conjur-asset-host-factory 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,7 @@
1
+ ---
2
+ SHA1:
3
+ metadata.gz: e3c2d66c6541a8eca47e87920a0a70a0d457c570
4
+ data.tar.gz: 750acd291ddef8c6b792368a6c5531f0f9616ad2
5
+ SHA512:
6
+ metadata.gz: 35f6c10d408630bcc2e81210091c5926e84db14cf45f5317327a944948da28714b9cdf4405ab6f1b47e70a67ca1145ad1d0ecb0003c33c3a6d88bb5ba79be807
7
+ data.tar.gz: bdd0d00d9b258c4c91ffbebd60697e1445e1ae791cdf2803117f43f575d714d5c347315fc070a3116809881d803a0b39e512d2b04ce886a310603f0282e48ea1
@@ -0,0 +1,23 @@
1
+ .conjurrc
2
+ *.gem
3
+ *.rbc
4
+ .bundle
5
+ .config
6
+ .yardoc
7
+ Gemfile.lock
8
+ InstalledFiles
9
+ _yardoc
10
+ coverage
11
+ doc/
12
+ lib/bundler/man
13
+ pkg
14
+ rdoc
15
+ spec/reports
16
+ test/tmp
17
+ test/version_tmp
18
+ tmp
19
+ *.bundle
20
+ *.so
21
+ *.o
22
+ *.a
23
+ mkmf.log
@@ -0,0 +1,18 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <projectDescription>
3
+ <name>conjur-asset-host-factory</name>
4
+ <comment></comment>
5
+ <projects>
6
+ </projects>
7
+ <buildSpec>
8
+ <buildCommand>
9
+ <name>com.aptana.ide.core.unifiedBuilder</name>
10
+ <arguments>
11
+ </arguments>
12
+ </buildCommand>
13
+ </buildSpec>
14
+ <natures>
15
+ <nature>com.aptana.ruby.core.rubynature</nature>
16
+ <nature>com.aptana.projects.webnature</nature>
17
+ </natures>
18
+ </projectDescription>
data/Gemfile ADDED
@@ -0,0 +1,10 @@
1
+ source 'https://rubygems.org'
2
+
3
+ # Specify your gem's dependencies in conjur-asset-host-factory.gemspec
4
+ gemspec
5
+
6
+ #ruby-gemset=conjur-asset-host-factory
7
+
8
+ group :test, :development do
9
+ gem 'conjur-cli'
10
+ end
@@ -0,0 +1,22 @@
1
+ Copyright (c) 2014 Kevin Gilpin
2
+
3
+ MIT License
4
+
5
+ Permission is hereby granted, free of charge, to any person obtaining
6
+ a copy of this software and associated documentation files (the
7
+ "Software"), to deal in the Software without restriction, including
8
+ without limitation the rights to use, copy, modify, merge, publish,
9
+ distribute, sublicense, and/or sell copies of the Software, and to
10
+ permit persons to whom the Software is furnished to do so, subject to
11
+ the following conditions:
12
+
13
+ The above copyright notice and this permission notice shall be
14
+ included in all copies or substantial portions of the Software.
15
+
16
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
17
+ EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
18
+ MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
19
+ NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
20
+ LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
21
+ OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
22
+ WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
@@ -0,0 +1,29 @@
1
+ # Conjur::Asset::HostFactory
2
+
3
+ API and CLI interface to the Conjur host factory.
4
+
5
+ ## Installation
6
+
7
+ Add this line to your application's Gemfile:
8
+
9
+ gem 'conjur-asset-host-factory'
10
+
11
+ And then execute:
12
+
13
+ $ bundle
14
+
15
+ Or install it yourself as:
16
+
17
+ $ gem install conjur-asset-host-factory
18
+
19
+ ## Usage
20
+
21
+ TODO: Write usage instructions here
22
+
23
+ ## Contributing
24
+
25
+ 1. Fork it ( https://github.com/[my-github-username]/conjur-asset-host-factory/fork )
26
+ 2. Create your feature branch (`git checkout -b my-new-feature`)
27
+ 3. Commit your changes (`git commit -am 'Add some feature'`)
28
+ 4. Push to the branch (`git push origin my-new-feature`)
29
+ 5. Create a new Pull Request
@@ -0,0 +1,10 @@
1
+ require "bundler/gem_tasks"
2
+
3
+ require 'ci/reporter/rake/rspec'
4
+ require 'rspec/core/rake_task'
5
+
6
+ RSpec::Core::RakeTask.new :spec
7
+
8
+ task :jenkins => ['ci:setup:rspec', :spec] do
9
+ File.write('build_number', ENV['BUILD_NUMBER']) if ENV['BUILD_NUMBER']
10
+ end
@@ -0,0 +1,25 @@
1
+ # coding: utf-8
2
+ lib = File.expand_path('../lib', __FILE__)
3
+ $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
4
+ require 'conjur-asset-host-factory-version'
5
+
6
+ Gem::Specification.new do |spec|
7
+ spec.name = "conjur-asset-host-factory"
8
+ spec.version = Conjur::Asset::HostFactory::VERSION
9
+ spec.authors = ["Kevin Gilpin"]
10
+ spec.email = ["kgilpin@gmail.com"]
11
+ spec.summary = %q{Conjur asset plugin for the host factory}
12
+ spec.homepage = "https://github.com/conjurinc/conjur-asset-host-factory"
13
+ spec.license = "MIT"
14
+
15
+ spec.files = `git ls-files -z`.split("\x0")
16
+ spec.executables = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
17
+ spec.test_files = spec.files.grep(%r{^(test|spec|features)/})
18
+ spec.require_paths = ["lib"]
19
+
20
+ spec.add_dependency "conjur-api", '>= 4.9.2'
21
+
22
+ spec.add_development_dependency "rake"
23
+ spec.add_development_dependency "rspec", "= 2.14.1"
24
+ spec.add_development_dependency 'ci_reporter', '~> 1.8'
25
+ end
@@ -0,0 +1,27 @@
1
+ #
2
+ # Copyright (C) 2014 Conjur Inc
3
+ #
4
+ # Permission is hereby granted, free of charge, to any person obtaining a copy of
5
+ # this software and associated documentation files (the "Software"), to deal in
6
+ # the Software without restriction, including without limitation the rights to
7
+ # use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
8
+ # the Software, and to permit persons to whom the Software is furnished to do so,
9
+ # subject to the following conditions:
10
+ #
11
+ # The above copyright notice and this permission notice shall be included in all
12
+ # copies or substantial portions of the Software.
13
+ #
14
+ # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
15
+ # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
16
+ # FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
17
+ # COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
18
+ # IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
19
+ # CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
20
+ #
21
+ module Conjur
22
+ module Asset
23
+ module HostFactory
24
+ VERSION = "1.0.0"
25
+ end
26
+ end
27
+ end
@@ -0,0 +1,22 @@
1
+ #
2
+ # Copyright (C) 2014 Conjur Inc
3
+ #
4
+ # Permission is hereby granted, free of charge, to any person obtaining a copy of
5
+ # this software and associated documentation files (the "Software"), to deal in
6
+ # the Software without restriction, including without limitation the rights to
7
+ # use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
8
+ # the Software, and to permit persons to whom the Software is furnished to do so,
9
+ # subject to the following conditions:
10
+ #
11
+ # The above copyright notice and this permission notice shall be included in all
12
+ # copies or substantial portions of the Software.
13
+ #
14
+ # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
15
+ # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
16
+ # FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
17
+ # COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
18
+ # IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
19
+ # CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
20
+ #
21
+ require 'conjur-asset-host-factory-version'
22
+ require 'conjur/host-factory-api'
@@ -0,0 +1,73 @@
1
+ #
2
+ # Copyright (C) 2014 Conjur Inc
3
+ #
4
+ # Permission is hereby granted, free of charge, to any person obtaining a copy of
5
+ # this software and associated documentation files (the "Software"), to deal in
6
+ # the Software without restriction, including without limitation the rights to
7
+ # use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
8
+ # the Software, and to permit persons to whom the Software is furnished to do so,
9
+ # subject to the following conditions:
10
+ #
11
+ # The above copyright notice and this permission notice shall be included in all
12
+ # copies or substantial portions of the Software.
