chef-vault-retry 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: ff30d34bbf8026116369661dfe0339c53bfb2b51
+  data.tar.gz: a527512f4de92b17142e06c7993beaa670ff4289
+SHA512:
+  metadata.gz: 41b84e9897fe479a20032128b488955a32cae01f308715c8135b1c201bb03cb9b1d4feaf2c11f6dff4fde35fa8e0cccd5e66abeefaa7245d9a7224b6c61df285
+  data.tar.gz: f1c0f2d2ae341a2e17f902cbd30ae09b76991be40f485a33e95041e7607ec55b37ce23453a087a3ac64a09d8868737c96c7fedcb39d3b1c2192c2e51e0b50cb9

data/.gitignore

@@ -0,0 +1,2 @@
+chef-vault-retry-*.*.*.gem
+Gemfile.lock

data/Gemfile

@@ -0,0 +1,3 @@
+source 'https://rubygems.org/'
+
+gemspec

data/README.md

@@ -0,0 +1,39 @@
+## Overview
+
+Wraps `ChefVault::Item.load` with a new method `ChefVaultRetry::Item.load` that will periodically retry to decrypt the secret if an exception is raised. This is primarily intended to ease the bootstrapping of new systems by keeping chef-client runs from failing.
+
+## Use
+
+Replace the following code in your recipes:
+
+```
+chef_gem 'chef-vault' do
+  compile_time true if respond_to?(:compile_time)
+end
+
+require 'chef-vault'
+
+item = ChefVault::Item.load('passwords', 'root')
+item['password']
+```
+
+with this instead:
+
+```
+chef_gem 'chef-vault-retry' do
+  compile_time true if respond_to?(:compile_time)
+end
+
+require 'chef-vault-retry'
+
+item = ChefVaultRetry::Item.load('passwords', 'root')
+item['password']
+```
+
+The same ChefVault::Item.load method will be called, but if a secret decryption exception is raised:
+
+1. A message will output about the failure
+  * e.g. `SecretDecryption exception raised; please refresh vault item (passwords/root)`
+2. Recipe execution will pause for 30 seconds
+3. The process will repeat
+  * It will repeat this 40 times by default (~20 minutes). The number of retries can be customized by passing a Fixnum as the `retries` argument of `ChefVaultRetry::Item.load`

data/chef-vault-retry.gemspec

@@ -0,0 +1,19 @@
+$:.push File.expand_path('../lib', __FILE__)
+require 'chef-vault-retry/version'
+
+Gem::Specification.new do |s|
+  s.name             = 'chef-vault-retry'
+  s.version          = ChefVaultRetry::VERSION
+  s.authors          = ['Biola University']
+  s.email            = ['sysadmins@biola.edu']
+  s.summary          = 'Retry support for chef-vault'
+  s.description      = s.summary
+  s.homepage         = 'https://github.com/biola/chef-vault-retry'
+
+  s.license          = 'Apache License, v2.0'
+
+  s.files            = `git ls-files`.split("\n")
+  s.require_paths    = ['lib']
+
+  s.add_runtime_dependency 'chef-vault', '~> 2.6'
+end

data/lib/chef-vault-retry.rb

@@ -0,0 +1,39 @@
+#
+# Author:: Troy Ready (<troy.ready@biola.edu>)
+#
+# Copyright:: 2015, Biola University
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require 'chef-vault'
+
+class ChefVaultRetry
+  class Item
+
+    def self.load(v, i, retries=40)
+      retries.times do
+        begin
+          return ChefVault::Item.load(v, i)
+        rescue ChefVault::Exceptions::SecretDecryption
+          puts "SecretDecryption exception raised; "\
+               "please refresh vault item (#{v}/#{i})"
+          sleep 30
+          next
+        end
+      end
+      fail "Failed after #{retries} attempts to decrypt #{v}/#{i}"
+    end
+
+  end
+end

data/lib/chef-vault-retry/version.rb

@@ -0,0 +1,20 @@
+# Description: chef-vault-retry VERSION file
+# Copyright 2015, Biola University
+# Copyright 2013-15, Nordstrom, Inc.
+
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+
+#     http://www.apache.org/licenses/LICENSE-2.0
+
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+class ChefVaultRetry
+  VERSION = '0.1.0'
+  MAJOR, MINOR, TINY = VERSION.split('.')
+end

metadata

@@ -0,0 +1,65 @@
+--- !ruby/object:Gem::Specification
+name: chef-vault-retry
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Biola University
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-10-13 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: chef-vault
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.6'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.6'
+description: Retry support for chef-vault
+email:
+- sysadmins@biola.edu
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- Gemfile
+- README.md
+- chef-vault-retry.gemspec
+- lib/chef-vault-retry.rb
+- lib/chef-vault-retry/version.rb
+homepage: https://github.com/biola/chef-vault-retry
+licenses:
+- Apache License, v2.0
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.4.5
+signing_key: 
+specification_version: 4
+summary: Retry support for chef-vault
+test_files: []
+has_rdoc: