aerosol 1.2.0 → 1.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 3fe36e5e375099bfc35214d89869ebfd01a56d31
-  data.tar.gz: 62408a6905eee21aa2b00963bf1b7839e0bd0255
+  metadata.gz: e06f594fcaf7833e8604356594161d4f73aee045
+  data.tar.gz: 3be47666d4d53efdfe61b265aaa330e5dea76fd9
 SHA512:
-  metadata.gz: 0fb1282a4e7a02d2a6e0e2fe6f07acb8e2c09bdd2132cb8e158205db96e6ce4740fb2f86f5d203a4c5427715dbc5a1d93e6958ccdd8f0be1358d7b9b9601108b
-  data.tar.gz: 9494fe769e3b3a4a923768d439e5eea4ca49e549ae3223544dfd269e00aed17639e0dfcdf4d022bdd965f42afe037aef1830cf13e2c407462817058fcbb3a1e7
+  metadata.gz: 50e43aaa626fdfe146e81b2b3e46871a81ed0349f7f8a7e41218c0dcb62bec57db132480df8f56e51a05f79ffa23abd9cfffcbd6e7647177d425a8eede41477d
+  data.tar.gz: a40123b77824b0790e2d138916e17a68eb9e9aab363319b04a587832b80883f9a444174208ee6925fec189eec36aa07c6cf8a3bd413ae60e14ae412a2cf64c49

data/Gemfile

@@ -1,3 +1,5 @@
 source "http://rubygems.org"
 
 gemspec
+
+gem 'net-ssh', '~> 2.0'

data/lib/aerosol/deploy.rb

@@ -67,15 +67,13 @@ class Aerosol::Deploy
     return if assume_role.nil?
     Aws.config.update(
       credentials: Aws::AssumeRoleCredentials.new(
-        role_arn: assume_role, role_session_name: 'aerosol'
+        role_arn: assume_role,
+        role_session_name: "aerosol-#{name}",
+        client: Aerosol::AWS.sts
       )
     )
   end
 
-  def sts
-    Aerosol::AWS.sts
-  end
-
   def run_post_deploy
     return if post_deploy_command.nil?
     info "running post deploy: #{post_deploy_command}"

data/lib/aerosol/env.rb

@@ -2,5 +2,19 @@
 class Aerosol::Env
   include Dockly::Util::DSL
 
+  dsl_attribute :assume_role
   dsl_class_attribute :deploy, Aerosol::Deploy, type: Array
+
+  default_value :assume_role, nil
+
+  def perform_role_assumption
+    return if assume_role.nil?
+    Aws.config.update(
+      credentials: Aws::AssumeRoleCredentials.new(
+        role_arn: assume_role,
+        role_session_name: "aerosol-#{name}",
+        client: Aerosol::AWS.sts
+      )
+    )
+  end
 end

data/lib/aerosol/rake_task.rb

@@ -51,8 +51,18 @@ namespace :aerosol do
 
   namespace :env do
     Aerosol.envs.values.each do |env|
-      desc "Run all of the deploys for #{env.name} in parallel"
-      multitask env.name => env.deploy.map { |dep| "aerosol:#{dep.name}:all" }
+      namespace env.name do
+        desc "Assumes a role if necessary for #{env.name}"
+        task :assume_role => 'aerosol:load' do |name|
+          Thread.current[:rake_task] = name
+          env.perform_role_assumption
+        end
+
+        desc "Run all of the deploys for #{env.name} in parallel"
+        multitask :run => env.deploy.map { |dep| "aerosol:#{dep.name}:all" }
+      end
+
+      task env.name => ["aerosol:env:#{env.name}:assume_role", "aerosol:env:#{env.name}:run"]
     end
   end
 

data/lib/aerosol/version.rb

@@ -1,5 +1,5 @@
 # Copyright Swipely, Inc.  All rights reserved.
 
 module Aerosol
-  VERSION = '1.2.0'
+  VERSION = '1.3.0'
 end

data/spec/aerosol/deploy_spec.rb

@@ -20,6 +20,40 @@ describe Aerosol::Deploy do
     end
   end
 
+  describe '#perform_role_assumption' do
+    context 'when assume_role is nil' do
+      it 'does not change the aws config' do
+        expect(Aws).to_not receive(:config)
+      end
+    end
+
+    context 'when assume_role exists' do
+      let(:assume_role) { 'arn:aws:sts::123456789123:role/role-aerosol' }
+
+      before do
+        Aerosol::AWS.sts.stub_responses(
+          :assume_role,
+          credentials: {
+            access_key_id: '123',
+            secret_access_key: '456',
+            session_token: '789',
+            expiration: Time.new + 60
+          }
+        )
+      end
+
+      after do
+        Aws.config.update(credentials: nil)
+      end
+
+      it 'should set the Aws.config[:credentials]' do
+        subject.assume_role(assume_role)
+        expect { subject.perform_role_assumption }
+          .to change { Aws.config[:credentials] }
+      end
+    end
+  end
+
   describe '#run_post_deploy' do
     context 'with no post_deploy_command' do
       before do

data/spec/aerosol/env_spec.rb

@@ -5,7 +5,6 @@ describe Aerosol::Env do
     let(:name) { "unique_name_#{Time.now.to_i}".to_sym }
     let!(:deploy) { Aerosol.deploy(name) { } }
 
-
     it 'adds a deploy to the list of deploys' do
       expect { subject.deploy(name) }
         .to change { subject.deploy }
@@ -13,4 +12,38 @@ describe Aerosol::Env do
         .to([deploy])
     end
   end
+
+  describe '#perform_role_assumption' do
+    context 'when assume_role is nil' do
+      it 'does not change the aws config' do
+        expect(Aws).to_not receive(:config)
+      end
+    end
+
+    context 'when assume_role exists' do
+      let(:assume_role) { 'arn:aws:sts::123456789123:role/role-aerosol' }
+
+      before do
+        Aerosol::AWS.sts.stub_responses(
+          :assume_role,
+          credentials: {
+            access_key_id: '123',
+            secret_access_key: '456',
+            session_token: '789',
+            expiration: Time.new + 60
+          }
+        )
+      end
+
+      after do
+        Aws.config.update(credentials: nil)
+      end
+
+      it 'should set the Aws.config[:credentials]' do
+        subject.assume_role(assume_role)
+        expect { subject.perform_role_assumption }
+          .to change { Aws.config[:credentials] }
+      end
+    end
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aerosol
 version: !ruby/object:Gem::Version
-  version: 1.2.0
+  version: 1.3.0
 platform: ruby
 authors:
 - Swipely, Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-07-27 00:00:00.000000000 Z
+date: 2015-12-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activerecord
@@ -293,3 +293,4 @@ test_files:
 - spec/aerosol_spec.rb
 - spec/spec_helper.rb
 - spec/support/vcr.rb
+has_rdoc: