cabal 0.4.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: cecf9ec3105375d57486f38da51b9b6de9550c52
+  data.tar.gz: a7b000ae04cc6b66b6217d498f948e6e979b3e7a
+SHA512:
+  metadata.gz: 55952970940db72b4e2e2836bea5885b26f7339a63f556d573dadcb21027370b58d90a2efb9f0580f4d48c2f9be75899dea0979e711fb812e4d83c4df66e0387
+  data.tar.gz: 04d16fe8c29d116e9606c35df5fe942a50ffd841726dedf9086ed8bd7cf1bf15eaaf2d2caf99134035a8805f3cb3c408d4345818c7ca3a008f4847b879aea940

data/.gitignore

@@ -0,0 +1,11 @@
+/.bundle/
+/.yardoc
+/Gemfile.lock
+/_yardoc/
+/coverage/
+/doc/
+/pkg/
+/spec/reports/
+/tmp/
+*~
+*.swp

data/.rspec

@@ -0,0 +1,2 @@
+--format documentation
+--color

data/.ruby-gemset

@@ -0,0 +1 @@
+cabal

data/.ruby-version

@@ -0,0 +1 @@
+2.2.2

data/.travis.yml

@@ -0,0 +1,3 @@
+language: ruby
+rvm:
+  - 2.2.2

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in cabal.gemspec
+gemspec

data/LICENSE.txt

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2015 Dennis Walters
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/README.md

@@ -0,0 +1,108 @@
+# Cabal #
+
+Cabal is a simple system for SSH key distribution and consumption. This is a CLI application that allows one to consume those keys.
+
+## Installation ##
+
+```ruby
+    $ gem install cabal
+```
+
+## Usage ##
+
+To get started, you'll need to create `.cabal.yml` in your user's home directory, and you'll need to provide at least the URL of your Cabal::API. If you plan to use the `ssh` command to connect to a server that has an authorized Cabal key, you'll also need to specify your access key and secret key:
+
+```yaml
+---
+:url: http://your-cabal-hostname/path/to/the/api
+:access_key: your-access-key
+:secret_key: your-secret-key
+```
+
+### Getting Help ###
+
+The `cabal` application provides some nicely-formatted help on the command line. To access the help, provided that you've created your `~/.cabal.yml`, run the following:
+
+```
+cabal help
+```
+
+That will output something like this:
+
+```
+NAME
+    cabal - An interface to the Cabal API
+
+SYNOPSIS
+    cabal [global options] command [command options] [arguments...]
+
+VERSION
+    0.2.0
+
+GLOBAL OPTIONS
+    --help    - Show this message
+    --version - Display the program version
+
+COMMANDS
+    help - Shows a list of commands or help for one command
+    key  - Get the public key for a cluster
+    ssh  - Connect to a node on a cluster
+```
+
+To get help on a specific command, you can `cabal help command` (ie `cabal help key`).
+
+### Getting A Public Key ###
+
+***To learn more, check out `cabal help key`***
+
+This is an unprivileged call, so you won't actually need an access key or a secret key. This is more for somebody that wants to use the cabal cli utility to rather than curl or the like to grab a public key from the API to install as an authorized key on their servers.
+
+To get a public key for a cluster named "totallyarealcluster," you'd do the following:
+
+```
+cabal key totallyarealcluster
+```
+
+Only one key can be retrieved per call, but we process all of the arguments as part of the cluster name. In short, all of the following variations have the same result:
+
+```
+cabal key "Totally a real cluster"
+cabal key "totally a real cluster"
+cabal key Totally a real clusteR
+cabal key totallyarealcluster
+```
+
+### Connecting To A Server ###
+
+***To learn more, check out `cabal help ssh`***
+
+This is a privileged call, so you need an access key and a secret key in your configuration file.
+
+To connect to a server that has an authorized key that was generated by your Cabal API, you'll do the following (providing the cluster name for the key is "totallyarealcluster"):
+
+```
+cabal ssh -c totallyarealcluster user@hostname
+```
+
+This basically does the following:
+
+* Retrieves the private key for "totallyarealcluster"
+* Adds the private key as an identity in your ssh-agent
+* Connects you to the server, forwarding your ssh-agent
+* Removes the key and **ALL** ssh-agent identities on disconnect
+
+## Development ##
+
+Branches and releases for this project are managed by [git-flow](https://github.com/nvie/gitflow).
+
+After checking out the repo, run `bin/setup` to install dependencies. Then, run `bin/console` for an interactive prompt that will allow you to experiment.
+
+## Contributing ##
+
+**Note: Please base all feature branches on the `develop` branch.**
+
+1. Fork it ( https://github.com/engineyard/cabal/fork )
+2. Create your feature branch (`git checkout -b my-new-feature`)
+3. Commit your changes (`git commit -am 'Add some feature'`)
+4. Push to the branch (`git push origin my-new-feature`)
+5. Create a new Pull Request against the `develop` branch

