ey_secrets 0.0.1

checksums.yaml

@@ -0,0 +1,15 @@
+---
+!binary "U0hBMQ==":
+  metadata.gz: !binary |-
+    M2JjNjMyZGE5NjUxZDYwNGU1YTkzNmIxYmZjMjE1ZjMzMWY1N2YyNg==
+  data.tar.gz: !binary |-
+    ZWI0YWIyNjc5OTg0NzViMDVhMGViZDk0MTM0N2NhNTFiNTg2YTY3ZA==
+SHA512:
+  metadata.gz: !binary |-
+    ZGFlMjgxOGY1ZjQwNWQwNGU2NTQ1MDY2NzIyOWNiOTI3YzJhY2YyOGMxZmEx
+    Njc0MTEyYzg2NGQ1NzQ4ZGY5OWM0NzBmMjgyMThjMjZmOTg5OWJlNmJlNjQ1
+    N2ZjYmE2ODlkNWU2ZjFlOTNkMWZmNDRmNjdiZDUyNzBkMDY3ZTA=
+  data.tar.gz: !binary |-
+    Yzg1NTRlODc0MTJmYjdjYmVlOTg1ZmJiYjYyMDg1ZmMyMjliMmJjMmM5MTQx
+    MDU0NGUwYmU5YjQzMTE5ZTRlMWQ1YjU3NzE2MDE3NDJiNjQ5MmNlNzYyMzJm
+    ZjMxMmQxMWZmYzkyZDRmMDVmYzk1ZDkyYzYyZTU2NmQ5ZTNhOWQ=

data/.gitignore

@@ -0,0 +1,16 @@
+*.gem
+*.rbc
+.bundle
+.config
+.yardoc
+Gemfile.lock
+InstalledFiles
+_yardoc
+coverage
+doc/
+lib/bundler/man
+pkg
+rdoc
+spec/reports
+spec/tmp
+tmp

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in ey_config.gemspec
+gemspec

data/LICENSE.txt

@@ -0,0 +1,22 @@
+Copyright (c) 2014 Tim Fischbach
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,45 @@
+# Engine Yard Secrets
+
+Manage sensible configuration files accross Engine Yard instances.
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+    gem 'ey_secrets'
+
+And then execute:
+
+    $ bundle
+
+Or install it yourself as:
+
+    $ gem install ey_secrets
+
+## Usage
+
+The repository is expected to contain one folder per Engine Yard
+environment, each containing files with `.env` extension. For example:
+
+    staging/
+      secrets.env
+    production/
+      secrets.env
+
+After commiting and pushing changes inside the config repository, run:
+
+    $ cd my_project
+    $ eysecrets update -e production
+    
+Now all files of the form `production/*.env` are copied
+to `/data/<app_name>/shared/config` on all instances of the production
+environment. The command also restarts passenger and the monit group
+`<app_name>_resque`.
+
+## Contributing
+
+1. Fork it
+2. Create your feature branch (`git checkout -b my-new-feature`)
+3. Commit your changes (`git commit -am 'Add some feature'`)
+4. Push to the branch (`git push origin my-new-feature`)
+5. Create new Pull Request

data/Rakefile

@@ -0,0 +1 @@
+require "bundler/gem_tasks"

data/bin/eysecrets

@@ -0,0 +1,10 @@
+#!/usr/bin/env ruby
+$:.unshift(File.expand_path('../../lib', __FILE__))
+require 'ey_secrets'
+
+begin
+  EySecrets::Cli.start
+rescue StandardError => e
+  puts e.message
+  exit(1)
+end

data/ey_secrets.gemspec

@@ -0,0 +1,27 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'ey_secrets/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = 'ey_secrets'
+  spec.version       = EySecrets::VERSION
+  spec.authors       = ['Tim Fischbach']
+  spec.email         = ['tfischbach@codevise.de']
+  spec.summary       = 'Manage sensible configuration files accross Engine Yard instances.'
+  spec.homepage      = 'http://github.com/tf/ey_secrets'
+  spec.license       = 'MIT'
+
+  spec.files         = `git ls-files`.split($/)
+  spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
+  spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
+  spec.require_paths = ['lib']
+
+  spec.add_runtime_dependency 'engineyard-cloud-client', '~> 1.0'
+  spec.add_runtime_dependency 'thor'
+  spec.add_runtime_dependency 'rainbow', '~> 2.0'
+
+  spec.add_development_dependency 'bundler', '~> 1.4'
+  spec.add_development_dependency 'rake'
+  spec.add_development_dependency 'rspec', '~> 3.0'
+end

data/lib/ey_secrets/actions/copy_files.rb

@@ -0,0 +1,26 @@
+module EySecrets
+  class CopyFiles < Struct.new(:instance, :repository, :options)
+    include CommandBuilder
+
+    def build
+      ensure_config_dir!
+      copy_env_files
+    end
+
+    private
+
+    def ensure_config_dir!
+      ssh("if [ ! -d #{instance.shared_config_dir} ]; then mkdir -p #{instance.shared_config_dir}; fi")
+    end
+
+    def copy_env_files
+      env_files.each do |file|
+        scp(file, File.join(instance.shared_config_dir, File.basename(file)))
+      end
+    end
+
+    def env_files
+      repository.glob("#{instance.environment.name}/*.env")
+    end
+  end
+end

data/lib/ey_secrets/actions/restart.rb

@@ -0,0 +1,20 @@
+module EySecrets
+  class Restart < Struct.new(:instance, :options)
+    include CommandBuilder
+
+    def build
+      restart_monit
+      restart_passenger
+    end
+
+    private
+
+    def restart_monit
+      ssh("sudo monit restart -g #{instance.app_name}_resque")
+    end
+
+    def restart_passenger
+      ssh("if [ -d #{File.join(instance.current_app_dir, 'tmp')} ]; then touch #{File.join(instance.current_app_dir, 'tmp', 'restart.txt')}; fi")
+    end
+  end
+end

data/lib/ey_secrets/actions/update.rb

@@ -0,0 +1,14 @@
+module EySecrets
+  class Update < Struct.new(:application, :repository, :options)
+    include CompositeCommandBuilder
+
+    def build
+      repository.assert_ready_for_update
+
+      InstanceResolver.find!(application, options.merge(remotes: repository.remotes)).each do |instance|
+        action CopyFiles.new(instance, repository, options)
+        action Restart.new(instance, options)
+      end
+    end
+  end
+end

data/lib/ey_secrets/adapters/cli.rb

@@ -0,0 +1,25 @@
+require 'thor'
+require 'rainbow'
+
+module EySecrets
+  class Cli < Thor
+    method_option 'environment', aliases: '-e', type: :string, required: true, banner: 'Environment to update.'
+    method_option 'app', aliases: '-a', type: :string, banner: 'App to update.'
+    method_option 'dry_run', aliases: '-n', type: :boolean, banner: 'Only print commands do not execute.'
+    desc 'update', 'Copy config files from deploy/config to instances.'
+    def update
+      Shell.execute!(Update.new(EngineYard.applications, Git.repository('.'), options), options) do |command|
+        puts(Rainbow(command).green)
+      end
+    rescue Error => e
+      puts(Rainbow(e.message).red)
+      exit 1
+    end
+
+    desc 'version', 'Display version information'
+    def version
+      puts Rainbow("EySecrets version #{VERSION}").green
+    end
+    map '-v' => :version
+  end
+end

data/lib/ey_secrets/adapters/engine_yard.rb

@@ -0,0 +1,50 @@
+require 'engineyard-cloud-client'
+require 'yaml'
+
+module EySecrets
+  class EngineYard
+    def self.applications
+      new.applications
+    end
+
+    def applications
+      api.apps.map do |ey_app|
+        application_from(ey_app)
+      end
+    end
+
+    private
+
+    def application_from(ey_app)
+      Application.new(ey_app.name, ey_app.repository_uri, environments_from(ey_app))
+    end
+
+    def environments_from(ey_app)
+      ey_app.app_environments.map do |ey_app_environment|
+        environment_from(ey_app, ey_app_environment.environment)
+      end
+    end
+
+    def environment_from(ey_app, ey_environment)
+      Environment.new(ey_environment.name, instances_from(ey_app, ey_environment))
+    end
+
+    def instances_from(ey_app, ey_environment)
+      ey_environment.instances.map do |ey_instance|
+        Instance.new(ey_instance.hostname, ey_environment.username, ey_app.name)
+      end
+    end
+
+    def api
+      EY::CloudClient.new(token: api_token)
+    end
+
+    def api_token
+      begin
+        YAML.load_file(File.join(ENV['HOME'], '.eyrc'))['api_token']
+      rescue
+        raise 'API Token not found. Please configure the engine yard cli.'
+      end
+    end
+  end
+end

data/lib/ey_secrets/adapters/git.rb

@@ -0,0 +1,46 @@
+module EySecrets
+  class Git < Struct.new(:path)
+    def self.repository(path)
+      new(path).repository
+    end
+
+    def repository
+      Repository.new(remotes, files, in_sync?)
+    end
+
+    private
+
+    def remotes
+      Dir.chdir(path) do
+        @remotes ||= `git remote -v`.scan(/\t[^\s]+\s/).map { |c| c.strip }.uniq
+      end
+    end
+
+    def files
+      Dir[File.join(path, '**', '*')].map do |file|
+        file.gsub(%r'^\./', '')
+      end
+    end
+
+    def in_sync?
+      in_sync_with_origin? && clean?
+    end
+
+    def in_sync_with_origin?
+      git_revision_diff_count == 0
+    end
+
+    def clean?
+      Dir.chdir(path) do
+        `git status --porcelain` == ''
+      end
+    end
+
+    def git_revision_diff_count
+      Dir.chdir(path) do
+        `git fetch && git rev-list HEAD..origin/master --count`.to_i +
+          `git rev-list origin/master..HEAD --count`.to_i
+      end
+    end
+  end
+end

data/lib/ey_secrets/adapters/shell.rb

@@ -0,0 +1,20 @@
+require 'rainbow'
+
+module EySecrets
+  class Shell
+    class CommandFailed < Error
+    end
+
+    def self.execute!(action, options = {})
+      action.commands.each do |command|
+        yield(command) if block_given?
+
+        unless options[:dry_run]
+          unless system(command)
+            raise(CommandFailed, "Error while executing #{command}")
+          end
+        end
+      end
+    end
+  end
+end

data/lib/ey_secrets/command_builder.rb

@@ -0,0 +1,23 @@
+module EySecrets
+  module CommandBuilder
+    def scp(source, destination)
+      @commands << "scp #{source} #{instance.user_name}@#{instance.host_name}:#{destination}"
+    end
+
+    def ssh(command)
+      @commands << "ssh #{instance.user_name}@#{instance.host_name} \"#{command}\""
+    end
+
+    def commands
+      @commands = []
+      build
+      @commands
+    end
+
+    private
+
+    def build
+      raise(NotImplementedError)
+    end
+  end
+end

data/lib/ey_secrets/composite_command_builder.rb

@@ -0,0 +1,13 @@
+module EySecrets
+  module CompositeCommandBuilder
+    def action(action)
+      @actions << action
+    end
+
+    def commands
+      @actions = []
+      build
+      @actions.map(&:commands).flatten
+    end
+  end
+end

data/lib/ey_secrets/error.rb

@@ -0,0 +1,4 @@
+module EySecrets
+  class Error < StandardError
+  end
+end

data/lib/ey_secrets/instance_resolver.rb

@@ -0,0 +1,37 @@
+module EySecrets
+  class InstanceResolver < Struct.new(:applications, :options)
+    def self.find!(applications, options)
+      new(applications, options).find!
+    end
+
+    def find!
+      find_environment!.instances
+    end
+
+    private
+
+    def find_environment!
+      find_app!.environments.find do |environment|
+        environment.name == options[:environment]
+      end || raise("Could not find environment '#{options[:environment]}' for app '#{options[:app]}'.")
+    end
+
+    def find_app!
+      find_app_by_name(options[:app]) ||
+        find_app_by_remotes(options[:remotes]) ||
+        raise("Could not find app with name '#{options[:name]}'.")
+    end
+
+    def find_app_by_name(name)
+      applications.find do |application|
+        application.name == name
+      end
+    end
+
+    def find_app_by_remotes(remotes)
+      applications.find do |application|
+        remotes.include?(application.config_repository_uri)
+      end
+    end
+  end
+end

data/lib/ey_secrets/models/application.rb

@@ -0,0 +1,7 @@
+module EySecrets
+  class Application < Struct.new(:name, :repository_uri, :environments)
+    def config_repository_uri
+      repository_uri.gsub(/\.git$/, '_config.git')
+    end
+  end
+end

data/lib/ey_secrets/models/environment.rb

@@ -0,0 +1,10 @@
+module EySecrets
+  class Environment < Struct.new(:name, :instances)
+    def initialize(*)
+      super
+      instances.each do |instance|
+        instance.environment = self
+      end
+    end
+  end
+end

data/lib/ey_secrets/models/instance.rb

@@ -0,0 +1,15 @@
+require 'rainbow'
+
+module EySecrets
+  class Instance < Struct.new(:host_name, :user_name, :app_name)
+    attr_accessor :environment
+
+    def shared_config_dir
+      "/data/#{app_name}/shared/config"
+    end
+
+    def current_app_dir
+      "/data/#{app_name}/current/"
+    end
+  end
+end

data/lib/ey_secrets/models/repository.rb

@@ -0,0 +1,20 @@
+module EySecrets
+  class Repository < Struct.new(:remotes, :files, :ready_for_update)
+    class NotReadyForUpdate < Error
+    end
+
+    def ready_for_update?
+      ready_for_update
+    end
+
+    def glob(pattern)
+      files.select { |file| File.fnmatch(pattern, file) }
+    end
+
+    def assert_ready_for_update
+      unless ready_for_update?
+        raise(NotReadyForUpdate, "Please, commit and push your changes before updating config.")
+      end
+    end
+  end
+end

data/lib/ey_secrets/version.rb

@@ -0,0 +1,3 @@
+module EySecrets
+  VERSION = "0.0.1"
+end

data/lib/ey_secrets.rb

@@ -0,0 +1,23 @@
+require 'ey_secrets/command_builder'
+require 'ey_secrets/composite_command_builder'
+require 'ey_secrets/error'
+require 'ey_secrets/instance_resolver'
+
+require 'ey_secrets/models/application'
+require 'ey_secrets/models/environment'
+require 'ey_secrets/models/instance'
+require 'ey_secrets/models/repository'
+
+require 'ey_secrets/actions/update'
+require 'ey_secrets/actions/copy_files'
+require 'ey_secrets/actions/restart'
+
+require 'ey_secrets/adapters/cli'
+require 'ey_secrets/adapters/engine_yard'
+require 'ey_secrets/adapters/git'
+require 'ey_secrets/adapters/shell'
+
+require 'ey_secrets/version'
+
+module EySecrets
+end

data/spec/features/update_spec.rb

@@ -0,0 +1,53 @@
+require 'spec_helper'
+
+module EySecrets
+  describe 'update' do
+    def applications
+      [
+        Application.new('my_app', 'git@git.exmaple.com:my_app.git', [
+                          Environment.new('production', [
+                                            Instance.new('host', 'user', 'my_app')
+                                          ])
+                        ])
+      ]
+    end
+
+    def repository(options = {})
+      Repository.new(['git@git.exmaple.com:my_app_config.git'],
+                     ['production/secrets.env', 'staging/secrets.env'],
+                     options.fetch(:ready_for_update, true))
+    end
+
+    it 'fails if repo is not ready for update' do
+      options = {app: 'my_app', environment: 'production'}
+
+      expect {
+        Update.new(applications, repository(ready_for_update: false), options).commands
+      }.to raise_error(Repository::NotReadyForUpdate)
+    end
+
+    it 'copies .env files from environment directory to instances' do
+      options = {app: 'my_app', environment: 'production'}
+
+      commands = Update.new(applications, repository, options).commands
+
+      expect(commands).to include('scp production/secrets.env user@host:/data/my_app/shared/config/secrets.env')
+    end
+
+    it 'restarts monit' do
+      options = {app: 'my_app', environment: 'production'}
+
+      commands = Update.new(applications, repository, options).commands
+
+      expect(commands).to include('ssh user@host "sudo monit restart -g my_app_resque"')
+    end
+
+    it 'restarts passenger' do
+      options = {app: 'my_app', environment: 'production'}
+
+      commands = Update.new(applications, repository, options).commands
+
+      expect(commands).to include(a_string_matching('touch /data/my_app/current/tmp/restart.txt'))
+    end
+  end
+end

data/spec/integration/ey_secrets/git_spec.rb

@@ -0,0 +1,133 @@
+require 'spec_helper'
+require 'fileutils'
+
+module EySecrets
+  describe Git do
+    describe '.repository' do
+      include FileUtils
+
+      describe '.remotes' do
+        it 'returns repository uris' do
+          in_sandbox do
+            create_bare_repo('origin_repo', ['file'])
+            `git clone origin_repo repo`
+
+            remotes = Git.repository('repo').remotes
+
+            expect(remotes).to eq([File.expand_path('origin_repo')])
+          end
+        end
+      end
+
+      describe '.files' do
+        it 'returns paths relative to CWD' do
+          in_sandbox do
+            create_bare_repo('origin_repo', ['file', 'some/file'])
+            `git clone origin_repo repo`
+
+            files = Git.repository('repo').files
+
+            expect(files.sort).to eq(['repo/file', 'repo/some', 'repo/some/file'])
+          end
+        end
+
+        it 'removes leading dot' do
+          in_sandbox do
+            create_bare_repo('origin_repo', ['file'])
+            `git clone origin_repo repo`
+
+            files = Dir.chdir('repo') do
+              Git.repository('.').files
+            end
+
+            expect(files).to eq(['file'])
+          end
+        end
+      end
+
+      describe '.ready_for_update?' do
+        it 'is true after clone' do
+          in_sandbox do
+            create_bare_repo('origin_repo', ['file'])
+            `git clone origin_repo repo`
+
+            repository = Git.repository('repo')
+
+            expect(repository).to be_ready_for_update
+          end
+        end
+
+        it 'is false if repo has untracked files' do
+          in_sandbox do
+            create_bare_repo('origin_repo', ['file'])
+            `git clone origin_repo repo`
+            `touch repo/other`
+
+            repository = Git.repository('repo')
+
+            expect(repository).not_to be_ready_for_update
+          end
+        end
+
+        it 'is false if repo has modified files' do
+          in_sandbox do
+            create_bare_repo('origin_repo', ['file'])
+            `git clone origin_repo repo`
+            `echo "change" > repo/file`
+
+            repository = Git.repository('repo')
+
+            expect(repository).not_to be_ready_for_update
+          end
+        end
+
+        it 'is false if repo has unpushed commits' do
+          in_sandbox do
+            create_bare_repo('origin_repo', ['file'])
+            `git clone origin_repo repo`
+            `(cd repo; echo "change" > file; git add .; git commit -m "change")`
+
+            repository = Git.repository('repo')
+
+            expect(repository).not_to be_ready_for_update
+          end
+        end
+
+        it 'is true if all commits have been pushed' do
+          in_sandbox do
+            create_bare_repo('origin_repo', ['file'])
+            `git clone origin_repo repo`
+            `(cd repo; echo "change" > file; git add .; git commit -m "change"; git push origin master 2> /dev/null)`
+
+            repository = Git.repository('repo')
+
+            expect(repository).to be_ready_for_update
+          end
+        end
+      end
+
+      def create_bare_repo(name, files = {})
+        mkdir('original_repo')
+        Dir.chdir('original_repo') do
+          `git init`
+          files.each do |file|
+            mkdir_p(File.dirname(file))
+            touch(file)
+          end
+          `git add .; git commit -m "initial commit"`
+        end
+        `git clone --bare original_repo #{name}`
+      end
+
+      def in_sandbox(&block)
+        rm_rf(sandbox_path)
+        mkdir_p(sandbox_path)
+        Dir.chdir(sandbox_path, &block)
+      end
+
+      def sandbox_path
+        File.join(PROJECT_ROOT, 'spec', 'tmp')
+      end
+    end
+  end
+end

data/spec/integration/ey_secrets/shell_spec.rb

@@ -0,0 +1,49 @@
+require 'spec_helper'
+
+module EySecrets
+  describe Shell do
+    describe '.execute!' do
+      it 'runs commands of action' do
+        action = Class.new do
+          def commands
+            ['echo "output"']
+          end
+        end.new
+
+        expect {
+          quietly do
+            Shell.execute!(action)
+          end
+        }.not_to raise_error
+      end
+
+      it 'raises CommandFailed error if exit status is not 0' do
+        action = Class.new do
+          def commands
+            ['false']
+          end
+        end.new
+
+        expect {
+          quietly do
+            Shell.execute!(action)
+          end
+        }.to raise_error(Shell::CommandFailed)
+      end
+
+      def quietly(&block)
+        silence_stream(STDOUT, &block)
+      end
+
+      def silence_stream(stream)
+        old_stream = stream.dup
+        stream.reopen('/dev/null')
+        stream.sync = true
+        yield
+      ensure
+        stream.reopen(old_stream)
+        old_stream.close
+      end
+    end
+  end
+end

data/spec/spec_helper.rb

@@ -0,0 +1,8 @@
+require 'rspec'
+
+PROJECT_ROOT = File.expand_path(File.join(File.dirname(__FILE__), '..')).freeze
+$LOAD_PATH << File.join(PROJECT_ROOT, 'lib')
+
+require 'ey_secrets'
+
+Dir[File.join(PROJECT_ROOT, 'spec', 'support', '**', '*.rb')].each { |file| require(file) }

data/spec/unit/ey_secrets/application_spec.rb

@@ -0,0 +1,13 @@
+require 'spec_helper'
+
+module EySecrets
+  describe Application do
+    describe '#config_repository_uri' do
+      it 'inserts config suffix into repository_uri' do
+        application = Application.new('my_app', 'git@git.example.com:my_app.git')
+
+        expect(application.config_repository_uri).to eq('git@git.example.com:my_app_config.git')
+      end
+    end
+  end
+end

data/spec/unit/ey_secrets/instance_resolver_spec.rb

@@ -0,0 +1,59 @@
+require 'spec_helper'
+
+module EySecrets
+  describe InstanceResolver do
+    describe '.find!' do
+      it 'finds instances from specified environment' do
+        production_instance = Instance.new('production.host', 'user', 'my_app')
+        staging_instance = Instance.new('staging.host', 'user', 'my_app')
+        applications = [
+          Application.new('my_app', 'git@git.example.com:my_app.git', [
+                            Environment.new('staging', [staging_instance]),
+                            Environment.new('production', [production_instance])
+                          ])
+        ]
+        options = {app: 'my_app', environment: 'production'}
+
+        instances = InstanceResolver.find!(applications, options)
+
+        expect(instances).to eq([production_instance])
+      end
+
+      it 'finds instances from specified application' do
+        app_instance = Instance.new('app.host', 'user', 'my_app')
+        other_app_instance = Instance.new('other.host', 'user', 'my_app')
+        applications = [
+          Application.new('my_app', 'git@git.example.com:my_app.git', [
+                            Environment.new('production', [app_instance])
+                          ]),
+          Application.new('other_app', 'git@git.example.com:other.git', [
+                            Environment.new('production', [other_app_instance])
+                          ])
+        ]
+        options = {app: 'my_app', environment: 'production'}
+
+        instances = InstanceResolver.find!(applications, options)
+
+        expect(instances).to eq([app_instance])
+      end
+
+      it 'finds instances from application with specified remotes' do
+        app_instance = Instance.new('app.host', 'user', 'my_app')
+        other_app_instance = Instance.new('other.host', 'user', 'my_app')
+        applications = [
+          Application.new('my_app', 'git@git.example.com:my_app.git', [
+                            Environment.new('production', [app_instance])
+                          ]),
+          Application.new('other_app', 'git@git.example.com:other.git', [
+                            Environment.new('production', [other_app_instance])
+                          ])
+        ]
+        options = {remotes: ['git@git.example.com:my_app_config.git'], environment: 'production'}
+
+        instances = InstanceResolver.find!(applications, options)
+
+        expect(instances).to eq([app_instance])
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,165 @@
+--- !ruby/object:Gem::Specification
+name: ey_secrets
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Tim Fischbach
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2014-08-20 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: engineyard-cloud-client
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: thor
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rainbow
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '1.4'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '1.4'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '3.0'
+description: 
+email:
+- tfischbach@codevise.de
+executables:
+- eysecrets
+extensions: []
+extra_rdoc_files: []
+files:
+- .gitignore
+- Gemfile
+- LICENSE.txt
+- README.md
+- Rakefile
+- bin/eysecrets
+- ey_secrets.gemspec
+- lib/ey_secrets.rb
+- lib/ey_secrets/actions/copy_files.rb
+- lib/ey_secrets/actions/restart.rb
+- lib/ey_secrets/actions/update.rb
+- lib/ey_secrets/adapters/cli.rb
+- lib/ey_secrets/adapters/engine_yard.rb
+- lib/ey_secrets/adapters/git.rb
+- lib/ey_secrets/adapters/shell.rb
+- lib/ey_secrets/command_builder.rb
+- lib/ey_secrets/composite_command_builder.rb
+- lib/ey_secrets/error.rb
+- lib/ey_secrets/instance_resolver.rb
+- lib/ey_secrets/models/application.rb
+- lib/ey_secrets/models/environment.rb
+- lib/ey_secrets/models/instance.rb
+- lib/ey_secrets/models/repository.rb
+- lib/ey_secrets/version.rb
+- spec/features/update_spec.rb
+- spec/integration/ey_secrets/git_spec.rb
+- spec/integration/ey_secrets/shell_spec.rb
+- spec/spec_helper.rb
+- spec/unit/ey_secrets/application_spec.rb
+- spec/unit/ey_secrets/instance_resolver_spec.rb
+homepage: http://github.com/tf/ey_secrets
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.2
+signing_key: 
+specification_version: 4
+summary: Manage sensible configuration files accross Engine Yard instances.
+test_files:
+- spec/features/update_spec.rb
+- spec/integration/ey_secrets/git_spec.rb
+- spec/integration/ey_secrets/shell_spec.rb
+- spec/spec_helper.rb
+- spec/unit/ey_secrets/application_spec.rb
+- spec/unit/ey_secrets/instance_resolver_spec.rb