google_cloud_env_secrets 0.1.3 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4ee7773da01382b043a980f90375c8733c9d41b2c1a73ebc8d6c5c1eef11cec1
-  data.tar.gz: 6f746927ed45e047ac21d1bb84395a1e67b0d94532e4453a33ef3e3fc4f73da9
+  metadata.gz: cf3d77b020c1903519351fb8f207f5f10f1d8df9841fd0fef85a48293cc53df5
+  data.tar.gz: c076fe09aaeceee9298c32260938179537bd53782cbd3138bcaa9ed56996a2b2
 SHA512:
-  metadata.gz: 8e5d309de642723cf494de58304f26cf31d010de89a884409781349ad98ab8f1befa1bdd6cc86096ea95fd4b596568390bae363cbd530281a251fac9069f0760
-  data.tar.gz: 7bf7c6e95b485544b0b68f83177a3bf466facc2c6b1b82a93f28aedaf7ccd2234eb4d679c3a0cb3e24e1443cd2ade86069d650eae3a57aa86934639a061db417
+  metadata.gz: 26dd2b920d1847a9f527226afafdcb35645009da8930dc8d33f71faeceff49ba0816174b896d1dbbacabe434a0abd118c2a47a1fe7dc493bff9c364f8e53eaeb
+  data.tar.gz: 92fb6cf48c62971bad44b425166b64ba75a5992b5e41756095bb08c529c7a388df7f6f6625a4cf47ba7841ae3857ab76346975b86c46729614ec441ad1731933

data/README.md

@@ -28,7 +28,7 @@ Configure this gem with environment vars:
 | `GOOGLE_APPLICATION_CREDENTIALS` | Manually set path to Google Application Credentials.               |
 | `GOOGLE_PROJECT`                 | Manually set the Google project. Automatically detected otherwise. |
 | `GOOGLE_SECRETS_PREFIX`          | Only load secrets that start with prefix.                          |
-| `GOOGLE_SECRETS_FORCE`           | Replace existing ENV vars with secret's value. Default `true`.     |
+| `GOOGLE_SECRETS_OVERLOAD`        | Replace existing ENV vars with secret's value. Default `true`.     |
 
 Google Secrets are available after the [before_configuration hook](https://guides.rubyonrails.org/configuring.html#initialization-events).
 You can call `GoogleCloudEnvSecrets.load` if you need the ENV secrets sooner than that.

data/lib/google_cloud_env_secrets/config.rb

@@ -1,14 +1,16 @@
+require "json"
+
 module GoogleCloudEnvSecrets
   class Configuration
     attr_accessor :project
     attr_accessor :credentials
     attr_accessor :cache_secrets
     attr_accessor :prefix
-    attr_accessor :force
+    attr_accessor :overload
 
     def initialize
       @cache_secrets = true
-      @force = true
+      @overload = true
     end
   end
 
@@ -20,4 +22,11 @@ module GoogleCloudEnvSecrets
     self.configuration ||= Configuration.new
     yield(configuration)
   end
+
+  def self.parse_project_from_credentials(credentials)
+    j = JSON.load(File.open(credentials))
+    j["project_id"]
+  rescue
+    nil
+  end
 end

data/lib/google_cloud_env_secrets/railtie.rb

@@ -5,21 +5,25 @@ module GoogleCloudEnvSecrets
     config.before_configuration do
       GoogleCloudEnvSecrets.load
     end
+
+    rake_tasks do
+      load "tasks/google_cloud_env_secrets_tasks.rake"
+    end
   end
 
   # load Google Secrets into ENV
   def self.load
     GoogleCloudEnvSecrets.configure do |config|
       config.credentials = ENV["GOOGLE_APPLICATION_CREDENTIALS"] || nil
-      config.project = ENV["GOOGLE_PROJECT"] || Google::Cloud.env.project_id
+      config.project = ENV["GOOGLE_PROJECT"] || GoogleCloudEnvSecrets.parse_project_from_credentials(config.credentials) || Google::Cloud.env.project_id
       config.prefix = ENV["GOOGLE_SECRETS_PREFIX"] || nil
 
-      if ENV.has_key?("GOOGLE_SECRETS_FORCE")
-        config.force = ENV["GOOGLE_SECRETS_FORCE"]&.to_s&.downcase == "true"
+      if ENV.has_key?("GOOGLE_SECRETS_OVERLOAD")
+        config.overload = ENV["GOOGLE_SECRETS_OVERLOAD"]&.to_s&.downcase == "true"
       end
     end
 
     secrets = GoogleCloudEnvSecrets.all
-    GoogleCloudEnvSecrets.inject_env!(secrets, GoogleCloudEnvSecrets.configuration.force)
+    GoogleCloudEnvSecrets.inject_env!(secrets, GoogleCloudEnvSecrets.configuration.overload)
   end
 end

data/lib/google_cloud_env_secrets/secrets.rb

@@ -51,10 +51,14 @@ module GoogleCloudEnvSecrets
     self.all[name.to_s]
   end
 
-  def self.inject_env!(secrets = {}, force = true, env = ENV)
+  def self.exists?(name)
+    self.all.has_key?(name.to_s)
+  end
+
+  def self.inject_env!(secrets = {}, overload = true, env = ENV)
     secrets.each do |name, value|
       name = name.to_s
-      if force
+      if overload
         env[name] = value
       else
         env[name] ||= value

data/lib/google_cloud_env_secrets/version.rb

@@ -1,3 +1,3 @@
 module GoogleCloudEnvSecrets
-  VERSION = "0.1.3"
+  VERSION = "1.0.0"
 end

data/lib/tasks/google_cloud_env_secrets_tasks.rake

@@ -1,5 +1,9 @@
 desc "Fetch Google Cloud Secret"
 task :google_cloud_secret do
-  name = ARGV[1]
-  puts GoogleCloudEnvSecrets.find(name)
+  name = ENV["NAME"].strip
+
+  fail "#{name} not found" unless GoogleCloudEnvSecrets.exists?(name)
+
+  $stdout.sync = true
+  print GoogleCloudEnvSecrets.find(name)
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google_cloud_env_secrets
 version: !ruby/object:Gem::Version
-  version: 0.1.3
+  version: 1.0.0
 platform: ruby
 authors:
 - Matthias Kadenbach