mirror of
https://github.com/cisagov/manage.get.gov.git
synced 2025-07-25 03:58:39 +02:00
updated sandbox for zander
This commit is contained in:
parent
dcf8135e5f
commit
889be277f2
4 changed files with 69 additions and 66 deletions
1
.github/workflows/deploy-sandbox.yaml
vendored
1
.github/workflows/deploy-sandbox.yaml
vendored
|
@ -15,6 +15,7 @@ jobs:
|
||||||
|| startsWith(github.head_ref, 'rb/')
|
|| startsWith(github.head_ref, 'rb/')
|
||||||
|| startsWith(github.head_ref, 'ko/')
|
|| startsWith(github.head_ref, 'ko/')
|
||||||
|| startsWith(github.head_ref, 'gd/')
|
|| startsWith(github.head_ref, 'gd/')
|
||||||
|
|| startsWith(github.head_ref, 'za/')
|
||||||
outputs:
|
outputs:
|
||||||
environment: ${{ steps.var.outputs.environment}}
|
environment: ${{ steps.var.outputs.environment}}
|
||||||
runs-on: "ubuntu-latest"
|
runs-on: "ubuntu-latest"
|
||||||
|
|
1
.github/workflows/migrate.yaml
vendored
1
.github/workflows/migrate.yaml
vendored
|
@ -15,6 +15,7 @@ on:
|
||||||
options:
|
options:
|
||||||
- stable
|
- stable
|
||||||
- staging
|
- staging
|
||||||
|
- za
|
||||||
- gd
|
- gd
|
||||||
- rb
|
- rb
|
||||||
- ko
|
- ko
|
||||||
|
|
1
.github/workflows/reset-db.yaml
vendored
1
.github/workflows/reset-db.yaml
vendored
|
@ -16,6 +16,7 @@ on:
|
||||||
options:
|
options:
|
||||||
- stable
|
- stable
|
||||||
- staging
|
- staging
|
||||||
|
- za
|
||||||
- gd
|
- gd
|
||||||
- rb
|
- rb
|
||||||
- ko
|
- ko
|
||||||
|
|
|
@ -2,85 +2,85 @@
|
||||||
# infrastructure needed to run get.gov. It can serve for documentation for running
|
# infrastructure needed to run get.gov. It can serve for documentation for running
|
||||||
# NOTE: This script was written for MacOS and to be run at the root directory.
|
# NOTE: This script was written for MacOS and to be run at the root directory.
|
||||||
|
|
||||||
if [ -z "$1" ]; then
|
# if [ -z "$1" ]; then
|
||||||
echo 'Please specify a new space to create (i.e. lmm)' >&2
|
# echo 'Please specify a new space to create (i.e. lmm)' >&2
|
||||||
exit 1
|
# exit 1
|
||||||
fi
|
# fi
|
||||||
|
|
||||||
if [ ! $(command -v gh) ] || [ ! $(command -v jq) ] || [ ! $(command -v cf) ]; then
|
# if [ ! $(command -v gh) ] || [ ! $(command -v jq) ] || [ ! $(command -v cf) ]; then
|
||||||
echo "jq, cf, and gh packages must be installed. Please install via your preferred manager."
|
# echo "jq, cf, and gh packages must be installed. Please install via your preferred manager."
|
||||||
exit 1
|
# exit 1
|
||||||
fi
|
# fi
|
||||||
|
|
||||||
upcase_name=$(printf "%s" "$1" | tr '[:lower:]' '[:upper:]')
|
# upcase_name=$(printf "%s" "$1" | tr '[:lower:]' '[:upper:]')
|
||||||
|
|
||||||
read -p "Are you on a new branch? We will have to commit this work. (y/n) " -n 1 -r
|
# read -p "Are you on a new branch? We will have to commit this work. (y/n) " -n 1 -r
|
||||||
echo
|
# echo
|
||||||
if [[ ! $REPLY =~ ^[Yy]$ ]]
|
# if [[ ! $REPLY =~ ^[Yy]$ ]]
|
||||||
then
|
# then
|
||||||
git checkout -b new-dev-sandbox-$1
|
# git checkout -b new-dev-sandbox-$1
|
||||||
fi
|
# fi
|
||||||
|
|
||||||
cf target -o cisa-getgov-prototyping
|
# cf target -o cisa-getgov-prototyping
|
||||||
|
|
||||||
read -p "Are you logged in to the cisa-getgov-prototyping CF org above? (y/n) " -n 1 -r
|
# read -p "Are you logged in to the cisa-getgov-prototyping CF org above? (y/n) " -n 1 -r
|
||||||
echo
|
# echo
|
||||||
if [[ ! $REPLY =~ ^[Yy]$ ]]
|
# if [[ ! $REPLY =~ ^[Yy]$ ]]
|
||||||
then
|
# then
|
||||||
cf login -a https://api.fr.cloud.gov --sso
|
# cf login -a https://api.fr.cloud.gov --sso
|
||||||
fi
|
# fi
|
||||||
|
|
||||||
gh auth status
|
# gh auth status
|
||||||
read -p "Are you logged into a Github account with access to cisagov/getgov? (y/n) " -n 1 -r
|
# read -p "Are you logged into a Github account with access to cisagov/getgov? (y/n) " -n 1 -r
|
||||||
echo
|
# echo
|
||||||
if [[ ! $REPLY =~ ^[Yy]$ ]]
|
# if [[ ! $REPLY =~ ^[Yy]$ ]]
|
||||||
then
|
# then
|
||||||
gh auth login
|
# gh auth login
|
||||||
fi
|
# fi
|
||||||
|
|
||||||
echo "Creating manifest for $1..."
|
# echo "Creating manifest for $1..."
|
||||||
cp ops/scripts/manifest-sandbox-template.yaml ops/manifests/manifest-$1.yaml
|
# cp ops/scripts/manifest-sandbox-template.yaml ops/manifests/manifest-$1.yaml
|
||||||
sed -i '' "s/ENVIRONMENT/$1/" "ops/manifests/manifest-$1.yaml"
|
# sed -i '' "s/ENVIRONMENT/$1/" "ops/manifests/manifest-$1.yaml"
|
||||||
|
|
||||||
echo "Adding new environment to settings.py..."
|
# echo "Adding new environment to settings.py..."
|
||||||
sed -i '' '/getgov-staging.app.cloud.gov/ {a\
|
# sed -i '' '/getgov-staging.app.cloud.gov/ {a\
|
||||||
'\"getgov-$1.app.cloud.gov\"',
|
# '\"getgov-$1.app.cloud.gov\"',
|
||||||
}' src/registrar/config/settings.py
|
# }' src/registrar/config/settings.py
|
||||||
|
|
||||||
echo "Creating new cloud.gov space for $1..."
|
# echo "Creating new cloud.gov space for $1..."
|
||||||
cf create-space $1
|
# cf create-space $1
|
||||||
cf target -o "cisa-getgov-prototyping" -s $1
|
# cf target -o "cisa-getgov-prototyping" -s $1
|
||||||
cf bind-security-group public_networks_egress cisa-getgov-prototyping --space $1
|
# cf bind-security-group public_networks_egress cisa-getgov-prototyping --space $1
|
||||||
cf bind-security-group trusted_local_networks_egress cisa-getgov-prototyping --space $1
|
# cf bind-security-group trusted_local_networks_egress cisa-getgov-prototyping --space $1
|
||||||
|
|
||||||
echo "Creating new cloud.gov DB for $1. This usually takes about 5 minutes..."
