dda-devops-build/README.md

237 lines
6.7 KiB
Markdown
Raw Normal View History

2019-09-04 16:40:41 +00:00
# dda-devops-build
[![Slack](https://img.shields.io/badge/chat-clojurians-green.svg?style=flat)](https://clojurians.slack.com/messages/#dda-pallet/) | [<img src="https://meissa-gmbh.de/img/community/Mastodon_Logotype.svg" width=20 alt="team@social.meissa-gmbh.de"> team@social.meissa-gmbh.de](https://social.meissa-gmbh.de/@team) | [Website & Blog](https://domaindrivenarchitecture.org)
2020-07-02 10:44:25 +00:00
![release prod](https://github.com/DomainDrivenArchitecture/dda-devops-build/workflows/release%20prod/badge.svg)
2020-11-12 16:37:55 +00:00
dda-devops-build provide a environment to tie several DevOps tools together for easy interoperation. Supported tools are:
2020-04-16 16:40:51 +00:00
* aws with
* simple api-key auth
* mfa & assume-role auth
* hetzner with simple api-key auth
* terraform v0.11, v0.12 supporting
* local file backends
* s3 backends
2020-04-18 13:25:40 +00:00
* docker / dockerhub
2020-04-16 16:40:51 +00:00
* user / team credentials managed by gopass
* dda-pallet
2020-01-28 10:57:38 +00:00
# Setup
2020-04-16 16:40:51 +00:00
Ensure that yout python3 version is at least Python 3.7!
2020-01-28 10:57:38 +00:00
```
sudo apt install python3-pip
2022-08-19 13:01:10 +00:00
pip3 install pip3 --upgrade
pip3 install pybuilder ddadevops deprecation
2020-01-28 10:57:38 +00:00
export PATH=$PATH:~/.local/bin
2020-04-16 16:29:46 +00:00
2020-04-15 12:26:48 +00:00
# in case of using terraform
2022-08-19 13:01:10 +00:00
pip3 install dda-python-terraform packaging
2020-04-16 16:29:46 +00:00
2020-04-15 12:26:48 +00:00
# in case of using AwsMixin
2022-08-19 13:01:10 +00:00
pip3 install boto3
2020-04-16 16:40:51 +00:00
# in case of using AwsMfaMixin
2022-08-19 13:01:10 +00:00
pip3 install boto3 mfa
2020-01-28 10:57:38 +00:00
```
2019-09-04 16:40:41 +00:00
2020-04-02 09:48:24 +00:00
# Example Build
2020-04-16 16:40:51 +00:00
2020-11-12 16:37:55 +00:00
lets assume the following project structure
2020-04-02 09:48:24 +00:00
```
my-project
| -> my-module
| | -> build.py
| | -> some-terraform.tf
| -> an-other-module
| -> target (here will the build happen)
| | -> ...
```
```
from pybuilder.core import task, init
from ddadevops import *
name = 'my-project'
MODULE = 'my-module'
PROJECT_ROOT_PATH = '..'
class MyBuild(DevopsTerraformBuild):
pass
@init
def initialize(project):
project.build_depends_on('ddadevops>=0.5.0')
account_name = 'my-aws-account-name'
account_id = 'my-aws-account-id'
stage = 'my stage i.e. dev|test|prod'
additional_vars = {'var_to_use_insied_terraform': '...'}
additional_var_files = ['variable-' + account_name + '-' + stage + '.tfvars']
config = create_devops_terraform_build_config(stage, PROJECT_ROOT_PATH,
MODULE, additional_vars,
additional_tfvar_files=additional_var_files)
build = MyBuild(project, config)
build.initialize_build_dir()
@task
def plan(project):
build = get_devops_build(project)
build.plan()
@task
def apply(project):
build = get_devops_build(project)
build.apply()
@task
def destroy(project):
build = get_devops_build(project)
build.destroy()
@task
def tf_import(project):
build = get_devops_build(project)
build.tf_import('aws_resource.choosen_name', 'the_aws_id')
```
## Feature aws-backend
2020-04-16 16:40:51 +00:00
2020-04-02 09:48:24 +00:00
Will use a file `backend.dev.live.properties` where dev is the [account-name], live is the [stage].
the backend.dev.live.properties file content:
```
key = ".."
region = "the aws region"
profile = "the profile used for aws"
bucket = "the s3 bucket name"
kms_key_id = "the aws key id"
```
the build.py file content:
```
class MyBuild(AwsBackendPropertiesMixin, DevopsTerraformBuild):
pass
@init
def initialize(project):
2022-08-19 12:37:37 +00:00
project.build_depends_on('ddadevops>=1.0')
2020-04-02 09:48:24 +00:00
account_name = 'my-aws-account-name'
account_id = 'my-aws-account-id'
stage = 'my stage i.e. dev|test|prod'
additional_vars = {}
config = create_devops_terraform_build_config(stage, PROJECT_ROOT_PATH,
MODULE, additional_vars)
config = add_aws_backend_properties_mixin_config(config, account_name)
build = MyBuild(project, config)
build.initialize_build_dir()
```
## Feature aws-mfa-assume-role
2020-04-16 16:40:51 +00:00
2020-04-02 09:48:24 +00:00
In order to use aws assume role in combination with the mfa-tool (`pip install mfa`):
the build.py file content:
```
class MyBuild(class MyBuild(AwsMfaMixin, DevopsTerraformBuild):
pass
@init
def initialize(project):
2022-08-19 12:37:37 +00:00
project.build_depends_on('ddadevops>=1.0')
2020-04-02 09:48:24 +00:00
account_name = 'my-aws-account-name'
account_id = 'my-aws-account-id'
stage = 'my stage i.e. dev|test|prod'
additional_vars = {}
config = create_devops_terraform_build_config(stage, PROJECT_ROOT_PATH,
MODULE, additional_vars)
config = add_aws_backend_properties_mixin_config(config, account_name)
config = add_aws_mfa_mixin_config(config, account_id, 'eu-central-1',
mfa_role='my_developer_role',
mfa_account_prefix='company-',
mfa_login_account_suffix='users_are_defined_here')
build = MyBuild(project, config)
build.initialize_build_dir()
@task
def access(project):
build = get_devops_build(project)
build.get_mfa_session()
```
## Feature DdaImageBuild
2020-04-18 13:25:40 +00:00
The docker build supports image building, tagging, testing and login to dockerhost.
For bash based builds we support often used script-parts as predefined functions [see install_functions.sh](src/main/resources/docker/image/resources/install_functions.sh).
A full working example: [doc/example/50_docker_module](doc/example/50_docker_module)
2020-06-03 10:14:33 +00:00
## Feature AwsRdsPgMixin
The AwsRdsPgMixin provides
* execute_pg_rds_sql - function will optionally resolve dns-c-names for trusted ssl-handshakes
* alter_db_user_password
* add_new_user
* deactivate_user
the build.py file content:
```
class MyBuild(..., AwsRdsPgMixin):
pass
@init
def initialize(project):
2022-08-19 12:37:37 +00:00
project.build_depends_on('ddadevops>=1.0')
2020-06-03 10:14:33 +00:00
...
config = add_aws_rds_pg_mixin_config(config,
stage + "-db.bcsimport.kauf." + account_name + ".breuni.de",
"kauf_bcsimport",
rds_resolve_dns=True,)
build = MyBuild(project, config)
build.initialize_build_dir()
@task
def rotate_credentials_in(project):
build = get_devops_build(project)
build.alter_db_user_password('/postgres/support')
build.alter_db_user_password('/postgres/superuser')
build.add_new_user('/postgres/superuser', '/postgres/app', 'pg_group_role')
@task
def rotate_credentials_out(project):
build = get_devops_build(project)
build.deactivate_user('/postgres/superuser', 'old_user_name')
```
2020-04-16 16:40:51 +00:00
# Releasing and updating
## Publish snapshot
2020-07-02 10:37:08 +00:00
1. every push will be published as dev-dependency
2020-01-28 11:11:14 +00:00
2020-04-16 16:40:51 +00:00
## Release
2020-07-06 07:50:53 +00:00
```
adjust version no in build.py to release version no.
git commit -am "release"
git tag -am "release" [release version no]
git push --follow-tags
increase version no in build.py
git commit -am "version bump"
git push
pip3 install --upgrade --user ddadevops
```
2019-11-06 17:16:52 +00:00
2020-04-16 16:40:51 +00:00
# License
2019-09-04 16:40:41 +00:00
2021-06-29 08:10:17 +00:00
Copyright © 2021 meissa GmbH
2019-09-04 16:40:41 +00:00
Licensed under the [Apache License, Version 2.0](LICENSE) (the "License")