conjur-api 6.0.1.pre.517 → 6.0.1.pre.562
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +4 -2
- data/CONTRIBUTING.md +1 -1
- data/README.md +13 -19
- data/Rakefile +1 -1
- data/SECURITY.md +2 -38
- data/VERSION +1 -1
- data/conjur-api.gemspec +2 -2
- data/features/support/env.rb +1 -1
- data/spec/spec_helper.rb +1 -1
- data/test.sh +1 -1
- metadata +10 -16
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 741fa8ac938000520f64d873f27ba567105da559f7009894b2a6d29a1bdbc1de
|
4
|
+
data.tar.gz: 68bcdf0e71536d2a0e232739c5c56d59fcfa5dc7b77ddd3177041d8c778ace9a
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 5205e6586150e59ee3f9436141361cd2e96a9edaf7f8df1f34c516a8f9d93dbab459ce2fc272991f439807107008c8cfb69574ef8c4b0720cae65d008db58412
|
7
|
+
data.tar.gz: 8626037bda7a60668e8a64e04787c1b1c3ae891e2f9abee64ac5550180c9f71a0993a31992bb6988bf24817dde321faee1e49dc7b9a435f2db09809332dda9c3
|
data/CHANGELOG.md
CHANGED
@@ -9,9 +9,10 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
9
9
|
- Nothing should go in this section, please add to the latest unreleased version
|
10
10
|
(and update the corresponding date), or add a new version.
|
11
11
|
|
12
|
-
## [6.0.1] -
|
12
|
+
## [6.0.1] - 2025-09-05
|
13
13
|
|
14
14
|
### Fixed
|
15
|
+
- Updated README.md, CONTRIBUTING.md, and SECURITY.md to align with Conjur Enterprise name change to Secrets Manager. (CNJR-10968)
|
15
16
|
- Pass valid field in #memberships to fix listing roles (CNJR-2109)
|
16
17
|
- Pull keycloak image from internal repository
|
17
18
|
|
@@ -395,7 +396,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
|
|
395
396
|
|
396
397
|
## [2.0.0] - 2013-13-12
|
397
398
|
|
398
|
-
[Unreleased]: https://github.com/cyberark/conjur-api-ruby/compare/v6.0.
|
399
|
+
[Unreleased]: https://github.com/cyberark/conjur-api-ruby/compare/v6.0.1...HEAD
|
400
|
+
[6.0.1]: https://github.com/cyberark/conjur-api-ruby/compare/v6.0.0...v6.0.1
|
399
401
|
[6.0.0]: https://github.com/cyberark/conjur-api-ruby/compare/v5.4.1...v6.0.0
|
400
402
|
[5.4.1]: https://github.com/cyberark/conjur-api-ruby/compare/v5.4.0...v5.4.1
|
401
403
|
[5.4.0]: https://github.com/cyberark/conjur-api-ruby/compare/v5.3.7...v5.4.0
|
data/CONTRIBUTING.md
CHANGED
@@ -17,7 +17,7 @@ contributor!
|
|
17
17
|
|
18
18
|
## Development
|
19
19
|
|
20
|
-
To develop and run tests against Conjur, use the `start` and `stop` scripts in the `dev` folder. The start script brings up
|
20
|
+
To develop and run tests against Conjur OSS, use the `start` and `stop` scripts in the `dev` folder. The start script brings up a Conjur OSS (and Postgres database), CLI container, and a "work" container, with the gem code mounted into the working directory.
|
21
21
|
|
22
22
|
### Starting a Shell
|
23
23
|
|
data/README.md
CHANGED
@@ -1,6 +1,6 @@
|
|
1
|
-
#
|
1
|
+
# CyberArk Secrets Manager API for Ruby
|
2
2
|
|
3
|
-
Programmatic Ruby access to the
|
3
|
+
Programmatic Ruby access to the Secrets Manager API.
|
4
4
|
|
5
5
|
RDocs are available from the through the [Ruby Gem details page](https://rubygems.org/gems/conjur-api)
|
6
6
|
|
@@ -31,23 +31,20 @@ Or install it yourself as:
|
|
31
31
|
|
32
32
|
# Usage
|
33
33
|
|
34
|
-
Connecting to
|
34
|
+
Connecting to Secrets Manager is a two-step process:
|
35
35
|
|
36
|
-
* **Configuration** Instruct the API where to find the
|
36
|
+
* **Configuration** Instruct the API where to find the Secrets Manager endpoint and how to secure the connection.
|
37
37
|
* **Authentication** Provide the API with credentials that it can use to authenticate.
|
38
38
|
|
39
39
|
## Configuration
|
40
40
|
|
41
|
-
The simplest way to configure the
|
42
|
-
If you have configured the machine with [
|
41
|
+
The simplest way to configure the Secrets Manager API is to use the configuration file stored on the machine.
|
42
|
+
If you have configured the machine with [Secrets Manager CLI](https://github.com/cyberark/conjur-cli-go),
|
43
43
|
its default location is `~/.conjurrc`.
|
44
44
|
|
45
|
-
The Conjur configuration process also checks `/etc/conjur.conf` for global settings. This is typically used
|
46
|
-
in server environments.
|
47
|
-
|
48
45
|
For custom scenarios, the location of the file can be overridden using the `CONJURRC` environment variable.
|
49
46
|
|
50
|
-
You can load the
|
47
|
+
You can load the Secrets Manager configuration file using the following Ruby code:
|
51
48
|
|
52
49
|
```ruby
|
53
50
|
require 'conjur/cli'
|
@@ -55,18 +52,15 @@ Conjur::Config.load
|
|
55
52
|
Conjur::Config.apply
|
56
53
|
```
|
57
54
|
|
58
|
-
**Note** this code requires the [conjur-cli](https://github.com/conjurinc/cli-ruby) gem, which should also be in your
|
59
|
-
gemset or bundle.
|
60
|
-
|
61
55
|
## Authentication
|
62
56
|
|
63
|
-
Once
|
57
|
+
Once Secrets Manager is configured, the connection can be established like this:
|
64
58
|
|
65
59
|
```
|
66
60
|
conjur = Conjur::Authn.connect nil, noask: true
|
67
61
|
```
|
68
62
|
|
69
|
-
To
|
63
|
+
To authenticate, the API client must
|
70
64
|
provide a `login` name and `api_key`. The `Conjur::Authn.connect` will attempt the following, in order:
|
71
65
|
|
72
66
|
1. Look for `login` in environment variable `CONJUR_AUTHN_LOGIN`, and `api_key` in `CONJUR_AUTHN_API_KEY`
|
@@ -76,7 +70,7 @@ can be overridden using the configuration file `netrc_path` option.
|
|
76
70
|
|
77
71
|
## Connecting Without Files
|
78
72
|
|
79
|
-
It's possible to configure and authenticate the
|
73
|
+
It's possible to configure and authenticate the Secrets Manager connection without using any files, and without requiring
|
80
74
|
the `conjur-cli` gem.
|
81
75
|
|
82
76
|
To accomplish this, apply the configuration settings directly to the [Conjur::Configuration](https://github.com/conjurinc/api-ruby/blob/master/lib/conjur/configuration.rb)
|
@@ -99,20 +93,20 @@ In either case, you will also need to configure certificate trust. For example:
|
|
99
93
|
OpenSSL::SSL::SSLContext::DEFAULT_CERT_STORE.add_file "/etc/conjur-yourorg.pem"
|
100
94
|
```
|
101
95
|
|
102
|
-
Once
|
96
|
+
Once Secrets Manager is configured, you can create a new API client by providing a `login` and `api_key`:
|
103
97
|
|
104
98
|
```
|
105
99
|
Conjur::API.new_from_key login, api_key
|
106
100
|
```
|
107
101
|
|
108
|
-
Note that if you are connecting as a
|
102
|
+
Note that if you are connecting as a Host, the login should be
|
109
103
|
prefixed with `host/`. For example: `host/myhost.example.com`, not just `myhost.example.com`.
