conjur-api 6.2.0.pre.810 → 6.3.0.pre.811

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cb33008a2f3703a146a81bd1137504a4e5f215fa128a7c24d445b858b49f3b3d
-  data.tar.gz: 0a388235cd0ea27b9fa17cf61c7968518a6e9e8e47a8c4e56a9e3bc7479ba052
+  metadata.gz: 03b217e867501dae07020520da8771c1567eb9e68535ac091d246682b03a5f1e
+  data.tar.gz: 33a22ce177a5bf8565ad0c95402f8370fb3126187e84d338a64a765bde0d03e2
 SHA512:
-  metadata.gz: 4f203ec814c0f97d21fede4111558556b180b2d84bdda51ee9abb9050f633f2b0fb0cb315bd04f39d76f8dae6df2c7b26cfa0bac46e599605569bda506c8492b
-  data.tar.gz: 6c5f2677c1b07d65fa6db2840c23dc8e78f34d20e332a65bea03f2c7ecb975649b927293da195ab8423950daf29e8a998de235910e5434e9cb8e3843b147cfbc
+  metadata.gz: a95db33a615a15082b9895757dbb3f8efb924fe220c574b6283c4c8d7c48ffb2f12c0fc974de0af512566510a857af05dd433cbb6f95180eea6eb810c5e8597b
+  data.tar.gz: 97fffe87e74bafba8be80fb93308a9cc3f1638bad1e1ca8555a9e245694de02f51627b933e8ae3248a1306fb3a1e336ca255dc93566aa3d9e5297a2dcd042b09

data/CHANGELOG.md

@@ -5,12 +5,21 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
 ## Unreleased
+
+## [6.3.0] - 2026-07-15
+
+### Added
+- Added `Conjur::API#fetch_policy` for retrieving policy data from the server,
+  as YAML or JSON, with optional tree depth and size limits.
+
 ### Changed
 - CI uses Conjur Enterprise 1.27.0+, which removed the `GET /public_keys` endpoint
   (CNJR-11339). Dropped the Cucumber scenario that exercised that API; the client
   method remains for open-source Conjur.
 - Retrieve the Cucumber admin API key via `conjurctl` in `test.sh` instead of rake,
   avoiding Rails boot output corrupting the key on current Conjur images.
+- CI now tests against Ruby 3.3, 3.4, and 4.0. Dropped Ruby 3.2 (end of life)
+  and raised the minimum supported Ruby version accordingly.
 
 ## [6.2.0] - 2026-06-05
 

data/Jenkinsfile

@@ -80,56 +80,56 @@ pipeline {
       }
     }
 
-    stage('Test Ruby 3.2') {
+    stage('Test Ruby 3.3') {
       environment {
-        INFRAPOOL_RUBY_VERSION = '3.2'
+        INFRAPOOL_RUBY_VERSION = '3.3'
         INFRAPOOL_REGISTRY_URL = "registry.tld"
       }
       steps {
         script {
           infrapool.agentSh "./test.sh"
-          infrapool.agentStash name: 'reports3.2', includes: '**/reports/*.xml'
+          infrapool.agentStash name: 'reports3.3', includes: '**/reports/*.xml'
         }
       }
       post {
         always {
-          unstash 'reports3.2'
+          unstash 'reports3.3'
         }
       }
     }
 
-    stage('Test Ruby 3.3') {
+    stage('Test Ruby 3.4') {
       environment {
-        INFRAPOOL_RUBY_VERSION = '3.3'
+        INFRAPOOL_RUBY_VERSION = '3.4'
         INFRAPOOL_REGISTRY_URL = "registry.tld"
       }
       steps {
         script {
           infrapool.agentSh "./test.sh"
-          infrapool.agentStash name: 'reports3.3', includes: '**/reports/*.xml'
+          infrapool.agentStash name: 'reports3.4', includes: '**/reports/*.xml'
         }
       }
       post {
         always {
-          unstash 'reports3.3'
+          unstash 'reports3.4'
         }
       }
     }
 
-    stage('Test Ruby 3.4') {
+    stage('Test Ruby 4.0') {
       environment {
-        INFRAPOOL_RUBY_VERSION = '3.4'
+        INFRAPOOL_RUBY_VERSION = '4.0'
         INFRAPOOL_REGISTRY_URL = "registry.tld"
       }
       steps {
         script {
           infrapool.agentSh "./test.sh"
-          infrapool.agentStash name: 'reports3.4', includes: '**/reports/*.xml'
+          infrapool.agentStash name: 'reports4.0', includes: '**/reports/*.xml'
         }
       }
       post {
         always {
-          unstash 'reports3.4'
+          unstash 'reports4.0'
         }
       }
     }

data/VERSION

@@ -1 +1 @@
-6.2.0-810
+6.3.0-811

data/conjur-api.gemspec

@@ -16,7 +16,7 @@ Gem::Specification.new do |gem|
   gem.require_paths = ["lib"]
   gem.version       = Conjur::API::VERSION
 
-  gem.required_ruby_version = '>= 1.9'
+  gem.required_ruby_version = '>= 3.3'
 
   # Filter out development only executables
   gem.executables -= %w{parse-changelog.sh}

data/features/load_policy.feature

@@ -60,3 +60,35 @@ Feature: Load a policy.
       "cucumber:user:admin"
     ]
     """
+
+  Scenario: A loaded subpolicy can be fetched back as YAML.
+    Given I run the code:
+    """
+    $conjur.load_policy 'root', <<-POLICY
+    - !policy
+      id: fetch-policy-yaml
+      body:
+      - !group fetch-policy-group
+    POLICY
+    """
+    Then I can run the code:
+    """
+    $conjur.fetch_policy 'fetch-policy-yaml'
+    """
+    Then the result should contain "fetch-policy-group"
+
+  Scenario: A loaded subpolicy can be fetched back as JSON.
+    Given I run the code:
+    """
+    $conjur.load_policy 'root', <<-POLICY
+    - !policy
+      id: fetch-policy-json
+      body:
+      - !group fetch-policy-json-group
+    POLICY
+    """
+    Then I can run the code:
+    """
+    $conjur.fetch_policy 'fetch-policy-json', return_json: true
+    """
+    Then the result should contain "fetch-policy-json-group"

data/features/step_definitions/result_steps.rb

@@ -2,6 +2,10 @@ Then(/^the result should be "([^"]+)"$/) do |expected|
   expect(@result.to_s).to eq(expected.to_s)
 end
 
+Then(/^the result should contain "([^"]+)"$/) do |expected|
+  expect(@result.to_s).to include(expected)
+end
+
 Then(/^the providers list contains service id "([^"]+)"$/) do |service_id|
   expect(@result.map{ |x| x["service_id"]}).to include(service_id)
 end

data/lib/conjur/api/policies.rb

@@ -51,6 +51,23 @@ module Conjur
       PolicyLoadResult.new JSON.parse(request.send(method, policy))
     end
 
+    # Fetch the current policy data from the server.
+    #
+    # @param id [String] id of the policy to fetch.
+    # @param account [String] Conjur organization account
+    # @param return_json [Boolean] Return the policy as JSON instead of the default YAML.
+    # @param depth [Integer, nil] Maximum depth of the returned policy tree (nil for the full tree).
+    # @param limit [Integer, nil] Maximum number of policy objects to return (nil for no limit).
+    # @return [String] the policy document, formatted as YAML or JSON.
+    def fetch_policy id, account: Conjur.configuration.account, return_json: false, depth: nil, limit: nil
+      options = {}
+      options[:depth] = depth if depth
+      options[:limit] = limit if limit
+      request = url_for(:policies_fetch_policy, credentials, account, id, options)
+      content_type = return_json ? 'application/json' : 'application/x-yaml'
+      request.get('Content-Type' => content_type).body
+    end
+
     #@!endgroup
   end
 end

data/lib/conjur/api/router.rb

@@ -148,6 +148,13 @@ module Conjur
         )['policies'][fully_escape account]['policy'][fully_escape id]
       end
 
+      def policies_fetch_policy credentials, account, id, options = {}
+        RestClient::Resource.new(
+          Conjur.configuration.core_url,
+          Conjur.configuration.create_rest_client_options(credentials)
+        )['policies'][fully_escape account]['policy'][fully_escape id][options_querystring options]
+      end
+
       def public_keys_for_user account, username
         RestClient::Resource.new(
           Conjur.configuration.core_url,

data/spec/api/policies_spec.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require 'conjur/api/policies'
+
+describe "Conjur::API#fetch_policy", api: :dummy do
+  let(:api) { Conjur::API.new_from_key('user', 'pass') }
+
+  before do
+    allow(api).to receive(:credentials).and_return('the-credentials')
+  end
+
+  it "fetches the policy as YAML by default" do
+    resource = instance_double(RestClient::Resource, "policy resource")
+    allow(api).to receive(:url_for)
+      .with(:policies_fetch_policy, 'the-credentials', 'the-account', 'root', {})
+      .and_return(resource)
+
+    allow(resource).to receive(:get).with('Content-Type' => 'application/x-yaml').and_return(
+      instance_double(RestClient::Response, "policy response", body: "- !host foo\n")
+    )
+
+    expect(api.fetch_policy('root', account: 'the-account')).to eq("- !host foo\n")
+  end
+
+  it "fetches the policy as JSON when requested" do
+    resource = instance_double(RestClient::Resource, "policy resource")
+    allow(api).to receive(:url_for)
+      .with(:policies_fetch_policy, 'the-credentials', 'the-account', 'root', { depth: 2, limit: 100 })
+      .and_return(resource)
+
+    allow(resource).to receive(:get).with('Content-Type' => 'application/json').and_return(
+      instance_double(RestClient::Response, "policy response", body: '[{"id":"cucumber:host:foo"}]')
+    )
+
+    expect(
+      api.fetch_policy('root', account: 'the-account', return_json: true, depth: 2, limit: 100)
+    ).to eq('[{"id":"cucumber:host:foo"}]')
+  end
+end

data/test.sh

@@ -1,6 +1,6 @@
 #!/bin/bash -e
 
-: "${RUBY_VERSION=3.2}"
+: "${RUBY_VERSION=3.3}"
 # My local RUBY_VERSION is set to ruby-#.#.# so this allows running locally.
 RUBY_VERSION="$(cut -d '-' -f 2 <<< "$RUBY_VERSION")"
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: conjur-api
 version: !ruby/object:Gem::Version
-  version: 6.2.0.pre.810
+  version: 6.3.0.pre.811
 platform: ruby
 authors:
 - CyberArk Maintainers
@@ -384,6 +384,7 @@ files:
 - publish.sh
 - spec/.conjurrc
 - spec/api/host_factories_spec.rb
+- spec/api/policies_spec.rb
 - spec/api_spec.rb
 - spec/authn_cert_spec.rb
 - spec/base_object_spec.rb
@@ -418,7 +419,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '1.9'
+      version: '3.3'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
@@ -458,6 +459,7 @@ test_files:
 - features/variable_value.feature
 - spec/.conjurrc
 - spec/api/host_factories_spec.rb
+- spec/api/policies_spec.rb
 - spec/api_spec.rb
 - spec/authn_cert_spec.rb
 - spec/base_object_spec.rb