chef-vault 4.1.10 → 4.1.23

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f6931a0011e0829b7920dfdab68f8c445a4ffed1533a15f530aca518df8a6aca
-  data.tar.gz: beae925bc1d474a7f01b8e2d5d640594f33f0326a22cfda12bf26d9a4f847cc6
+  metadata.gz: f7e50b7ee7d1f76d98c42ade28257dc97848d4633999f8b06b24fca88c0e63b7
+  data.tar.gz: 9eb21a2b1f68c9d235a463a9a64cff11b6d6575c6854ba39b11910fb75d42d9b
 SHA512:
-  metadata.gz: e7a7a8ba29f67856dd66dc2a97aed27b13c6895062b0ba716a31398042482e0b4bc189e52d00b6effe286bf7328234b45ecc861304154a84abb8132aa0f5b872
-  data.tar.gz: ab3dcc738ce3afafc436c43056bb5de4d946bc274421410cbacce56a5ec69be51825320829144218afc260646a1f40553088bf3f1bf8962d4668ea2cb5ff67a0
+  metadata.gz: 15cb21745c41b125e453b156c20ef868bf23c5d682c6a50717e93ee265a50211e1214914ab242ed8af6cc5a16d4d8fcd1989d5a35aeda5bc57024e08dd28c100
+  data.tar.gz: 880a2231f0f4a08ee4af4aee54897f2a29048e1a780ffbd336eba74f46a6ccda170146a2cb358bfeedb1cef33ca7034715465f15e0cf21cc712a685ccd02566d

data/Gemfile

@@ -5,20 +5,22 @@ gemspec
 group :development do
   gem "chefstyle"
   gem "rake"
-  gem "contracts", "~> 0.16.1" # pin until we drop ruby < 2.7
+  gem "appbundler"
   if Gem::Version.new(RUBY_VERSION) < Gem::Version.new("3.0.0")
+    gem "contracts", "~> 0.16.1" # pin until we drop ruby < 2.7
     gem "chef-zero"
-    gem "rspec", "~> 3.4"
-    gem "aruba", "~> 0.6"
-    gem "chef", "~> 14.0"
-    gem "chef-utils", "17.10.0" # pin until we drop ruby 2.5
+    gem "rspec", "~> 3.0"
+    gem "aruba", "~> 2.2"
+    gem "chef", "~> 15.4"
+    gem "chef-utils", "17.10.68" # pin until we drop ruby 2.5
   else
-    gem "chef-zero", ">= 15.0.4"
-    gem "chef", "~> 17.0"
-    gem "rspec", "~> 3.10.0"
-    gem "aruba", "~> 1.1"
-    gem "knife", "~> 17.0"
-    gem "chef-utils", "17.10.0" # pin until we drop ruby >=3
+    gem "contracts", "~> 0.17"
+    gem "chef-zero", "~> 15.0"
+    gem "chef", ">= 18.5.0"
+    gem "rspec", "~> 3.0"
+    gem "aruba", "~> 2.3"
+    gem "knife", "~> 18.0"
+    gem "chef-utils", ">= 18.5.0" # pin until we drop ruby >=3
   end
 end
 
@@ -31,7 +33,6 @@ end
 group :debug do
   gem "pry"
   gem "pry-byebug"
-  gem "pry-stack_explorer", "~> 0.6.1" # pin until we drop ruby < 2.6
   gem "rb-readline"
 end
 

data/chef-vault.gemspec

@@ -31,5 +31,5 @@ Gem::Specification.new do |s|
   s.bindir           = "bin"
   s.executables      = %w{ chef-vault }
 
-  s.required_ruby_version = ">= 2.6"
+  s.required_ruby_version = ">= 3.1"
 end

data/lib/chef/knife/mixin/helper.rb

@@ -39,38 +39,10 @@ class ChefVault
       end
 
       def values_from_json(json)
-        validate_json(json)
         JSON.parse(json)
       rescue JSON::ParserError
         raise JSON::ParserError, "#{json} is not valid JSON!"
       end
-
-      # I/P: json string
-      # Raises `InvalidValue` if any of the json's values contain non-printable characters.
-      def validate_json(json)
-        begin
-          evaled_json = eval(json) # rubocop: disable Security/Eval
-        rescue SyntaxError
-          raise ChefVault::Exceptions::InvalidValue, "#{json} is not valid JSON!"
-        end
-
-        if evaled_json.is_a?(Hash)
-          evaled_json.each do |key, value|
-            next unless printable?(value.to_s)
-
-            msg = "Value '#{value}' of key '#{key}' contains non-printable characters. Check that backslashes are escaped with another backslash (e.g. C:\\\\Windows) in double-quoted strings."
-            ChefVault::Log.warn(msg)
-          end
-        end
-      end
-
-      # I/P: String
-      # O/P: true/false
-      # returns true if string is free of non-printable characters (escape sequences)
-      # this returns false for whitespace escape sequences as well, e.g. \n\t
-      def printable?(string)
-        /[^[:print:]]|[[:space:]]/.match(string)
-      end
     end
   end
 end

data/lib/chef-vault/item.rb

@@ -40,6 +40,11 @@ class ChefVault
     #     decrypt secrets.  Defaults to the value of Chef::Config[:client_key]
     attr_accessor :client_key_path
 
+    # @!attribute [rw] client_key_contents
+    #   @return [String] the contents of the private key that is used to
+    #     decrypt secrets.  Defaults to the value of Chef::Config[:client_key_contents]
+    attr_accessor :client_key_contents
+
     # returns the raw keys of the underlying Chef::DataBagItem.  chef-vault v2
     # defined #keys as a public accessor that returns the ChefVault::ItemKeys
     # object for the vault.  Ideally, #keys would provide Hash-like behaviour
@@ -58,6 +63,8 @@ class ChefVault
     #   as. Defaults to the :node_name value of Chef::Config
     # @option opts [String] :client_key_path the name of the node to decrypt
     #   secrets as.  Defaults to the :client_key value of Chef::Config
+    # @option opts [String] :client_key_contents the private key to decrypt
+    #   secrets as.  Defaults to the :client_key_contents value of Chef::Config
     def initialize(vault, name, opts = {})
       super() # Don't pass parameters
       @data_bag = vault
@@ -68,9 +75,11 @@ class ChefVault
       opts = {
         node_name: Chef::Config[:node_name],
         client_key_path: Chef::Config[:client_key],
+        client_key_contents: Chef::Config[:client_key_contents],
       }.merge(opts)
       @node_name = opts[:node_name]
       @client_key_path = opts[:client_key_path]
+      @client_key_contents = opts[:client_key_contents]
       @current_query = search
     end
 
@@ -163,7 +172,11 @@ class ChefVault
 
     def secret
       if @keys.include?(@node_name) && !@keys[@node_name].nil?
-        private_key = OpenSSL::PKey::RSA.new(File.open(@client_key_path).read)
+        unless @client_key_contents.nil?
+          private_key = OpenSSL::PKey::RSA.new(@client_key_contents)
+        else
+          private_key = OpenSSL::PKey::RSA.new(File.open(@client_key_path).read)
+        end
         begin
           private_key.private_decrypt(Base64.decode64(@keys[@node_name]))
         rescue OpenSSL::PKey::RSAError

data/lib/chef-vault/version.rb

@@ -15,6 +15,6 @@
 # limitations under the License.
 
 class ChefVault
-  VERSION = "4.1.10"
+  VERSION = "4.1.23"
   MAJOR, MINOR, TINY = VERSION.split(".")
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: chef-vault
 version: !ruby/object:Gem::Version
-  version: 4.1.10
+  version: 4.1.23
 platform: ruby
 authors:
 - Thom May
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-04-12 00:00:00.000000000 Z
+date: 2025-05-14 00:00:00.000000000 Z
 dependencies: []
 description: Data encryption support for Chef Infra using data bags
 email:
@@ -61,14 +61,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '2.6'
+      version: '3.1'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.4
+rubygems_version: 3.3.27
 signing_key: 
 specification_version: 4
 summary: Data encryption support for Chef Infra using data bags