containers/aws-gcp-migration/aws/kubernetes/sql/populate-accounts-db.yaml (164 lines of code) (raw):
# Copyright 2020 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# kubectl create configmap accounts-schema-config --from-file=src/accounts-db/initdb/0-accounts-schema.sql --dry-run -o yaml (copy and add below)
# kubectl create configmap accounts-schema-config --from-file=src/accounts-db/initdb/1-load-testdata.sh --dry-run -o yaml (copy and add below)
apiVersion: v1
kind: ConfigMap
metadata:
name: accounts-schema-config
data:
initialize-database.sh: |
#!/bin/bash
COUNTER=0
SLEEP_TIME=10
DB_READY=1
INIT_SQL_SCRIPT="/scripts/0-accounts-schema.sql"
TEST_SQL_SCRIPT="/scripts/1-load-testdata.sh"
HOST=${1:-'127.0.0.1'}
PORT=${2:-'5432'}
DB_NAME=${3:-'default'}
echo "Host: ${HOST}, Port: ${PORT}, Database: ${DB_NAME}"
if [ "${DB_READY}" -eq 1 ]; then
echo "Running initialization script"
psql --host="${HOST}" --port="${PORT}" --dbname="${DB_NAME}" -f "${INIT_SQL_SCRIPT}"
if [ $? -gt 0 ]; then
echo "Problems running the initialization script"
else
echo "Run Test Data"
. ${TEST_SQL_SCRIPT}
fi
fi
0-accounts-schema.sql: |
/*
* Copyright 2020, Google LLC.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
CREATE TABLE IF NOT EXISTS users (
accountid CHAR(10) PRIMARY KEY,
username VARCHAR(64) UNIQUE NOT NULL,
passhash BYTEA NOT NULL,
firstname VARCHAR(64) NOT NULL,
lastname VARCHAR(64) NOT NULL,
birthday DATE NOT NULL,
timezone VARCHAR(8) NOT NULL,
address VARCHAR(64) NOT NULL,
state CHAR(2) NOT NULL,
zip VARCHAR(5) NOT NULL,
ssn CHAR(11) NOT NULL
);
CREATE INDEX IF NOT EXISTS idx_users_accountid ON users (accountid);
CREATE INDEX IF NOT EXISTS idx_users_username ON users (username);
CREATE TABLE IF NOT EXISTS contacts (
username VARCHAR(64) NOT NULL,
label VARCHAR(128) NOT NULL,
account_num CHAR(10) NOT NULL,
routing_num CHAR(9) NOT NULL,
is_external BOOLEAN NOT NULL,
FOREIGN KEY (username) REFERENCES users(username)
);
CREATE INDEX IF NOT EXISTS idx_contacts_username ON contacts (username);
1-load-testdata.sh: |
#!/bin/bash
# Copyright 2020 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# Immediately exit if any error occurs during script execution.
set -o errexit
# Skip adding data if not enabled
if [ "$USE_DEMO_DATA" != "True" ]; then
echo "no demo users added"
exit 0
fi
# Expected environment variables
readonly ENV_VARS=(
"POSTGRES_DB"
"POSTGRES_USER"
"LOCAL_ROUTING_NUM"
)
add_user() {
# Usage: add_user "ACCOUNTID" "USERNAME" "FIRST_NAME"
echo "adding user: $2"
psql -h $HOST -p 5432 -X -v ON_ERROR_STOP=1 -v account="$1" -v username="$2" -v firstname="$3" -v passhash="$DEFAULT_PASSHASH" --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-EOSQL
INSERT INTO users VALUES (:'account', :'username', :'passhash', :'firstname', 'User', '2000-01-01', '-5', 'Bowling Green, New York City', 'NY', '10004', '111-22-3333') ON CONFLICT DO NOTHING;
EOSQL
}
add_external_account() {
# Usage: add_external_account "OWNER_USERNAME" "LABEL" "ACCOUNT" "ROUTING"
echo "user $1 adding contact: $2"
psql -h $HOST -p 5432 -X -v ON_ERROR_STOP=1 -v username="$1" -v label="$2" -v account="$3" -v routing="$4" --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-EOSQL
INSERT INTO contacts VALUES (:'username', :'label', :'account', :'routing', 'true') ON CONFLICT DO NOTHING;
EOSQL
}
add_contact() {
# Usage: add_contact "OWNER_USERNAME" "CONTACT_LABEL" "CONTACT_ACCOUNT"
echo "user $1 adding external account: $2"
psql -h $HOST -p 5432 -X -v ON_ERROR_STOP=1 -v username="$1" -v label="$2" -v account="$3" -v routing="$LOCAL_ROUTING_NUM" --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-EOSQL
INSERT INTO contacts VALUES (:'username', :'label', :'account', :'routing', 'false') ON CONFLICT DO NOTHING;
