updated sandbox for zander

This commit is contained in:
Alysia Broddrick 2023-08-04 07:24:41 -07:00
parent dcf8135e5f
commit 889be277f2
No known key found for this signature in database
GPG key ID: 03917052CD0F06B7
4 changed files with 69 additions and 66 deletions

View file

@ -15,6 +15,7 @@ jobs:
|| startsWith(github.head_ref, 'rb/') || startsWith(github.head_ref, 'rb/')
|| startsWith(github.head_ref, 'ko/') || startsWith(github.head_ref, 'ko/')
|| startsWith(github.head_ref, 'gd/') || startsWith(github.head_ref, 'gd/')
|| startsWith(github.head_ref, 'za/')
outputs: outputs:
environment: ${{ steps.var.outputs.environment}} environment: ${{ steps.var.outputs.environment}}
runs-on: "ubuntu-latest" runs-on: "ubuntu-latest"

View file

@ -15,6 +15,7 @@ on:
options: options:
- stable - stable
- staging - staging
- za
- gd - gd
- rb - rb
- ko - ko

View file

@ -16,6 +16,7 @@ on:
options: options:
- stable - stable
- staging - staging
- za
- gd - gd
- rb - rb
- ko - ko

View file

@ -2,85 +2,85 @@
# infrastructure needed to run get.gov. It can serve for documentation for running # infrastructure needed to run get.gov. It can serve for documentation for running
# NOTE: This script was written for MacOS and to be run at the root directory. # NOTE: This script was written for MacOS and to be run at the root directory.
if [ -z "$1" ]; then # if [ -z "$1" ]; then
echo 'Please specify a new space to create (i.e. lmm)' >&2 # echo 'Please specify a new space to create (i.e. lmm)' >&2
exit 1 # exit 1
fi # fi
if [ ! $(command -v gh) ] || [ ! $(command -v jq) ] || [ ! $(command -v cf) ]; then # if [ ! $(command -v gh) ] || [ ! $(command -v jq) ] || [ ! $(command -v cf) ]; then
echo "jq, cf, and gh packages must be installed. Please install via your preferred manager." # echo "jq, cf, and gh packages must be installed. Please install via your preferred manager."
exit 1 # exit 1
fi # fi
upcase_name=$(printf "%s" "$1" | tr '[:lower:]' '[:upper:]') # upcase_name=$(printf "%s" "$1" | tr '[:lower:]' '[:upper:]')
read -p "Are you on a new branch? We will have to commit this work. (y/n) " -n 1 -r # read -p "Are you on a new branch? We will have to commit this work. (y/n) " -n 1 -r
echo # echo
if [[ ! $REPLY =~ ^[Yy]$ ]] # if [[ ! $REPLY =~ ^[Yy]$ ]]
then # then
git checkout -b new-dev-sandbox-$1 # git checkout -b new-dev-sandbox-$1
fi # fi
cf target -o cisa-getgov-prototyping # cf target -o cisa-getgov-prototyping
read -p "Are you logged in to the cisa-getgov-prototyping CF org above? (y/n) " -n 1 -r # read -p "Are you logged in to the cisa-getgov-prototyping CF org above? (y/n) " -n 1 -r
echo # echo
if [[ ! $REPLY =~ ^[Yy]$ ]] # if [[ ! $REPLY =~ ^[Yy]$ ]]
then # then
cf login -a https://api.fr.cloud.gov --sso # cf login -a https://api.fr.cloud.gov --sso
fi # fi
gh auth status # gh auth status
read -p "Are you logged into a Github account with access to cisagov/getgov? (y/n) " -n 1 -r # read -p "Are you logged into a Github account with access to cisagov/getgov? (y/n) " -n 1 -r
echo # echo
if [[ ! $REPLY =~ ^[Yy]$ ]] # if [[ ! $REPLY =~ ^[Yy]$ ]]
then # then
gh auth login # gh auth login
fi # fi
echo "Creating manifest for $1..." # echo "Creating manifest for $1..."
cp ops/scripts/manifest-sandbox-template.yaml ops/manifests/manifest-$1.yaml # cp ops/scripts/manifest-sandbox-template.yaml ops/manifests/manifest-$1.yaml
sed -i '' "s/ENVIRONMENT/$1/" "ops/manifests/manifest-$1.yaml" # sed -i '' "s/ENVIRONMENT/$1/" "ops/manifests/manifest-$1.yaml"
echo "Adding new environment to settings.py..." # echo "Adding new environment to settings.py..."
sed -i '' '/getgov-staging.app.cloud.gov/ {a\ # sed -i '' '/getgov-staging.app.cloud.gov/ {a\
'\"getgov-$1.app.cloud.gov\"', # '\"getgov-$1.app.cloud.gov\"',
}' src/registrar/config/settings.py # }' src/registrar/config/settings.py
echo "Creating new cloud.gov space for $1..." # echo "Creating new cloud.gov space for $1..."
cf create-space $1 # cf create-space $1
cf target -o "cisa-getgov-prototyping" -s $1 # cf target -o "cisa-getgov-prototyping" -s $1
cf bind-security-group public_networks_egress cisa-getgov-prototyping --space $1 # cf bind-security-group public_networks_egress cisa-getgov-prototyping --space $1
cf bind-security-group trusted_local_networks_egress cisa-getgov-prototyping --space $1 # cf bind-security-group trusted_local_networks_egress cisa-getgov-prototyping --space $1
echo "Creating new cloud.gov DB for $1. This usually takes about 5 minutes..." # echo "Creating new cloud.gov DB for $1. This usually takes about 5 minutes..."
cf create-service aws-rds micro-psql getgov-$1-database # cf create-service aws-rds micro-psql getgov-$1-database
until cf service getgov-$1-database | grep -q 'The service instance status is succeeded' # until cf service getgov-$1-database | grep -q 'The service instance status is succeeded'
do # do
echo "Database not up yet, waiting..." # echo "Database not up yet, waiting..."
sleep 30 # sleep 30
done # done
echo "Creating new cloud.gov credentials for $1..." # echo "Creating new cloud.gov credentials for $1..."
django_key=$(python3 -c 'from django.core.management.utils import get_random_secret_key; print(get_random_secret_key())') # django_key=$(python3 -c 'from django.core.management.utils import get_random_secret_key; print(get_random_secret_key())')
openssl req -nodes -x509 -days 365 -newkey rsa:2048 -keyout private-$1.pem -out public-$1.crt # openssl req -nodes -x509 -days 365 -newkey rsa:2048 -keyout private-$1.pem -out public-$1.crt
login_key=$(base64 -i private-$1.pem) # login_key=$(base64 -i private-$1.pem)
jq -n --arg django_key "$django_key" --arg login_key "$login_key" '{"DJANGO_SECRET_KEY":$django_key,"DJANGO_SECRET_LOGIN_KEY":$login_key}' > credentials-$1.json # jq -n --arg django_key "$django_key" --arg login_key "$login_key" '{"DJANGO_SECRET_KEY":$django_key,"DJANGO_SECRET_LOGIN_KEY":$login_key}' > credentials-$1.json
cf cups getgov-credentials -p credentials-$1.json # cf cups getgov-credentials -p credentials-$1.json
echo "Now you will need to update some things for Login. Please sign-in to https://dashboard.int.identitysandbox.gov/." # echo "Now you will need to update some things for Login. Please sign-in to https://dashboard.int.identitysandbox.gov/."
echo "Navigate to our application config: https://dashboard.int.identitysandbox.gov/service_providers/2640/edit?" # echo "Navigate to our application config: https://dashboard.int.identitysandbox.gov/service_providers/2640/edit?"
echo "There are two things to update." # echo "There are two things to update."
echo "1. You need to upload the public-$1.crt file generated as part of the previous command." # echo "1. You need to upload the public-$1.crt file generated as part of the previous command."
echo "2. You need to add two redirect URIs: https://getgov-$1.app.cloud.gov/openid/callback/login/ and # echo "2. You need to add two redirect URIs: https://getgov-$1.app.cloud.gov/openid/callback/login/ and
https://getgov-$1.app.cloud.gov/openid/callback/logout/ to the list of URIs." # https://getgov-$1.app.cloud.gov/openid/callback/logout/ to the list of URIs."
read -p "Please confirm when this is done (y/n) " -n 1 -r # read -p "Please confirm when this is done (y/n) " -n 1 -r
echo # echo
if [[ ! $REPLY =~ ^[Yy]$ ]] # if [[ ! $REPLY =~ ^[Yy]$ ]]
then # then
exit 1 # exit 1
fi # fi
echo "Database create succeeded and credentials created. Deploying the get.gov application to the new space $1..." echo "Database create succeeded and credentials created. Deploying the get.gov application to the new space $1..."
echo "Building assets..." echo "Building assets..."