|
# echo "Creating new cloud.gov DB for $1. This usually takes about 5 minutes..."
|
||||||
cf create-service aws-rds micro-psql getgov-$1-database
|
# cf create-service aws-rds micro-psql getgov-$1-database
|
||||||
|
|
||||||
until cf service getgov-$1-database | grep -q 'The service instance status is succeeded'
|
# until cf service getgov-$1-database | grep -q 'The service instance status is succeeded'
|
||||||
do
|
# do
|
||||||
echo "Database not up yet, waiting..."
|
# echo "Database not up yet, waiting..."
|
||||||
sleep 30
|
# sleep 30
|
||||||
done
|
# done
|
||||||
|
|
||||||
echo "Creating new cloud.gov credentials for $1..."
|
# echo "Creating new cloud.gov credentials for $1..."
|
||||||
django_key=$(python3 -c 'from django.core.management.utils import get_random_secret_key; print(get_random_secret_key())')
|
# django_key=$(python3 -c 'from django.core.management.utils import get_random_secret_key; print(get_random_secret_key())')
|
||||||
openssl req -nodes -x509 -days 365 -newkey rsa:2048 -keyout private-$1.pem -out public-$1.crt
|
# openssl req -nodes -x509 -days 365 -newkey rsa:2048 -keyout private-$1.pem -out public-$1.crt
|
||||||
login_key=$(base64 -i private-$1.pem)
|
# login_key=$(base64 -i private-$1.pem)
|
||||||
jq -n --arg django_key "$django_key" --arg login_key "$login_key" '{"DJANGO_SECRET_KEY":$django_key,"DJANGO_SECRET_LOGIN_KEY":$login_key}' > credentials-$1.json
|
# jq -n --arg django_key "$django_key" --arg login_key "$login_key" '{"DJANGO_SECRET_KEY":$django_key,"DJANGO_SECRET_LOGIN_KEY":$login_key}' > credentials-$1.json
|
||||||
cf cups getgov-credentials -p credentials-$1.json
|
# cf cups getgov-credentials -p credentials-$1.json
|
||||||
|
|
||||||
echo "Now you will need to update some things for Login. Please sign-in to https://dashboard.int.identitysandbox.gov/."
|
# echo "Now you will need to update some things for Login. Please sign-in to https://dashboard.int.identitysandbox.gov/."
|
||||||
echo "Navigate to our application config: https://dashboard.int.identitysandbox.gov/service_providers/2640/edit?"
|
# echo "Navigate to our application config: https://dashboard.int.identitysandbox.gov/service_providers/2640/edit?"
|
||||||
echo "There are two things to update."
|
# echo "There are two things to update."
|
||||||
echo "1. You need to upload the public-$1.crt file generated as part of the previous command."
|
# echo "1. You need to upload the public-$1.crt file generated as part of the previous command."
|
||||||
echo "2. You need to add two redirect URIs: https://getgov-$1.app.cloud.gov/openid/callback/login/ and
|
# echo "2. You need to add two redirect URIs: https://getgov-$1.app.cloud.gov/openid/callback/login/ and
|
||||||
https://getgov-$1.app.cloud.gov/openid/callback/logout/ to the list of URIs."
|
# https://getgov-$1.app.cloud.gov/openid/callback/logout/ to the list of URIs."
|
||||||
read -p "Please confirm when this is done (y/n) " -n 1 -r
|
# read -p "Please confirm when this is done (y/n) " -n 1 -r
|
||||||
echo
|
# echo
|
||||||
if [[ ! $REPLY =~ ^[Yy]$ ]]
|
# if [[ ! $REPLY =~ ^[Yy]$ ]]
|
||||||
then
|
# then
|
||||||
exit 1
|
# exit 1
|
||||||
fi
|
# fi
|
||||||
|
|
||||||
echo "Database create succeeded and credentials created. Deploying the get.gov application to the new space $1..."
|
echo "Database create succeeded and credentials created. Deploying the get.gov application to the new space $1..."
|
||||||
echo "Building assets..."
|
echo "Building assets..."
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue