Skip to content

Commit 5ad6173

Browse files
authored
Merge pull request #5 from topcoder-platform/devsts
STS change
2 parents e437e11 + ec4e643 commit 5ad6173

File tree

3 files changed

+74
-32
lines changed

3 files changed

+74
-32
lines changed

awsconfiguration.sh

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
#!/bin/bash
2+
AWSENV=$1
3+
AWS_REGION=$2
4+
BASE64_DECODER="base64 -d" # option -d for Linux base64 tool
5+
echo AAAA | base64 -d > /dev/null 2>&1 || BASE64_DECODER="base64 -D" # option -D on MacOS
6+
decode_base64_url() {
7+
local len=$((${#1} % 4))
8+
local result="$1"
9+
if [ $len -eq 2 ]; then result="$1"'=='
10+
elif [ $len -eq 3 ]; then result="$1"'='
11+
fi
12+
echo "$result" | tr '_-' '/+' | $BASE64_DECODER
13+
}
14+
15+
if [ -z "$AWS_REGION" ];
16+
then
17+
AWS_REGION="us-east-1"
18+
fi
19+
auth0cmd=$(echo "curl -X POST $CI_AUTH0_URL -H 'Content-Type: application/json' -d '{ \"client_id\": \"$CI_AUTH0_CLIENTID\", \"client_secret\": \"$CI_AUTH0_CLIENTSECRET\", \"audience\": \"$CI_AUTH0_AUDIENCE\", \"grant_type\": \"client_credentials\" , \"environment\" : \"$AWSENV\" , \"username\" : \"$CIRCLE_PROJECT_USERNAME\" , \"reponame\" : \"$CIRCLE_PROJECT_REPONAME\", \"build_num\": \"$CIRCLE_BUILD_NUM\", \"branch\": \"$CIRCLE_BRANCH\"}'")
20+
token=$( eval $auth0cmd | jq -r .access_token )
21+
tokenjsonformat=$( decode_base64_url $(echo -n $token | cut -d "." -f 2) )
22+
AWS_ACCESS_KEY_ID=$(echo $tokenjsonformat | jq -r . | grep AWS_ACCESS_KEY | cut -d '"' -f 4)
23+
AWS_SECRET_ACCESS_KEY=$(echo $tokenjsonformat | jq -r . | grep AWS_SECRET_KEY | cut -d '"' -f 4)
24+
AWS_ENVIRONMENT=$(echo $tokenjsonformat | jq -r . | grep AWS_ENVIRONMENT | cut -d '"' -f 4)
25+
AWS_SESSION_TOKEN=$(echo $tokenjsonformat | jq -r . | grep AWS_SESSION_TOKEN | cut -d '"' -f 4)
26+
AWS_ACCOUNT_ID=$(echo $tokenjsonformat | jq -r . | grep AWS_ACCOUNT_ID | cut -d '"' -f 4)
27+
aws configure set default.region $AWS_REGION
28+
aws configure set default.output json
29+
aws configure set aws_access_key_id $AWS_ACCESS_KEY_ID
30+
aws configure set aws_secret_access_key $AWS_SECRET_ACCESS_KEY
31+
aws configure set aws_session_token $AWS_SESSION_TOKEN
32+
33+
echo "">awsenvconf
34+
echo "export AWS_REGION=\"$AWS_REGION\"">>awsenvconf
35+
echo "export AWS_ACCESS_KEY_ID=\"$AWS_ACCESS_KEY_ID\"">>awsenvconf
36+
echo "export AWS_SECRET_ACCESS_KEY=\"$AWS_SECRET_ACCESS_KEY\"">>awsenvconf
37+
echo "export AWS_ENVIRONMENT=\"$AWS_ENVIRONMENT\"">>awsenvconf
38+
echo "export AWS_SESSION_TOKEN=\"$AWS_SESSION_TOKEN\"">>awsenvconf
39+
echo "export AWS_ACCOUNT_ID=\"$AWS_ACCOUNT_ID\"">>awsenvconf
40+
41+

buildenv.sh

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -84,21 +84,21 @@ do
8484
esac
8585
done
8686

