chamber 1.0.3 → 2.0.0

data/lib/chamber/commands/heroku/push.rb

@@ -0,0 +1,25 @@
+require 'chamber/commands/base'
+require 'chamber/commands/securable'
+require 'chamber/commands/heroku'
+
+module  Chamber
+module  Commands
+module  Heroku
+class   Push < Chamber::Commands::Base
+  include Chamber::Commands::Securable
+  include Chamber::Commands::Heroku
+
+  def call
+    securable_environment_variables.each do |key, value|
+      if dry_run
+        shell.say_status 'push', key, :blue
+      else
+        shell.say_status 'push', key, :green
+        shell.say heroku(%Q{config:set #{key}=#{value}})
+      end
+    end
+  end
+end
+end
+end
+end

data/lib/chamber/commands/initialize.rb

@@ -0,0 +1,73 @@
+require 'openssl'
+require 'chamber/commands/base'
+
+module  Chamber
+module  Commands
+class   Initialize < Chamber::Commands::Base
+
+  def initialize(options = {})
+    super
+
+    self.basepath = options[:basepath]
+  end
+
+  def call
+    shell.create_file private_key_filepath, rsa_private_key.to_pem
+    shell.create_file public_key_filepath,  rsa_public_key.to_pem
+
+    `chmod 600 #{private_key_filepath}`
+    `chmod 644 #{public_key_filepath}`
+
+    unless ::File.read(gitignore_filepath).match(/^.chamber.pem$/)
+      shell.append_to_file gitignore_filepath, private_key_filepath.basename
+    end
+
+    shell.copy_file settings_template_filepath, settings_filepath
+  end
+
+  def self.call(options = {})
+    self.new(options).call
+  end
+
+  protected
+
+  attr_accessor :basepath
+
+  def settings_template_filepath
+    @settings_template_filepath ||= templates_path + 'settings.yml'
+  end
+
+  def templates_path
+    @templates_path             ||= Pathname.new(::File.expand_path('../../../../templates', __FILE__))
+  end
+
+  def settings_filepath
+    @settings_filepath          ||= basepath + 'settings.yml'
+  end
+
+  def gitignore_filepath
+    @gitignore_filepath         ||= rootpath + '.gitignore'
+  end
+
+  def private_key_filepath
+    @private_key_filepath       ||= rootpath + '.chamber.pem'
+  end
+
+  def public_key_filepath
+    @public_key_filepath        ||= rootpath + '.chamber.pub.pem'
+  end
+
+  def rsa_key
+    @rsa_key                    ||= OpenSSL::PKey::RSA.new(2048)
+  end
+
+  def rsa_private_key
+    rsa_key
+  end
+
+  def rsa_public_key
+    rsa_key.public_key
+  end
+end
+end
+end

data/lib/chamber/commands/securable.rb

@@ -0,0 +1,48 @@
+require 'shellwords'
+require 'chamber/instance'
+
+module  Chamber
+module  Commands
+module  Securable
+
+  def initialize(options = {})
+    super
+
+    ignored_settings_options        = options.
+                                        merge(files: ignored_settings_filepaths).
+                                        reject { |k, v| k == 'basepath' }
+    self.ignored_settings_instance  = Chamber::Instance.new(ignored_settings_options)
+    self.all_settings_instance      = Chamber::Instance.new(options)
+    self.only_sensitive             = options[:only_sensitive]
+  end
+
+  protected
+
+  attr_accessor :only_sensitive,
+                :ignored_settings_instance,
+                :all_settings_instance
+
+  def securable_environment_variables
+    if only_sensitive
+      secured_settings.to_environment
+    else
+      all_settings.to_environment
+    end
+  end
+
+  def secured_settings
+    ignored_settings_instance.settings.merge(all_settings.secured)
+  end
+
+  def all_settings
+    all_settings_instance.settings
+  end
+
+  def ignored_settings_filepaths
+    shell_escaped_chamber_filenames = chamber.filenames.map { |filename| Shellwords.escape(filename) }
+
+    `git ls-files --other --ignored --exclude-from=.gitignore | sed -e "s|^|#{Shellwords.escape(rootpath)}/|" | grep --colour=never -E '#{shell_escaped_chamber_filenames.join('|')}'`.split("\n")
+  end
+end
+end
+end

data/lib/chamber/commands/secure.rb

@@ -0,0 +1,16 @@
+require 'chamber/commands/base'
+
+module  Chamber
+module  Commands
+class   Secure < Chamber::Commands::Base
+
+  def initialize(options = {})
+    super(options.merge(namespaces: ['*']))
+  end
+
+  def call
+    chamber.secure
+  end
+end
+end
+end

data/lib/chamber/commands/show.rb

@@ -0,0 +1,23 @@
+require 'pp'
+require 'chamber/commands/base'
+
+module  Chamber
+module  Commands
+class   Show < Chamber::Commands::Base
+
+  def initialize(options = {})
+    super
+
+    self.as_env = options[:as_env]
+  end
+
+  def call
+    as_env ? chamber.to_s(pair_separator: "\n") : PP.pp(chamber.to_hash, StringIO.new, 60).string.chomp
+  end
+
+  protected
+
+  attr_accessor :as_env
+end
+end
+end

data/lib/chamber/commands/travis.rb

@@ -0,0 +1,14 @@
+require 'bundler'
+
+module  Chamber
+module  Commands
+module  Travis
+
+  protected
+
+  def travis_encrypt(command)
+    Bundler.with_clean_env { `travis encrypt --add 'env.global' #{command}` }
+  end
+end
+end
+end

data/lib/chamber/commands/travis/secure.rb

@@ -0,0 +1,35 @@
+require 'chamber/commands/base'
+require 'chamber/commands/travis'
+require 'chamber/commands/securable'
+
+module  Chamber
+module  Commands
+module  Travis
+class   Secure < Chamber::Commands::Base
+  include Chamber::Commands::Travis
+  include Chamber::Commands::Securable
+
+  def call
+    securable_environment_variables.each do |key, value|
+      if dry_run
+        shell.say_status 'encrypt', key, :blue
+      else
+        command = first_environment_variable?(key) ? '--override' : '--append'
+
+        shell.say_status 'encrypt', key, :green
+        travis_encrypt("#{command} #{key}=#{value}")
+      end
+    end
+  end
+
+  protected
+
+  def first_environment_variable?(key)
+    @first_environment_key ||= securable_environment_variables.first[0]
+
+    @first_environment_key == key
+  end
+end
+end
+end
+end

data/lib/chamber/configuration.rb

@@ -0,0 +1,34 @@
+module  Chamber
+class   Configuration
+  attr_accessor :basepath,
+                :decryption_key,
+                :encryption_key,
+                :files,
+                :namespaces
+
+  def initialize(options = {})
+    self.basepath       = options[:basepath]        || ''
+    self.namespaces     = options[:namespaces]      || []
+    self.decryption_key = options[:decryption_key]
+    self.encryption_key = options[:encryption_key]
+    self.files          = options[:files]           || [
+                        self.basepath + 'credentials*.yml',
+                        self.basepath + 'settings*.yml',
+                        self.basepath + 'settings' ]
+  end
+
+  def to_hash
+    {
+      basepath:       self.basepath,
+      decryption_key: self.decryption_key,
+      encryption_key: self.encryption_key,
+      files:          self.files,
+      namespaces:     self.namespaces,
+    }
+  end
+
+  def basepath=(pathlike)
+    @basepath = pathlike == '' ? '' : Pathname.new(::File.expand_path(pathlike))
+  end
+end
+end

data/lib/chamber/environmentable.rb

@@ -0,0 +1,23 @@
+require 'hashie/mash'
+
+module  Chamber
+module  Environmentable
+  def with_environment(settings, parent_keys, hash_block, value_block)
+    environment_hash = Hashie::Mash.new
+
+    settings.each_pair do |key, value|
+      environment_keys = parent_keys.dup.push(key)
+
+      if value.respond_to? :each_pair
+        environment_hash.merge!(hash_block.call(key, value, environment_keys))
+      else
+        environment_key = environment_keys.join('_').upcase
+
+        environment_hash.merge!(value_block.call(key, value, environment_key))
+      end
+    end
+
+    environment_hash
+  end
+end
+end

data/lib/chamber/errors/undecryptable_value_error.rb

@@ -0,0 +1,6 @@
+module  Chamber
+module  Errors
+class   UndecryptableValueError < RuntimeError
+end
+end
+end

data/lib/chamber/file.rb

@@ -6,7 +6,7 @@ require 'erb'
 # Internal: Represents a single file containing settings information in a given
 # file set.
 #
-class   Chamber
+module  Chamber
 class   File < Pathname
 
   ###
@@ -37,7 +37,9 @@ class   File < Pathname
   #   # => <Chamber::File>
   #
   def initialize(options = {})
-    self.namespaces = options[:namespaces] || {}
+    self.namespaces     = options[:namespaces] || {}
+    self.decryption_key = options[:decryption_key]
+    self.encryption_key = options[:encryption_key]
 
     super options.fetch(:path)
   end
@@ -62,13 +64,23 @@ class   File < Pathname
   # ```
   #
   def to_settings
-    @data ||= Settings.new(settings:    file_contents_hash,
-                           namespaces:  namespaces)
+    @data ||= Settings.new(settings:        file_contents_hash,
+                           namespaces:      namespaces,
+                           decryption_key:  decryption_key,
+                           encryption_key:  encryption_key)
+  end
+
+  def secure
+    secure_settings = to_settings.secure
+
+    ::File.open(self, 'w') { |file| file.write YAML.dump(secure_settings.to_hash) }
   end
 
   protected
 
-  attr_accessor :namespaces
+  attr_accessor :namespaces,
+                :decryption_key,
+                :encryption_key
 
   private
 

data/lib/chamber/file_set.rb

@@ -107,12 +107,14 @@ require 'chamber/settings'
 #   FileSet.new(files:      '/tmp/settings/*.json',
 #               namespaces: %w{blue green})
 #
-class   Chamber
+module  Chamber
 class   FileSet
 
   def initialize(options = {})
-    self.namespaces = options.fetch(:namespaces, {})
-    self.paths      = options.fetch(:files)
+    self.namespaces     = options[:namespaces] || {}
+    self.decryption_key = options[:decryption_key]
+    self.encryption_key = options[:encryption_key]
+    self.paths          = options.fetch(:files)
   end
 
   ###
@@ -161,21 +163,23 @@ class   FileSet
   #   # => <Chamber::Settings>
   #
   def to_settings
-    clean_settings = Settings.new(:namespaces => namespaces)
-
-    files.each_with_object(clean_settings) do |file, settings|
-      if block_given?
-        yield file.to_settings
-      else
-        settings.merge!(file.to_settings)
+    files.reduce(Settings.new) do |settings, file|
+      settings.merge(file.to_settings).tap do |merged|
+        yield merged if block_given?
       end
     end
   end
 
+  def secure
+    files.each(&:secure)
+  end
+
   protected
 
   attr_reader   :namespaces,
                 :paths
+  attr_accessor :decryption_key,
+                :encryption_key
 
   ###
   # Internal: Allows the paths for the FileSet to be set. It can either be an
@@ -210,8 +214,10 @@ class   FileSet
         current_glob_files  = Pathname.glob(glob)
         relevant_glob_files = relevant_files & current_glob_files
 
-        relevant_glob_files.map! { |file| File.new( path:        file,
-                                                    namespaces:  namespaces) }
+        relevant_glob_files.map! { |file| File.new( path:           file,
+                                                    namespaces:     namespaces,
+                                                    decryption_key: decryption_key,
+                                                    encryption_key: encryption_key) }
 
         sorted_relevant_files += relevant_glob_files
       end

data/lib/chamber/filters/boolean_conversion_filter.rb

@@ -0,0 +1,41 @@
+module  Chamber
+module  Filters
+class   BooleanConversionFilter
+
+  def initialize(options = {})
+    self.data = options.fetch(:data).dup
+  end
+
+  def self.execute(options = {})
+    self.new(options).send(:execute)
+  end
+
+  protected
+
+  attr_accessor :data
+
+  def execute(settings = data)
+    settings.each_pair do |key, value|
+      if value.respond_to? :each_pair
+        execute(value)
+      else
+        break if value.nil?
+
+        settings[key] = if value.is_a? String
+                          case value
+                          when 'false', 'f', 'no'
+                            false
+                          when 'true', 't', 'yes'
+                            true
+                          else
+                            value
+                          end
+                        else
+                          value
+                        end
+      end
+    end
+  end
+end
+end
+end