hamburgerstore 0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 2a69fba01ef358225a501dfd1fdbf4da15d648a3
+  data.tar.gz: c0dc8be614f022483eb6a5c9c0c4cfc29f725d2e
+SHA512:
+  metadata.gz: 1e2fd5cd46850260f17fefe71029b9a8ce40e4a40806c1a20aebb8f5aee08e1bfe5eb57e1beeebf890c88b2ed9198e137395da48f7f3de26d259e4b6b5113f5b
+  data.tar.gz: 7582fbd1fe5c5a0973f36286482f00385e89f76733cfe8154f7093f5775fd447cb02e330fbe127fbf7e8be26e8dfbe35e60e5727970e9ee984d1daa74d3b24df

data/bin/hamburgerstore.rb

@@ -0,0 +1,52 @@
+#!/usr/bin/env ruby
+
+require 'hamburgerstore'
+require 'aws-sdk'
+require 'trollop'
+
+SUB_COMMANDS = %w(store retrieve)
+global_opts = Trollop.options do
+  opt :region, 'The region to look for the dynamodb in', default: 'us-east-1'
+  banner 'utility for storing and retrieving encrypted values
+  available commands:
+
+    store -- store a value in hamerburger store
+    retrieve -- retrieve a value from hambuger store
+
+  use --help with either command for more information.
+  '
+  stop_on SUB_COMMANDS
+end
+
+cmd = ARGV.shift
+cmd_opts =
+  case cmd
+  when 'store'
+    Trollop.options do
+      opt :identifier, 'the name of the key associated with the value', required: true, type: String
+      opt :keyname, 'the name of the key associated with the value', required: true, type: String
+      opt :value, 'the value to be inserted into the keystore (required for store)', required: true, type: String
+      opt :kmsid, 'the kms key id to use to encrypt the data (required for store)', required: true, type: String
+      opt :table, 'the name of the table to perform the lookup on', required: true, type: String
+    end
+  when 'retrieve'
+    Trollop.options do
+      opt :identifier, 'the name of the key associated with the value', required: true, type: String
+      opt :keyname, 'the name of the key associated with the value', required: true, type: String
+      opt :table, 'the name of the table to perform the lookup on', required: true, type: String
+    end
+  else
+    Trollop.die "usage: hamburgerstore.rb [store|retrieve] [parameters]"
+  end
+
+hamburger = HamburgerStore.new(table_name: cmd_opts[:table], key_id: cmd_opts[:kmsid], region: global_opts[:region])
+
+case cmd
+when 'store'
+  hamburger.store(cmd_opts[:identifier], cmd_opts[:keyname], cmd_opts[:value])
+when 'retrieve'
+  result = hamburger.retrieve(cmd_opts[:identifier], cmd_opts[:keyname])
+  puts result
+else
+  fail "unknown subcommand #{cmd}"
+end

data/lib/hamburgerstore.rb

@@ -0,0 +1,69 @@
+require 'aws-sdk-resources'
+require 'base64'
+
+# Data store for pipeline instance metadata. Nothing to do with hamburgers. Sorry.
+class HamburgerStore
+  def encrypt(value)
+    encrypted_value = @kms.encrypt(key_id: @key_id, plaintext: value).ciphertext_blob
+    Base64.encode64(encrypted_value)
+  end
+
+  def decrypt(value)
+    encrypted_value = Base64.decode64(value)
+    @kms.decrypt(ciphertext_blob: encrypted_value).plaintext
+  end
+
+  def check_kms(options)
+    # fail 'need to specify kms key_id parameter' if options[:key_id].nil?
+    @key_id = options[:key_id]
+    if options[:kms].nil?
+      fail 'need to specify region' if options[:region].nil?
+      @kms = Aws::KMS::Client.new region: options[:region]
+    else
+      @kms = options[:kms]
+    end
+  end
+
+  def check_dynamo(options)
+    if options[:dynamo].nil?
+      fail 'need to specify region' if options[:region].nil?
+      @ddb = Aws::DynamoDB::Resource.new region: options[:region]
+    else
+      @ddb = options[:dynamo]
+    end
+  end
+
+  def initialize(options = {})
+    check_kms(options)
+    check_dynamo(options)
+
+    fail 'need to specify table_name parameter' if options[:table_name].nil?
+    @table = @ddb.table(options[:table_name])
+  end
+
+  def store(identifer, key, value)
+    fail 'need to specify kms key_id parameter' if @key_id.nil?
+    item = @table.get_item(key: { 'hamburger' => identifer }).item
+    item = { 'hamburger' => identifer } if item.nil?
+    item[key] = encrypt(value)
+    @table.put_item(item: item, return_values: :ALL_OLD)
+  end
+
+  def retrieve(identifier, key)
+    item = @table.get_item(key: { 'hamburger' => identifier }).item
+    fail "no values for #{identifier}" if item.nil?
+    decrypt(item[key])
+  end
+
+  def retrieve_all(identifier)
+    encrypted_items = @table.get_item(key: { 'hamburger' => identifier }).item
+    hamburger = encrypted_items.delete('hamburger')
+    result = { 'hamburger' => hamburger }
+    encrypted_items.each_pair do |key, value|
+      result[key] = decrypt(value)
+    end
+    result
+  end
+end
+
+# store a set of parameters (?)

metadata

@@ -0,0 +1,84 @@
+--- !ruby/object:Gem::Specification
+name: hamburgerstore
+version: !ruby/object:Gem::Version
+  version: '0.1'
+platform: ruby
+authors:
+- Jonny Sywulak
+- Stelligent
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-09-28 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: aws-sdk
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.1'
+- !ruby/object:Gem::Dependency
+  name: trollop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.1.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.1.2
+description: Hambuger Store is an easy, lightweight way to store data about your pipeline
+  instances. As you go through your pipeline, you're going to produce a lot of information
+  that's relevant to your pipeline instance, and having to store that in a text file
+  or pass parameters between jobs can get very unwieldy very quickly. Hamburger Store
+  utilizes two AWS services (Dyanmo DB and Key Management Service) to provide an easy
+  way to securely store the data your pipeline needs, without the bother of having
+  to set it up yourself.
+email: jonny@stelligent.com
+executables:
+- hamburgerstore.rb
+extensions: []
+extra_rdoc_files: []
+files:
+- bin/hamburgerstore.rb
+- lib/hamburgerstore.rb
+homepage: http://www.stelligent.com
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+- lib
+- bin
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.2.2
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.4.8
+signing_key: 
+specification_version: 4
+summary: Data store for pipeline instance metadata. Nothing to do with hamburgers.
+  Sorry.
+test_files: []