EOSQL
}
# Load test data into the database
create_accounts() {
# Add demo users.
add_user "1011226111" "testuser" "Test"
add_user "1033623433" "alice" "Alice"
add_user "1055757655" "bob" "Bob"
add_user "1077441377" "eve" "Eve"
# Make everyone contacts of each other
add_contact "testuser" "Alice" "1033623433"
add_contact "testuser" "Bob" "1055757655"
add_contact "testuser" "Eve" "1077441377"
add_contact "alice" "Testuser" "1011226111"
add_contact "alice" "Bob" "1055757655"
add_contact "alice" "Eve" "1077441377"
add_contact "bob" "Testuser" "1011226111"
add_contact "bob" "Alice" "1033623433"
add_contact "bob" "Eve" "1077441377"
add_contact "eve" "Testuser" "1011226111"
add_contact "eve" "Alice" "1033623433"
add_contact "eve" "Bob" "1055757655"
# Add external accounts
add_external_account "testuser" "External Bank" "9099791699" "808889588"
add_external_account "alice" "External Bank" "9099791699" "808889588"
add_external_account "bob" "External Bank" "9099791699" "808889588"
add_external_account "eve" "External Bank" "9099791699" "808889588"
}
main() {
# Check environment variables are set
for env_var in ${ENV_VARS[@]}; do
if [[ -z "${!env_var}" ]]; then
echo "Error: environment variable '$env_var' not set. Aborting."
exit 1
fi
done
# A password hash + salt for the demo password 'bankofanthos'
# Via Python3: bcrypt.hashpw('bankofanthos'.encode('utf-8'), bcrypt.gensalt()).hex()
DEFAULT_PASSHASH='\x2432622431322477595638423166664b50667a41524a6b69614d6c5075784847466961636b6d333349595952786d59645a6834435946696f49434943'
create_accounts
}
main
---
apiVersion: batch/v1
kind: Job
metadata:
name: populate-accounts-db
spec:
template:
spec:
shareProcessNamespace: true # Important to stop all processes
serviceAccountName: cymbalbank-sa
containers:
- name: populate-accounts-db
image: postgres:16.6-alpine@sha256:1d04b9ba1d4996401f2552b51beda8187f175c0645c091e4781134fc9c9a3eef
command: ['bash', '-c','. /scripts/initialize-database.sh cymbalbank.cx6oakwa20qh.us-west-1.rds.amazonaws.com 5432 accounts-db']
volumeMounts:
- name: scripts
mountPath: "/scripts"
readOnly: true
env:
- name: LOCAL_ROUTING_NUM
valueFrom:
configMapKeyRef:
name: environment-config
key: LOCAL_ROUTING_NUM
- name: USE_DEMO_DATA
valueFrom:
configMapKeyRef:
name: demo-data-config
key: USE_DEMO_DATA
- name: POSTGRES_DB
value: "accounts-db"
- name: PGHOSTADDR
value: cymbalbank.cx6oakwa20qh.us-west-1.rds.amazonaws.com
- name: POSTGRES_USER
value: postgres
- name: POSTGRES_PASSWORD
value: "Chiapet22!""
volumes:
- name: scripts
configMap:
name: accounts-schema-config
restartPolicy: Never
backoffLimit: 4