chef-vault 2.8.0.rc1 → 2.8.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 8298b0ae7bca091e181d7d0694c972526f4be1a1
-  data.tar.gz: bbc9db10fd50a14f651b807bcc205ebfa2fac5d6
+  metadata.gz: 750abe3e243a8eed71602426024b73cd60fd4187
+  data.tar.gz: d014e5e9965a19cc05a5180b491d1e7938b148cb
 SHA512:
-  metadata.gz: e07ed430004233978ca425f4b47baa107476bae5d98d056fa54bc1654e924f744fa7c70d7e00ff7b73729666866f406d5ee6b80a40532cb90c466a43d0e7de66
-  data.tar.gz: beaeb7a671897a9ee6b417ff644fe8ee77910918df0d4d6ca901e9eda9fe95628ca47e07ebbb40d423f525cd558aa6ee6970b9efdfae397e14b4de68633d543a
+  metadata.gz: ce1a778347407af231250a5d98a745f14b17ed6ba0ed05dd5bc562bfa243bfd0669519a20a00cd997dbedff7fc3fa6dc774d6b9c567e621966c7987f3209e06b
+  data.tar.gz: d14135ed7acbca9c486e771573afde6af1ccd881cf5603fecaf46e47ca0038514c0e6cd95dfc22803a7088f63f94285495c516dbf149ffe9e3e3add098640a78

data/Changelog.md

@@ -25,6 +25,10 @@ This release will also remove the chef-vault 1.x commands (encrypt/decrypt)
 
 ## Released
 
+## v2.8.0
+
+* Fix searches for more than 1000 nodes
+
 ## v2.6.1
 
 * Remove dependency on [rspec-its](https://github.com/rspec/rspec-its)

data/README.md

@@ -16,8 +16,7 @@ Gem that allows you to encrypt a Chef Data Bag Item using the public keys of
 a list of chef nodes. This allows only those chef nodes to decrypt the
 encrypted values.
 
-For a more detailed explanation of how chef-vault works, please refer to the
-file THEORY.md.
+For a more detailed explanation of how chef-vault works, please refer to this blog post [Chef Vault – what is it and what can it do for you?](https://www.chef.io/blog/2016/01/21/chef-vault-what-is-it-and-what-can-it-do-for-you/) by Nell Shamrell-Harrington.
 
 ## INSTALLATION:
 

data/UPGRADE.md

@@ -1,7 +1,7 @@
 # UPGRADING A v1 VAULT to v2
 
 chef-vault v2 added metadata to the vault to keep track of
-which secrets belong to admins and which belong to admins,
+which secrets belong to clients and which belong to admins,
 as well as the search query to use during a `knife vault refresh`
 operation.
 

data/features/step_definitions/chef-vault.rb

@@ -2,29 +2,29 @@ require "json"
 
 Given(/^I create a vault item '(.+)\/(.+)' containing the JSON '(.+)' encrypted for '(.+)'(?: with '(.+)' as admins?)?$/) do |vault, item, json, nodelist, admins|
   write_file "item.json", json
-  query = nodelist.split(/,/).map{|e| "name:#{e}"}.join(" OR ")
+  query = nodelist.split(/,/).map { |e| "name:#{e}" }.join(" OR ")
   adminarg = admins.nil? ? "-A admin" : "-A #{admins}"
   run_simple "knife vault create #{vault} #{item} -z -c knife.rb #{adminarg} -S '#{query}' -J item.json", false
 end
 
 Given(/^I update the vault item '(.+)\/(.+)' to be encrypted for '(.+)'( with the clean option)?$/) do |vault, item, nodelist, cleanopt|
-  query = nodelist.split(/,/).map{|e| "name:#{e}"}.join(" OR ")
+  query = nodelist.split(/,/).map { |e| "name:#{e}" }.join(" OR ")
   run_simple "knife vault update #{vault} #{item} -z -c knife.rb -S '#{query}' #{cleanopt ? '--clean' : ''}"
 end
 
 Given(/^I remove clients? '(.+)' from vault item '(.+)\/(.+)' with the '(.+)' options?$/) do |nodelist, vault, item, optionlist|
-  query = nodelist.split(/,/).map{|e| "name:#{e}"}.join(" OR ")
-  options = optionlist.split(/,/).map{|o| "--#{o}"}.join(" ")
+  query = nodelist.split(/,/).map { |e| "name:#{e}" }.join(" OR ")
+  options = optionlist.split(/,/).map { |o| "--#{o}" }.join(" ")
   run_simple "knife vault remove #{vault} #{item} -z -c knife.rb -S '#{query}' #{options}"
 end
 
 Given(/^I rotate the keys for vault item '(.+)\/(.+)' with the '(.+)' options?$/) do |vault, item, optionlist|
-  options = optionlist.split(/,/).map{|o| "--#{o}"}.join(" ")
+  options = optionlist.split(/,/).map { |o| "--#{o}" }.join(" ")
   run_simple "knife vault rotate keys #{vault} #{item} -c knife.rb -z #{options}"
 end
 
 Given(/^I rotate all keys with the '(.+)' options?$/) do |optionlist|
-  options = optionlist.split(/,/).map{|o| "--#{o}"}.join(" ")
+  options = optionlist.split(/,/).map { |o| "--#{o}" }.join(" ")
   run_simple "knife vault rotate all keys -z -c knife.rb #{options}"
 end
 
@@ -33,7 +33,7 @@ Given(/^I refresh the vault item '(.+)\/(.+)'$/) do |vault, item|
 end
 
 Given(/^I refresh the vault item '(.+)\/(.+)' with the '(.+)' options?$/) do |vault, item, optionlist|
-  options = optionlist.split(/,/).map{|o| "--#{o}"}.join(" ")
+  options = optionlist.split(/,/).map { |o| "--#{o}" }.join(" ")
   run_simple "knife vault refresh #{vault} #{item} -c knife.rb -z #{options}"
 end
 

data/features/support/env.rb

@@ -8,7 +8,7 @@ require "aruba/cucumber"
 # the knife command.  Up the timeout when we're in a travis build based on the
 # environment variable set in .travis.yml
 #if ENV['TRAVIS_BUILD']
-  Before do
-    @aruba_timeout_seconds = 15
-  end
+Before do
+  @aruba_timeout_seconds = 15
+end
 #end

data/lib/chef-vault.rb

@@ -35,7 +35,7 @@ require "chef-vault/chef_patch/user"
 class ChefVault
   attr_accessor :vault
 
-  def initialize(vault, chef_config_file=nil)
+  def initialize(vault, chef_config_file = nil)
     @vault = vault
     ChefVault.load_config(chef_config_file) if chef_config_file
   end

data/lib/chef-vault/item.rb

@@ -74,7 +74,7 @@ class ChefVault
       @secret = secret
     end
 
-    def clients(search_or_client=nil, action=:add)
+    def clients(search_or_client = nil, action = :add)
       if search_or_client.is_a?(Chef::ApiClient)
         handle_client_action(search_or_client, action)
       elsif search_or_client
@@ -107,7 +107,7 @@ class ChefVault
       end
     end
 
-    def search(search_query=nil)
+    def search(search_query = nil)
       if search_query
         keys.search_query(search_query)
       else
@@ -115,7 +115,7 @@ class ChefVault
       end
     end
 
-    def admins(admins=nil, action=:add)
+    def admins(admins = nil, action = :add)
       if admins
         admins.split(",").each do |admin|
           admin.strip!
@@ -179,7 +179,7 @@ class ChefVault
       reload_raw_data
     end
 
-    def generate_secret(key_size=32)
+    def generate_secret(key_size = 32)
       # Defaults to 32 bytes, as this is the size that a Chef
       # Encrypted Data Bag Item will digest all secrets down to anyway
       SecureRandom.random_bytes(key_size)
@@ -195,7 +195,7 @@ class ChefVault
       super
     end
 
-    def save(item_id=@raw_data["id"])
+    def save(item_id = @raw_data["id"])
       # validate the format of the id before attempting to save
       validate_id!(item_id)
 

data/lib/chef-vault/item_keys.rb

@@ -52,7 +52,7 @@ class ChefVault
       raw_data[type].delete(chef_client)
     end
 
-    def search_query(search_query=nil)
+    def search_query(search_query = nil)
       if search_query
         @raw_data["search_query"] = search_query
       else
@@ -68,7 +68,7 @@ class ChefVault
       @raw_data["admins"]
     end
 
-    def save(item_id=@raw_data["id"])
+    def save(item_id = @raw_data["id"])
       if Chef::Config[:solo]
         save_solo(item_id)
       else

data/lib/chef-vault/mixins.rb

@@ -22,7 +22,7 @@ class ChefVault
       [data_bag_path, data_bag_item_path]
     end
 
-    def save_solo(item_id=@raw_data["id"])
+    def save_solo(item_id = @raw_data["id"])
       data_bag_path, data_bag_item_path = find_solo_path(item_id)
 
       FileUtils.mkdir(data_bag_path) unless File.exist?(data_bag_path)

data/lib/chef-vault/version.rb

@@ -15,6 +15,6 @@
 # limitations under the License.
 
 class ChefVault
-  VERSION = "2.8.0.rc1"
+  VERSION = "2.8.0"
   MAJOR, MINOR, TINY = VERSION.split(".")
 end

data/lib/chef/knife/mixin/helper.rb

@@ -33,7 +33,7 @@ class ChefVault
       end
 
       def values_from_file(file)
-        json = File.open(file){ |fh| fh.read() }
+        json = File.open(file) { |fh| fh.read() }
 
         values_from_json(json)
       end

data/lib/chef/knife/vault_decrypt.rb

@@ -48,7 +48,7 @@ class Chef
             included_values << value
           end
 
-          output(Hash[vault_item.find_all{|k, _| included_values.include?(k)}])
+          output(Hash[vault_item.find_all { |k, _| included_values.include?(k) }])
         else
           output(vault_item)
         end

data/lib/chef/knife/vault_edit.rb

@@ -37,7 +37,7 @@ class Chef
           begin
             vault_item = ChefVault::Item.load(vault, item)
 
-            filtered_vault_data = vault_item.raw_data.select{|x| x != "id"}
+            filtered_vault_data = vault_item.raw_data.select { |x| x != "id" }
 
             updated_vault_json = edit_data(filtered_vault_data)
 

data/lib/chef/knife/vault_rotate_all_keys.rb

@@ -34,7 +34,7 @@ class Chef
 
       private
 
-      def rotate_all_keys(clean_unknown_clients=false)
+      def rotate_all_keys(clean_unknown_clients = false)
         vaults = Chef::DataBag.list.keys
         vaults.each { |vault| rotate_vault_keys(vault, clean_unknown_clients) }
       end

data/lib/chef/knife/vault_show.rb

@@ -76,7 +76,7 @@ class Chef
             included_values << value
           end
 
-          filtered_data = Hash[vault_item.raw_data.find_all{|k, _| included_values.include?(k)}]
+          filtered_data = Hash[vault_item.raw_data.find_all { |k, _| included_values.include?(k) }]
 
           output_data = filtered_data.merge(extra_data)
         else

data/spec/chef-vault/certificate_spec.rb

@@ -3,9 +3,9 @@ RSpec.describe ChefVault::Certificate do
   let(:cert) { ChefVault::Certificate.new("foo", "bar") }
 
   before do
-    allow(ChefVault::Item).to receive(:load).with("foo", "bar"){ item }
-    allow(item).to receive(:[]).with("id"){ "bar" }
-    allow(item).to receive(:[]).with("contents"){ "baz" }
+    allow(ChefVault::Item).to receive(:load).with("foo", "bar") { item }
+    allow(item).to receive(:[]).with("id") { "bar" }
+    allow(item).to receive(:[]).with("contents") { "baz" }
     @orig_stdout = $stdout
     $stdout = File.open(File::NULL, "w")
   end

data/spec/chef-vault/user_spec.rb

@@ -3,9 +3,9 @@ RSpec.describe ChefVault::User do
   let(:user) { ChefVault::User.new("foo", "bar") }
 
   before do
-    allow(ChefVault::Item).to receive(:load).with("foo", "bar"){ item }
-    allow(item).to receive(:[]).with("id"){ "bar" }
-    allow(item).to receive(:[]).with("password"){ "baz" }
+    allow(ChefVault::Item).to receive(:load).with("foo", "bar") { item }
+    allow(item).to receive(:[]).with("id") { "bar" }
+    allow(item).to receive(:[]).with("password") { "baz" }
     @orig_stdout = $stdout
     $stdout = File.open(File::NULL, "w")
   end

data/spec/chef-vault_spec.rb

@@ -18,7 +18,7 @@ RSpec.describe ChefVault do
     let(:vault) { ChefVault.new("foo", "knife.rb") }
 
     it "assigns 'foo' to the vault accessor" do
-        expect(vault.vault).to eq "foo"
+      expect(vault.vault).to eq "foo"
     end
 
     it "loads the Chef config values" do

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: chef-vault
 version: !ruby/object:Gem::Version
-  version: 2.8.0.rc1
+  version: 2.8.0
 platform: ruby
 authors:
 - Kevin Moser
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-01-29 00:00:00.000000000 Z
+date: 2016-02-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -207,9 +207,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
 rubyforge_project: 
 rubygems_version: 2.4.5.1