsDefault],
-      });
-      await dataSource.initialize();
-      await dataSource.runMigrations();
-    }
-
-    if (commandArg === 'revert') {
-      log('>> STEP: (2/2) => REVERT MIGRATION');
-      const dataSource = new DataSource({
-        type: 'postgres',
-        database: 'postgres',
-        host: publicAccess ? host : localHost,
-        port: publicAccess ? port : localPort,
-        username,
-        password,
-        entities: rdsConfigValue.entities,
-        migrations: [migrationsDefault],
-      });
-      await dataSource.initialize();
-      await dataSource.undoLastMigration();
-    }
-
-    console.log('MIGRATION READY! ✅');
-  } catch (error: any) {
-    console.log(error);
-    process.exit(1);
-  }
-};

package/script/config-command/rds-sync.ts

@@ -1,108 +0,0 @@
-/* eslint-disable no-console */
-import { SecretsManagerClient, GetSecretValueCommand } from '@aws-sdk/client-secrets-manager';
-import { SSMClient, GetParameterCommand } from '@aws-sdk/client-ssm';
-
-import { CustomDataSourceOptions, Secret } from '@takumi-stack/sdk';
-import { log } from 'console';
-import { DataSource } from 'typeorm';
-
-import {
-  BaseEnvName,
-  BaseGlobalEnv,
-  BaseDeployTargetName,
-  BaseGlobalConstConfig,
-  BaseGlobalEnvConfig,
-  BaseGlobalDeployTargetConfig,
-  preScript,
-  assumeRole,
-  getResourceName,
-} from '../../common';
-
-import { ConfigCommand } from '..';
-
-export const rdsSync: ConfigCommand = async <
-  GlobalConst,
-  AllowedEnv extends BaseEnvName = BaseEnvName,
-  GlobalEnv extends BaseGlobalEnv = BaseGlobalEnv,
-  DeployTargetName extends BaseDeployTargetName = BaseDeployTargetName,
->(
-  globalConstConfig: BaseGlobalConstConfig<GlobalConst>,
-  globalEnvConfig: BaseGlobalEnvConfig<AllowedEnv, GlobalEnv>,
-  globalDeployTargetConfig: BaseGlobalDeployTargetConfig<AllowedEnv, DeployTargetName>,
-  args: string[]
-): Promise<void> => {
-  try {
-    log('<< Sync RDS Started >>');
-
-    const { envName, ephemeralEnvName, servicesNamesInput, roleName, accountMap, isSingleProjectAccount } = await preScript(
-      globalConstConfig,
-      globalEnvConfig,
-      globalDeployTargetConfig,
-      args
-    );
-
-    if (!['dev', 'develop'].includes(envName)) throw new Error('Sync only allowed in DEV');
-
-    log('>> STEP: (1/2) => LOADING CONFIGS');
-    const projectName = globalConstConfig.projectName;
-
-    const account =
-      accountMap
-        .split(' ')
-        .find((a) => a.includes('services'))
-        ?.split('=')[1] || '';
-
-    const region = globalDeployTargetConfig[envName as AllowedEnv]['services' as DeployTargetName]['region'];
-
-    const role = await assumeRole({ account, region }, roleName);
-
-    const getParamName = (name: string) =>
-      getResourceName(name, {
-        isSingleProjectAccount,
-        projectName,
-        envName,
-        ephemeralEnvName,
-        serviceName: servicesNamesInput[0]!,
-      });
-
-    const ssm = new SSMClient(role);
-    const configs = await ssm.send(new GetParameterCommand({ Name: getParamName('config') }));
-
-    if (!configs.Parameter?.Value) throw new Error('Invalid Config');
-    const { baseDir, clusterSecretArn, publicAccess } = JSON.parse(configs.Parameter?.Value);
-
-    const sm: SecretsManagerClient = new SecretsManagerClient(role);
-    const response = await sm.send(
-      new GetSecretValueCommand({
-        SecretId: clusterSecretArn,
-      })
-    );
-
-    const DbSecrets: Secret['payload'] = JSON.parse(response.SecretString!);
-
-    const rdsConfigPath = `${process.cwd()}/${baseDir}/config/rds.ts`;
-    const rdsConfigValue = (await import(rdsConfigPath))['default'] as CustomDataSourceOptions;
-
-    log('>> STEP: (2/2) => SYNC WITH DB');
-
-    const { username, password, host, port } = DbSecrets;
-    const localHost = '127.0.0.1';
-    const localPort = 1432;
-
-    const dataSource = new DataSource({
-      type: 'postgres',
-      database: 'postgres',
-      host: publicAccess ? host : localHost,
-      port: publicAccess ? port : localPort,
-      username,
-      password,
-      entities: rdsConfigValue.entities,
-    });
-    await dataSource.initialize();
-    await dataSource.synchronize();
-    console.log('SYNC READY! ✅');
-  } catch (error: any) {
-    console.log(error);
-    process.exit(1);
-  }
-};

