encrypt_data_bag 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 581fd50260f2e855664e1b3419c608cfd4dec7e4
+  data.tar.gz: 0cf25149d77aa69c70b4f797b4b3bc9c5bb448fb
+SHA512:
+  metadata.gz: e9354b859e9c79e312d75211eaa76dbb01a113f54d59d3a6b866ee8f64de92444ce4355e5834271c44b3e1e9316b042f27d3f7b3de53e66a82dd4400a35380b3
+  data.tar.gz: a478fe74ffd77d0972d3d80f4cc9dbfdd3fed0d3118017a31c4ecbc648c463a0bd152633565bc973fcd76039144f12db1e3862a896a9d57f225a69598028b627

data/.gitignore

@@ -0,0 +1,17 @@
+*.gem
+*.rbc
+.bundle
+.config
+.yardoc
+Gemfile.lock
+InstalledFiles
+_yardoc
+coverage
+doc/
+lib/bundler/man
+pkg
+rdoc
+spec/reports
+test/tmp
+test/version_tmp
+tmp

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in encrypt_data_bag.gemspec
+gemspec

data/LICENSE.txt

@@ -0,0 +1,22 @@
+Copyright (c) 2014 Sean Porter
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,19 @@
+## Installation
+
+```
+$ gem install encrypt_data_bag
+```
+
+## Usage
+
+```
+$ encrypt_data_bag -s ~/.chef/encrypted_data_bag_secret -i plain_text_item.rb -o encrypted_item.json
+```
+
+## Contributing
+
+1. Fork it ( http://github.com/<my-github-username>/encrypt_data_bag/fork )
+2. Create your feature branch (`git checkout -b my-new-feature`)
+3. Commit your changes (`git commit -am 'Add some feature'`)
+4. Push to the branch (`git push origin my-new-feature`)
+5. Create new Pull Request

data/Rakefile

@@ -0,0 +1,21 @@
+require "bundler/gem_tasks"
+require "fileutils"
+
+task :test do
+  FileUtils.rm_f(Dir.glob("test/tmp/*.{rb,json}"))
+  timestamp = Time.now.to_i
+  command = ["bundle exec ./bin/encrypt_data_bag"]
+  command << "-s test/assets/encrypted_data_bag_secret"
+  command << "-i test/assets/data_bags/aws/staging.rb"
+  command << "-o test/tmp/staging.json"
+  system(command.join(" "))
+  command = ["bundle exec ./bin/encrypt_data_bag"]
+  command << "-s test/assets/encrypted_data_bag_secret"
+  command << "-i test/assets/data_bags/aws/production.json"
+  command << "-o test/tmp/production.rb"
+  system(command.join(" "))
+  puts IO.read("test/tmp/staging.json")
+  puts IO.read("test/tmp/production.rb")
+end
+
+task :default => :test

data/bin/encrypt_data_bag

@@ -0,0 +1,33 @@
+#!/usr/bin/env ruby
+
+require "rubygems"
+require "optparse"
+require "encrypt_data_bag"
+
+config = Hash.new
+
+OptionParser.new { |options|
+  options.on("-h", "--help", "Display this message") do
+    puts options
+    exit
+  end
+  options.on("-v", "--version", "Display version") do
+    puts EncryptDataBag::VERSION
+    exit
+  end
+  options.on("-s", "--secret-file FILE", "Secret key FILE") do |file|
+    config[:secret_file] = file
+  end
+  options.on("-i", "--input-file FILE", "Input FILE (plain-text data bag item)") do |file|
+    config[:input_file] = file
+  end
+  options.on("-o", "--output-file FILE", "Output FILE (encrypted data bag item)") do |file|
+    config[:output_file] = file
+  end
+}.parse!
+
+raise "You must provide a Secret key FILE (-s)" unless config[:secret_file]
+raise "You must provide an input FILE (-i)" unless config[:input_file]
+raise "You must provide an output FILE (-o)" unless config[:output_file]
+
+EncryptDataBag.from_file(config[:secret_file], config[:input_file], config[:output_file])

