#!
/usr/bin/env python3
import urllib, httplib2, json, time, sys, argparse
local = {'atp': "[Link] 'empacar':
"[Link]
team = {'atp': "[Link] 'empacar':
"[Link]
dev = {'atp': "[Link] 'empacar':
"[Link]
baprod = {'atp': "[Link] 'empacar':
"[Link]
prod = {'atp': "[Link] 'empacar': "[Link]
[Link]"}
endpoints = {'local': local, 'team': team, 'dev': dev, 'prod': prod, 'baprod':
baprod}
atp = None
empacar = None
http = None
def console_url(buildId):
return "%s/empacar/build-console/%s" % (empacar, buildId)
def build_url(projectName, submodule, tag, scanBugs):
sm = ""
if submodule != "":
sm = "&submodule=%s" % submodule
return '%s/empacapi/build?projectName=%s&tag=%s%s&scanBugs=%s' % (empacar,
projectName, tag, sm, scanBugs)
def verification_url(buildId):
return "%s/empacapi/build/status/%s" % (empacar, buildId)
def init_endpoints(environment):
global empacar
empacar = endpoints[environment]['empacar']
global atp
atp = endpoints[environment]['atp']
def init_http_client(env):
global http
cacerts_file = '/etc/ssl/certs/[Link]'
if env in ['team']:
cacerts_file = '/usr/local/utils/cgp-cert-%[Link]' % env
if env == 'local':
cacerts_file = '/usr/local/utils/[Link]'
http = [Link](ca_certs = cacerts_file)
def authenticate(client_id, client_secret):
params = { 'grant_type': 'client_credentials', 'scope': 'openid empacar
cloudia', 'client_id': client_id, 'client_secret': client_secret }
url = atp + '/token'
headers = {'Content-Type': 'application/x-www-form-urlencoded'}
response, content = [Link](url, 'POST',
body=[Link](params), headers=headers)
if [Link] != 200:
print(content)
[Link]("ATP3 login failed. url=" + url)
obj = [Link]([Link]('utf-8'))
return obj['id_token']
def launch_build(jwt, projectName, submodule, tag, scanBugs):
headers = {'Authorization': 'Bearer ' + jwt}
url = build_url(projectName, submodule, tag, scanBugs)
response, content = [Link](url, 'POST', headers=headers)
if [Link] != 200:
[Link]("Failure creating build task in empacar (reason: %s)." %
[Link]("utf-8"))
return [Link]("utf-8")
def verify_build_status(jwt, project, tag, buildId):
headers = {'Authorization': 'Bearer ' + jwt}
url = verification_url(buildId)
response, content = [Link](url, 'GET', headers=headers)
if [Link] == 200:
obj = [Link]([Link]("utf-8"))
status = obj[u'status']
print("Current status: %s" % [Link]())
if status == u"completed":
print("Artifact published to: %s" % obj[u'artifactUrl'])
print("Deploy finish with status [%s]" % [Link]())
[Link]()
if status == u"error" or status == u"cancelled":
[Link]("Deploy finish with status [%s]. Check for details at %s" %
([Link](), console_url(buildId)))
else:
print("Error verifying state (response status code: %d)" % [Link])
def parsed_args():
parser = [Link](description='Create (build) an artifact using
Empacar API, and publish it to Despegar verified nexus')
parser.add_argument('-u', metavar='USR', type=str, help='ATP3 client id',
required=True)
parser.add_argument('-p', metavar='PASS', type=str, help='ATP3 client secret',
required=True)
parser.add_argument('-r', metavar='PROJECT', type=str, help='Project name',
required=True)
parser.add_argument('-t', metavar='TAG', type=str, help='Tag name',
required=True)
parser.add_argument('-s', metavar='SUBMODULE', type=str, help='Project
submodule (not required)', default="")
parser.add_argument('-l', metavar='ENV', type=str, help='Cloudia environment
[dev, prod] where this script runs', choices=["local", "team", "dev", "prod",
"baprod"], default="dev")
parser.add_argument('--skip-scan', dest='skip-scan', action='store_true',
help='Do NOT scan for security vulnerabilities')
return vars(parser.parse_args())
if __name__ == "__main__":
args = parsed_args()
print(args)
user = args['u']
password = args['p']
projectName = args['r']
submodule = args['s']
tag = args['t']
scanBugs = 0 if args['skip-scan'] else 1
environment = args['l']
init_endpoints(environment)
init_http_client(environment)
# ATP3 authentication
jwt = authenticate(user, password)
# Build
buildId = launch_build(jwt, projectName, submodule, tag, scanBugs)
print("Build task started in empacar. Check progress at %s" %
console_url(buildId))
# Verify build status
while True:
verify_build_status(jwt, projectName, tag, buildId)
[Link](5)
