conjur-cli 4.15.0 → 4.16.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 9a7286b596f4e9bfdcac76be7e5d79b813aa2a52
-  data.tar.gz: 6e4d13583b0c704139bcfcea5cc4e6fa1a8a3335
+  metadata.gz: 7841ac532c814a5dbbcb6ac87ea78ab2e72f6e7a
+  data.tar.gz: 438f120d06064aa3fc2fbe4e8e59918629ac8ddc
 SHA512:
-  metadata.gz: 88490f66539ca80f3456abd2331763ff23b01ba62c35b389a446ab0d92d0a2a193478342d1dd27a7ea95af36a1777bb70d39c299d9bb30212ca4b56d180c8194
-  data.tar.gz: 9aa6c11cda54ecb915470c0c9a8915f84ad8bcc9c8664e25364dfa90da8dd2cf7a44b10862b222a986f8b8584c4526a49bf38f5162aa581ed3198104ca55963b
+  metadata.gz: 8b9798edb33f962ed5cb1955aadd23e68a68bcf845e5e365280438596bafe7337706e2d650d8e8653f82cf407ce328d2b300ea5ba2b146817fc863183b22b295
+  data.tar.gz: 1883d777e70a3ae5d53d3129f7779b948b3b86a88364923d6f81a2e19bd47dfa173133925cb4a9c426f2d0abcfb774e4ce29272d7ffaecf89e37145512b76c4c

data/CHANGELOG.md

@@ -1,3 +1,8 @@
+# 4.16.0
+
+* Add 'bootstrap' CLI command
+* Raise a better error if conjur env encounters a variable with no value 
+
 # 4.15.0
 
 * Migration to rspec 3

data/lib/conjur/authn.rb

@@ -89,10 +89,10 @@ module Conjur::Authn
       require 'conjur/api'
 
       hl = HighLine.new $stdin, $stderr
-
+      
       user = options[:username] || hl.ask("Enter your username to log into Conjur: ")
-      pass = options[:password] || hl.ask("Please enter your password (it will not be echoed): "){ |q| q.echo = false }
-
+      pass = options[:password] || hl.ask("Please enter #{options[:username] ? [ options[:username] , "'s" ].join : "your"} password (it will not be echoed): "){ |q| q.echo = false }
+        
       api_key = if cas_server = options[:"cas-server"]
         Conjur::API.login_cas(user, pass, cas_server)
       else

data/lib/conjur/command.rb

@@ -147,6 +147,20 @@ module Conjur
         end
         puts str
       end
+
+      def prompt_for_password
+        require 'highline'
+        # use stderr to allow output redirection, e.g.
+        # conjur user:create -p username > user.json
+        hl = HighLine.new($stdin, $stderr)
+    
+        password = hl.ask("Enter the password (it will not be echoed): "){ |q| q.echo = false }
+        confirmation = hl.ask("Confirm the password: "){ |q| q.echo = false }
+        
+        raise "Password does not match confirmation" unless password == confirmation
+        
+        password
+      end
     end
   end
 end

data/lib/conjur/command/bootstrap.rb

@@ -0,0 +1,64 @@
+#
+# Copyright (C) 2014 Conjur Inc
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+#
+
+class Conjur::Command::Bootstrap < Conjur::Command
+  desc "Create initial users, groups, and permissions"
+
+  Conjur::CLI.command :bootstrap do |c|
+    c.action do |global_options,options,args|
+      require 'highline/import'
+
+      exit_now! "You must be logged in as 'admin' to bootstrap Conjur" unless api.username == "admin"
+        
+      if (security_admin = api.group("security_admin")).exists?
+        puts "Group 'security_admin' exists"
+      else
+        puts "Creating group 'security_admin'"
+        security_admin = api.create_group("security_admin")
+      end
+      
+      puts "Permitting group 'security_admin' to manage public keys"
+      api.group("pubkeys-1.0/key-managers").add_member security_admin, admin_option: true
+      
+      security_administrators = security_admin.role.members.select{|m| m.member.roleid.split(':')[1..-1] != [ 'user', 'admin'] }
+      puts "Current 'security_admin' members are : #{security_administrators.map{|m| m.member.roleid.split(':')[-1]}.join(', ')}" unless security_administrators.blank?
+      if security_administrators.empty? || agree("Create a new security_admin? (answer 'y' or 'yes'):")
+        username = ask("Enter #{security_administrators.empty? ? 'your' : 'the'} username:")
+        password = prompt_for_password
+        puts "Creating user '#{username}'"
+        user = api.create_user(username, password: password)
+        Conjur::API.new_from_key(user.login, password).user(user.login).resource.give_to security_admin
+        puts "User created"
+        puts "Making '#{username}' a member and admin of group 'security_admin'"
+        security_admin.add_member user, admin_option: true
+        security_admin.resource.permit "read", user
+        puts "Adminship granted"
+      end
+      
+    if (attic = api.user("attic")).exists?
+      puts "User 'attic' exists"
+    else
+      puts "Creating user 'attic'"
+      attic = api.create_user("attic")
+    end
+    end
+  end
+end

data/lib/conjur/command/users.rb

@@ -21,19 +21,6 @@
 
 class Conjur::Command::Users < Conjur::Command
 
-  def self.prompt_for_password
-    # use stderr to allow output redirection, e.g.
-    # conjur user:create -p username > user.json
-    hl = HighLine.new($stdin, $stderr)
-
-    password = hl.ask("Enter the password (it will not be echoed): "){ |q| q.echo = false }
-    confirmation = hl.ask("Confirm the password: "){ |q| q.echo = false }
-    
-    raise "Password does not match confirmation" unless password == confirmation
-    
-    password
-  end
-
   desc "Manage users"
   command :user do |user|
 
@@ -51,10 +38,10 @@ class Conjur::Command::Users < Conjur::Command
       c.action do |global_options,options,args|
         login = require_arg(args, 'login')
 
-        opts = options.slice(:ownerid,:uidnumber)
+        opts = options.slice(:ownerid, :uidnumber)
         if opts[:uidnumber] 
-          raise "Uidnumber should be integer" unless /\d+/ =~ opts[:uidnumber]
-          opts[:uidnumber]=opts[:uidnumber].to_i
+          raise "uidnumber should be integer" unless /\d+/ =~ opts[:uidnumber]
+          opts[:uidnumber] = opts[:uidnumber].to_i
         end
 
         if options[:p]

data/lib/conjur/conjurenv.rb

@@ -39,6 +39,7 @@ module Conjur
 
     class ConjurVariable < CustomTag
       def evaluate value
+        raise "variable #{id} exists but doesn't have a value" if value.nil?
         value.chomp
       end
     end

data/lib/conjur/version.rb

@@ -19,6 +19,6 @@
 # CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 #
 module Conjur
-  VERSION = "4.15.0"
+  VERSION = "4.16.0"
   ::Version=VERSION
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: conjur-cli
 version: !ruby/object:Gem::Version
-  version: 4.15.0
+  version: 4.16.0
 platform: ruby
 authors:
 - Rafał Rzepecki
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-09-22 00:00:00.000000000 Z
+date: 2014-10-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -266,6 +266,7 @@ files:
 - lib/conjur/command/assets.rb
 - lib/conjur/command/audit.rb
 - lib/conjur/command/authn.rb
+- lib/conjur/command/bootstrap.rb
 - lib/conjur/command/dsl_command.rb
 - lib/conjur/command/env.rb
 - lib/conjur/command/field.rb
@@ -335,7 +336,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.2.1
+rubygems_version: 2.2.2
 signing_key: 
 specification_version: 4
 summary: Conjur command line interface
@@ -373,3 +374,4 @@ test_files:
 - spec/dsl/runner_spec.rb
 - spec/env_spec.rb
 - spec/spec_helper.rb
+has_rdoc: