ecs_deployer 0.1.8 → 0.1.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 891da56bfba8142d032f86f8449d13db2deaa285
-  data.tar.gz: dca591a305713ea2edd2bfeb6c06d9ba8510bf86
+  metadata.gz: f5c26195246ca8c3f6ea2e5e18d07683f6877200
+  data.tar.gz: e2555c0bf50ca13021c65c4ce71b78d9dbccf2e4
 SHA512:
-  metadata.gz: fd8628ad1269511f1874fd32edf5cd91be91ce56646ada260d73ded00d86f3e29a6420d5a06c3db302ab10eddbb4477a68ca3f0cfc929c64ad2e31de58d4870a
-  data.tar.gz: 6cc55eb4383a7cee8a11a8e826740b771d106cc6504c909fae39e1a1b6a0a314e147c8baa3cd0cf85f3b404b6147b6aa3aabc5769734744d2f33aca20bd8e378
+  metadata.gz: a46b2d802034be309114227942b54457940560b0a284d4a7e2c8c6ba271ab9eed2cb2d59fa52bb509a5ee4139778f90197be113c72fd82beb241331e5673ee9f
+  data.tar.gz: f8eb9fc6d6e05e57cf47ab0948802f4143016b19b30e6934de6f052c0fc9c8831d1eac47e5a1c1ddb43067ee4468b0da259113496477aef3a7f489712145045b

data/example/sample.rb

@@ -2,7 +2,8 @@ require 'bundler/setup'
 require 'ecs_deployer'
 
 task_path = File.expand_path('./fixtures/task.yml', File.dirname(File.realpath(__FILE__)))
+task_path = '/Users/naomichi_yamakita_pn082/Projects/sandbox-ecs/config/deploy/production.yml'
 
-ecs_deployer = EcsDeployer::Client.new
-ecs_deployer.register_task(task_path)
+deployer = EcsDeployer::Client.new
+deployer.register_task(task_path)
 # ecs_deployer.update_service('sandbox', 'production')

data/lib/ecs_deployer/client.rb

@@ -19,24 +19,26 @@ module EcsDeployer
       @revision = ''
       @new_task_definition_arn = ''
       @cli = Aws::ECS::Client.new(options)
+      @kms = Aws::KMS::Client.new(options)
     end
 
-    # @param [String] task_path
+    # @param [String] path
     # @return [String]
-    def register_task(task_path)
-      raise IOError.new("File does not exist. [#{task_path}]") if !File.exist?(task_path)
-      register_task_hash(YAML.load(File.read(task_path)))
+    def register_task(path)
+      raise IOError.new("File does not exist. [#{path}]") if !File.exist?(path)
+      register_task_hash(YAML.load(File.read(path)))
     end
 
-    # @param [Hash] task_hash
+    # @param [Hash] task_definition
     # @return [String]
-    def register_task_hash(task_hash)
-      task_hash = Oj.load(Oj.dump(task_hash), symbol_keys: true)
+    def register_task_hash(task_definition)
+      task_definition = Oj.load(Oj.dump(task_definition), symbol_keys: true)
+      decrypt_environment_variables!(task_definition)
 
       result = @cli.register_task_definition({
-        container_definitions: task_hash[:container_definitions],
-        family: task_hash[:family],
-        task_role_arn: task_hash[:task_role_arn]
+        container_definitions: task_definition[:container_definitions],
+        family: task_definition[:family],
+        task_role_arn: task_definition[:task_role_arn]
       })
 
       @family = result[:task_definition][:family]
@@ -86,6 +88,24 @@ module EcsDeployer
     end
 
     private
+    # @param [Hash] task_definition
+    def decrypt_environment_variables!(task_definition)
+      raise TaskDefinitionValidateError.new('\'container_definition\' is undefined.') unless task_definition.has_key?(:container_definitions)
+      task_definition[:container_definitions].each do |container_definition|
+        next unless container_definition.has_key?(:environment)
+
+        container_definition[:environment].each do |environment|
+          if match = environment[:value].match(/^\${(.+)}$/)
+            begin
+              environment[:value] = @kms.decrypt(ciphertext_blob: Base64.strict_decode64(match[1])).plaintext
+            rescue => e
+              raise KmsValidateError.new(e.to_s)
+            end
+          end
+        end
+      end
+    end
+
     # @param [String] cluster
     # @param [String] service
     # @param [Fixnum] timeout

data/lib/ecs_deployer/version.rb

@@ -1,3 +1,3 @@
 module EcsDeployer
-  VERSION = "0.1.8"
+  VERSION = "0.1.9"
 end

data/lib/ecs_deployer.rb

@@ -6,5 +6,7 @@ require 'ecs_deployer/cli'
 module EcsDeployer
   class ServiceNotFoundError < EcsDeployer::Error; end
   class TaskNotFoundError < EcsDeployer::Error; end
+  class TaskDefinitionValidateError < EcsDeployer::Error; end
+  class KmsDecryptError < EcsDeployer::Error; end
   class DeployTimeoutError < EcsDeployer::Error; end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ecs_deployer
 version: !ruby/object:Gem::Version
-  version: 0.1.8
+  version: 0.1.9
 platform: ruby
 authors:
 - naomichi-y
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-03-09 00:00:00.000000000 Z
+date: 2017-03-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: runtime_command
@@ -166,7 +166,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.5.1
+rubygems_version: 2.6.10
 signing_key: 
 specification_version: 4
 summary: Deploy application to ECS.