EID and SVM login

.devcontainer/Dockerfile

@@ -22,9 +22,10 @@ RUN apt install -y chromium-driver
 RUN curl -sSL https://rvm.io/mpapis.asc | gpg --import -
 RUN curl -sSL https://rvm.io/pkuczynski.asc | gpg --import -
 RUN curl -sSL https://get.rvm.io | bash -s
-RUN /bin/bash -l -c ". /etc/profile.d/rvm.sh && rvm install 2.7.5"
+RUN /bin/bash -l -c ". /etc/profile.d/rvm.sh && rvm install 3.2.1"
 
 # Install Rails
+RUN ln -s /bin/mkdir /usr/bin/mkdir
 RUN /bin/bash -l -c ". /etc/profile.d/rvm.sh && gem install rails webdrivers"
 RUN chown -R vscode /usr/local/rvm
 

.env.sample

@@ -5,6 +5,15 @@ ADMIN_USERNAME=admin
 ADMIN_PASSWORD=admin
 GOOGLE_CLIENT_ID=
 GOOGLE_CLIENT_SECRET=
+AUTH_EID_BASE_URL=
+AUTH_EID_PUBLIC_KEY=
+AUTH_EID_PRIVATE_KEY=
+
+APP_PARLIAMENT_VOTE_DATE=
+APP_PARLIAMENT_DELIVERY_BY_POST_DEADLINE_DATE=
+APP_PARLIAMENT_PICKUP_DEADLINE_DATE=
+APP_PARLIAMENT_VOTE_BY_POST_DEADLINE_DATE=
+APP_PARLIAMENT_REQUEST_SENDING_DEADLINE_DATE=
 
 DEFAULT_EMAIL_FROM=navody@digital
 
@@ -14,6 +23,8 @@ AUTOFORM_ACCESS_TOKEN=
 DATAHUB_URL=
 DATAHUB_ACCESS_TOKEN=
 
+DATAHUB_DATABASE_URL=
+
 AWS_KEY_ID=
 AWS_ACCESS_KEY=
 AWS_REGION=
@@ -25,6 +36,9 @@ DISABLED_FEATURES=
 RECAPTCHA_SITE_KEY=
 RECAPTCHA_SECRET_KEY=
 
+SLOVENSKO_SK_API_URL=
+SLOVENSKO_SK_API_EFORM_SUB=
+
 SITEMAP_BUCKET=
 SITEMAP_ACCESS_KEY_ID=
 SITEMAP_SECRET_ACCESS_KEY=

.github/workflows/slovensko_digital_ci.yml

@@ -1,18 +1,19 @@
 name: Slovensko.Digital CI
 
-on: 
-  push: 
+on:
+  push:
     branches: master
   pull_request:
     branches: '**'
-      
+
 jobs:
   test:
     runs-on: ubuntu-latest
 
     env:
       PGHOST: localhost
       RAILS_ENV: test
+      SLOVENSKO_SK_API_URL: https://test.slovensko.digital
 
     services:
       postgres:
@@ -31,6 +32,9 @@ jobs:
           bundler-cache: true
 
       - run: yarn install
+      - run: bundle exec rails webpacker:compile
+        env:
+          NODE_OPTIONS: "--openssl-legacy-provider"
       - run: bundle exec rails db:create db:structure:load --trace
 
       - uses: paambaati/codeclimate-action@v2.7.5

.gitlab-ci.yml

@@ -0,0 +1,63 @@
+image: alpine:latest
+
+variables:
+  DOCKER_DRIVER: overlay2
+  DOCKER_BUILDKIT: 0
+  AUTO_DEVOPS_BUILD_CACHE: registry
+  AUTO_DEPLOY_IMAGE_VERSION: 'v2.47.0'
+
+stages:
+  - build
+  - deploy
+
+include:
+  - template: Jobs/Build.gitlab-ci.yml
+
+staging:
+  extends: .auto-deploy
+  stage: deploy
+  script:
+    - auto-deploy check_kube_domain
+    - auto-deploy download_chart
+    - auto-deploy use_kube_context || true
+    - auto-deploy ensure_namespace
+    - auto-deploy create_secret
+    - auto-deploy deploy
+  environment:
+    name: staging
+    url: http://$CI_PROJECT_PATH_SLUG.$KUBE_INGRESS_BASE_DOMAIN
+  rules:
+    - if: '($CI_KUBERNETES_ACTIVE == null || $CI_KUBERNETES_ACTIVE == "") && ($KUBECONFIG == null || $KUBECONFIG == "")'
+      when: never
+    - when: on_success
+
+production:
+  extends: .auto-deploy
+  stage: deploy
+  script:
+    - auto-deploy check_kube_domain
+    - auto-deploy download_chart
+    - auto-deploy use_kube_context || true
+    - auto-deploy ensure_namespace
+    - auto-deploy create_secret
+    - auto-deploy deploy
+    - auto-deploy persist_environment_url
+  environment:
+    name: production
+    url: http://$CI_PROJECT_PATH_SLUG.$KUBE_INGRESS_BASE_DOMAIN
+  artifacts:
+    paths: [environment_url.txt]
+    when: always
+  allow_failure: false
+  rules:
+    - if: '($CI_KUBERNETES_ACTIVE == null || $CI_KUBERNETES_ACTIVE == "") && ($KUBECONFIG == null || $KUBECONFIG == "")'
+      when: never
+    - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
+      when: manual
+
+# The latest build job generates a dotenv report artifact with a CI_APPLICATION_TAG
+# that also includes the image digest. This configures Auto Deploy to receive
+# this artifact and use the updated CI_APPLICATION_TAG for deployments.
+.auto-deploy:
+  image: "registry.gitlab.com/gitlab-org/cluster-integration/auto-deploy-image:${AUTO_DEPLOY_IMAGE_VERSION}"
+  dependencies: [build]

.gitlab/auto-deploy-values.yaml

@@ -3,13 +3,23 @@ ingress:
     nginx.ingress.kubernetes.io/server-snippet: |
       location /sitemaps/sitemap.xml.gz {
         return 302 https://navodydigital.s3.eu-central-1.amazonaws.com/sitemaps/sitemap.xml.gz;
-      }      
+      }
+    nginx.ingress.kubernetes.io/proxy-body-size: 50m
 service:
   externalPort: 3000
   internalPort: 3000
+image:
+  secrets:
+  - name: skdigital-bonet-registry
 livenessProbe.initialDelaySeconds: 20
-readinessProbe.initialDelaySeconds: 20 
+readinessProbe.initialDelaySeconds: 20
 application.migrateCommand: ["bundle", "exec", "rails", "db:migrate"]
+resources:
+  requests:
+    cpu: 20m
+    memory: 450Mi
+  limits:
+    memory: 1Gi
 workers:
   clock:
     replicaCount: "1"
@@ -27,6 +37,12 @@ workers:
       command:
         - "pgrep"
         - "bundle"
+    resources:
+      requests:
+        cpu: 10m
+        memory: 250Mi
+      limits:
+        memory: 300Mi
   worker:
     replicaCount: "1"
     command: ["bundle", "exec", "que", "-w1", "./config/environment.rb"]
@@ -43,3 +59,9 @@ workers:
       command:
         - "pgrep"
         - "bundle"
+    resources:
+      requests:
+        cpu: 200m
+        memory: 250Mi
+      limits:
+        memory: 500Mi

.node-version

@@ -0,0 +1 @@
+16.15.1

.ruby-version

@@ -1 +1 @@
-2.7.5
+3.2.1

.tool-versions

@@ -0,0 +1 @@
+ruby 3.2.1

Dockerfile

@@ -1,7 +1,7 @@
-FROM ruby:2.7.5
+FROM ruby:3.2.1
 
 # Install packages
-RUN curl -sL https://deb.nodesource.com/setup_12.x | bash -
+RUN curl -sL https://deb.nodesource.com/setup_16.x | bash -
 RUN curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add -
 RUN echo "deb https://dl.yarnpkg.com/debian/ stable main" | tee /etc/apt/sources.list.d/yarn.list
 RUN apt-get update -qq && apt-get install -qq --no-install-recommends \

Gemfile

@@ -1,10 +1,10 @@
 source 'https://rubygems.org'
 git_source(:github) { |repo| "https://github.com/#{repo}.git" }
 
-ruby '2.7.5'
+ruby '3.2.1'
 
 # Bundle edge Rails instead: gem 'rails', github: 'rails/rails'
-gem 'rails', '~> 6.1.4.1'
+gem 'rails', '~> 6.1.7.3'
 gem 'rails-i18n'
 # Use postgresql as the database for Active Record
 gem 'pg'
@@ -34,11 +34,14 @@ gem 'jbuilder'
 # Use Capistrano for deployment
 # gem 'capistrano-rails', group: :development
 
+# Gems for tracking the statuses of jobs
 gem 'que'
+gem 'que-web'
 
 # Reduces boot times through caching; required in config/boot.rb
 gem 'bootsnap', require: false
 
+gem 'jwt'
 gem 'omniauth'
 gem 'omniauth-google-oauth2'
 gem 'omniauth-rails_csrf_protection'
@@ -47,6 +50,7 @@ gem 'pry-rails'
 
 gem 'aws-sdk-rails'
 gem "aws-sdk-s3", require: false
+gem 'aws-sdk-cloudwatch'
 
 gem 'rollbar'
 gem 'oj' # needed by rollbar
@@ -69,12 +73,14 @@ gem 'sib-api-v3-sdk'
 gem 'recaptcha'
 gem 'friendly_id'
 
+gem 'invisible_captcha'
+
 group :development, :test do
   # Call 'byebug' anywhere in the code to stop execution and get a debugger console
   gem 'byebug', platforms: [:mri, :mingw, :x64_mingw]
   gem 'dotenv-rails'
   gem 'factory_bot_rails'
-  gem 'rspec-rails', '4.0.0.beta4'
+  gem 'rspec-rails', '4.0.2'
   gem 'rspec_junit_formatter'
   gem 'faker'
 end
@@ -92,13 +98,15 @@ end
 
 group :test do
   # Adds support for Capybara system testing and selenium driver
-  gem 'capybara'
+  gem 'capybara', "~> 3.39.2"
   gem 'show_me_the_cookies'
-  gem 'selenium-webdriver'
-  gem 'webdrivers'
+  gem 'selenium-webdriver', "~> 4.9.0"
+  gem "webdrivers", "= 5.3.0"
   gem 'simplecov', '< 0.18' # https://github.com/codeclimate/test-reporter/issues/413
 end
 
 # Windows does not include zoneinfo files, so bundle the tzinfo-data gem
 gem 'tzinfo-data', platforms: [:mingw, :mswin, :x64_mingw, :jruby]
 gem 'hirb'
+
+gem "rails-controller-testing", "~> 1.0"