package/script/config-command/ssm-connect.ts

@@ -1,129 +0,0 @@
-/* eslint-disable no-console */
-import { GetSecretValueCommand, SecretsManagerClient } from '@aws-sdk/client-secrets-manager';
-import { GetParameterCommand, SSMClient } from '@aws-sdk/client-ssm';
-
-import { Secret } from '@takumi-stack/sdk';
-import { SpawnOptions, ExecSyncOptions, spawn, execSync } from 'child_process';
-import { log } from 'console';
-
-import {
-  BaseEnvName,
-  BaseGlobalEnv,
-  BaseDeployTargetName,
-  BaseGlobalConstConfig,
-  BaseGlobalEnvConfig,
-  BaseGlobalDeployTargetConfig,
-  preScript,
-  assumeRole,
-  getResourceName,
-} from '../../common';
-
-import { ConfigCommand } from '..';
-
-export const ssmConnect: ConfigCommand = async <
-  GlobalConst,
-  AllowedEnv extends BaseEnvName = BaseEnvName,
-  GlobalEnv extends BaseGlobalEnv = BaseGlobalEnv,
-  DeployTargetName extends BaseDeployTargetName = BaseDeployTargetName,
->(
-  globalConstConfig: BaseGlobalConstConfig<GlobalConst>,
-  globalEnvConfig: BaseGlobalEnvConfig<AllowedEnv, GlobalEnv>,
-  globalDeployTargetConfig: BaseGlobalDeployTargetConfig<AllowedEnv, DeployTargetName>,
-  args: string[]
-): Promise<void> => {
-  try {
-    log('<< Open session SSM Started >>');
-
-    const commandArg = args[5] || 'sync';
-
-    if (!['sync', 'async'].includes(commandArg)) throw new Error('Action not allowed, you can use: sync or async');
-
-    const { envName, ephemeralEnvName, servicesNamesInput, roleName, accountMap, isSingleProjectAccount } = await preScript(
-      globalConstConfig,
-      globalEnvConfig,
-      globalDeployTargetConfig,
-      args
-    );
-
-    log('>> STEP: (1/2) => LOADING CONFIGS');
-    const projectName = globalConstConfig.projectName;
-
-    const account =
-      accountMap
-        .split(' ')
-        .find((a) => a.includes('services'))
-        ?.split('=')[1] || '';
-    const region = globalDeployTargetConfig[envName as AllowedEnv]['services' as DeployTargetName]['region'];
-
-    const role = await assumeRole({ account, region }, roleName);
-
-    const getParamName = (name: string) =>
-      getResourceName(name, {
-        isSingleProjectAccount,
-        projectName,
-        envName,
-        ephemeralEnvName,
-        serviceName: servicesNamesInput[0]!,
-      });
-
-    const ssm = new SSMClient(role);
-    const configs = await ssm.send(new GetParameterCommand({ Name: getParamName('config') }));
-
-    if (!configs.Parameter?.Value) throw new Error('Invalid Config');
-    const { clusterSecretArn, ec2InstanceId, publicAccess } = JSON.parse(configs.Parameter?.Value);
-
-    if (publicAccess) throw new Error('Action not allowed, this RDS has public access');
-
-    const sm: SecretsManagerClient = new SecretsManagerClient(role);
-    const response = await sm.send(
-      new GetSecretValueCommand({
-        SecretId: clusterSecretArn,
-      })
-    );
-
-    const DbSecrets: Secret['payload'] = JSON.parse(response.SecretString!);
-    const { host, port } = DbSecrets;
-    const localPort = 1432;
-
-    log('>> STEP: (2/2) => STARTING SESSION');
-
-    const command = `aws ssm start-session --region ${region} --target ${ec2InstanceId} --document-name AWS-StartPortForwardingSessionToRemoteHost --parameters host="${host}",portNumber="${port}",localPortNumber="${localPort}"`;
-
-    const parts = command.split(' ');
-    const cmdAsync = parts[0];
-    const argsAsync = parts.splice(1);
-
-    const spawnOptions: SpawnOptions = {
-      stdio: 'ignore',
-      detached: true,
-      cwd: `${process.cwd()}`,
-      env: {
-        ...process.env,
-        AWS_ACCESS_KEY_ID: role.credentials.accessKeyId,
-        AWS_SECRET_ACCESS_KEY: role.credentials.secretAccessKey,
-        AWS_SESSION_TOKEN: role.credentials.sessionToken,
-        AWS_REGION: role.region,
-      },
-    };
-
-    const execOptions: ExecSyncOptions = {
-      stdio: 'inherit',
-      cwd: `${process.cwd()}`,
-      env: {
-        ...process.env,
-        AWS_ACCESS_KEY_ID: role.credentials.accessKeyId,
-        AWS_SECRET_ACCESS_KEY: role.credentials.secretAccessKey,
-        AWS_SESSION_TOKEN: role.credentials.sessionToken,
-        AWS_REGION: role.region,
-      },
-    };
-
-    if (commandArg == 'async') spawn(cmdAsync!, argsAsync, spawnOptions).unref();
-    else execSync(command, execOptions);
-
-    console.log('SSM Connected! ✅');
-  } catch (error: any) {
-    console.log(error);
-    process.exit(1);
-  }
-};