@@ -248,7 +248,7 @@ for listname in $Buffer_seclist;
248
248
do
249
249
local o=$IFS
250
250
IFS=$( echo -en " \n\b" )
251
- envvars=$( cat $listname .json | jq -r ' .app_var ' | jq ' . | to_entries[] | { "name": .key , "value": .value } ' | jq -s . )
251
+ envvars=$( cat $listname .json | jq -r " .app_var_ ${ENV} " | jq ' . | to_entries[] | { "name": .key , "value": .value } ' | jq -s . )
252
252
log " vars are fetched"
253
253
254
254
for s in $( echo $envvars | jq -c " .[]" ) ; do
@@ -489,12 +489,30 @@ deploy_s3bucket() {
489
489
exit 1
490
490
fi
491
491
}
492
+ download_configuration ()
493
+ {
494
+ DOWNLOAD_ENV=" PROD"
495
+ AWS_ACCESS_KEY_ID=$( eval " echo \$ ${DOWNLOAD_ENV} _AWS_ACCESS_KEY_ID" )
496
+ AWS_SECRET_ACCESS_KEY=$( eval " echo \$ ${DOWNLOAD_ENV} _AWS_SECRET_ACCESS_KEY" )
497
+ AWS_ACCOUNT_ID=$( eval " echo \$ ${DOWNLOAD_ENV} _AWS_ACCOUNT_ID" )
498
+ AWS_REGION=$( eval " echo \$ ${DOWNLOAD_ENV} _AWS_REGION" )
499
+ if [ -z $AWS_ACCESS_KEY_ID ] || [ -z $AWS_SECRET_ACCESS_KEY ] || [ -z $AWS_ACCOUNT_ID ] || [ -z $AWS_REGION ];
500
+ then
501
+ log " AWS Secret Parameters are not configured in circleci/environment"
502
+ usage
503
+ exit 1
504
+ else
505
+ configure_aws_cli
506
+ # aws configure list
507
+ fi
508
+ }
492
509
download_envfile ()
493
510
{
511
+ download_configuration
494
512
Buffer_seclist=$( echo $SEC_LIST | sed ' s/,/ /g' )
495
513
for listname in $Buffer_seclist ;
496
514
do
497
- aws s3 cp s3://tc-platform-${ENV_CONFIG} /securitymanager/$listname .json .
515
+ aws s3 cp s3://tc-platform-prod /securitymanager/$listname .json .
498
516
# cp $HOME/buildscript/securitymanager/$listname.json.enc .
499
517
# SECPASSWD=$(eval "echo \$${listname}")
500
518
# openssl enc -aes-256-cbc -d -md MD5 -in $listname.json.enc -out $listname.json -k $SECPASSWD
@@ -522,7 +540,7 @@ uploading_envvar()
522
540
# done
523
541
o=$IFS
524
542
IFS=$( echo -en " \n\b" )
525
- envvars=$( cat $listname .json | jq -r ' .awsdeployvar ' | jq ' . | to_entries[] | { "name": .key , "value": .value } ' | jq -s . )
543
+ envvars=$( cat $listname .json | jq -r " .awsdeployvar_ ${ENV} " | jq ' . | to_entries[] | { "name": .key , "value": .value } ' | jq -s . )
526
544
for s in $( echo $envvars | jq -c " .[]" ) ; do
527
545
# echo $envvars
528
546
varname=$( echo $s | jq -r " .name" )
@@ -539,12 +557,12 @@ configure_Lambda_template()
539
557
then
540
558
mkdir -p /home/circleci/project/config
541
559
Buffer_seclist=$( echo $SEC_LIST | sed ' s/,/ /g' )
542
- envvars=$( cat $listname .json | jq -c ' .app_var ' )
560
+ envvars=$( cat $listname .json | jq -c " .app_var_ ${ENV} " )
543
561
for listname in $Buffer_seclist ;
544
562
do
545
563
o=$IFS
546
564
IFS=$( echo -en " \n\b" )
547
- envvars=$( cat $listname .json | jq -c ' .app_var ' )
565
+ envvars=$( cat $listname .json | jq -c " .app_var_ ${ENV} " )
548
566
echo " $envvars " > /home/circleci/project/config/$AWS_LAMBDA_STAGE .json
549
567
sed -i ' s/\\n/\\\\n/g' /home/circleci/project/config/$AWS_LAMBDA_STAGE .json
550
568
# yq r $listname.json >$listname.yml
@@ -640,6 +658,7 @@ ENV_CONFIG=`echo "$ENV" | tr '[:upper:]' '[:lower:]'`
640
658
641
659
# Validating AWS configuration
642
660
661
+ download_envfile
643
662
644
663
# Getting Deployment varaible only
645
664
657
676
# aws configure list
658
677
fi
659
678
660
- download_envfile
679
+
661
680
# decrypt_fileenc
662
681
uploading_envvar
663
682
0 commit comments