kibana/tasks/release_packages.js

import exec from './utils/exec';
import SimpleGit from 'simple-git';
import { promisify } from 'bluebird';
import readline from 'readline';

export default (grunt) => {
  const publishConfig = grunt.config.get('packages').publish;
  const platforms = grunt.config.get('platforms');

  function debS3(deb) {
    exec('deb-s3', [
      'upload',
      '--preserve-versions',
      deb.filePath,
      '--bucket', deb.bucket,
      '--prefix', deb.prefix,
      '--sign', deb.signatureKeyId,
      '--arch', deb.arch,
      `--access-key-id=${deb.awsKey}`,
      `--secret-access-key=${deb.awsSecret}`
    ]);
  }

  function rpmS3(rpm) {
    exec('rpm', [
      '--resign', rpm.filePath,
      '--define', '_signature gpg',
      '--define', `_gpg_name ${rpm.signingKeyName}`
    ]);

    exec('rpm-s3', [
      '-v',
      '-b', rpm.bucket,
      '-p', rpm.prefix,
      '--sign',
      '--visibility', 'public-read',
      '-k', '100',
      rpm.filePath,
      '-r', 'external-1'
    ], {
      env: Object.assign({}, {
        'AWS_ACCESS_KEY': rpm.awsKey,
        'AWS_SECRET_KEY': rpm.awsSecret
      }, process.env)
    });
  }

  grunt.registerTask('publishPackages:staging', [
    '_publishPackages:confirm',
    '_publishPackages:upload:staging',
  ]);

  grunt.registerTask('publishPackages:production', [
    '_publishPackages:confirm',
    '_publishPackages:upload:production',
  ]);

  grunt.registerTask('_publishPackages:confirm', function () {
    function abort() {
      grunt.fail.fatal('Aborting publish');
    }

    var rl = readline.createInterface({
      input: process.stdin,
      output: process.stdout
    });

    rl.on('close', this.async());
    rl.on('SIGINT', () => abort());
    rl.question('Publish packages to s3? [N/y] ', function (resp) {
      if (resp.toLowerCase().trim()[0] === 'y') return rl.close();
      abort();
    });
  });

  grunt.registerTask('_publishPackages:upload', function (environment) {
    const aws = grunt.file.readJSON('.aws-config.json');
    const signature = grunt.file.readJSON('.signing-config.json');
    const done = this.async();
    const simpleGit = new SimpleGit();
    const revparse = promisify(simpleGit.revparse, simpleGit);

    return revparse(['--short', 'HEAD'])
    .then(hash => {
      const trimmedHash = hash.trim();
      platforms.forEach((platform) => {
        if (platform.debPath) {
          debS3({
            filePath: platform.debPath,
            bucket: publishConfig[environment].bucket,
            prefix: publishConfig[environment].debPrefix.replace('XXXXXXX', trimmedHash),
            signatureKeyId: signature.id,
            arch: platform.name.match('x64') ? 'amd64' : 'i386',
            awsKey: aws.key,
            awsSecret: aws.secret
          });
        }

        if (platform.rpmPath) {
          rpmS3({
            filePath: platform.rpmPath,
            bucket: publishConfig[environment].bucket,
            prefix: publishConfig[environment].rpmPrefix.replace('XXXXXXX', trimmedHash),
            signingKeyName: signature.name,
            awsKey: aws.key,
            awsSecret: aws.secret
          });
        }
      });
      done();
    });
  });
};