Merge pull request #14 from omgnetwork/infra_v2

infra_v2

.circleci/config.yml

@@ -0,0 +1,45 @@
+version: 2.1
+jobs:
+  build:
+    machine:
+      image: ubuntu-1604:202004-01
+    steps:
+      - checkout
+      - run:
+          name: Build
+          command: |
+            make docker-build
+          no_output_timeout: 2400s
+
+  publish:
+    docker:
+      - image: google/cloud-sdk
+    environment:
+      GCR_PREFIX: gcr.io/omisego-development
+      IMMUTABILITY_IMAGE: omgnetwork/vault
+    steps:
+      - checkout
+      - run: |
+          export SEMVER=$(cat ./VERSION)
+          echo $GCLOUD_SERVICE_KEY | gcloud auth activate-service-account --key-file=-
+          gcloud -q auth configure-docker
+          docker tag $IMMUTABILITY_IMAGE:latest $GCR_PREFIX/$IMMUTABILITY_IMAGE:latest
+          docker tag $IMMUTABILITY_IMAGE:latest $GCR_PREFIX/$IMMUTABILITY_IMAGE:$SEMVER
+          docker push $GCR_PREFIX/$IMMUTABILITY_IMAGE:latest
+          docker push $GCR_PREFIX/$IMMUTABILITY_IMAGE:$SEMVER
+
+workflows:
+  version: 2
+  build-test-lint:
+    jobs:
+      - build
+      - publish:
+          requires: [build]
+          filters: &master_and_version_branches_and_all_tags
+            branches:
+              only:
+                - master
+                - /^v[0-9]+\.[0-9]+/
+            tags:
+              only:
+                - /.+/

.gitignore

@@ -5,7 +5,6 @@ immutability-eth-plugin-*-amd64*
 SHA256SUMS
 SHA256SUMS.sig
 plugins
-docker/ca
 docker/ganache_data
 **/eth-plugin
 eth-plugin*
@@ -19,5 +18,17 @@ terraform.tfvars
 .variables
 *.ovpn
 *.b64
-*.hcl
 unsealer/backup.snap
+.vscode
+docker/config/data
+docker/config/unseal.json
+docker/config/*.crt
+docker/config/*.key
+docker/config/*.cnf
+docker/config/*.csr
+docker/config/*.srl
+*.key.json
+credentials.json
+*.pem
+*.crt
+*.key

CHANGELOG.md

@@ -1,3 +1,41 @@
+## 0.0.6 (August 15, 2020)
+
+NEW FEATURES:
+
+* GCP KMS-based Auto Unseal
+* Raft-based Vault Backend
+* Enable GCR and KMS in the Vault GCP project with service accounts
+* CircleCI config to push `omgnetwork/vault` images into GCR
+
+N/A
+
+REFACTOR:
+
+* updated `VERSION` file to `0.0.6`
+* removal of the unsealer Vault server
+* clean Helm and Kubernetes from the infrastructure Terraform scripts
+* Helm and GCP are now separate deployments
+* cleaned firewall rules in the Vault infrastructure Terraform scripts
+* use golang 1.14 as the builder
+* stopped using `-dev` mode - use file backend to support snapshotting
+  - [x] `unseal.json` holds the keys
+  - [x] the Vault data is at `/home/vault/config/data` 
+* Update to github.com/ethereum/go-ethereum v1.9.16
+* Removed redundant types from array, slice or map composite literals.
+  - [x] `&framework.Path`
+  - [x] `&framework.FieldSchema`
+* Remove `activateChildChain`
+* Wallet Smoke Test 
+  - [x] Remove test of `activateChildChain`.
+* Re-generate Plasma bindings using v1.9.16 `abigen`
+* Update to hashicorp/vault v1.5.2
+* Use official hashicorp/vault helm chart
+* Removed the local copy of the helm chart
+* Standardize GCP resource names to be of the form omgnetwork-<resource>
+
+BUG FIXES:
+
+N/A
 ## 0.0.5 (January 18, 2020)
 
 NEW FEATURES:

Dockerfile

@@ -1,23 +1,26 @@
 # ****************************************************************************************
 # ******** Create a dev environment to build alpine vault plugins and build them *********
 # ****************************************************************************************
-FROM vault:latest as build
+
+FROM golang:1.14-alpine as build
 # Setup the alpine build environment for golang
 RUN apk add --update alpine-sdk
-RUN apk update && apk add go git openssh gcc musl-dev linux-headers
+RUN apk update && apk add git openssh gcc musl-dev linux-headers
+
 
 WORKDIR /app
 
 COPY go.mod .
 COPY go.sum .
 
 # Get deps - will also be cached if we won't change mod/sum
+RUN go version
 RUN go mod download
 
 COPY  / .
 RUN mkdir -p /app/bin \
-	&& GO111MODULE=on CGO_ENABLED=1 GOOS=linux go build -a -i -o /app/bin/immutability-eth-plugin . \
-	&& sha256sum -b /app/bin/immutability-eth-plugin > /app/bin/SHA256SUMS
+    && CGO_ENABLED=1 GOOS=linux go build -a -i -o /app/bin/immutability-eth-plugin . \
+    && sha256sum -b /app/bin/immutability-eth-plugin > /app/bin/SHA256SUMS
 
 # ***********************************************************
 # ********** This is our actual released container **********
@@ -26,6 +29,7 @@ FROM vault:latest
 # we pass epoch time so it always upgrades
 ARG always_upgrade
 RUN echo ${always_upgrade} > /dev/null && apk update && apk upgrade
+RUN apk add bash openssl jq
 USER vault
 WORKDIR /app
 RUN mkdir -p /home/vault/ca \

VERSION

@@ -1 +1 @@
-0.0.4
+0.0.6