13
+ #
14
+ # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
15
+ # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
16
+ # FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
17
+ # COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
18
+ # IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
19
+ # CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
20
+ #
21
+ require 'conjur/host_factory'
22
+
23
+ module Conjur
24
+ class API
25
+ # Options:
26
+ # +layers+ list of host factory layers
27
+ # +roleid+ host factory role
28
+ def create_host_factory(id, options = {})
29
+ if options[:layers]
30
+ options[:layers] = options[:layers].map do |layer|
31
+ if layer.is_a?(Conjur::Layer)
32
+ layer.resourceid
33
+ elsif layer.is_a?(String)
34
+ layer
35
+ else
36
+ raise "Can't interpret layer #{layer}"
37
+ end
38
+ end
39
+ end
40
+ log do |logger|
41
+ logger << "Creating host_factory #{id}"
42
+ unless options.blank?
43
+ logger << " with options #{options.inspect}"
44
+ end
45
+ end
46
+ options ||= {}
47
+ options[:id] = id
48
+ resp = RestClient::Resource.new(Conjur::API.host_factory_asset_host, credentials).post(options)
49
+ Conjur::HostFactory.build_from_response(resp, credentials)
50
+ end
51
+
52
+ def host_factory id
53
+ Conjur::HostFactory.new(Conjur::API.host_factory_asset_host, credentials)[fully_escape(id)]
54
+ end
55
+
56
+ def host_factory_create_host token, id, options = {}
57
+ token = token.token if token.is_a?(HostFactoryToken)
58
+ http_options = {
59
+ headers: { authorization: %Q(Token token="#{token}") }
60
+ }
61
+ response = RestClient::Resource.new(Conjur::API.host_factory_asset_host, http_options)["hosts"].post(options.merge(id: id)).body
62
+ attributes = JSON.parse(response)
63
+ Conjur::Host.new(Conjur::API.core_asset_host, credentials)["hosts"][fully_escape attributes['id']].tap do |host|
64
+ host.attributes = attributes
65
+ end
66
+ end
67
+
68
+ def revoke_host_factory_token token
69
+ token = token.token if token.is_a?(Conjur::HostFactoryToken)
70
+ RestClient::Resource.new(Conjur::API.host_factory_asset_host, credentials)["tokens/#{token}"].delete
71
+ end
72
+ end
73
+ end
@@ -0,0 +1,152 @@
1
+ #
2
+ # Copyright (C) 2014 Conjur Inc
3
+ #
4
+ # Permission is hereby granted, free of charge, to any person obtaining a copy of
5
+ # this software and associated documentation files (the "Software"), to deal in
6
+ # the Software without restriction, including without limitation the rights to
7
+ # use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
8
+ # the Software, and to permit persons to whom the Software is furnished to do so,
9
+ # subject to the following conditions:
10
+ #
11
+ # The above copyright notice and this permission notice shall be included in all
12
+ # copies or substantial portions of the Software.
13
+ #
14
+ # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
15
+ # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
16
+ # FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
17
+ # COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
18
+ # IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
19
+ # CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
20
+ #
21
+
22
+ class Conjur::Command::HostFactories < Conjur::Command
23
+ desc "Manage host factories"
24
+
25
+ command :hostfactory do |hf|
26
+ hf.desc "Create a new host factory"
27
+ hf.arg_name "id"
28
+ hf.command :create do |c|
29
+ acting_as_option(c)
30
+
31
+ c.arg_name "layer"
32
+ c.desc "A space-delimited list of layers to which new hosts will belong"
33
+ c.flag [:l, :layer]
34
+
35
+ c.action do |global_options,options,args|
36
+ id = require_arg(args, 'hostfactory')
37
+
38
+ unless options[:ownerid]
39
+ exit_now! "Use --as-group or --as-role to indicate the host factory role"
40
+ end
41
+
42
+ layers = (options[:layer] || "").split(/\s/)
43
+ layers.each do |layer|
44
+ exit_now! "Layer '#{layer}' does not exist" unless api.layer(layer).exists?
45
+ end
46
+
47
+ command_options = options.dup
48
+ command_options[:layers] = layers
49
+ command_options[:roleid] = options[:ownerid]
50
+
51
+ host_factory = api.create_host_factory id, command_options
52
+ display host_factory
53
+ end
54
+ end
55
+
56
+ hf.desc "Show a host factory"
57
+ hf.arg_name "id"
58
+ hf.command :show do |c|
59
+ c.action do |global_options,options,args|
60
+ id = require_arg(args, 'id')
61
+ display(api.host_factory(id), options)
62
+ end
63
+ end
64
+
65
+ hf.desc "List host factories"
66
+ hf.command :list do |c|
67
+ command_options_for_list c
68
+ c.action do |global_options, options, args|
69
+ command_impl_for_list global_options, options.merge(kind: "host_factory"), args
70
+ end
71
+ end
72
+
73
+ hf.desc "Operations on tokens"
74
+ hf.long_desc <<-DESC
75
+ This command creates one or more identical tokens. A token is always created with an
76
+ expiration time, which by default is 1 hour from now. The expiration time can be customized
77
+ with command arguments specifying the number of minutes, hours, days for which the token
78
+ will be valid.
