eventboss 1.9.4 → 1.9.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f7539971f5531148328e2fb1c5f49f356c72bd011ac041c5bb4be7ae60042c9c
-  data.tar.gz: 61bcde73bc9d682981548d3d3ca461fca6299a76a5eb257a30bc1755d2769453
+  metadata.gz: 00edb1f9a676e16224c4914f8411c073bd9f29658d1b878b4b6bb5e4639d8126
+  data.tar.gz: 42f8f5f0d71c515203e9601ec327717b026d43855cea1d0915901f8de38aafd7
 SHA512:
-  metadata.gz: d977ac2326358fcb9aa49167046c95e1e65dc31c9f23cf3af091b35c04b25dd857b8f6c1c7c4c43d70ea8ceb0311d6d7e24e8e7017191e4714648b7ae26da43a
-  data.tar.gz: 5b3a6450ad0ae267fd3222e818a85836bbec8bc3825b7a45fe8d20f4968032877102f799958b14c2a2e2c0e6401457a07b76ed0d348dea898e582b18b63a3c87
+  metadata.gz: 83eb1f2faa512f4147e4a3b4f523b3a0d60f4429bd27932da4f811ab8c7a006457abc15b7f5ef4f7fea734dd4c736d6e35e5d598c292097020156ca94cde42ac
+  data.tar.gz: e623aa96514dd1c4be6c97c64d24c4b3a5d0fe54740636437b02bbd31d821cae1fd607b28009b6fb6337819cdb0f992464860c39a5336dcd8ac650e1daaa3df5

data/.github/workflows/publish_gem.yml

@@ -0,0 +1,51 @@
+name: Publish Gem
+
+on:
+  workflow_dispatch:
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ruby
+          # runs 'bundle install' and caches installed gems automatically
+          bundler-cache: true
+
+      - name: "Publish gem eventboss"
+        shell: bash
+        env:
+          GEM_HOST_API_KEY: ${{ secrets.EVENTBOSS_RUBYGEMS_TOKEN }}
+
+        run: |
+          set -euo pipefail
+          # make this path safe so git commands work on a root-owned mount
+          git config --global --add safe.directory /usr/src/app
+
+          echo "📦 Building & publishing eventboss"
+          # Build the gem
+          gem build eventboss.gemspec
+
+          set +e
+          push_output=$(gem push *.gem 2>&1)
+          push_exit_code=$?
+          set -e
+
+          if [[ $push_exit_code -eq 0 ]]; then
+            echo "✅ Successfully published eventboss!"
+          elif grep -q "already been pushed" <<< "$push_output"; then
+            echo "::warning title=Gem already pushed::Gem eventboss version already published. Skipping this step."
+            echo "::notice title=Skipped publishing::Gem eventboss version already exists."
+            exit 0
+          else
+            echo "::error title=Gem Push Failed::$push_output"
+            exit 1
+          fi

data/.gitignore

@@ -7,3 +7,4 @@
 /spec/reports/
 /tmp/
 .ruby-version
+.idea/

data/README.md

@@ -108,6 +108,12 @@ Use fixed account ID for localstack setup:
 EVENTBUS_ACCOUNT_ID=000000000000
 ```
 
+### AWS Credentials Validation
+
+When running in container environments with IAM roles (indicated by the presence of `AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE`, which is set automatically by AWS when IAM role is used), Eventboss validates that the AWS client is using the correct credentials provider (`Aws::ECSCredentials`). If the wrong credentials provider is detected, Eventboss will log an error and exit with code 1 to prevent running with invalid credentials.
+
+This feature is particularly useful in Kubernetes environments where pods should be using ECS credentials for IAM role authentication.
+
 Be aware that `eventbus:deadletter:reload` rake task won't load your configuration if you are not using ENVs
  in non Rails app, although to make it work you can extend your `Rakefile` with:
 

data/lib/eventboss/configuration.rb

@@ -20,6 +20,7 @@ module Eventboss
       :eventboss_account_id,
       :eventboss_use_default_credentials,
       :aws_access_key_id,
+      :aws_container_authorization_token_file,
       :aws_secret_access_key,
       :aws_session_token,
       :aws_sns_endpoint,
@@ -81,7 +82,7 @@ module Eventboss
 
     def credentials
       return Aws::Credentials.new(aws_access_key_id, aws_secret_access_key, aws_session_token) if development_mode?
-        
+
       Aws::Credentials.new(
         aws_access_key_id,
         aws_secret_access_key
@@ -104,6 +105,10 @@ module Eventboss
       defined_or_default('eventboss_use_default_credentials') { ENV['EVENTBOSS_USE_DEFAULT_CREDENTIALS'] == 'true' }
     end
 
+    def aws_container_authorization_token_file
+      defined_or_default('aws_container_authorization_token_file') { ENV['AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE'] }
+    end
+
     def aws_access_key_id
       defined_or_default('aws_access_key_id') { ENV['AWS_ACCESS_KEY_ID'] }
     end

data/lib/eventboss/runner.rb

@@ -25,6 +25,7 @@ module Eventboss
         Eventboss::DevelopmentMode.setup_infrastructure(queues) if config.development_mode?
 
         begin
+          validate_client!(client, config)
           launcher.start
           handle_signals(self_read, launcher)
         rescue Interrupt
@@ -35,6 +36,18 @@ module Eventboss
 
       private
 
+      def validate_client!(client, config)
+        provider = client.config.credentials.class
+
+        if config.aws_container_authorization_token_file && provider != Aws::ECSCredentials
+          logger.error('runner') do
+            "AWS client was initiated with wrong credentials provider: #{provider}. " \
+            "Expected: Aws::ECSCredentials. Shutting down."
+          end
+          exit 1
+        end
+      end
+
       def setup_signals(signals)
         self_read, self_write = IO.pipe
 

data/lib/eventboss/version.rb

@@ -1,3 +1,3 @@
 module Eventboss
-  VERSION = "1.9.4"
+  VERSION = "1.9.5"
 end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: eventboss
 version: !ruby/object:Gem::Version
-  version: 1.9.4
+  version: 1.9.5
 platform: ruby
 authors:
 - AirHelp
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-06-25 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-sqs
@@ -117,6 +116,7 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".github/workflows/bundler_audit.yml"
+- ".github/workflows/publish_gem.yml"
 - ".github/workflows/rspec.yml"
 - ".gitignore"
 - ".rspec"
@@ -169,7 +169,6 @@ homepage: https://github.com/AirHelp/eventboss
 licenses:
 - MIT
 metadata: {}
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -184,8 +183,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.22
-signing_key:
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Eventboss Ruby Client.
 test_files: []