ic-code 1.0.0__tar.gz

ic_code-1.0.0/CHANGELOG.md

@@ -0,0 +1,181 @@
+# Changelog
+
+All notable changes to IC (Infra Resource Management CLI) will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [1.0.0] - 2025-01-03
+
+### 🎉 Initial PyPI Release
+
+This is the first official release of IC (Infra Resource Management CLI) on PyPI, featuring a complete restructure for modern Python packaging standards and enhanced security.
+
+### ✨ Added
+
+#### Package Structure & Distribution
+- **Modern Python packaging** with `src/` layout and `pyproject.toml`
+- **PyPI-ready distribution** with wheel and source packages
+- **Comprehensive metadata** with security-focused descriptions
+- **Pinned dependencies** for security and reproducibility
+
+#### Security Features
+- **SecurityManager** with automatic sensitive data masking
+- **Git pre-commit hooks** for security validation
+- **Configuration security validation** with warnings
+- **Environment variable-based credential management**
+- **Secure logging** with sensitive data masking in all outputs
+
+#### Configuration Management
+- **YAML-based configuration system** replacing .env files
+- **Configuration hierarchy** (default → user → project → environment)
+- **Schema validation** with comprehensive error messages
+- **Migration utility** from .env to YAML configuration
+- **Backward compatibility** with existing .env files
+
+#### Enhanced Logging
+- **Dual-level logging** (console ERROR only, file comprehensive)
+- **Rich console output** with minimal noise
+- **File-only INFO logging** for detailed operation tracking
+- **Automatic log rotation** and cleanup
+- **Sensitive data masking** in all log outputs
+
+#### AWS Session Management
+- **Intelligent profile detection** (assume_role vs direct credentials)
+- **Session caching** for improved performance
+- **Account alias resolution** with fallback to account ID
+- **Enhanced error handling** and validation
+
+#### MCP Integration
+- **MCP server support** for AWS, Azure, Terraform, and GitHub
+- **Secure MCP configuration loading** with sensitive data masking
+- **Query methods** for different cloud platforms
+- **Fallback mechanisms** for MCP server unavailability
+
+#### Multi-Cloud Support
+- **AWS**: EC2, ECS, EKS, Fargate, MSK, CodePipeline, LB, RDS, S3, VPC, VPN, Security Groups, NAT
+- **Azure**: VM, VNet, AKS, Storage Account, NSG, Load Balancer, Container Instances
+- **GCP**: Compute Engine, VPC Networks, GKE, Cloud Storage, Cloud SQL, Cloud Functions, Cloud Run, Load Balancing, Firewall Rules, Billing
+- **OCI**: VM, LB, NSG, VCN, Volume, Object Storage, Policy, Cost
+- **CloudFlare**: DNS record management
+- **SSH**: Server status checking and automatic registration
+
+#### Documentation & Security
+- **Comprehensive security documentation** (SECURITY.md)
+- **Configuration management guide** (docs/configuration.md)
+- **Migration guide** (docs/migration.md)
+- **Installation guide** (docs/installation.md)
+- **Security-focused README** with best practices
+
+### 🔧 Changed
+
+#### Breaking Changes
+- **Package structure** moved to `src/ic/` layout
+- **Configuration system** now uses YAML instead of .env (with backward compatibility)
+- **Logging behavior** changed to console ERROR only, file comprehensive
+- **Import paths** updated for new structure (backward compatibility maintained)
+
+#### Improvements
+- **Performance optimizations** with session caching and parallel processing
+- **Error handling** enhanced with detailed error messages
+- **Output formatting** improved with Rich library integration
+- **Security hardening** throughout the codebase
+
+### 🛡️ Security
+
+#### New Security Features
+- **Automatic sensitive data masking** in logs and configuration
+- **Git security validation** with pre-commit hooks
+- **Configuration security warnings** for sensitive data
+- **Secure credential management** with environment variables only
+- **File permission validation** and recommendations
+
+#### Security Best Practices
+- **No secrets in configuration files** - environment variables only
+- **Comprehensive .gitignore** for sensitive files
+- **Security documentation** and guidelines
+- **Vulnerability reporting process** established
+
+### 📦 Dependencies
+
+#### Updated Dependencies
+- **boto3**: 1.40.59 (AWS SDK)
+- **azure-***: Latest stable versions for Azure services
+- **google-cloud-***: Latest stable versions for GCP services
+- **oci**: 2.149.2 (Oracle Cloud Infrastructure)
+- **rich**: 14.0.0 (Console formatting)
+- **paramiko**: 4.0.1 (SSH client)
+- **PyYAML**: 6.0.1 (YAML parsing)
+
+#### New Dependencies
+- **jsonschema**: 4.23.0 (Configuration validation)
+- **cryptography**: 42.0.8 (Security utilities)
+- **invoke**: 2.2.0 (Task execution)
+
+### 🔄 Migration
+
+#### From Previous Versions
+1. **Install new version**: `pip install --upgrade ic`
+2. **Migrate configuration**: `ic config migrate` (converts .env to YAML)
+3. **Update imports**: Most imports remain compatible
+4. **Review security**: Follow new security guidelines in SECURITY.md
+
+#### Configuration Migration
+```bash
+# Automatic migration from .env to config.yaml
+ic config migrate
+
+# Validate new configuration
+ic config validate
+
+# Initialize secure configuration
+ic config init
+```
+
+### 🐛 Fixed
+- **Session management** reliability improvements
+- **Error handling** for various edge cases
+- **Memory usage** optimizations
+- **Logging** consistency across modules
+
+### 📋 Known Issues
+- **Azure DevOps SDK**: Only beta versions available, commented out in dependencies
+- **Large log files**: Automatic rotation helps but monitor disk usage
+- **MCP server dependencies**: Requires separate MCP server setup for full functionality
+
+### 🔮 Coming Soon
+- **Additional cloud providers** support
+- **Enhanced reporting** with Excel/CSV export
+- **CI/CD integration** templates
+- **Performance monitoring** and metrics
+- **Advanced security scanning** integration
+
+---
+
+## Development Guidelines
+
+### Version Numbering
+- **Major** (X.0.0): Breaking changes, major new features
+- **Minor** (1.X.0): New features, backward compatible
+- **Patch** (1.0.X): Bug fixes, security patches
+
+### Release Process
+1. Update version in `src/ic/__init__.py`
+2. Update CHANGELOG.md with new version
+3. Create and test distribution packages
+4. Tag release in Git
+5. Upload to PyPI
+6. Update documentation
+
+### Security Releases
+- **Critical vulnerabilities**: Immediate patch release
+- **Security improvements**: Next minor release
+- **Security documentation**: Continuous updates
+
+---
+
+For more information, see:
+- [Security Policy](SECURITY.md)
+- [Configuration Guide](docs/configuration.md)
+- [Migration Guide](docs/migration.md)
+- [GitHub Repository](https://github.com/dgr009/ic)

ic_code-1.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 IC CLI Tool
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

ic_code-1.0.0/MANIFEST.in

@@ -0,0 +1,77 @@
+# Include documentation and configuration files
+include README.md
+include LICENSE
+include CHANGELOG.md
+include SECURITY.md
+include requirements.txt
+include pyproject.toml
+include setup.py
+include setup.cfg
+
+# Include configuration files and examples
+recursive-include config *.yaml *.yml *.json *.example
+recursive-include config/schema *.yaml *.yml *.json
+recursive-include docs *.md *.rst *.txt
+
+# Include scripts and tools
+recursive-include scripts *.py *.sh *.bat
+
+# Include source code
+recursive-include src *.py
+recursive-include src/ic/config *.yaml *.yml *.json
+
+# Include service modules
+recursive-include aws *.py
+recursive-include azure_module *.py
+recursive-include gcp *.py
+recursive-include oci_module *.py
+recursive-include ssh *.py
+recursive-include cf *.py
+recursive-include common *.py
+recursive-include mcp *.py
+
+# Include new configuration system files
+include requirements-updated.txt
+include activate_new_env.sh
+include activate_new_env.bat
+
+# Exclude development and build files
+exclude .env
+exclude .env.*
+exclude *.key
+exclude *.pem
+exclude **/credentials.json
+exclude **/service-account*.json
+exclude **/*-key.json
+exclude .DS_Store
+exclude *.pyc
+exclude *.pyo
+exclude *.egg-info
+exclude .pytest_cache
+exclude __pycache__
+recursive-exclude * __pycache__
+recursive-exclude * *.py[co]
+recursive-exclude * .DS_Store
+recursive-exclude * *.key
+recursive-exclude * *.pem
+recursive-exclude * *credentials*
+recursive-exclude * *service-account*
+recursive-exclude logs *
+recursive-exclude .git *
+recursive-exclude .kiro *
+recursive-exclude tests *
+recursive-exclude .pytest_cache *
+
+# Include test files only in source distribution
+global-exclude tests/*
+global-exclude test_*
+global-exclude *_test.py
+
+# Security: Exclude sensitive files
+global-exclude *.key
+global-exclude *.pem
+global-exclude *credentials*
+global-exclude *service-account*
+global-exclude .env*
+global-exclude config.yaml
+global-exclude config.yml

ic_code-1.0.0/PKG-INFO

@@ -0,0 +1,354 @@
+Metadata-Version: 2.4
+Name: ic-code
+Version: 1.0.0
+Summary: Infrastructure CLI tool for managing AWS, CloudFlare, SSH, and more
+Home-page: https://github.com/dgr009/ic
+Author: SangYun Kim
+Author-email: sykim <cruiser594@gmail.com>
+Project-URL: Homepage, https://github.com/dgr009/ic
+Project-URL: Bug Reports, https://github.com/dgr009/ic/issues
+Project-URL: Source, https://github.com/dgr009/ic
+Project-URL: Documentation, https://github.com/dgr009/ic#readme
+Keywords: cli,infrastructure,aws,cloudflare,ssh,devops
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: System Administrators
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: System :: Systems Administration
+Classifier: Topic :: Utilities
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: boto3>=1.26.0
+Requires-Dist: botocore>=1.29.0
+Requires-Dist: requests>=2.28.0
+Requires-Dist: rich>=12.0.0
+Requires-Dist: PyYAML>=6.0
+Requires-Dist: paramiko>=2.11.0
+Requires-Dist: python-dotenv>=0.19.0
+Requires-Dist: cryptography>=3.4.8
+Requires-Dist: ipaddress>=1.0.23
+Requires-Dist: netifaces>=0.11.0
+Requires-Dist: tqdm>=4.67.0
+Provides-Extra: dev
+Requires-Dist: pytest>=7.0.0; extra == "dev"
+Requires-Dist: pytest-cov>=4.0.0; extra == "dev"
+Requires-Dist: black>=22.0.0; extra == "dev"
+Requires-Dist: flake8>=5.0.0; extra == "dev"
+Requires-Dist: mypy>=0.991; extra == "dev"
+Dynamic: author
+Dynamic: home-page
+Dynamic: license-file
+Dynamic: requires-python
+
+# IC CLI Tool
+
+[![Tests](https://github.com/yourusername/ic-cli/workflows/Tests/badge.svg)](https://github.com/yourusername/ic-cli/actions)
+[![PyPI version](https://badge.fury.io/py/ic-code.svg)](https://badge.fury.io/py/ic-code)
+[![Python 3.9+](https://img.shields.io/badge/python-3.9+-blue.svg)](https://www.python.org/downloads/)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+Infrastructure Command Line Interface tool for managing various cloud services and infrastructure components.
+
+## Features
+
+- **AWS Services**: EC2, S3, ECS, EKS, RDS, VPC, Load Balancers, MSK, and more
+- **CloudFlare**: DNS record management with account/zone filtering
+- **SSH**: Server information gathering and management with security filtering
+- **OCI**: Oracle Cloud Infrastructure support
+- **Multi-account/Multi-region**: Support for multiple AWS accounts and regions
+- **Rich Output**: Beautiful terminal output with tables and colors
+- **YAML Configuration**: Modern YAML-based configuration management
+- **Security**: Separate secrets management with example templates
+
+## Installation
+
+### From PyPI (Recommended)
+
+```bash
+pip install ic-code
+```
+
+### From Source
+
+```bash
+# Clone the repository
+git clone https://github.com/dgr009/ic.git
+cd ic
+
+# Create virtual environment
+python -m venv ic-env
+source ic-env/bin/activate  # On Windows: ic-env\Scripts\activate
+
+# Install in development mode
+pip install -e .
+```
+
+## Configuration
+
+### YAML Configuration System
+
+IC CLI uses a modern YAML-based configuration system with separate files for default settings and secrets.
+
+#### 1. Create Configuration Files
+
+```bash
+# Copy example files
+cp config/secrets.yaml.example config/secrets.yaml
+
+# Edit with your actual values
+vim config/secrets.yaml
+```
+
+#### 2. Configure Secrets (config/secrets.yaml)
+
+```yaml
+# AWS Configuration
+aws:
+  accounts:
+    - "123456789012"  # Your AWS account IDs
+    - "987654321098"
+  profiles:
+    default: "your-aws-profile-name"
+
+# CloudFlare Configuration  
+cloudflare:
+  email: "your-email@example.com"
+  api_token: "your-cloudflare-api-token"
+  cloudflare_accounts: "account1,account2"  # Filter accounts
+  cloudflare_zones: "zone1,zone2"           # Filter zones
+
+# SSH Configuration (Security-sensitive)
+ssh:
+  key_dir: "~/aws-key"
+  skip_prefixes:  # Skip servers with these prefixes
+    - "git"
+    - "bastion"
+    - "jump"
+    - "proxy"
+
+# OCI Configuration
+oci:
+  config_file: "~/.oci/config"
+  profile: "DEFAULT"
+```
+
+#### 3. Default Settings (config/default.yaml)
+
+The default configuration is already provided and includes:
+- AWS regions
+- SSH connection settings
+- Timeout values
+- Other non-sensitive defaults
+
+### AWS Credentials
+
+Ensure your AWS credentials are configured:
+
+```bash
+# Using AWS CLI
+aws configure
+
+# Or use AWS profiles
+aws configure --profile myprofile
+```
+
+## Usage
+
+### AWS Services
+
+```bash
+# EC2 instances
+ic aws ec2 info
+ic aws ec2 info --account 123456789012 --regions us-east-1
+
+# S3 buckets
+ic aws s3 list_tags
+ic aws s3 tag_check
+
+# ECS services
+ic aws ecs info
+ic aws ecs service
+ic aws ecs task
+
+# EKS clusters
+ic aws eks info
+ic aws eks nodes
+ic aws eks pods
+
+# RDS instances
+ic aws rds list_tags
+ic aws rds tag_check
+
+# Load Balancers
+ic aws lb list_tags
+ic aws lb tag_check
+
+# VPC resources
+ic aws vpc list_tags
+ic aws vpc tag_check
+
+# Security Groups
+ic aws sg info
+
+# MSK clusters
+ic aws msk info
+ic aws msk broker
+
+# Fargate services
+ic aws fargate info
+
+# CodePipeline
+ic aws codepipeline build
+ic aws codepipeline deploy
+```
+
+### CloudFlare
+
+```bash
+# DNS records (filtered by configured accounts/zones)
+ic cf dns info
+ic cf dns info --account specific-account
+ic cf dns info --zone specific-zone
+```
+
+### SSH Management
+
+```bash
+# Server information (with security filtering)
+ic ssh info
+
+# Auto-discover and register SSH servers
+ic ssh reg
+```
+
+### OCI (Oracle Cloud Infrastructure)
+
+```bash
+# OCI information
+ic oci info
+
+# VM instances
+ic oci vm
+
+# Load balancers
+ic oci lb
+```
+
+### Configuration Management
+
+```bash
+# View current configuration
+ic config show
+
+# Validate configuration
+ic config validate
+
+# Migrate from old configuration
+ic config migrate
+```
+
+## Command Structure
+
+The CLI follows a consistent structure:
+
+```
+ic <platform> <service> <command> [options]
+```
+
+- **platform**: aws, cf (CloudFlare), ssh, oci, config
+- **service**: ec2, s3, ecs, eks, rds, etc.
+- **command**: info, list_tags, tag_check, etc.
+- **options**: --account, --regions, --name, etc.
+
+## Examples
+
+### Multi-account AWS EC2 Query
+
+```bash
+# Query EC2 instances across multiple accounts and regions
+ic aws ec2 info --account 123456789012,987654321098 --regions us-east-1,ap-northeast-2
+```
+
+### CloudFlare DNS Management
+
+```bash
+# List all DNS records
+ic cf dns info
+
+# Filter by specific account
+ic cf dns info --account production
+
+# Filter by specific zone
+ic cf dns info --zone example.com
+```
+
+### SSH Server Discovery
+
+```bash
+# Get information about all registered SSH servers
+ic ssh info
+
+# Auto-discover new SSH servers in your network
+ic ssh reg
+```
+
+## Development
+
+### Project Structure
+
+```
+ic/
+├── src/ic/
+│   ├── cli.py              # Main CLI entry point
+│   ├── config/             # Configuration management
+│   └── core/               # Core utilities
+├── aws/                    # AWS service modules
+├── cf/                     # CloudFlare modules
+├── ssh/                    # SSH management modules
+├── oci_module/             # OCI modules
+├── common/                 # Common utilities
+├── config/                 # Configuration files
+├── requirements.txt        # Python dependencies
+└── README.md              # This file
+```
+
+### Adding New Services
+
+1. Create a new module directory (e.g., `gcp/`)
+2. Implement service-specific functions
+3. Add CLI integration in `src/ic/cli.py`
+4. Update documentation
+
+### Testing
+
+```bash
+# Run tests
+pytest
+
+# Run with coverage
+pytest --cov=src --cov-report=html
+```
+
+## Contributing
+
+1. Fork the repository
+2. Create a feature branch
+3. Make your changes
+4. Add tests
+5. Submit a pull request
+
+## License
+
+MIT License - see LICENSE file for details.
+
+## Support
+
+For issues and questions, please use the GitHub issue tracker.$`
+