confidante 0.28.0.pre.12 → 0.28.0.pre.15

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fb57c8d60214b57bc0c20c165047ebf557f6252dbb3be1ec48466a97d7f45369
-  data.tar.gz: b3e3bd926e765a325b75ad1eb8a9c6d114a5546cc70318d8f8392ce0ac45b9d7
+  metadata.gz: 9650fc6b5cfb60cde80bd5d25dde663535bca870a8f9b08ce29eb9c2375be8f7
+  data.tar.gz: 17cc9dd25523d6415681f1fcda2b8036c94360b4927fa97dd5532e1bfc3386e8
 SHA512:
-  metadata.gz: d5245cb848efa5f5c3051c52457ef6c37acde9d12319ede508e91949bb6a2cc4469e0296efc22d44b98d804855e7e82f796fa3eae630cf11b9bc221f4456e6f6
-  data.tar.gz: cbed95fbeff72f3e618f20c719335a861696674dc95e3256258e3174f781ea398ac5a8d730a635c160129e8916f2331d1638c42244d091bbd81a37f0d6df8854
+  metadata.gz: 8a81fed1309c40c7f52fac384b1f084ad7f1a8352adc031aed918d780f7d072436007f12571fe8c739173f35f6b834073bb1e67efc4441ac4d085fda3e57d642
+  data.tar.gz: e8eb70b0f2246395a497ade451252cf05d762bad52d2128f6ce50360ba20709f8921de4059202d19463641dc39dbb10a8c7f5fce7f9f81d1248e7567721abe4c

data/Gemfile.lock

@@ -1,15 +1,16 @@
 PATH
   remote: .
   specs:
-    confidante (0.28.0.pre.12)
+    confidante (0.28.0.pre.15)
       activesupport (>= 4)
       hiera (~> 3.3)
       shikashi (~> 0.6)
+      vault (~> 0.17)
 
 GEM
   remote: https://rubygems.org/
   specs:
-    activesupport (7.0.2.3)
+    activesupport (7.0.3.1)
       concurrent-ruby (~> 1.0, >= 1.0.2)
       i18n (>= 1.6, < 2)
       minitest (>= 5.1)
@@ -17,8 +18,11 @@ GEM
     addressable (2.8.0)
       public_suffix (>= 2.0.2, < 5.0)
     ast (2.4.2)
+    aws-eventstream (1.2.0)
+    aws-sigv4 (1.5.1)
+      aws-eventstream (~> 1, >= 1.0.2)
     colored2 (3.1.2)
-    concurrent-ruby (1.1.9)
+    concurrent-ruby (1.1.10)
     diff-lcs (1.5.0)
     docile (1.4.0)
     evalhook (0.6.0)
@@ -52,20 +56,21 @@ GEM
     getsource (0.2.2)
     hamster (3.0.0)
       concurrent-ruby (~> 1.0)
-    hiera (3.8.0)
-    i18n (1.10.0)
+    hiera (3.10.0)
+    i18n (1.11.0)
       concurrent-ruby (~> 1.0)
+    json (2.6.2)
     lino (3.0.0)
       hamster (~> 3.0)
       open4 (~> 1.3)
-    minitest (5.15.0)
+    minitest (5.16.2)
     multipart-post (2.1.1)
     octokit (4.22.0)
       faraday (>= 0.9)
       sawyer (~> 0.8.0, >= 0.5.3)
     open4 (1.3.4)
-    parallel (1.22.0)
-    parser (3.1.1.0)
+    parallel (1.22.1)
+    parser (3.1.2.1)
       ast (~> 2.4.1)
     partialruby (0.3.0)
       ruby2ruby (~> 2)
@@ -93,7 +98,7 @@ GEM
       colored2 (~> 3.1)
       rake_factory (~> 0.23)
       sshkey (~> 2.0)
-    regexp_parser (2.2.1)
+    regexp_parser (2.5.0)
     rexml (3.2.5)
     rspec (3.11.0)
       rspec-core (~> 3.11.0)
@@ -108,21 +113,22 @@ GEM
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.11.0)
     rspec-support (3.11.0)
-    rubocop (1.26.1)
+    rubocop (1.35.0)
+      json (~> 2.3)
       parallel (~> 1.10)
-      parser (>= 3.1.0.0)
+      parser (>= 3.1.2.1)
       rainbow (>= 2.2.2, < 4.0)
       regexp_parser (>= 1.8, < 3.0)
-      rexml
-      rubocop-ast (>= 1.16.0, < 2.0)
+      rexml (>= 3.2.5, < 4.0)
+      rubocop-ast (>= 1.20.1, < 2.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 1.4.0, < 3.0)
-    rubocop-ast (1.16.0)
+    rubocop-ast (1.21.0)
       parser (>= 3.1.1.0)
     rubocop-rake (0.6.0)
       rubocop (~> 1.0)
-    rubocop-rspec (2.9.0)
-      rubocop (~> 1.19)
+    rubocop-rspec (2.12.1)
+      rubocop (~> 1.31)
     ruby-progressbar (1.11.0)
     ruby2_keywords (0.0.5)
     ruby2ruby (2.4.4)
@@ -148,10 +154,14 @@ GEM
     sshkey (2.0.0)
     tzinfo (2.0.4)
       concurrent-ruby (~> 1.0)
-    unicode-display_width (2.1.0)
+    unicode-display_width (2.2.0)
+    vault (0.17.0)
+      aws-sigv4
 
 PLATFORMS
   arm64-darwin-21
+  x86_64-darwin-20
+  x86_64-darwin-21
   x86_64-linux
 
 DEPENDENCIES
@@ -170,4 +180,4 @@ DEPENDENCIES
   simplecov
 
 BUNDLED WITH
-   2.3.10
+   2.3.20

data/confidante.gemspec

@@ -41,6 +41,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency 'activesupport', '>= 4'
   spec.add_dependency 'hiera', '~> 3.3'
   spec.add_dependency 'shikashi', '~> 0.6'
+  spec.add_dependency 'vault', '~> 0.17'
 
   spec.add_development_dependency 'bundler'
   spec.add_development_dependency 'gem-release'

data/lib/confidante/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Confidante
-  VERSION = '0.28.0.pre.12'
+  VERSION = '0.28.0.pre.15'
 end

data/lib/confidante.rb

@@ -8,6 +8,7 @@ require_relative 'shikashi_extensions/sandbox'
 
 require_relative 'hiera/backend/env_backend'
 require_relative 'hiera/backend/overrides_backend'
+require_relative 'hiera/backend/vault_backend'
 
 module Confidante
   def self.configuration(opts = {})

data/lib/hiera/backend/vault_backend.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+require 'hiera'
+require 'vault'
+
+class Hiera
+  module Backend
+    # rubocop:disable Naming/ClassAndModuleCamelCase
+    class Vault_backend
+      def initialize
+        Hiera.debug('Hiera vault backend starting')
+      end
+
+      def lookup(key, scope, _order_override, resolution_type, _context)
+        Hiera.debug("Looking up #{key} in vault backend " \
+                    "with #{resolution_type}")
+
+        vault_config = Backend.parse_answer(Config[:vault], scope)
+        vault_address = vault_config[:address]
+        vault_client = Vault::Client.new(address: vault_address)
+
+        source = vault_config[:sources][0]
+
+        throw(:unsupported_secrets_engine) unless source[:engine] == 'kv'
+
+        value = read_kv_value(vault_client, source, key)
+
+        Backend.parse_answer(value, scope)
+      end
+
+      def read_kv_value(vault_client, source, key)
+        secret = vault_client.kv(source[:mount]).read(key)
+        throw(:no_such_key) unless secret
+
+        value = secret.data[:value]
+        throw(:no_such_key) unless value
+        value
+      end
+    end
+
+    # rubocop:enable Naming/ClassAndModuleCamelCase
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: confidante
 version: !ruby/object:Gem::Version
-  version: 0.28.0.pre.12
+  version: 0.28.0.pre.15
 platform: ruby
 authors:
 - InfraBlocks Maintainers
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-03-24 00:00:00.000000000 Z
+date: 2022-08-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -52,6 +52,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.6'
+- !ruby/object:Gem::Dependency
+  name: vault
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.17'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.17'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -244,6 +258,7 @@ files:
 - lib/confidante/version.rb
 - lib/hiera/backend/env_backend.rb
 - lib/hiera/backend/overrides_backend.rb
+- lib/hiera/backend/vault_backend.rb
 - lib/shikashi_extensions/sandbox.rb
 homepage: https://github.com/infrablocks/confidante
 licenses: