etcweb 1.0.0

data/app/stylesheets/application.scss

@@ -0,0 +1,31 @@
+@import "bootstrap-sprockets";
+@import "bootstrap";
+
+.keys-footer {
+  margin-top: 40px;
+  border-top: 2px solid $gray_lighter;
+  padding-top: 40px;
+}
+
+.header-top {
+  h1 {
+    font-size: 24px;
+    margin: 0;
+    padding: 0;
+  }
+  height: 30px;
+  margin-top: 15px;
+  margin-bottom: 8px;
+
+  button {
+    margin-top: 0;
+    margin-bottom: 0;
+    padding-top: 0;
+    padding-bottom: 0;
+  }
+}
+
+.align-vertical {
+  display: flex;
+  align-items: center;
+}

data/app/views/dir.haml

@@ -0,0 +1,95 @@
+:javascript
+  jQuery(function($) {
+    $("#mkdir_form, #value_form").hide();
+    $("#mkdir_form, #value_form").removeClass("hidden");
+
+    $("#open_mkdir_form").click(function() {
+      $("#mkdir_form").show();
+      $("#value_form").hide();
+      $("#mkdir_form .form-control:first").focus();
+    });
+    $("#open_value_form").click(function() {
+      $("#mkdir_form").hide();
+      $("#value_form").show();
+      $("#value_form .form-control:first").focus();
+    });
+  });
+
+.row
+  .col-md-12
+    %p
+      %button#open_mkdir_form.btn.btn-default
+        %span.glyphicon.glyphicon-folder-close{'aria-hidden' => true}
+        New directory
+      %button#open_value_form.btn.btn-default
+        %span.glyphicon.glyphicon-plus{'aria-hidden' => true}
+        New value
+
+    - action = "/keys#{node.key}"
+    - action = "/keys/" if action == "/keys"
+
+    .hidden.panel.panel-default#mkdir_form
+      .panel-heading New directory
+      .panel-body
+        %form.form{action: action, method: 'POST'}
+          %input{type: 'hidden', name: '_method', value: 'PUT'}
+          %input{type: 'hidden', name: 'dir', value: '1'}
+          .form-group
+            %input.form-control{type: 'text', name: 'child', placeholder: 'new key name'}
+          .form-group
+            %button.btn.btn-primary{type: 'submit'} Create
+
+    .hidden.panel.panel-default#value_form
+      .panel-heading New value
+      .panel-body
+        %form.form{action: action, method: 'POST'}
+          %input{type: 'hidden', name: '_method', value: 'PUT'}
+          .form-group
+            %input.form-control{type: 'text', name: 'child', placeholder: 'new key name'}
+          .form-group
+            %textarea.form-control{name: 'value', row: '2', placeholder: 'value'}
+          .form-group
+              .row
+                - if etcvault?
+                  .col-md-4
+                    != haml :etcvault_keys_select
+                .col-md-1
+                  %button.btn.btn-primary{type: 'submit'} Create
+                .col-md-4
+                  %button.btn.btn-default{type: 'submit', name: 'continue', value: '1'} Create and Continue
+
+.row
+  .col-md-12
+    - if node.children.empty?
+      %p (empty directory)
+    .list-group
+      - node.children.sort_by(&:key).each do |child|
+        - name = child.key.split(?/).last
+        %a.list-group-item{href: "/keys#{child.key}"} 
+          .row
+            - if child.dir
+              .col-md-5
+                #{name}/
+              .col-md-7
+                %span.glyphicon.glyphicon-folder-open{'aria-hidden' => true}
+            - else
+              .col-md-4= name
+              .col-md-1.text-right
+                - if child.etcvault
+                  = child.etcvault['container'] && child.etcvault['container']['KeyName']
+                  %span.glyphicon.glyphicon-briefcase{'aria-hidden' => true}
+                - elsif child.etcvault_error
+                  %span.text-danger.glyphicon.glyphicon-briefcase{'aria-hidden' => true}
+              .col-md-7
+                %code= child.value
+.row
+  .col-md-12
+    %form.form-inline{action: "/keys#{node.key}", method: 'POST', onsubmit: 'javascript:return confirm("Sure?")'}
+      %input{type: 'hidden', name: '_method', value: 'DELETE'}
+      %button.btn.btn-danger{type: 'submit'} Destroy
+      .checkbox
+        %label
+          %input{type: 'checkbox', name: 'recursive', value: '1', checked: false}
+          Recursive
+
+

data/app/views/etcd_error.haml

@@ -0,0 +1,5 @@
+- p error
+.row
+  .col-md-12
+    %h2 Error: #{error.class}
+    %p= error.message

data/app/views/etcvault_keys_select.haml

@@ -0,0 +1,6 @@
+- name ||= 'etcvault_key'
+- default_key_name ||= nil
+%select.form-control{name: name}
+  %option{value: '', selected: default_key_name.nil?} No etcvault encryption
+  - etcvault_keys.each do |key_name|
+    %option{value: key_name, selected: default_key_name == key_name} Encrypt using etcvault: #{key_name}

data/app/views/index.haml

@@ -0,0 +1 @@
+%h1 It works

data/app/views/key.haml

@@ -0,0 +1,68 @@
+.row
+  .col-md-12
+    %h3
+      %span.glyphicon.glyphicon-tag{'aria-hidden' => true}
+      Value
+    %pre= node.value
+.row
+  .col-md-12
+    %h3
+      %span.glyphicon.glyphicon-cog{'aria-hidden' => true}
+      Information
+    %p
+      %span
+        %span.label-default.label modified_index
+        = node.modified_index
+      %span
+        %span.label-default.label created_index
+        = node.created_index
+    - if node.ttl
+      %p
+        %span.label-default.label TTL
+        = node.ttl.inspect
+    - if node.expiration
+      %p
+        %span.label-default.label expiration
+        = node.expiration.inspect
+
+- if node.etcvault || node.etcvault_error
+  .row
+    .col-md-12
+      %h3
+        %span.glyphicon.glyphicon-briefcase{'aria-hidden' => true}
+        Etcvault
+      - if node.etcvault
+        %p= node.etcvault.inspect
+      - if node.etcvault_error
+        %p
+          %span.label.label-danger Error
+          = node.etcvault_error.inspect
+
+.row
+  .col-md-12
+    %h3
+      %span.glyphicon.glyphicon-edit{'aria-hidden' => true}
+      Modify
+    %form{action: "/keys#{node.key}", method: 'POST'}
+      %input{type: 'hidden', name: '_method', value: 'PUT'}
+      .form-group
+        %textarea.form-control{rows: '5', name: 'value'}= node.value
+      .form-group
+        - if etcvault?
+          .row
+            .col-md-4
+              - default_key_name = node.etcvault && node.etcvault['container'] && node.etcvault['container']['KeyName']
+              != haml :etcvault_keys_select, locals: {default_key_name: default_key_name}
+            .col-md-8
+              %button.btn.btn-primary{type: 'submit'} Save
+        - else
+          %button.btn.btn-primary{type: 'submit'} Save
+.row
+  .col-md-12
+    %h3
+      %span.glyphicon.glyphicon-trash{'aria-hidden' => true}
+      Delete
+    %form{action: "/keys#{node.key}", method: 'POST', onsubmit: 'javascript:return confirm("Sure?")'}
+      %input{type: 'hidden', name: '_method', value: 'DELETE'}
+      .form-group
+        %button.btn.btn-danger{type: 'submit'} Destroy

data/app/views/keys.haml

@@ -0,0 +1,30 @@
+- node = @etcd_response.node
+.row
+  .col-md-12
+    %ol.breadcrumb
+      - active = (key.nil? || key.empty?) ? 'active' : nil
+      %li{class: active}
+        %a{href: '/keys/'}
+          %span.glyphicon.glyphicon-home{'aria-hidden' => true}
+      - if key
+        - paths = key.split(?/).tap(&:shift)
+        - paths.each_with_index do |part, i|
+          - active = (i.succ == key.size) ? 'active' : nil
+          %li{class: active}
+            %a{href: "/keys/#{paths[0..i].join(?/)}"}
+              = part
+
+- if node.dir
+  != haml :dir, locals: {node: node}
+- else
+  != haml :key, locals: {node: node}
+
+
+%footer.keys-footer.row
+  .col-md-6
+      %span.label-default.label etcd_index
+      = @etcd_response.etcd_index
+      %span.label-default.label raft_index
+      = @etcd_response.raft_index
+      %span.label-default.label raft_term
+      = @etcd_response.raft_term

data/app/views/layout.haml

@@ -0,0 +1,20 @@
+!!! 5
+%html
+  %head
+    %meta{charset: 'utf-8'}
+    %script{type: 'application/javascript', src: '/assets/jquery/dist/jquery.min.js'}
+    %link{rel: 'stylesheet', type: 'text/css', href: '/assets/application.css'}
+    %title etcweb
+  %body
+    %header.header-top.container
+      .row.align-vertical
+        .col-md-8
+          %h1 etcweb
+        .col-md-4.text-right
+          - if auth_enabled? && current_user
+            Logged in as #{current_user[:info][:nickname] || current_user[:info][:name]}
+            %form{action: '/logout', method: 'POST', style: 'display: inline;'}
+              %button.btn.btn-link{type: 'submit'}
+                Log out
+    %section.container
+      != yield

data/bin/console

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require "bundler/setup"
+require "etcweb"
+
+# You can add fixtures and/or initialization code here to make experimenting
+# with your gem easier. You can also use a different console, if you like.
+
+# (If you use this, don't forget to add pry to your Gemfile!)
+# require "pry"
+# Pry.start
+
+require "irb"
+IRB.start

data/bin/setup

@@ -0,0 +1,7 @@
+#!/bin/bash
+set -euo pipefail
+IFS=$'\n\t'
+
+bundle install
+
+# Do any other automated setup that you need to do here

data/config.ru

@@ -0,0 +1,19 @@
+require 'etcweb'
+require 'omniauth'
+
+use Rack::Session::Cookie, :key => 'etcweb_sess',
+                           :secret => 'configuration'
+
+use OmniAuth::Builder do
+  provider :developer
+end
+
+run Etcweb::App.rack(
+  etcd: {
+    host: '127.0.0.1', port: 4001,
+  },
+  etcvault: true,
+  auth: {
+    omniauth: 'developer',
+  },
+)

data/etcweb.gemspec

@@ -0,0 +1,37 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'etcweb/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = "etcweb"
+  spec.version       = Etcweb::VERSION
+  spec.authors       = ["Shota Fukumori (sora_h)"]
+  spec.email         = ["sorah@cookpad.com"]
+
+  spec.summary       = %q{Web UI for etcd}
+  spec.description   = nil
+  spec.homepage      = "https://github.com/sorah/etcweb"
+  spec.license       = "MIT"
+
+  spec.files         = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
+  spec.bindir        = "exe"
+  spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
+  spec.require_paths = ["lib"]
+
+  spec.add_dependency "sinatra", ">= 1.4.5"
+  spec.add_dependency "etcd", ">= 0.2.4"
+  spec.add_dependency "etcd-etcvault", ">= 1.1.0"
+  spec.add_dependency "sprockets", ">= 2.12.3", "< 3"
+  spec.add_dependency "faml", ">= 0.2.0"
+  spec.add_dependency "bootstrap-sass", '~> 3.3.4'
+  spec.add_dependency "sprockets-helpers"
+  spec.add_dependency "omniauth"
+
+  spec.add_development_dependency "bundler", "~> 1.9"
+  spec.add_development_dependency "rake", "~> 10.0"
+
+  spec.add_development_dependency "rspec", "~> 3.2.0"
+
+  spec.add_development_dependency "rack-test"
+end

data/lib/etcweb.rb

@@ -0,0 +1,6 @@
+require "etcweb/version"
+require 'etcweb/app'
+
+module Etcweb
+  # Your code goes here...
+end

data/lib/etcweb/app.rb

@@ -0,0 +1,230 @@
+require 'sinatra/base'
+require 'json'
+require 'faml'
+require 'rack'
+require 'sass'
+require 'sprockets'
+require 'sprockets/helpers'
+
+require 'bootstrap-sass'
+
+require 'etcd'
+require 'etcd/etcvault'
+
+require 'omniauth'
+
+module Etcweb
+  class App < Sinatra::Base
+    set :method_override, true
+    set :show_exceptions, false
+    set :root, File.expand_path(File.join(__dir__, '..', '..', 'app'))
+    set :sprockets, Sprockets::Environment.new.tap { |env|
+        env.append_path "#{self.root}/javascripts"
+        env.append_path "#{self.root}/stylesheets"
+        env.append_path "#{self.root}/images"
+        env.append_path "#{self.root}/bower_components"
+      }
+
+    def self.initialize_etcd(config)
+      # etcd v0.2.4 (latest as of Mar 31, 2015) doesn't set TLS parameters in constructor
+      # https://github.com/ranjib/etcd-ruby/commit/bf2c7e6dee8b2c07f85cca8541d16dcbef67cc1a
+      Etcd.client(config).tap do |etcd|
+        etcd.config.ca_file = config[:ca_file]
+        etcd.config.ssl_cert = config[:ssl_cert]
+        etcd.config.ssl_key = config[:ssl_key]
+      end
+    end
+
+    def self.initialize_context(config)
+      {}.tap do |ctx|
+        ctx[:etcd] = initialize_etcd(config[:etcd] || {})
+        ctx[:config] = config
+      end
+    end
+
+    def self.rack(config={})
+      klass = self
+
+      context = initialize_context(config)
+      app = lambda { |env|
+        env['etcweb'] = context
+        klass.call(env)
+      }
+
+      Rack::Builder.app do
+        map '/assets' do
+          run klass.sprockets
+        end
+
+        map '/' do
+          run app
+        end
+      end
+    end
+
+    helpers do
+      include Sprockets::Helpers
+
+      def context
+        request.env['etcweb']
+      end
+
+      def etcd
+        context[:etcd]
+      end
+
+      def key
+        @key ||= "/#{params[:splat] && params[:splat].first}".tap do |k|
+          k.concat("/#{params[:child]}") if params[:child]
+          k.sub!(%r{^//}, '/') # for child of root
+        end
+      end
+
+      def etcvault?
+        !!context[:config][:etcvault]
+      end
+
+      def etcvault_keys_cache_ttl
+        context[:config][:etcvault_keys_cache_ttl] || 30
+      end
+
+      def etcvault_keys
+        return [] unless etcvault?
+        context[:etcvault_keys] ||= {}
+        if context[:etcvault_keys][:expiry].nil? || context[:etcvault_keys][:expiry] <= Time.now
+          context[:etcvault_keys] = {
+            expiry: Time.now + etcvault_keys_cache_ttl,
+            keys:   etcd.etcvault_keys.sort
+          }
+        end
+        context[:etcvault_keys][:keys]
+      end
+
+      def auth_enabled?
+        context[:config][:auth]
+      end
+
+      def omniauth_strategy
+        context[:config][:auth][:omniauth] or raise 'no config.auth.omniauth specified'
+      end
+
+      def auth_allow_policy_proc
+        context[:config][:auth][:allow_policy_proc] || proc { true }
+      end
+
+      def auth_after_login_proc
+        context[:config][:auth][:after_login_proc] || proc { }
+      end
+
+      def current_user
+        session[:user]
+      end
+    end
+
+    before do
+      next if request.path_info.start_with?('/auth')
+      next unless auth_enabled?
+
+      if current_user && instance_eval(&auth_allow_policy_proc)
+        next
+      end
+
+      if request.get?
+        session[:back_to] = request.fullpath
+        redirect "/auth/#{omniauth_strategy}"
+      else
+        halt 401
+      end
+    end
+
+    post '/logout' do
+      session[:user] = nil
+      redirect '/'
+    end
+
+    post '/auth/:strategy/callback' do
+      auth = env['omniauth.auth']
+      session[:user] = {
+        uid: auth[:uid],
+        info: auth[:info],
+        provider: auth[:provider],
+      }
+      instance_eval(&auth_after_login_proc)
+      redirect session.delete(:back_to) || "/"
+    end
+
+    get '/' do
+      redirect "/keys/"
+    end
+
+    get '/keys' do
+      redirect "/keys/"
+    end
+
+    get '/keys/*' do
+      begin
+        @etcd_response = etcd.get(key)
+      rescue Etcd::NotDir, Etcd::KeyNotFound
+        halt 404
+      rescue Etcd::Error => e
+        status 400
+        return haml(:etcd_error, locals: {error: e})
+      end
+
+      haml :keys
+    end
+
+    put '/keys/*' do
+      options = {value: params[:value]}
+
+      if params[:etcvault_key] && !params[:etcvault_key].empty?
+        unless etcvault_keys.include?(params[:etcvault_key])
+          halt 404
+        end
+        options[:value] = "ETCVAULT::plain:#{params[:etcvault_key]}:#{options[:value]}::ETCVAULT"
+      end
+
+      if params[:dir]
+        options.replace(dir: true)
+      end
+
+      options[:ttl] = params[:ttl].to_i if params[:ttl]
+      options[:value] = options[:value].gsub("\r\n", "\n") if options[:value]
+
+      begin
+        @etcd_response = etcd.set(key, options)
+      rescue Etcd::Error => e
+        status 400
+        return haml(:etcd_error, locals: {error: e})
+      end
+
+      if params[:continue] != nil
+        parent = key.split(?/).tap(&:pop).join(?/)
+        redirect "/keys#{parent}"
+      else
+        redirect "/keys#{key}"
+      end
+    end
+
+    delete '/keys/*' do
+      begin
+        options = {recursive: !!params[:recursive]}
+        @etcd_response = etcd.delete(key, options)
+      rescue Etcd::NotDir, Etcd::KeyNotFound
+        halt 404
+      rescue Etcd::Error => e
+        status 400
+        return haml(:etcd_error, locals: {error: e})
+      end
+
+      parent = key.split(?/).tap(&:pop).join(?/)
+      redirect "/keys#{parent}"
+    end
+
+    get '/etcvault_keys' do
+      content_type :json
+
+      etcvault_keys.to_json
+    end
+  end
+end