capistrano-ssh-authorized-keys-github 1.1.0 → 1.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fdeace2093ea8dd5b0326e751fe39daaf0976d9815949063d0a041b579637db4
-  data.tar.gz: 5dcd586bbab56363ee751a3379354bfb93861e6dff1e645d78194eb530d86945
+  metadata.gz: 6775ce8d8eac1a2c278c71435aba2e616f684bad6038d3c7313082545e9c1a7e
+  data.tar.gz: 46d20cb800aefd3fe294f0c19f262afb5a1e5396fa86ba44af40c6ff9a723d50
 SHA512:
-  metadata.gz: f5e563b6bcb8f601cb0d31c846869c8d62bff34d2154fd356c0c6596f695ed2238a152abfb3e50871ab1b20b8d581f5e17734a88a9af2770351c58bacc3f4fa5
-  data.tar.gz: e740b5181dcf8f7eb9915d9395c7bef55c222249980c3866cb771d2cc151c7ee61ef948b14b081e9562dec467314f21fe5207140b55f298dc359b3a04d5d0fd0
+  metadata.gz: 4813997a4c8330e160109eb041c0363642ee4c89090f87bd327094b3901d482a5ea5d783c783334d5f0dbbded9c69e79e9401c30e31e8b52b0beead17ba078f4
+  data.tar.gz: f4c4e6b67257f8232c427f02803d4b2d520b10f123d61b212003c2a3af17ee39ef4eb0535ede0d284fb1f5b24c9cb799bed797781bfd22486e226d747628bc54

data/capistrano-ssh-authorized-keys-github.gemspec

@@ -4,7 +4,7 @@ $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
 
 Gem::Specification.new do |spec|
   spec.name          = 'capistrano-ssh-authorized-keys-github'
-  spec.version       = '1.1.0'
+  spec.version       = '1.2.0'
   spec.authors       = ['lloydwatkin']
   spec.email         = ['lloyd@olioex.com']
   spec.summary       = %q{Sync Github organisation public SSH keys to `server authorized_keys` file}

data/lib/capistrano/tasks/ssh-authorized-keys-github.cap

@@ -8,7 +8,7 @@ NO_ORGANISATION_MEMBER_KEYS_FOUND = 'There are no public members for this Github
 namespace :security do
   desc 'Cycle SSH key logins'
   task :update_ssh_keys do
-    on roles(:all) do |host|
+    run_locally do
       organisations = fetch(:github_orgs) || fetch(:github_org) || raise(NO_GITHUB_ORGANISATION_PROVIDED)
       keys = ""
       authentication = ''
@@ -17,37 +17,40 @@ namespace :security do
       end
 
       [*organisations].each do |organisation|
+        info "Fetching keys for #{organisation}"
         url = URI("https://#{authentication}api.github.com/orgs/#{organisation}")
         organisation_details = JSON.parse(Net::HTTP.get_response(url).body, symbolize_names: true)
         members_url = URI(organisation_details[:members_url].gsub("{/member}", "").gsub('https://', "https://#{authentication}"))
-        members = JSON.parse(Net::HTTP.get_response(members_url).body, symbolize_names: true)
-        keys += "      #
-        # #{organisation_details[:name]} keys
-        # #{members_url}
-        #
-        # --
-
-        "
+        response = Net::HTTP.get_response(members_url)
+        raise response.body unless response.kind_of? Net::HTTPSuccess
+        members = JSON.parse(response.body, symbolize_names: true)
+        keys += "\n#\n"\
+          "# #{organisation_details[:name]} keys\n"\
+          "# #{members_url}\n"\
+          "#\n"
         member_details = members.map { |member| member[:login].downcase }.sort
         member_details.each do |member|
+          info "   - Downloading keys for #{member}"
           member_keys = URI("https://#{authentication}github.com/#{member}.keys")
-          info = "      #
-      # @#{member}
-      # #{member_keys}
-      #
-"
-          keys += info + Net::HTTP.get_response(member_keys).body.gsub(/\r\n?/, "\n")
+          info = "\n      #\n"\
+            "      # @#{member}\n"\
+            "      # #{member_keys}\n"\
+            "      #\n"
+          response = Net::HTTP.get_response(member_keys)
+          raise response.body unless response.kind_of? Net::HTTPSuccess
+          keys += info + response.body.gsub(/\r\n?/, "\n")
         end
       end
+      raise raise NO_ORGANISATION_MEMBER_KEYS_FOUND unless keys.scan(/ssh-(rsa|ed25519)/).count > 0
+      info "Writing authorized_keys file to ./tmp"
+      File.open("./tmp/authorized_keys", "w") do |f|
+        f.write(keys)
+      end
 
-      if keys.scan(/ssh-(rsa|ed25519)/).count > 0
-        File.open("./tmp/authorized_keys", "w") do |f|
-          f.write(keys)
-        end
+      info "Uploading updated authorized_keys to servers"
+      on roles(:all) do |host|
         upload! './tmp/authorized_keys', "/tmp/authorized_keys"
         execute :mv, "/tmp/authorized_keys", "~/.ssh/authorized_keys"
-      else
-        raise NO_ORGANISATION_MEMBER_KEYS_FOUND
       end
     end
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: capistrano-ssh-authorized-keys-github
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 1.2.0
 platform: ruby
 authors:
 - lloydwatkin
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-10-28 00:00:00.000000000 Z
+date: 2022-11-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: capistrano