first commit

Author: aaron-steinfeld

.circleci/config.yml

@@ -0,0 +1,143 @@
+version: 2.1
+
+orbs:
+  codecov: codecov/codecov@1
+  snyk: snyk/[email protected]
+
+executors:
+  java:
+    docker:
+      - image: cimg/openjdk:11.0
+  helm:
+    docker:
+      - image: hypertrace/helm-gcs-packager:0.1.1
+commands:
+  gradle:
+    description: 'Run the provided gradle command'
+    parameters:
+      args:
+        type: string
+      when:
+        default: "on_success"
+        type: enum
+        enum: ["on_fail", "on_success", "always"]
+    steps:
+      - run:
+          name: << parameters.args >>
+          command:  ./gradlew << parameters.args >> --info --max-workers=2 -Dorg.gradle.jvmargs=-Xmx2g -Dorg.gradle.console=plain --continue
+          when: << parameters.when >>
+  setup_build_environment:
+    description: 'Generates cache key from a hash of all gradle files'
+    steps:
+      - checkout
+      - run:
+          name: Generate cache key
+          command: find . -type f -name "*.gradle*" -exec shasum {} + | sort > /tmp/checksum.txt && cat /tmp/checksum.txt
+      - restore_cache:
+          keys:
+            - v1-dependencies-{{ checksum "/tmp/checksum.txt" }}
+            # fallback to using the latest cache if no exact match is found
+            - v1-dependencies-
+  populate_and_save_cache:
+    description: 'Downloads all gradle dependencies and uploads cache for later use'
+    steps:
+      - gradle:
+          args: downloadDependencies
+      - save_cache:
+          paths:
+            - ~/.gradle
+          key: v1-dependencies-{{ checksum "/tmp/checksum.txt" }}
+
+jobs:
+  build:
+    executor: java
+    steps:
+      - setup_build_environment
+      - setup_remote_docker
+      - populate_and_save_cache
+      - gradle:
+          args: build dockerBuildImages
+      - gradle:
+          args: jacocoTestReport
+      - gradle:
+          args: copyAllReports --output-dir=/tmp/test-reports
+          when: always
+      - codecov/upload
+      - store_test_results:
+          path: /tmp/test-reports
+      - store_artifacts:
+          path: /tmp/test-reports
+          destination: reports
+  snyk-scan:
+    executor: java
+    environment:
+      GRADLE_OPTS: -Dorg.gradle.workers.max=1 # Snyk doesn't handle parallelism well
+    steps:
+      - setup_build_environment
+      - snyk/scan:
+          additional-arguments: --all-sub-projects
+
+  publish:
+    executor: java
+    steps:
+      - setup_build_environment
+      - setup_remote_docker
+      - gradle:
+          args: :tag -Prelease
+      - add_ssh_keys:
+          fingerprints:
+            - 'b9:bd:a2:02:5b:02:ec:2e:53:b4:de:f1:57:45:0a:e6'
+      - run: git push origin $(./gradlew -q :printVersion)
+      - gradle:
+          args: dockerPushImages
+  validate-charts:
+    executor: helm
+    steps:
+      - checkout
+      - run:
+          name: Helm Charts Lint and Template Render
+          command: |
+            helm lint --strict ./helm/
+            helm template ./helm/
+  package-charts:
+    executor: helm
+    steps:
+      - checkout
+      - run:
+          name: Package and Publish Helm Charts
+          command: |
+            CHART_VERSION=$(git describe --abbrev=0)
+            CHART_NAME=$(awk '/^name:/ {print $2}' ./helm/Chart.yaml)
+            export GOOGLE_APPLICATION_CREDENTIALS=${HOME}/helm-gcs-key.json
+            echo ${HELM_GCS_CREDENTIALS} > ${GOOGLE_APPLICATION_CREDENTIALS}
+            helm dependency update ./helm/
+            helm repo add helm-gcs ${HELM_GCS_REPOSITORY}
+            helm package --version ${CHART_VERSION} --app-version ${CHART_VERSION} ./helm/
+            helm gcs push ${CHART_NAME}-${CHART_VERSION}.tgz helm-gcs --public --retry
+
+workflows:
+  version: 2
+  build-and-publish:
+    jobs:
+      - build
+      - validate-charts
+      - snyk-scan:
+          context: hypertrace-vulnerability-scanning
+      - publish:
+          context: hypertrace-publishing
+          requires:
+            - build
+            - snyk-scan
+            - validate-charts
+          filters:
+            branches:
+              only:
+                - master
+      - package-charts:
+          context: hypertrace-publishing
+          requires:
+            - publish
+          filters:
+            branches:
+              only:
+                - master

.github/CODEOWNERS

@@ -0,0 +1,4 @@
+# Each line is a file pattern followed by one or more owners.
+
+# global
+* @aaron-steinfeld @tim-mwangi

.gitignore

@@ -0,0 +1,7 @@
+# Ignore Gradle project-specific cache directory
+.gradle
+
+# Ignore Gradle build output directory
+build
+
+.idea