79
+
80
+ By default, this command creates one token. Optionally, it can be used to create multiple identical tokens.
81
+ DESC
82
+ hf.command :tokens do |tokens|
83
+
84
+ tokens.desc "Create one or more tokens"
85
+ tokens.arg_name "hostfactory"
86
+ tokens.command :create do |c|
87
+ c.arg_name "duration in minutes"
88
+ c.desc "Number of minutes from now in which the token will expire"
89
+ c.flag [:"duration-minutes"]
90
+
91
+ c.arg_name "duration in hours"
92
+ c.desc "Number of hours from now in which the token will expire"
93
+ c.flag [:"duration-hours"]
94
+
95
+ c.arg_name "duration in days"
96
+ c.desc "Number of days from now in which the token will expire"
97
+ c.flag [:"duration-days"]
98
+
99
+ c.arg_name "count"
100
+ c.desc "Number of identical tokens to create"
101
+ c.flag [:c, :count]
102
+
103
+ c.action do |global_options,options,args|
104
+ id = require_arg(args, 'hostfactory')
105
+
106
+ duration = 0
107
+ %w(duration-minutes duration-hours duration-days).each do |d|
108
+ if t = options[d.to_sym]
109
+ duration += t.to_i.send(d.split('-')[-1])
110
+ end
111
+ end
112
+ if duration == 0
113
+ duration = 1.hour
114
+ end
115
+ expiration = Time.now + duration
116
+ count = (options[:count] || 1).to_i
117
+ command_options = {}
118
+ command_options[:max_uses] = options[:"max-uses"].to_i if options[:"max-uses"]
119
+
120
+ tokens = api.host_factory(id).create_tokens expiration, count, command_options
121
+ display tokens.map(&:to_json)
122
+ end
123
+ end
124
+
125
+ tokens.desc "Revoke (delete) a token"
126
+ tokens.arg_name "token"
127
+ tokens.command :revoke do |c|
128
+ c.action do |global_options,options,args|
129
+ token = require_arg(args, 'token')
130
+
131
+ api.revoke_host_factory_token token
132
+ puts "Token revoked"
133
+ end
134
+ end
135
+ end
136
+
137
+ hf.desc "Operations on hosts"
138
+ hf.command :hosts do |hosts|
139
+ hosts.desc "Use a token to create a host"
140
+ hosts.arg_name "token host-id"
141
+ hosts.command :create do |c|
142
+ c.action do |global_options,options,args|
143
+ token = require_arg(args, 'token')
144
+ id = require_arg(args, 'host-id')
145
+
146
+ host = api.host_factory_create_host token, id, options
147
+ display host
148
+ end
149
+ end
150
+ end
151
+ end
152
+ end
@@ -0,0 +1,38 @@
1
+ #
2
+ # Copyright (C) 2014 Conjur Inc
3
+ #
4
+ # Permission is hereby granted, free of charge, to any person obtaining a copy of
5
+ # this software and associated documentation files (the "Software"), to deal in
6
+ # the Software without restriction, including without limitation the rights to
7
+ # use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
8
+ # the Software, and to permit persons to whom the Software is furnished to do so,
9
+ # subject to the following conditions:
10
+ #
11
+ # The above copyright notice and this permission notice shall be included in all
12
+ # copies or substantial portions of the Software.
13
+ #
14
+ # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
15
+ # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
16
+ # FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
17
+ # COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
18
+ # IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
19
+ # CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
20
+ #
21
+ require 'conjur/api'
22
+ require 'conjur/configuration'
23
+
24
+ class Conjur::Configuration
25
+ add_option :host_factory_url do
26
+ account_service_url 'host_factories', 500
27
+ end
28
+ end
29
+
30
+ class Conjur::API
31
+ class << self
32
+ def host_factory_asset_host
33
+ Conjur.configuration.host_factory_url
34
+ end
35
+ end
36
+ end
37
+
38
+ require 'conjur/api/host_factories'
@@ -0,0 +1,75 @@
1
+ #
2
+ # Copyright (C) 2014 Conjur Inc
3
+ #
4
+ # Permission is hereby granted, free of charge, to any person obtaining a copy of
5
+ # this software and associated documentation files (the "Software"), to deal in
6
+ # the Software without restriction, including without limitation the rights to
7
+ # use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
8
+ # the Software, and to permit persons to whom the Software is furnished to do so,
9
+ # subject to the following conditions:
10
+ #
11
+ # The above copyright notice and this permission notice shall be included in all
12
+ # copies or substantial portions of the Software.