87-
AWS_ACCESS_KEY_ID=$(eval "echo \$${ENV}_AWS_ACCESS_KEY_ID")
88-
AWS_SECRET_ACCESS_KEY=$(eval "echo \$${ENV}_AWS_SECRET_ACCESS_KEY")
89-
AWS_REGION=$(eval "echo \$${ENV}_AWS_REGION")
90-
if [ -z $AWS_REGION ];
91-
then
92-
AWS_REGION="us-east-1"
93-
fi
94-
if [ -z $AWS_ACCESS_KEY_ID ] || [ -z $AWS_SECRET_ACCESS_KEY ] ;
95-
then
96-
log "AWS Secret Parameters are not configured in circleci/environment"
97-
usage
98-
exit 1
99-
else
100-
configure_aws_cli
101-
fi
87+
# AWS_ACCESS_KEY_ID=$(eval "echo \$${ENV}_AWS_ACCESS_KEY_ID")
88+
# AWS_SECRET_ACCESS_KEY=$(eval "echo \$${ENV}_AWS_SECRET_ACCESS_KEY")
89+
# AWS_REGION=$(eval "echo \$${ENV}_AWS_REGION")
90+
# if [ -z $AWS_REGION ];
91+
# then
92+
# AWS_REGION="us-east-1"
93+
# fi
94+
# if [ -z $AWS_ACCESS_KEY_ID ] || [ -z $AWS_SECRET_ACCESS_KEY ] ;
95+
# then
96+
# log "AWS Secret Parameters are not configured in circleci/environment"
97+
# usage
98+
# exit 1
99+
# else
100+
# configure_aws_cli
101+
# fi
102102
ENV_CONFIG=`echo "$ENV" | tr '[:upper:]' '[:lower:]'`
103103
download_buildenvfile
104104
uploading_buildenvvar

master_deploy.sh

Lines changed: 18 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -10,10 +10,11 @@ SECRET_FILE_NAME="./buildsecvar.conf"
1010
SHARED_PROPERTY_FILENAME=""
1111

1212
#Common Varibles
13-
AWS_ACCESS_KEY_ID=""
14-
AWS_SECRET_ACCESS_KEY=""
15-
AWS_ACCOUNT_ID=""
16-
AWS_REGION=""
13+
#echo $AWS_ACCESS_KEY_ID
14+
# AWS_ACCESS_KEY_ID=""
15+
# AWS_SECRET_ACCESS_KEY=""
16+
# AWS_ACCOUNT_ID=""
17+
# AWS_REGION=""
1718
TAG=""
1819
SEC_LIST=""
1920
COUNTER_LIMIT=12
@@ -643,19 +644,19 @@ ENV_CONFIG=`echo "$ENV" | tr '[:upper:]' '[:lower:]'`
643644

644645
#Getting Deployment varaible only
645646

646-
AWS_ACCESS_KEY_ID=$(eval "echo \$${ENV}_AWS_ACCESS_KEY_ID")
647-
AWS_SECRET_ACCESS_KEY=$(eval "echo \$${ENV}_AWS_SECRET_ACCESS_KEY")
648-
AWS_ACCOUNT_ID=$(eval "echo \$${ENV}_AWS_ACCOUNT_ID")
649-
AWS_REGION=$(eval "echo \$${ENV}_AWS_REGION")
650-
if [ -z $AWS_ACCESS_KEY_ID ] || [ -z $AWS_SECRET_ACCESS_KEY ] || [ -z $AWS_ACCOUNT_ID ] || [ -z $AWS_REGION ];
651-
then
652-
log "AWS Secret Parameters are not configured in circleci/environment"
653-
usage
654-
exit 1
655-
else
656-
configure_aws_cli
657-
#aws configure list
658-
fi
647+
# AWS_ACCESS_KEY_ID=$(eval "echo \$${ENV}_AWS_ACCESS_KEY_ID")
648+
# AWS_SECRET_ACCESS_KEY=$(eval "echo \$${ENV}_AWS_SECRET_ACCESS_KEY")
649+
# AWS_ACCOUNT_ID=$(eval "echo \$${ENV}_AWS_ACCOUNT_ID")
650+
# AWS_REGION=$(eval "echo \$${ENV}_AWS_REGION")
651+
# if [ -z $AWS_ACCESS_KEY_ID ] || [ -z $AWS_SECRET_ACCESS_KEY ] || [ -z $AWS_ACCOUNT_ID ] || [ -z $AWS_REGION ];
652+
# then
653+
# log "AWS Secret Parameters are not configured in circleci/environment"
654+
# usage
655+
# exit 1
656+
# else
657+
# configure_aws_cli
658+
# #aws configure list
659+
# fi
659660

660661
download_envfile
661662
#decrypt_fileenc

0 commit comments

Comments
 (0)