hako-vault 0.1.1 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 4ab8f9cf0880782503565e24819fe1ba10a0514c
-  data.tar.gz: 116f4a68bc5e8195d36d96ad0b61b99ac9dc364d
+  metadata.gz: d80f0c86dda0790aa97a2a120a06b8c2fed2187f
+  data.tar.gz: c17f73cb5751c60a39ceab5eb732f1994a34b663
 SHA512:
-  metadata.gz: 88a1f61545a4fb1fb7f4ba059ca2afc3536b373e3d760b40edca4423a1c3ea0c352d4dec3fb011a9b03bf2cbe542b5c3c3b476e64f419614c19e464f6f8160a2
-  data.tar.gz: 53c6bc27a8eced1ef346e394d9e6f8e5a1a1843e76392288fbeb13b65507461558351e4e3b8225b3dfc7321050999901c7973ff56b32053d2a42f966472aaad6
+  metadata.gz: a08275013f565ed8232bec84922c526c85a142b1fef354db58918e4a6d81b73ad87ab568e8c4075b4d5d324d6beb2fb3e51aca959e13d08be08f3515ba3ca9b4
+  data.tar.gz: 46c980de8e5a37ea3cde564747e15e80420783818e198d56fbbb6b6dc0bd8fb19e4c70e9d135f8d1108bdf66083c936de27fb361c280cceb49c47834c44320c5

data/hako-vault.gemspec

@@ -5,7 +5,7 @@ $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
 
 Gem::Specification.new do |spec|
   spec.name          = 'hako-vault'
-  spec.version       = '0.1.1'
+  spec.version       = '0.2.0'
   spec.authors       = ['Kohei Suzuki']
   spec.email         = ['eagletmt@gmail.com']
 

data/lib/hako/env_providers/vault.rb

@@ -49,6 +49,43 @@ module Hako
         end
         env
       end
+
+      # @return [Boolean]
+      def can_ask_keys?
+        true
+      end
+
+      # @param [Array<String>] variables
+      # @return [Array<String>]
+      def ask_keys(variables)
+        keys = []
+        @http.start do
+          parent_directories_for(variables).each do |parent_dir|
+            req = Net::HTTP::Get.new("/v1/secret/#{@directory}/#{parent_dir}?list=true")
+            req['X-Vault-Token'] = ENV['VAULT_TOKEN']
+            res = @http.request(req)
+            case res.code
+            when '200'
+              keys += JSON.parse(res.body)['data']['keys'].map { |key| "#{parent_dir}#{key}" }
+            when '404'
+              # Ignore
+            else
+              raise Error.new("Vault HTTP Error: #{res.code}: #{res.body}")
+            end
+          end
+        end
+        keys.select { |key| variables.include?(key) }
+      end
+
+      # @param [Array<String>] variables
+      # @return [Array<String>]
+      def parent_directories_for(variables)
+        # XXX: URI module cannot join relative URIs
+        base_uri = URI.parse("https://dummy/")
+        variables.map do |variable|
+          (base_uri + variable + '.').request_uri.sub(%r{\A/}, '')
+        end.uniq
+      end
     end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: hako-vault
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.2.0
 platform: ruby
 authors:
 - Kohei Suzuki
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-01-16 00:00:00.000000000 Z
+date: 2017-02-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: hako
@@ -104,7 +104,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.8
+rubygems_version: 2.6.10
 signing_key: 
 specification_version: 4
 summary: Provide variables from Vault to hako