13
+ #
14
+ # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
15
+ # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
16
+ # FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
17
+ # COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
18
+ # IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
19
+ # CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
20
+ #
21
+ require 'conjur/host_factory_token'
22
+
23
+ module Conjur
24
+ class HostFactory < RestClient::Resource
25
+ include ActsAsAsset
26
+
27
+ def roleid
28
+ attributes['roleid']
29
+ end
30
+
31
+ def role
32
+ Role.new(Conjur::Authz::API.host, self.options)[Conjur::API.parse_role_id(roleid).join('/')]
33
+ end
34
+
35
+ def deputy
36
+ Conjur::Deputy.new(Conjur::API.core_asset_host, options)["deputies/#{fully_escape id}"]
37
+ end
38
+
39
+ def deputy_api_key
40
+ attributes['deputy_api_key']
41
+ end
42
+
43
+ def create_token(expiration, options = {})
44
+ create_tokens(expiration, 1, options)[0]
45
+ end
46
+
47
+ def create_tokens(expiration, count, options = {})
48
+ parameters = options.merge({
49
+ expiration: expiration.iso8601,
50
+ count: count
51
+ })
52
+ response = RestClient::Resource.new(Conjur::API.host_factory_asset_host, self.options)[fully_escape id]["tokens"].post(parameters).body
53
+ JSON.parse(response).map do |attrs|
54
+ build_host_factory_token attrs
55
+ end
56
+ end
57
+
58
+ def tokens
59
+ # Tokens list is not returned by +show+ if the caller doesn't have permission
60
+ return nil unless self.attributes['tokens']
61
+
62
+ self.attributes['tokens'].collect do |attrs|
63
+ build_host_factory_token attrs
64
+ end
65
+ end
66
+
67
+ protected
68
+
69
+ def build_host_factory_token attrs
70
+ Conjur::HostFactoryToken.new(Conjur::API.host_factory_asset_host, self.options)["tokens"][attrs['token']].tap do |token|
71
+ token.attributes = attrs
72
+ end
73
+ end
74
+ end
75
+ end
@@ -0,0 +1,65 @@
1
+ #
2
+ # Copyright (C) 2014 Conjur Inc
3
+ #
4
+ # Permission is hereby granted, free of charge, to any person obtaining a copy of
5
+ # this software and associated documentation files (the "Software"), to deal in
6
+ # the Software without restriction, including without limitation the rights to
7
+ # use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
8
+ # the Software, and to permit persons to whom the Software is furnished to do so,
9
+ # subject to the following conditions:
10
+ #
11
+ # The above copyright notice and this permission notice shall be included in all
12
+ # copies or substantial portions of the Software.
13
+ #
14
+ # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
15
+ # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
16
+ # FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
17
+ # COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
18
+ # IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
19
+ # CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
20
+ #
21
+ module Conjur
22
+ class HostFactoryToken < RestClient::Resource
23
+ include HasAttributes
24
+
25
+ def to_json(options = {})
26
+ { token: token, expiration: expiration }.tap do |h|
27
+ h[:max_uses] = max_uses if max_uses
28
+ end
29
+ end
30
+
31
+ def token
32
+ self.url.split('/')[-1]
33
+ end
34
+
35
+ alias id token
36
+
37
+ def expiration
38
+ DateTime.iso8601(attributes['expiration'])
39
+ end
40
+
41
+ def max_uses
42
+ attributes['max_uses']
43
+ end
44
+
45
+ def host_factory
46
+ Conjur::HostFactory.new(Conjur::API.host_factory_asset_host, options)[fully_escape attributes['host_factory_id']]
47
+ end
48
+
49
+ def revoke!
50
+ invalidate do
51
+ RestClient::Resource.new(self['revoke'].url, options).post
52
+ end
53
+ end
54
+
55
+ def save
56
+ raise "HostFactoryToken attributes are not updatable"
57
+ end
58
+
59
+ protected
60
+
61
+ def fetch
62
+ raise "HostFactoryToken attributes are not fetchable"
63
+ end
64
+ end
65
+ end
@@ -0,0 +1 @@
1
+ # keep me
metadata ADDED
@@ -0,0 +1,117 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: conjur-asset-host-factory
3
+ version: !ruby/object:Gem::Version
4
+ version: 1.0.0
5
+ platform: ruby
6
+ authors:
7
+ - Kevin Gilpin
8
+ autorequire:
9
+ bindir: bin
10
+ cert_chain: []
11
+ date: 2014-08-26 00:00:00.000000000 Z
12
+ dependencies:
13
+ - !ruby/object:Gem::Dependency
14
+ name: conjur-api
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - '>='
18
+ - !ruby/object:Gem::Version
19
+ version: 4.9.2
20
+ type: :runtime
21
+ prerelease: false
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - '>='
25
+ - !ruby/object:Gem::Version
26
+ version: 4.9.2
27
+ - !ruby/object:Gem::Dependency
28
+ name: rake
29
+ requirement: !ruby/object:Gem::Requirement
30
+ requirements:
31
+ - - '>='
32
+ - !ruby/object:Gem::Version
33
+ version: '0'
34
+ type: :development
35
+ prerelease: false
36
+ version_requirements: !ruby/object:Gem::Requirement
37
+ requirements:
38
+ - - '>='
39
+ - !ruby/object:Gem::Version
40
+ version: '0'
41
+ - !ruby/object:Gem::Dependency
42
+ name: rspec
43
+ requirement: !ruby/object:Gem::Requirement
44
+ requirements:
45
+ - - '='
46
+ - !ruby/object:Gem::Version
47
+ version: 2.14.1
48
+ type: :development
49
+ prerelease: false
50
+ version_requirements: !ruby/object:Gem::Requirement
51
+ requirements:
52
+ - - '='
53
+ - !ruby/object:Gem::Version
54
+ version: 2.14.1
55
+ - !ruby/object:Gem::Dependency
56
+ name: ci_reporter
57
+ requirement: !ruby/object:Gem::Requirement
58
+ requirements:
59
+ - - ~>
60
+ - !ruby/object:Gem::Version
61
+ version: '1.8'
62
+ type: :development
63
+ prerelease: false
64
+ version_requirements: !ruby/object:Gem::Requirement
65
+ requirements:
66
+ - - ~>
67
+ - !ruby/object:Gem::Version
68
+ version: '1.8'
69
+ description:
70
+ email:
71
+ - kgilpin@gmail.com
72
+ executables: []
73
+ extensions: []
74
+ extra_rdoc_files: []
75
+ files:
76
+ - .gitignore
77
+ - .project
78
+ - Gemfile
79
+ - LICENSE.txt
80
+ - README.md
81
+ - Rakefile
82
+ - conjur-asset-host-factory.gemspec
83
+ - lib/conjur-asset-host-factory-version.rb
84
+ - lib/conjur-asset-host-factory.rb
85
+ - lib/conjur/api/host_factories.rb
86
+ - lib/conjur/command/host_factories.rb
87
+ - lib/conjur/host-factory-api.rb
88
+ - lib/conjur/host_factory.rb
89
+ - lib/conjur/host_factory_token.rb
90
+ - spec/.keepme
91
+ homepage: https://github.com/conjurinc/conjur-asset-host-factory
92
+ licenses:
93
+ - MIT
94
+ metadata: {}
95
+ post_install_message:
96
+ rdoc_options: []
97
+ require_paths:
98
+ - lib
99
+ required_ruby_version: !ruby/object:Gem::Requirement
100
+ requirements:
101
+ - - '>='
102
+ - !ruby/object:Gem::Version
103
+ version: '0'
104
+ required_rubygems_version: !ruby/object:Gem::Requirement
105
+ requirements:
106
+ - - '>='
107
+ - !ruby/object:Gem::Version
108
+ version: '0'
109
+ requirements: []
110
+ rubyforge_project:
111
+ rubygems_version: 2.2.2
112
+ signing_key:
113
+ specification_version: 4
114
+ summary: Conjur asset plugin for the host factory
115
+ test_files:
116
+ - spec/.keepme
117
+ has_rdoc: