Merge pull request #2 from Ballista-lTD/1-test

all working

.github/workflows/branch-deploy.yml

@@ -11,6 +11,9 @@ jobs:
     name: runner / rspec
     runs-on: ubuntu-20.04
 
+    env:
+      GITHUB_ORG_TOKEN: ${{ secrets.ORG_TOKEN }}
+
     steps:
       - name: branch-deploy
         id: branch-deploy
@@ -31,7 +34,7 @@ jobs:
 
       # Here we run a deploy. It is "gated" by the IssueOps logic and will only run if the outputs from our branch-deploy step indicate that the workflow should continue
       - name: deploy
-#        if: ${{ steps.branch-deploy.outputs.continue == 'true' && steps.branch-deploy.outputs.noop != 'true' }}
+        if: ${{ steps.branch-deploy.outputs.continue == 'true' && steps.branch-deploy.outputs.noop != 'true' }}
         run: |
           set -o pipefail
           script/deploy | tee deploy.out

.github/workflows/checksum.yml

@@ -11,7 +11,7 @@ permissions:
 jobs:
   rubocop:
     name: runner
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
 
     steps:
       - uses: ruby/setup-ruby@cd4241788aec4fdcd3325da7068efa9b62a017af

.github/workflows/manager.yml

@@ -11,7 +11,7 @@ permissions:
 jobs:
   rubocop:
     name: runner
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
 
     steps:
       - uses: ruby/setup-ruby@cd4241788aec4fdcd3325da7068efa9b62a017af

Gemfile

@@ -11,3 +11,4 @@ gem "concurrent-ruby"
 gem "sawyer"
 gem 'debase'
 gem 'ruby-debug-ide'
+gem 'entitlements-github-plugin'

Gemfile.lock

@@ -5,16 +5,23 @@ GEM
       public_suffix (>= 2.0.2, < 5.0)
     concurrent-ruby (1.1.9)
     contracts (0.16.0)
-    debase (0.2.4.1)
-      debase-ruby_core_source (>= 0.10.2)
-    debase-ruby_core_source (0.10.15)
+    debase (0.2.5.beta2)
+      debase-ruby_core_source (>= 0.10.12)
+    debase-ruby_core_source (3.2.0)
     entitlements (0.1.7)
       concurrent-ruby (= 1.1.9)
       contracts (= 0.16.0)
       faraday (>= 0.17.3, < 0.18)
       net-ldap (~> 0.17.0)
       octokit (~> 4.18)
       optimist (= 3.0.0)
+    entitlements-github-plugin (0.0.1)
+      concurrent-ruby (= 1.1.9)
+      contracts (= 0.16.0)
+      faraday (>= 0.17.3, < 0.18)
+      net-ldap (~> 0.17.0)
+      octokit (~> 4.18)
+      optimist (= 3.0.0)
     faraday (0.17.4)
       multipart-post (>= 1.2, < 3)
     multipart-post (2.1.1)
@@ -33,15 +40,19 @@ GEM
 
 PLATFORMS
   ruby
-  x86_64-darwin-19
+  universal-darwin-22
 
 DEPENDENCIES
   concurrent-ruby
   contracts
   debase
   entitlements (= 0.1.7)
+  entitlements-github-plugin
   faraday
   net-ldap
   octokit
   ruby-debug-ide
   sawyer
+
+BUNDLED WITH
+   2.1.4

config/entitlements.yaml

@@ -11,42 +11,29 @@ rescue Exception
 end
 -%>
 ---
-backends:
-  dockerized-ldap:
-    ldap_binddn: "cn=admin,dc=example,dc=org"
-    ldap_bindpw: "admin"
-    ldap_uri: "ldaps://127.0.0.1"
-    disable_ssl_verification: true
-    person_dn_format: uid=%KEY%,ou=People,dc=example,dc=org
-    type: ldap
 configuration_path: ../
-extras:
-  ldap_group: {}
-
 groups:
-  dummy-ou:
-    type: dummy
-  dummy-ou-renamed:
-    type: dummy
-    dir: dummy-ou-special
-  entitlements:
-    backend: dockerized-ldap
-    base: ou=Entitlements,ou=Groups,dc=example,dc=org
-  entitlements/strictly-audited:
-    backend: dockerized-ldap
-    base: ou=strictly-audited,ou=Entitlements,ou=Groups,dc=example,dc=org
-    dir: entitlements/strictly-audited
-    create_if_missing: true
+  github.com/Ballista-lTD/org:
+    addr: https://api.github.com
+    base: ou=org,ou=Ballista-lTD,ou=GitHub,dc=github,dc=com
+    dir: github.com/Ballista-lTD/org
+    org: Ballista-lTD
+    token: <%= ENV["GITHUB_ORG_TOKEN"] %>
+    type: "github_org"
+
+  github.com/Ballista-lTD/teams:
+    addr: https://api.github.com
+    base: ou=teams,ou=Ballista-lTD,ou=GitHub,dc=github,dc=com
+    dir: github.com/Ballista-lTD/teams
+    org: Ballista-lTD
+    token: <%= ENV["GITHUB_ORG_TOKEN"] %>
+    type: "github_team"
+
 people:
-  ldap:
-    type: ldap
+  yaml:
+    type: yaml
     config:
-      base: ou=People,dc=example,dc=org
-      ldap_binddn: "cn=admin,dc=example,dc=org"
-      ldap_bindpw: "admin"
-      ldap_uri: "ldaps://127.0.0.1"
-      disable_ssl_verification: true
-      person_dn_format: uid=%KEY%,ou=People,dc=example,dc=org
-      additional_attributes:
-        - shellentitlements
-people_data_source: ldap
+      filename: config/people.yaml
+      person_dn_format: uid=%KEY%,ou=People,dc=ballista,dc=tech
+
+people_data_source: yaml

config/people.yaml

@@ -0,0 +1,13 @@
+---
+rohittp0:
+  dn: uid=rohit,ou=People,dc=ballista,dc=tech
+  githubdotcomid: rohittp0
+  manager: rohittp0
+varshashaheen:
+  dn: uid=rohit,ou=People,dc=ballista,dc=tech
+  githubdotcomid: varshashaheen
+  manager: rohittp0
+sunithvs:
+  dn: uid=rohit,ou=People,dc=ballista,dc=tech
+  githubdotcomid: sunithvs
+  manager: rohittp0

github.com/Ballista-lTD/org/admin.txt

@@ -0,0 +1,2 @@
+description = Admins of the Ballista-lTD
+username=rohittp0

github.com/github-entitlements/org/member.txt → github.com/Ballista-lTD/org/member.txt

@@ -1,4 +1,8 @@
 description = Members of the github-entitlements
 
 # Prefer admin over member if defined in both places
-group != github.com/github/org/admin
+group != github.com/Ballista-lTD/org/admin
+
+metadata_no_conditions_ok = true
+
+username=varshashaheen

github.com/Ballista-lTD/teams/test.txt

@@ -0,0 +1,4 @@
+description = Members of test team
+
+username=varshashaheen
+username=rohittp0

lib/entitlements-and-plugins.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+ENV["BUNDLE_GEMFILE"] = File.expand_path("../../Gemfile", File.dirname(__FILE__))
+require "bundler/setup"
+require "entitlements"
+
+# require entitlements plugins here
+require "entitlements/backend/github_org"
+require "entitlements/backend/github_team"
+require "entitlements/service/github"

script/deploy

@@ -10,14 +10,6 @@ export PATH=/usr/share/rbenv/shims:$PATH
 export RBENV_VERSION="$(cat "$DIR/.ruby-version")"
 export LDAP_DISABLE_SSL_VERIFICATION=true
 
-echo "===================================================================="
-echo "Starting LDAP Container"
-echo "Date: $(date), Environment: entitlements-config"
-echo "===================================================================="
-docker rm entitlements-openldap
-docker run -p 389:389 -p 636:636 --env LDAP_TLS_VERIFY_CLIENT=try --volume ${DIR}/script/ldap-server/bootstrap.ldif:/container/service/slapd/assets/config/bootstrap/ldif/custom/50-bootstrap.ldif --name entitlements-openldap --detach osixia/openldap:1.5.0 --copy-service
-sleep 10
-
 echo "===================================================================="
 echo "Executing deploy-entitlements -c ${DIR}/config/entitlements.yaml" "$@"
 echo "Date: $(date), Environment: entitlements-config"
@@ -28,6 +20,4 @@ set +e
 exitcode=${PIPESTATUS[0]}
 echo "exit=${exitcode}" >> "${DIR}/deploy-output.txt"
 
-docker kill entitlements-openldap 2&> /dev/null
-docker rm entitlements-openldap 2&> /dev/null
 exit ${exitcode}