deputy53 0.6.4

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 217f1845177eea5e0ab32c345d91b417e371be0b
+  data.tar.gz: 1a2e6eaf480af3717e8fa29cb6a2992fec35b775
+SHA512:
+  metadata.gz: 5d60478b9b1940f528d873cfe2b5b4c4a2783593e16ad7328407fc056d0b0ec1d7afd9fd6c663f07757a84252d0b229a24f479d2ff3b41fffbc7bfc86bf81af3
+  data.tar.gz: 4d0e9fc2752d5ffcd6fd825976228aaac54126ee67148a96b44848bffa04f594f351b502945d6cf18f8c1e0a48236907a1f411a7ee13e8fe0618cd6b31abc171

data/Gemfile

@@ -0,0 +1,3 @@
+source 'https://rubygems.org'
+
+gemspec

data/LICENSE.txt

@@ -0,0 +1,21 @@
+
+The MIT License (MIT)
+Copyright © 2016 Chris Olstrom <chris@olstrom.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the “Software”), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/README.org

@@ -0,0 +1,39 @@
+#+TITLE: Deputy53
+#+LATEX: \pagebreak
+
+* Overview
+
+  ~deputy53~ is a commandline tool to delegate control of a subdomain to another
+  hosted zone, and optionally grant control of that subdomain to an IAM user.
+
+* Rationale
+
+  It is often useful to allow a user or group of users limited access to DNS
+  records. However, Route53 does not support granular access to a partial record
+  set for a zone.
+
+  One solution to this is to create an additional zone, and delegate to that
+  zone for a subset of records (a subdomain, for instance).
+
+  This process is cumbersome, and therefore prone to human error. ~deputy53~
+  simplifies this process.
+
+* Installation
+
+  #+BEGIN_SRC shell
+    gem install deputy53
+  #+END_SRC
+
+* Usage
+
+  #+BEGIN_SRC shell
+    deputy53 delegate <subdomain>
+  #+END_SRC
+
+* License
+
+  ~deputy53~ is available under the [[https://tldrlegal.com/license/mit-license][MIT License]]. See ~LICENSE.txt~ for the full text.
+
+* Contributors
+
+  - [[https://colstrom.github.io/][Chris Olstrom]] | [[mailto:chris@olstrom.com][e-mail]] | [[https://twitter.com/ChrisOlstrom][Twitter]]

data/bin/deputy53

@@ -0,0 +1,10 @@
+#!/usr/bin/env ruby
+
+require 'instacli'
+require_relative '../lib/deputy53/cli'
+
+class CLI < InstaCLI::CLI
+  include InstaCLI::Demuxing
+end
+
+CLI.new(deputy53: Deputy53::CLI.new).execute(*ARGV)

data/deputy53.gemspec

@@ -0,0 +1,19 @@
+Gem::Specification.new do |gem|
+  gem.name        = 'deputy53'
+  gem.version     = `git describe --tags --abbrev=0`.chomp
+  gem.licenses    = 'MIT'
+  gem.authors     = ['Chris Olstrom']
+  gem.email       = 'chris@olstrom.com'
+  gem.homepage    = 'https://github.com/colstrom/deputy53'
+  gem.summary     = 'Delegates a subdomain to another zone with Route53'
+
+  gem.files         = `git ls-files`.split("\n")
+  gem.test_files    = `git ls-files -- {test,spec,features}/*`.split("\n")
+  gem.executables   = `git ls-files -- bin/*`.split("\n").map { |f| File.basename(f) }
+  gem.require_paths = ['lib']
+
+  gem.add_runtime_dependency 'aws-sdk', '~> 2.3', '>= 2.3.0'
+  gem.add_runtime_dependency 'contracts', '~> 0.14', '>= 0.14.0'
+  gem.add_runtime_dependency 'exponential-backoff', '~> 0.0.2', '>= 0.0.2'
+  gem.add_runtime_dependency 'instacli', '~> 1.1', '>= 1.1.1'
+end

data/lib/deputy53/agent.rb

@@ -0,0 +1,112 @@
+require 'exponential_backoff'
+require_relative 'contracted_object'
+require_relative 'route53'
+require_relative 'zone'
+
+module Deputy53
+  # Handles creation and delegation
+  class Agent < ContractedObject
+    Contract String => Agent
+    def initialize(target)
+      @target = target
+      self
+    end
+
+    Contract None => String
+    def caller_reference
+      @caller_reference ||= "#{subdomain}@#{Time.now.to_i}"
+    end
+
+    Contract None => String
+    def domain
+      @domain ||= @target.split('.').last(2).join('.') << '.'
+    end
+
+    Contract None => String
+    def prefix
+      @prefix ||= @target.split('.').slice(0..-3).join('.')
+    end
+
+    Contract None => String
+    def subdomain
+      @subdomain ||= "#{prefix}.#{domain}"
+    end
+
+    Contract None => Route53
+    def route53!
+      @route53 = Route53.new
+    end
+
+    Contract None => Route53
+    def route53
+      @route53 ||= route53!
+    end
+
+    Contract None => Zone
+    def child
+      @child ||= Zone.new create subdomain
+    end
+
+    Contract None => Zone
+    def parent
+      @parent ||= Zone.new create domain
+    end
+
+    Contract String => String
+    def create(name)
+      return route53.id(name) if route53.zone? name
+
+      route53
+        .api
+        .create_hosted_zone(
+          name: name,
+          caller_reference: caller_reference
+        ).hosted_zone
+        .id
+    end
+
+    Contract None => Bool
+    def delegate
+      return true if parent.delegation(subdomain).sort == child.name_servers.sort
+      wait_for_change route53.api.change_resource_record_sets(payload).change_info
+    end
+
+    Contract Aws::Route53::Types::ChangeInfo => Bool
+    def wait_for_change(change)
+      ExponentialBackoff.new(0.5, 8.0).tap do |backoff|
+        while change.status == 'PENDING'
+          route53.api.get_change(id: change.id).change_info.tap do |info|
+            backoff.next_interval
+            message = "#{info.id} is #{info.status}"
+            if info.status == 'PENDING'
+              STDERR.puts "#{message} (recheck in #{backoff.current_interval}s)"
+              sleep backoff.current_interval
+            else
+              STDERR.puts message
+            end
+            change = info
+          end
+        end
+      end
+      true if change.status == 'INSYNC'
+    end
+
+    Contract None => Hash
+    def payload
+      {
+        hosted_zone_id: parent.id,
+        change_batch: {
+          changes: [
+            action: 'CREATE',
+            resource_record_set: {
+              name: subdomain,
+              type: 'NS',
+              ttl: 300,
+              resource_records: child.name_servers.map { |ns| { value: ns } }
+            }
+          ]
+        }
+      }
+    end
+  end
+end

data/lib/deputy53/cli.rb

@@ -0,0 +1,9 @@
+require_relative 'agent'
+
+module Deputy53
+  class CLI
+    def delegate(subdomain)
+      Agent.new(subdomain).delegate
+    end
+  end
+end

data/lib/deputy53/contracted_object.rb

@@ -0,0 +1,9 @@
+require 'contracts'
+
+module Deputy53
+  # An Object that supports Contracts
+  class ContractedObject
+    include Contracts::Core
+    include Contracts::Builtin
+  end
+end

data/lib/deputy53/route53.rb

@@ -0,0 +1,42 @@
+require 'aws-sdk'
+
+module Deputy53
+  # A Route53 Client
+  class Route53 < ContractedObject
+    Contract None => ::Aws::Route53::Client
+    def api
+      @api ||= ::Aws::Route53::Client.new region: region
+    end
+
+    Contract None => String
+    def region
+      ENV.fetch('AWS_DEFAULT_REGION') { 'us-west-1' }
+    end
+
+    Contract None => ArrayOf[::Aws::Route53::Types::HostedZone]
+    def zones
+      @zones ||= api.list_hosted_zones.hosted_zones
+    end
+
+    Contract None => ArrayOf[String]
+    def names
+      @names ||= zones.map(&:name)
+    end
+
+    Contract String => ArrayOf[::Aws::Route53::Types::HostedZone]
+    def zones(name)
+      zones.select { |z| z.name == name }
+    end
+
+    Contract String => Bool
+    def zone?(name)
+      !zones(name).empty?
+    end
+
+    Contract String => String
+    def id(name)
+      raise KeyError unless zone? name
+      zones(name).first.id
+    end
+  end
+end

data/lib/deputy53/zone.rb

@@ -0,0 +1,53 @@
+require_relative 'contracted_object'
+require_relative 'route53'
+
+module Deputy53
+  # A DNS Zone
+  class Zone < ContractedObject
+    attr_reader :id
+
+    Contract String => Zone
+    def initialize(id)
+      @id = id
+      self
+    end
+
+    Contract None => Route53
+    def route53
+      @route53 ||= Route53.new
+    end
+
+    Contract None => ::Aws::Route53::Types::GetHostedZoneResponse
+    def zone
+      @zone ||= route53.api.get_hosted_zone(id: id).data
+    end
+
+    Contract None => ArrayOf[String]
+    def name_servers
+      @name_servers ||= zone.delegation_set.name_servers
+    end
+
+    Contract None => ArrayOf[::Aws::Route53::Types::ResourceRecordSet]
+    def records
+      @records ||= route53.api.list_resource_record_sets(hosted_zone_id: id).resource_record_sets
+    end
+
+    Contract String => ArrayOf[::Aws::Route53::Types::ResourceRecordSet]
+    def records(type)
+      records.select { |r| r.type == type }
+    end
+
+    Contract String => Bool
+    def delegating?(name)
+      records('NS').any? { |r| r.name == name }
+    end
+
+    Contract String => ArrayOf[String]
+    def delegation(name)
+      records('NS')
+        .select { |r| r.name == name }
+        .flat_map(&:resource_records)
+        .map(&:value)
+    end
+  end
+end

data/lib/deputy53.rb

@@ -0,0 +1,5 @@
+require_relative 'deputy53/agent'
+require_relative 'deputy53/cli'
+require_relative 'deputy53/contracted_object'
+require_relative 'deputy53/route53'
+require_relative 'deputy53/zone'

metadata

@@ -0,0 +1,136 @@
+--- !ruby/object:Gem::Specification
+name: deputy53
+version: !ruby/object:Gem::Version
+  version: 0.6.4
+platform: ruby
+authors:
+- Chris Olstrom
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2016-06-21 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: aws-sdk
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.3'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.3.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.3'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.3.0
+- !ruby/object:Gem::Dependency
+  name: contracts
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.14'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.14.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.14'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.14.0
+- !ruby/object:Gem::Dependency
+  name: exponential-backoff
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.0.2
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.0.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.0.2
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.0.2
+- !ruby/object:Gem::Dependency
+  name: instacli
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.1.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.1.1
+description: 
+email: chris@olstrom.com
+executables:
+- deputy53
+extensions: []
+extra_rdoc_files: []
+files:
+- Gemfile
+- LICENSE.txt
+- README.org
+- bin/deputy53
+- deputy53.gemspec
+- lib/deputy53.rb
+- lib/deputy53/agent.rb
+- lib/deputy53/cli.rb
+- lib/deputy53/contracted_object.rb
+- lib/deputy53/route53.rb
+- lib/deputy53/zone.rb
+homepage: https://github.com/colstrom/deputy53
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.5.1
+signing_key: 
+specification_version: 4
+summary: Delegates a subdomain to another zone with Route53
+test_files: []
+has_rdoc: