confidante 0.28.0.pre.15 → 0.28.0.pre.16
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/Gemfile.lock +1 -1
- data/lib/confidante/version.rb +1 -1
- data/lib/hiera/backend/vault_backend.rb +18 -9
- metadata +1 -1
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: f227c07f069e181681816cc7489b858e84902900d7c19f31b5ba99449f6e431b
|
4
|
+
data.tar.gz: b0d0e7a23a56b82c86a26aedad88b03f12ae92a08a8a6d670cd6929916c15c79
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 83b32114eccd28d13653e36afe295828adf3def314aa33d21da2665e237021c74128b852c7244a273cedfa880bcd2ad628226ca16ae14db5f50d9adb39cc0626
|
7
|
+
data.tar.gz: 031042a9e6e29028ff51a5772c834cf4025f04b4e250a3ca2ea5fe638d1d1fb70c43bf209200ff5c2e3b6ccc07537a711d87277b1035ac5fdfebb4d8d51fe5a9
|
data/Gemfile.lock
CHANGED
data/lib/confidante/version.rb
CHANGED
@@ -19,22 +19,31 @@ class Hiera
|
|
19
19
|
vault_address = vault_config[:address]
|
20
20
|
vault_client = Vault::Client.new(address: vault_address)
|
21
21
|
|
22
|
-
|
22
|
+
value = get_value(vault_client, key, vault_config[:sources])
|
23
23
|
|
24
|
-
|
24
|
+
Backend.parse_answer(value, scope)
|
25
|
+
end
|
25
26
|
|
26
|
-
|
27
|
+
def get_value(vault_client, key, sources)
|
28
|
+
found_source = sources.find do |source|
|
29
|
+
read_kv_value(vault_client, source, key)
|
30
|
+
end
|
27
31
|
|
28
|
-
|
32
|
+
throw(:no_such_key) unless found_source
|
33
|
+
|
34
|
+
read_kv_value(vault_client, found_source, key)
|
29
35
|
end
|
30
36
|
|
31
37
|
def read_kv_value(vault_client, source, key)
|
32
|
-
|
33
|
-
|
38
|
+
throw(:unsupported_secrets_engine) unless source[:engine] == 'kv'
|
39
|
+
|
40
|
+
mount = source[:mount]
|
41
|
+
full_path = "#{source[:path]}/#{key}"
|
42
|
+
|
43
|
+
secret = vault_client.kv(mount).read(full_path)
|
44
|
+
return nil unless secret
|
34
45
|
|
35
|
-
|
36
|
-
throw(:no_such_key) unless value
|
37
|
-
value
|
46
|
+
secret.data[:value]
|
38
47
|
end
|
39
48
|
end
|
40
49
|
|