|
110
104
|
|
111
105
|
## Configuring RestClient
|
112
106
|
|
113
107
|
[Conjur::Configuration](https://github.com/conjurinc/api-ruby/blob/master/lib/conjur/configuration.rb)
|
114
108
|
allows optional configuration of the [RestClient](https://github.com/rest-client/rest-client)
|
115
|
-
instance used by
|
109
|
+
instance used by Secrets Manager API to communicate with the Secrets Manager server, via the options hash
|
116
110
|
`Conjur.configuration.rest_client_options`.
|
117
111
|
|
118
112
|
The default value for the options hash is:
|
data/Rakefile
CHANGED
@@ -24,7 +24,7 @@ begin
|
|
24
24
|
require 'cucumber/rake/task'
|
25
25
|
|
26
26
|
Cucumber::Rake::Task.new(:cucumber) do |t|
|
27
|
-
t.cucumber_opts = "--tags
|
27
|
+
t.cucumber_opts = "--tags 'not @wip' --format pretty --format junit --out features/reports"
|
28
28
|
end
|
29
29
|
|
30
30
|
begin
|
data/SECURITY.md
CHANGED
@@ -1,42 +1,6 @@
|
|
1
1
|
# Security Policies and Procedures
|
2
2
|
|
3
|
-
This document outlines security procedures and general policies for the CyberArk Conjur
|
4
|
-
suite of tools and products.
|
5
|
-
|
6
|
-
* [Reporting a Bug](#reporting-a-bug)
|
7
|
-
* [Disclosure Policy](#disclosure-policy)
|
8
|
-
* [Comments on this Policy](#comments-on-this-policy)
|
9
|
-
|
10
3
|
## Reporting a Bug
|
4
|
+
CyberArk takes product security very seriously. If you believe you have found a vulnerability in one of our products, we ask that you follow responsible disclosure guidelines and contact product_security@cyberark.com and work with us toward a quick resolution to protect our customers.
|
11
5
|
|
12
|
-
|
13
|
-
Thank you for improving the security of the Conjur suite. We appreciate your efforts and
|
14
|
-
responsible disclosure and will make every effort to acknowledge your
|
15
|
-
contributions.
|
16
|
-
|
17
|
-
Report security bugs by emailing the lead maintainers at security@conjur.org.
|
18
|
-
|
19
|
-
The maintainers will acknowledge your email within 2 business days. Subsequently, we will
|
20
|
-
send a more detailed response within 2 business days of our acknowledgement indicating
|
21
|
-
the next steps in handling your report. After the initial reply to your report, the security
|
22
|
-
team will endeavor to keep you informed of the progress towards a fix and full
|
23
|
-
announcement, and may ask for additional information or guidance.
|
24
|
-
|
25
|
-
Report security bugs in third-party modules to the person or team maintaining
|
26
|
-
the module.
|
27
|
-
|
28
|
-
## Disclosure Policy
|
29
|
-
|
30
|
-
When the security team receives a security bug report, they will assign it to a
|
31
|
-
primary handler. This person will coordinate the fix and release process,
|
32
|
-
involving the following steps:
|
33
|
-
|
34
|
-
* Confirm the problem and determine the affected versions.
|
35
|
-
* Audit code to find any potential similar problems.
|
36
|
-
* Prepare fixes for all releases still under maintenance. These fixes will be
|
37
|
-
released as fast as possible.
|
38
|
-
|
39
|
-
## Comments on this Policy
|
40
|
-
|
41
|
-
If you have suggestions on how this process could be improved please submit a
|
42
|
-
pull request.
|
6
|
+
Refer to [CyberArk's Security Vulnerability Policy](https://www.cyberark.com/cyberark-security-vulinerability-policy.pdf) for more details.
|
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
6.0.1-
|
1
|
+
6.0.1-562
|
data/conjur-api.gemspec
CHANGED
@@ -29,9 +29,9 @@ Gem::Specification.new do |gem|
|
|
29
29
|
gem.add_development_dependency 'rspec', '~> 3'
|
30
30
|
gem.add_development_dependency 'rspec-expectations', '~> 3.4'
|
31
31
|
gem.add_development_dependency 'json_spec'
|
32
|
-
gem.add_development_dependency 'cucumber'
|
32
|
+
gem.add_development_dependency 'cucumber'
|
33
33
|
gem.add_development_dependency 'ci_reporter_rspec'
|
34
|
-
gem.add_development_dependency 'simplecov'
|
34
|
+
gem.add_development_dependency 'simplecov'
|
35
35
|
gem.add_development_dependency 'simplecov-cobertura'
|
36
36
|
gem.add_development_dependency 'io-grab'
|
37
37
|
gem.add_development_dependency 'rdoc'
|
data/features/support/env.rb
CHANGED
@@ -20,4 +20,4 @@ $username = ENV['CONJUR_AUTHN_LOGIN'] || 'admin'
|
|
20
20
|
$password = ENV['CONJUR_AUTHN_API_KEY'] || 'secret'
|
21
21
|
|
22
22
|
$api_key = Conjur::API.login $username, $password
|
23
|
-
$conjur = Conjur::API.new_from_key $username, $api_key
|
23
|
+
$conjur = Conjur::API.new_from_key $username, $api_key
|
data/spec/spec_helper.rb
CHANGED
data/test.sh
CHANGED
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: conjur-api
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 6.0.1.pre.
|
4
|
+
version: 6.0.1.pre.562
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- CyberArk Maintainers
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2025-08
|
11
|
+
date: 2025-10-08 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: rest-client
|
@@ -112,16 +112,16 @@ dependencies:
|
|
112
112
|
name: cucumber
|
113
113
|
requirement: !ruby/object:Gem::Requirement
|
114
114
|
requirements:
|
115
|
-
- - "
|
115
|
+
- - ">="
|
116
116
|
- !ruby/object:Gem::Version
|
117
|
-
version: '
|
117
|
+
version: '0'
|
118
118
|
type: :development
|
119
119
|
prerelease: false
|
120
120
|
version_requirements: !ruby/object:Gem::Requirement
|
121
121
|
requirements:
|
122
|
-
- - "
|
122
|
+
- - ">="
|
123
123
|
- !ruby/object:Gem::Version
|
124
|
-
version: '
|
124
|
+
version: '0'
|
125
125
|
- !ruby/object:Gem::Dependency
|
126
126
|
name: ci_reporter_rspec
|
127
127
|
requirement: !ruby/object:Gem::Requirement
|
@@ -140,22 +140,16 @@ dependencies:
|
|
140
140
|
name: simplecov
|
141
141
|
requirement: !ruby/object:Gem::Requirement
|
142
142
|
requirements:
|
143
|
-
- - "
|
144
|
-
- !ruby/object:Gem::Version
|
145
|
-
version: '0.17'
|
146
|
-
- - "<"
|
143
|
+
- - ">="
|
147
144
|
- !ruby/object:Gem::Version
|
148
|
-
version: '0
|
145
|
+
version: '0'
|
149
146
|
type: :development
|
150
147
|
prerelease: false
|
151
148
|
version_requirements: !ruby/object:Gem::Requirement
|
152
149
|
requirements:
|
153
|
-
- - "
|
154
|
-
- !ruby/object:Gem::Version
|
155
|
-
version: '0.17'
|
156
|
-
- - "<"
|
150
|
+
- - ">="
|
157
151
|
- !ruby/object:Gem::Version
|
158
|
-
version: '0
|
152
|
+
version: '0'
|
159
153
|
- !ruby/object:Gem::Dependency
|
160
154
|
name: simplecov-cobertura
|
161
155
|
requirement: !ruby/object:Gem::Requirement
|