data/Rakefile

@@ -0,0 +1 @@
+require "bundler/gem_tasks"

data/cabal.gemspec

@@ -0,0 +1,35 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'cabal/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = "cabal"
+  spec.version       = Cabal::VERSION
+  spec.authors       = ["Dennis Walters"]
+  spec.email         = ["dwalters@engineyard.com"]
+
+  spec.summary       = %q{Retrieve SSH keys from the Cabal API}
+  spec.homepage      = "https://github.com/engineyard/cabal"
+  spec.license       = "MIT"
+
+  spec.files         = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features|Procfile|config.ru|bin|config|mock)/?}) }
+  spec.bindir        = "exe"
+  spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
+  spec.require_paths = ["lib"]
+
+  spec.add_development_dependency 'bundler', '~> 1.9'
+  spec.add_development_dependency 'rake', '~> 10.0'
+  spec.add_development_dependency 'aruba', '~> 0.9'
+  spec.add_development_dependency 'rspec', "~> 3.3"
+  spec.add_development_dependency 'yard', '~> 0.8.7'
+  spec.add_development_dependency 'factis', '~> 1.0'
+  spec.add_development_dependency 'simplecov', '~> 0.10'
+  spec.add_development_dependency 'webmock', '~> 1.22'
+  spec.add_development_dependency 'cabal-api', '~> 0.1'
+
+  spec.add_runtime_dependency 'cabal-util', '~> 0.1'
+  spec.add_runtime_dependency 'gli', '~> 2.13'
+  spec.add_runtime_dependency 'oj', '~> 2.12'
+  spec.add_runtime_dependency 'faraday', '~> 0.9'
+end

data/exe/cabal

@@ -0,0 +1,5 @@
+#!/usr/bin/env ruby
+
+require 'cabal/cli'
+
+exit Cabal::CLI.new(ARGV, STDIN, STDOUT, STDERR, Kernel).execute!

data/lib/cabal.rb

@@ -0,0 +1,8 @@
+require 'cabal/version'
+require 'cabal/util'
+require 'cabal/client'
+require 'cabal/ssh'
+
+module Cabal
+  # Your code goes here...
+end

data/lib/cabal/cli.rb

@@ -0,0 +1,60 @@
+require 'gli'
+require 'yaml'
+require 'cabal'
+require 'cabal/commands/key'
+require 'cabal/commands/ssh'
+
+module Cabal
+  class CLI
+    include GLI::App
+
+    attr_reader :stdin, :stdout, :stderr, :kernel, :argv
+
+    def initialize(argv, stdin=STDIN, stdout=STDOUT, stderr=STDERR, kernel=Kernel)
+      @argv, @stdin, @stdout, @stderr, @kernel = argv, stdin, stdout, stderr, kernel
+    end
+
+    def register_command(command)
+      command.bootstrap(self)
+    end
+
+    def cabal_yml
+       File.expand_path(File.join(ENV['HOME'], '.cabal.yml'))
+    end
+
+    def execute!
+      unless File.exist?(cabal_yml)
+        stderr.puts "Please create your config in #{cabal_yml}"
+        exit(1)
+      end
+
+      program_desc 'An interface to the Cabal API'
+      version Cabal::VERSION
+      subcommand_option_handling :normal
+      arguments :strict
+
+      pre do |global,command,options,args|
+        if File.exist?(cabal_yml)
+          config = YAML.load(File.read(cabal_yml))
+          global.merge!(config)
+          true
+        else
+          stderr.puts "Please create #{cabal_yml} and try again"
+          false
+        end
+      end
+
+      post do |global,command,options,args|
+      end
+
+      on_error do |exception|
+        true
+      end
+
+      register_command(Cabal::Commands::Key)
+      register_command(Cabal::Commands::SSH)
+
+      kernel.exit run(argv)
+    end
+  end
+end

data/lib/cabal/client.rb

@@ -0,0 +1,60 @@
+require 'faraday'
+require 'oj'
+
+module Cabal
+  class Client
+    attr_reader :api_base
+
+    def initialize(options = {})
+      @api_base = "#{options[:api_base]}/v2"
+      @access_key = options[:access_key]
+      @secret_key = options[:secret_key]
+      @connector = Faraday.new(url: api_base) do |faraday|
+        faraday.request  :url_encoded
+        faraday.adapter  Faraday.default_adapter
+      end
+    end
+
+    def private_key(cluster_name)
+      get("private-key/#{URI.encode(cluster_name)}")['private_ssh_key']
+    end
+
+    def public_key(cluster_name)
+      get("key/#{URI.encode(cluster_name)}")['public_ssh_key']
+    end
+
+    def get(endpoint, authenticated = nil)
+        response = connector.get {|req|
+          req.url endpoint
+          req.headers['Content-Type'] = 'application/json'
+          req.headers['Accept'] = 'application/json'
+          req.headers['Authorization'] = authorization
+        }
+        case response.status
+        when 200
+          Oj.load(response.body)
+        when 404
+          raise "Cabal::Client::NotFoundError"
+        when 401
+          raise "Cabal::Client::UnauthorizedError"
+        end
+    end
+
+    private
+    def access_key
+      @access_key
+    end
+
+    def secret_key
+      @secret_key
+    end
+
+    def authorization
+      "#{access_key}:#{secret_key}"
+    end
+
+    def connector
+      @connector
+    end
+  end
+end

data/lib/cabal/commands/key.rb

@@ -0,0 +1,32 @@
+module Cabal
+  module Commands
+    module Key
+      def self.bootstrap(obj)
+        obj.instance_eval do
+          desc 'Get the public key for a cluster'
+          long_desc <<-KEYDESC
+          In order to allow logins for Cabal users, you'll need to retrieve
+          a public SSH key for your cluster.
+          KEYDESC
+
+          arg 'cluster name'
+          command :key do |c|
+            c.action do |global_options, options, args|
+              unless global_options[:url]
+                stderr.puts "#{cabal_yml} must contain a :url: definition"
+                exit(1)
+              end
+
+              client = Cabal::Client.new(
+                api_base: global_options[:url],
+                access_key: global_options[:access_key],
+                secret_key: global_options[:secret_key],
+              )
+              stdout.puts client.public_key(args.join(' '))
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/cabal/commands/ssh.rb

@@ -0,0 +1,36 @@
+require 'cabal/ssh'
+
+module Cabal
+  module Commands
+    module SSH
+      def self.bootstrap(obj)
+        obj.instance_eval do
+          desc 'Connect to a node on a cluster'
+          long_desc <<-SSHDESC
+          SSHDESC
+
+          arg 'ssh signature'
+          command :ssh do |c|
+            c.desc 'The name of the cluster'
+            c.arg_name 'cluster'
+            c.flag [:c, :cluster]
+            c.action do |global_options, options, args|
+              unless global_options[:access_key] && global_options[:secret_key]
+                stderr.puts "You must have an access key and secret key"
+                exit(1)
+              end
+
+              client = Cabal::Client.new(
+                api_base: global_options[:url],
+                access_key: global_options[:access_key],
+                secret_key: global_options[:secret_key]
+              )
+
+              Cabal::SSH.connect(options[:cluster], args.shift, client)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/cabal/ssh.rb

@@ -0,0 +1,54 @@
+require 'cabal/util'
+require 'cabal/client'
+require 'tempfile'
+require 'securerandom'
+require 'uri'
+require 'fileutils'
+
+module Cabal
+  class SSH
+    def self.connect(cluster, ssh_signature, client)
+      new(cluster, ssh_signature, client).connect
+    end
+
+    def initialize(cluster, ssh_signature, client)
+      @cluster = cluster
+      @ssh_signature = ssh_signature
+      @client = client
+      @key_file = Tempfile.new(SecureRandom.hex(8))
+    end
+
+    def connect
+      private_key = client.private_key(cluster)
+      @key_file = Tempfile.new(SecureRandom.hex(8))
+      key_file.write(private_key)
+      key_file.close
+
+      begin
+        FileUtils.chmod(0700, key_file.path)
+        Kernel.system("ssh-add #{key_file.path} > /dev/null 2>&1")
+        Kernel.system("ssh -A #{ssh_signature}")
+      ensure
+        Kernel.system("ssh-add -D > /dev/null 2>&1")
+        key_file.unlink
+      end
+    end
+
+    private
+    def key_file
+      @key_file
+    end
+
+    def ssh_signature
+      @ssh_signature
+    end
+    
+    def client
+      @client
+    end
+
+    def cluster
+      @cluster
+    end
+  end
+end

data/lib/cabal/version.rb

@@ -0,0 +1,3 @@
+module Cabal
+  VERSION = "0.4.1"
+end

metadata

@@ -0,0 +1,246 @@
+--- !ruby/object:Gem::Specification
+name: cabal
+version: !ruby/object:Gem::Version
+  version: 0.4.1
+platform: ruby
+authors:
+- Dennis Walters
+autorequire: 
+bindir: exe
+cert_chain: []
+date: 2015-10-15 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.9'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.9'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: aruba
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.9'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.9'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.3'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.3'
+- !ruby/object:Gem::Dependency
+  name: yard
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.8.7
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.8.7
+- !ruby/object:Gem::Dependency
+  name: factis
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: simplecov
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.10'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.10'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.22'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.22'
+- !ruby/object:Gem::Dependency
+  name: cabal-api
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+- !ruby/object:Gem::Dependency
+  name: cabal-util
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+- !ruby/object:Gem::Dependency
+  name: gli
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.13'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.13'
+- !ruby/object:Gem::Dependency
+  name: oj
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.12'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.12'
+- !ruby/object:Gem::Dependency
+  name: faraday
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.9'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.9'
+description: 
+email:
+- dwalters@engineyard.com
+executables:
+- cabal
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".rspec"
+- ".ruby-gemset"
+- ".ruby-version"
+- ".travis.yml"
+- Gemfile
+- LICENSE.txt
+- README.md
+- Rakefile
+- cabal.gemspec
+- exe/cabal
+- lib/cabal.rb
+- lib/cabal/cli.rb
+- lib/cabal/client.rb
+- lib/cabal/commands/key.rb
+- lib/cabal/commands/ssh.rb
+- lib/cabal/ssh.rb
+- lib/cabal/version.rb
+homepage: https://github.com/engineyard/cabal
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.4.7
+signing_key: 
+specification_version: 4
+summary: Retrieve SSH keys from the Cabal API
+test_files: []
+has_rdoc: