chef-vault 4.1.5 → 4.1.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/Gemfile +17 -6
- data/chef-vault.gemspec +1 -1
- data/lib/chef/knife/vault_create.rb +7 -4
- data/lib/chef/knife/vault_remove.rb +5 -2
- data/lib/chef/knife/vault_update.rb +7 -4
- data/lib/chef-vault/actor.rb +4 -4
- data/lib/chef-vault/item.rb +4 -4
- data/lib/chef-vault/item_keys.rb +4 -4
- data/lib/chef-vault/version.rb +1 -1
- metadata +3 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: f6931a0011e0829b7920dfdab68f8c445a4ffed1533a15f530aca518df8a6aca
|
|
4
|
+
data.tar.gz: beae925bc1d474a7f01b8e2d5d640594f33f0326a22cfda12bf26d9a4f847cc6
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: e7a7a8ba29f67856dd66dc2a97aed27b13c6895062b0ba716a31398042482e0b4bc189e52d00b6effe286bf7328234b45ecc861304154a84abb8132aa0f5b872
|
|
7
|
+
data.tar.gz: ab3dcc738ce3afafc436c43056bb5de4d946bc274421410cbacce56a5ec69be51825320829144218afc260646a1f40553088bf3f1bf8962d4668ea2cb5ff67a0
|
data/Gemfile
CHANGED
|
@@ -4,13 +4,22 @@ gemspec
|
|
|
4
4
|
|
|
5
5
|
group :development do
|
|
6
6
|
gem "chefstyle"
|
|
7
|
-
gem "chef-zero"
|
|
8
7
|
gem "rake"
|
|
9
|
-
gem "rspec", "~> 3.4"
|
|
10
|
-
gem "aruba", "~> 0.6"
|
|
11
|
-
gem "chef", "~> 14.0" # avoids test failures on license acceptance
|
|
12
8
|
gem "contracts", "~> 0.16.1" # pin until we drop ruby < 2.7
|
|
13
|
-
|
|
9
|
+
if Gem::Version.new(RUBY_VERSION) < Gem::Version.new("3.0.0")
|
|
10
|
+
gem "chef-zero"
|
|
11
|
+
gem "rspec", "~> 3.4"
|
|
12
|
+
gem "aruba", "~> 0.6"
|
|
13
|
+
gem "chef", "~> 14.0"
|
|
14
|
+
gem "chef-utils", "17.10.0" # pin until we drop ruby 2.5
|
|
15
|
+
else
|
|
16
|
+
gem "chef-zero", ">= 15.0.4"
|
|
17
|
+
gem "chef", "~> 17.0"
|
|
18
|
+
gem "rspec", "~> 3.10.0"
|
|
19
|
+
gem "aruba", "~> 1.1"
|
|
20
|
+
gem "knife", "~> 17.0"
|
|
21
|
+
gem "chef-utils", "17.10.0" # pin until we drop ruby >=3
|
|
22
|
+
end
|
|
14
23
|
end
|
|
15
24
|
|
|
16
25
|
group :docs do
|
|
@@ -22,6 +31,8 @@ end
|
|
|
22
31
|
group :debug do
|
|
23
32
|
gem "pry"
|
|
24
33
|
gem "pry-byebug"
|
|
25
|
-
gem "pry-stack_explorer", "~> 0.
|
|
34
|
+
gem "pry-stack_explorer", "~> 0.6.1" # pin until we drop ruby < 2.6
|
|
26
35
|
gem "rb-readline"
|
|
27
36
|
end
|
|
37
|
+
|
|
38
|
+
gem "simplecov", require: false
|
data/chef-vault.gemspec
CHANGED
|
@@ -14,15 +14,11 @@
|
|
|
14
14
|
# limitations under the License.
|
|
15
15
|
|
|
16
16
|
require_relative "vault_base"
|
|
17
|
-
require_relative "vault_admins"
|
|
18
|
-
require_relative "vault_clients"
|
|
19
17
|
|
|
20
18
|
class Chef
|
|
21
19
|
class Knife
|
|
22
20
|
class VaultCreate < Knife
|
|
23
21
|
include Chef::Knife::VaultBase
|
|
24
|
-
include Chef::Knife::VaultAdmins
|
|
25
|
-
include Chef::Knife::VaultClients
|
|
26
22
|
|
|
27
23
|
banner "knife vault create VAULT ITEM VALUES (options)"
|
|
28
24
|
|
|
@@ -55,6 +51,13 @@ class Chef
|
|
|
55
51
|
long: "--file FILE",
|
|
56
52
|
description: "File to be added to vault item as file-content"
|
|
57
53
|
|
|
54
|
+
deps do
|
|
55
|
+
require_relative "vault_admins"
|
|
56
|
+
require_relative "vault_clients"
|
|
57
|
+
include Chef::Knife::VaultAdmins
|
|
58
|
+
include Chef::Knife::VaultClients
|
|
59
|
+
end
|
|
60
|
+
|
|
58
61
|
def run
|
|
59
62
|
vault = @name_args[0]
|
|
60
63
|
item = @name_args[1]
|
|
@@ -14,13 +14,11 @@
|
|
|
14
14
|
# limitations under the License.
|
|
15
15
|
|
|
16
16
|
require_relative "vault_base"
|
|
17
|
-
require_relative "vault_clients"
|
|
18
17
|
|
|
19
18
|
class Chef
|
|
20
19
|
class Knife
|
|
21
20
|
class VaultRemove < Knife
|
|
22
21
|
include Chef::Knife::VaultBase
|
|
23
|
-
include Chef::Knife::VaultClients
|
|
24
22
|
|
|
25
23
|
banner "knife vault remove VAULT ITEM VALUES (options)"
|
|
26
24
|
|
|
@@ -43,6 +41,11 @@ class Chef
|
|
|
43
41
|
long: "--clean-unknown-clients",
|
|
44
42
|
description: "Remove unknown clients during key rotation"
|
|
45
43
|
|
|
44
|
+
deps do
|
|
45
|
+
require_relative "vault_clients"
|
|
46
|
+
include Chef::Knife::VaultClients
|
|
47
|
+
end
|
|
48
|
+
|
|
46
49
|
def run
|
|
47
50
|
vault = @name_args[0]
|
|
48
51
|
item = @name_args[1]
|
|
@@ -14,15 +14,11 @@
|
|
|
14
14
|
# limitations under the License.
|
|
15
15
|
|
|
16
16
|
require_relative "vault_base"
|
|
17
|
-
require_relative "vault_admins"
|
|
18
|
-
require_relative "vault_clients"
|
|
19
17
|
|
|
20
18
|
class Chef
|
|
21
19
|
class Knife
|
|
22
20
|
class VaultUpdate < Knife
|
|
23
21
|
include Chef::Knife::VaultBase
|
|
24
|
-
include Chef::Knife::VaultAdmins
|
|
25
|
-
include Chef::Knife::VaultClients
|
|
26
22
|
|
|
27
23
|
banner "knife vault update VAULT ITEM VALUES (options)"
|
|
28
24
|
|
|
@@ -59,6 +55,13 @@ class Chef
|
|
|
59
55
|
long: "--keys-mode KEYS_MODE",
|
|
60
56
|
description: "Mode in which to save vault keys"
|
|
61
57
|
|
|
58
|
+
deps do
|
|
59
|
+
require_relative "vault_admins"
|
|
60
|
+
require_relative "vault_clients"
|
|
61
|
+
include Chef::Knife::VaultAdmins
|
|
62
|
+
include Chef::Knife::VaultClients
|
|
63
|
+
end
|
|
64
|
+
|
|
62
65
|
def run
|
|
63
66
|
vault = @name_args[0]
|
|
64
67
|
item = @name_args[1]
|
data/lib/chef-vault/actor.rb
CHANGED
|
@@ -39,7 +39,7 @@ class ChefVault
|
|
|
39
39
|
def get_admin_key
|
|
40
40
|
# chef vault currently only supports using the default key
|
|
41
41
|
get_key("users")
|
|
42
|
-
rescue Net::
|
|
42
|
+
rescue Net::HTTPClientException => http_error
|
|
43
43
|
# if we failed to find an admin key, attempt to load a client key by the same name
|
|
44
44
|
case http_error.response.code
|
|
45
45
|
when "403"
|
|
@@ -49,7 +49,7 @@ class ChefVault
|
|
|
49
49
|
begin
|
|
50
50
|
ChefVault::Log.warn "The default key for #{name} not found in users, trying client keys."
|
|
51
51
|
get_key("clients")
|
|
52
|
-
rescue Net::
|
|
52
|
+
rescue Net::HTTPClientException => http_error
|
|
53
53
|
case http_error.response.code
|
|
54
54
|
when "404"
|
|
55
55
|
raise ChefVault::Exceptions::AdminNotFound,
|
|
@@ -68,7 +68,7 @@ class ChefVault
|
|
|
68
68
|
|
|
69
69
|
def get_client_key
|
|
70
70
|
get_key("clients")
|
|
71
|
-
rescue Net::
|
|
71
|
+
rescue Net::HTTPClientException => http_error
|
|
72
72
|
if http_error.response.code.eql?("403")
|
|
73
73
|
print_forbidden_error
|
|
74
74
|
raise http_error
|
|
@@ -114,7 +114,7 @@ class ChefVault
|
|
|
114
114
|
def get_key(request_actor_type)
|
|
115
115
|
api.org_scoped_rest_v1.get("#{request_actor_type}/#{name}/keys/default").fetch("public_key")
|
|
116
116
|
# If the keys endpoint doesn't exist, try getting it directly from the V0 chef object.
|
|
117
|
-
rescue Net::
|
|
117
|
+
rescue Net::HTTPClientException => http_error
|
|
118
118
|
raise http_error unless http_error.response.code.eql?("404")
|
|
119
119
|
|
|
120
120
|
if request_actor_type.eql?("clients")
|
data/lib/chef-vault/item.rb
CHANGED
|
@@ -231,7 +231,7 @@ class ChefVault
|
|
|
231
231
|
else
|
|
232
232
|
begin
|
|
233
233
|
Chef::DataBag.load(data_bag)
|
|
234
|
-
rescue Net::
|
|
234
|
+
rescue Net::HTTPClientException => http_error
|
|
235
235
|
if http_error.response.code == "404"
|
|
236
236
|
chef_data_bag = Chef::DataBag.new
|
|
237
237
|
chef_data_bag.name data_bag
|
|
@@ -295,7 +295,7 @@ class ChefVault
|
|
|
295
295
|
begin
|
|
296
296
|
item.raw_data =
|
|
297
297
|
Chef::EncryptedDataBagItem.load(vault, name, item.secret).to_hash
|
|
298
|
-
rescue Net::
|
|
298
|
+
rescue Net::HTTPClientException => http_error
|
|
299
299
|
if http_error.response.code == "404"
|
|
300
300
|
raise ChefVault::Exceptions::ItemNotFound,
|
|
301
301
|
"#{vault}/#{name} could not be found"
|
|
@@ -351,7 +351,7 @@ class ChefVault
|
|
|
351
351
|
# and https://github.com/sensu/sensu-chef/blob/2.9.0/libraries/sensu_helpers.rb
|
|
352
352
|
begin
|
|
353
353
|
dbi = Chef::DataBagItem.load(vault, name)
|
|
354
|
-
rescue Net::
|
|
354
|
+
rescue Net::HTTPClientException => http_error
|
|
355
355
|
if http_error.response.code == "404"
|
|
356
356
|
raise ChefVault::Exceptions::ItemNotFound,
|
|
357
357
|
"#{vault}/#{name} not found"
|
|
@@ -454,7 +454,7 @@ class ChefVault
|
|
|
454
454
|
def client_exists?(clientname)
|
|
455
455
|
Chef::ApiClient.load(clientname)
|
|
456
456
|
true
|
|
457
|
-
rescue Net::
|
|
457
|
+
rescue Net::HTTPClientException => http_error
|
|
458
458
|
return false if http_error.response.code == "404"
|
|
459
459
|
|
|
460
460
|
raise http_error
|
data/lib/chef-vault/item_keys.rb
CHANGED
|
@@ -122,7 +122,7 @@ class ChefVault
|
|
|
122
122
|
unless Chef::Config[:solo_legacy_mode]
|
|
123
123
|
begin
|
|
124
124
|
Chef::DataBag.load(data_bag)
|
|
125
|
-
rescue Net::
|
|
125
|
+
rescue Net::HTTPClientException => http_error
|
|
126
126
|
if http_error.response.code == "404"
|
|
127
127
|
chef_data_bag = Chef::DataBag.new
|
|
128
128
|
chef_data_bag.name data_bag
|
|
@@ -143,7 +143,7 @@ class ChefVault
|
|
|
143
143
|
Chef::DataBagItem.from_hash("data_bag" => data_bag,
|
|
144
144
|
"id" => sparse_id(key))
|
|
145
145
|
.destroy(data_bag, sparse_id(key))
|
|
146
|
-
rescue Net::
|
|
146
|
+
rescue Net::HTTPClientException => http_error
|
|
147
147
|
raise http_error unless http_error.response.code == "404"
|
|
148
148
|
end
|
|
149
149
|
end
|
|
@@ -234,7 +234,7 @@ class ChefVault
|
|
|
234
234
|
def self.load(vault, name)
|
|
235
235
|
begin
|
|
236
236
|
data_bag_item = Chef::DataBagItem.load(vault, name)
|
|
237
|
-
rescue Net::
|
|
237
|
+
rescue Net::HTTPClientException => http_error
|
|
238
238
|
if http_error.response.code == "404"
|
|
239
239
|
raise ChefVault::Exceptions::KeysNotFound,
|
|
240
240
|
"#{vault}/#{name} could not be found"
|
|
@@ -265,7 +265,7 @@ class ChefVault
|
|
|
265
265
|
else
|
|
266
266
|
begin
|
|
267
267
|
Chef::DataBagItem.load(@data_bag, sid)
|
|
268
|
-
rescue Net::
|
|
268
|
+
rescue Net::HTTPClientException => http_error
|
|
269
269
|
nil if http_error.response.code == "404"
|
|
270
270
|
end
|
|
271
271
|
end
|
data/lib/chef-vault/version.rb
CHANGED
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: chef-vault
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 4.1.
|
|
4
|
+
version: 4.1.10
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Thom May
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2022-04-12 00:00:00.000000000 Z
|
|
12
12
|
dependencies: []
|
|
13
13
|
description: Data encryption support for Chef Infra using data bags
|
|
14
14
|
email:
|
|
@@ -61,7 +61,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
|
61
61
|
requirements:
|
|
62
62
|
- - ">="
|
|
63
63
|
- !ruby/object:Gem::Version
|
|
64
|
-
version: '2.
|
|
64
|
+
version: '2.6'
|
|
65
65
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
|
66
66
|
requirements:
|
|
67
67
|
- - ">="
|