data/encrypt_data_bag.gemspec

@@ -0,0 +1,25 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'encrypt_data_bag/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = "encrypt_data_bag"
+  spec.version       = EncryptDataBag::VERSION
+  spec.authors       = ["Sean Porter"]
+  spec.email         = ["portertech@gmail.com"]
+  spec.summary       = "CLI tool for encrypting Chef data bag items"
+  spec.description   = "CLI tool for encrypting Chef data bag items"
+  spec.homepage      = "https://github.com/portertech/encrypt_data_bag"
+  spec.license       = "MIT"
+
+  spec.files         = `git ls-files`.split($/)
+  spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
+  spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
+  spec.require_paths = ["lib"]
+
+  spec.add_dependency "chef"
+
+  spec.add_development_dependency "bundler"
+  spec.add_development_dependency "rake"
+end

data/lib/encrypt_data_bag.rb

@@ -0,0 +1,24 @@
+require "encrypt_data_bag/version"
+require "chef/encrypted_data_bag_item"
+
+module EncryptDataBag
+  class << self
+    def is_json_file?(file)
+      File.extname(file) == ".json"
+    end
+
+    def from_file(secret_file, input_file, output_file)
+      secret = Chef::EncryptedDataBagItem.load_secret(secret_file)
+      raw_item = IO.read(input_file)
+      item = is_json_file?(input_file) ? JSON.parse(raw_item) : eval(raw_item)
+      encrypted_item = Chef::EncryptedDataBagItem.encrypt_data_bag_item(item, secret)
+      File.open(output_file, "w") do |file|
+        if is_json_file?(output_file)
+          file.print(JSON.pretty_generate(encrypted_item))
+        else
+          file.write(encrypted_item.pretty_inspect)
+        end
+      end
+    end
+  end
+end

data/lib/encrypt_data_bag/version.rb

@@ -0,0 +1,3 @@
+module EncryptDataBag
+  VERSION = "0.0.1"
+end

data/test/assets/aws_private_key.pem

@@ -0,0 +1 @@
+bar

data/test/assets/aws_x509_certificate.crt

@@ -0,0 +1 @@
+foo

data/test/assets/data_bags/aws/production.json

@@ -0,0 +1,7 @@
+{
+    "id": "staging",
+    "aws_access_key_id": "foo",
+    "aws_secret_access_key": "bar",
+    "aws_x509_certificate": "foo",
+    "aws_private_key": "bar"
+}

data/test/assets/data_bags/aws/staging.rb

@@ -0,0 +1,7 @@
+{
+  :id => "staging",
+  :aws_access_key_id => "foo",
+  :aws_secret_access_key => "bar",
+  :aws_x509_certificate => IO.read("test/assets/aws_x509_certificate.crt"),
+  :aws_private_key => IO.read("test/assets/aws_private_key.pem")
+}

data/test/assets/encrypted_data_bag_secret

@@ -0,0 +1 @@
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

metadata

@@ -0,0 +1,108 @@
+--- !ruby/object:Gem::Specification
+name: encrypt_data_bag
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Sean Porter
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2014-01-15 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: chef
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: CLI tool for encrypting Chef data bag items
+email:
+- portertech@gmail.com
+executables:
+- encrypt_data_bag
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- Gemfile
+- LICENSE.txt
+- README.md
+- Rakefile
+- bin/encrypt_data_bag
+- encrypt_data_bag.gemspec
+- lib/encrypt_data_bag.rb
+- lib/encrypt_data_bag/version.rb
+- test/assets/aws_private_key.pem
+- test/assets/aws_x509_certificate.crt
+- test/assets/data_bags/aws/production.json
+- test/assets/data_bags/aws/staging.rb
+- test/assets/encrypted_data_bag_secret
+- test/tmp/.gitkeep
+homepage: https://github.com/portertech/encrypt_data_bag
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.0
+signing_key: 
+specification_version: 4
+summary: CLI tool for encrypting Chef data bag items
+test_files:
+- test/assets/aws_private_key.pem
+- test/assets/aws_x509_certificate.crt
+- test/assets/data_bags/aws/production.json
+- test/assets/data_bags/aws/staging.rb
+- test/assets/encrypted_data_bag_secret
+- test/tmp/.gitkeep