gaargh 0.1.0 → 0.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5be00f9025dc2da224ad903119e28ffe8ff2d2e6ed1817abeec4df7df9db3b89
-  data.tar.gz: 82688fb326f5c034221b4d986a01af2dd6779e67df7e45bea859bbc34575024b
+  metadata.gz: 238c7db86824931e9ef8cae0ce7812102daeabcaaec094981b586c8b06664c5f
+  data.tar.gz: 26e4964113ad46e52312cfdd9225c006d8f5e034c31062cb5088512ef815f1b6
 SHA512:
-  metadata.gz: b4d5be9570636aa6aa6991f82a09ec359790d43e2ec305cb95276fe349a9f48ec0ec99f98a319ca71f96f9d22ae03612878838e445f4c6b593cd2a2d5dc629df
-  data.tar.gz: e3711674b834fab31ba5d2c003cd4049d17cc9455d15226599e5049bb5ee640075282d72931101b0f349f85c38da87287a811bc0162ed41d66aaab9e51a1d03c
+  metadata.gz: 9c39e9fd9e4b8b2429ce11248002465f5dd8cee571e5717cc5893c4f35c55c4ff9d80755c2e6eeec81631a701afe7f960d1b7051fbbda252eaef164b777d4d3e
+  data.tar.gz: fd7f72d0b325a2ff208278a93c5d02b267f3ab3017eea979a8b25ffe6ef369dfa414dbeb4dba805d84bf00b4db34b881c8b6198909f829c39c51d446447e42a6

data/gaargh.gemspec

@@ -34,6 +34,8 @@ Gem::Specification.new do |spec|
 
   # Uncomment to register a new dependency of your gem
   spec.add_dependency "google-apis-iamcredentials_v1", "~> 0.17"
+  spec.add_dependency "signet", "~> 0.17"
+
 
   # For more information and examples about making a new gem, check out our
   # guide at: https://bundler.io/guides/creating_gem.html

data/lib/gaargh/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Gaargh
-  VERSION = "0.1.0"
+  VERSION = "0.1.3"
 end

data/lib/gaargh.rb

@@ -19,6 +19,7 @@ module Gaargh
   #
   # @param [String] service_account_email - the email of the service account to impersonate (e.g. 'my-service-account@my-project-id.iam.gserviceaccount.com')
   # @param [String] lifetime - the lifetime of the access token in seconds (default: 3600s)
+  # @param [Array] scopes - the scopes to be used with the access token (default: ['https://www.googleapis.com/auth/cloud-platform'])
   # @return [Signet::OAuth2::Client] client - the client to be used with GCP clients
   def self.impersonate_service_account(service_account_email: '', lifetime: '3600s', scopes: ['https://www.googleapis.com/auth/cloud-platform'])
     creds_service = Google::Apis::IamcredentialsV1::IAMCredentialsService.new
@@ -29,8 +30,16 @@ module Gaargh
         lifetime: lifetime,
         scope: ['https://www.googleapis.com/auth/cloud-platform']
     )
+    # The resource name of the service account
+    service_account_resourec_name = "projects/-/serviceAccounts/#{service_account_email}"
+
+    begin
+      impersonated_account = creds_service.generate_service_account_access_token(service_account_resourec_name, generate_token_request)
+    rescue Google::Apis::ClientError => e
+      logger.error("Service account #{service_account_resourec_name} does not exist or you do not have permissions.")
+      raise e
+    end
 
-    impersonated_account = creds_service.generate_service_account_access_token("projects/-/serviceAccounts/#{service_account_email}", generate_token_request)
     client = Signet::OAuth2::Client.new
     client.access_token = impersonated_account.access_token
     return client
@@ -53,7 +62,7 @@ module Gaargh
       data = JSON.parse(response.body)
       expiration_time = Time.at(data['exp'].to_i)
       logger.info("Token expires at: #{expiration_time}")
-      pp data
+      logger.debug("token_info: #{data}")
       token_info = {
         token_data: data,
         token_expiration_time: expiration_time
@@ -65,7 +74,7 @@ module Gaargh
         response_code: response.code,
         response_body: response.body
       }
-      logger.info("Error retrieving token information: response.code: #{response.code}, response.body: #{response.body}")
+      logger.error("Error retrieving token information: response.code: #{response.code}, response.body: #{response.body}")
       return error_hash
     end
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: gaargh
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.3
 platform: ruby
 authors:
 - ml
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2023-07-13 00:00:00.000000000 Z
+date: 2023-08-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-apis-iamcredentials_v1
@@ -24,6 +24,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.17'
+- !ruby/object:Gem::Dependency
+  name: signet
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.17'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.17'
 description: GCP account impersonation helper.
 email:
 executables: []