hekate 0.1.0.pre10 → 0.1.0.pre11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 5e421cf40f19f3a6b58e2de1433c8961f8b65070
-  data.tar.gz: 22512f20df4ab3c7c89ae15c3237cbf3599261b4
+  metadata.gz: 0d5fc4f9a9438fcd1d5b3b00d52813b5a90c906d
+  data.tar.gz: 1dc957f9854963f89177b85ccda292775e64c7a7
 SHA512:
-  metadata.gz: da498c3707e99df15c5fecf3dca7151d323ee471454ff23412f5b7a119f69730033df9d8d8e237a6b0cc1dc5658d2cdee4fffdace5a40e7e2ca8b90604efd997
-  data.tar.gz: 2680c8a1e65ba867b3a462a82b1ee17f8851eb3b0da22ab9f1a57c7037b3d3cf601be7ed336ab1c933e7b9931f37a16eb20bb3dd91cdf134154fc7ad325834cf
+  metadata.gz: a7d6f64a8316dffec60080925e4fafdea8eb09a395219289d9e694893ea3420b73dc28d6cba4e7303a1fa8e89edd80eba2b9da55306b789059d15fc64ddebf5f
+  data.tar.gz: 720918abe4cade9ce47816afea156c4aae3cf90ece89842d1ec2e949df35a83048e96aa71ee29ae3e150d61bdaf9e1fc5e761e1615fbf8dd6e6486d6c0727a04

data/.circleci/config.yml

@@ -0,0 +1,55 @@
+# Ruby CircleCI 2.0 configuration file
+#
+# Check https://circleci.com/docs/2.0/language-ruby/ for more details
+#
+version: 2
+jobs:
+  build:
+    docker:
+      # specify the version you desire here
+       - image: circleci/ruby:2.3.4-node-browsers
+      
+      # Specify service dependencies here if necessary
+      # CircleCI maintains a library of pre-built images
+      # documented at https://circleci.com/docs/2.0/circleci-images/
+      # - image: circleci/postgres:9.4
+
+    working_directory: ~/repo
+
+    steps:
+      - checkout
+
+      # Download and cache dependencies
+      - restore_cache:
+          keys:
+          - v1-dependencies-{{ checksum "Gemfile.lock" }}
+          # fallback to using the latest cache if no exact match is found
+          - v1-dependencies-
+
+      - run:
+          name: install dependencies
+          command: |
+            bundle install --jobs=4 --retry=3 --path vendor/bundle
+
+      - save_cache:
+          paths:
+            - ./venv
+          key: v1-dependencies-{{ checksum "Gemfile.lock" }}
+
+      # run tests!
+      - run:
+          name: run tests
+          command: |
+            mkdir /tmp/test-results
+            
+            bundle exec rspec --format progress \
+                            --format RspecJunitFormatter \
+                            --out /tmp/test-results/rspec.xml \
+                            --format progress
+
+      # collect reports
+      - store_test_results:
+          path: /tmp/test-results
+      - store_artifacts:
+          path: /tmp/test-results
+          destination: test-results

data/Gemfile.lock

@@ -1,10 +1,10 @@
 PATH
   remote: .
   specs:
-    hekate (0.1.0.10)
+    hekate (0.1.0.pre10)
       aws-sdk (~> 2.9, >= 2.9.0)
       commander (~> 4.4, >= 4.4.0)
-      dotenv
+      dotenv (>= 2.2.1, >= 2.2)
       ec2-metadata (~> 0.2, >= 0.2.0)
       rails (~> 4)
       railties (~> 4.2, >= 4.2.0)
@@ -49,21 +49,26 @@ GEM
     addressable (2.5.1)
       public_suffix (~> 2.0, >= 2.0.2)
     arel (6.0.4)
-    aws-sdk (2.10.21)
-      aws-sdk-resources (= 2.10.21)
-    aws-sdk-core (2.10.21)
+    aws-sdk (2.10.23)
+      aws-sdk-resources (= 2.10.23)
+    aws-sdk-core (2.10.23)
       aws-sigv4 (~> 1.0)
       jmespath (~> 1.0)
-    aws-sdk-resources (2.10.21)
-      aws-sdk-core (= 2.10.21)
+    aws-sdk-resources (2.10.23)
+      aws-sdk-core (= 2.10.23)
     aws-sigv4 (1.0.1)
     builder (3.2.3)
+    codecov (0.1.10)
+      json
+      simplecov
+      url
     commander (4.4.3)
       highline (~> 1.7.2)
     concurrent-ruby (1.0.5)
     crack (0.4.3)
       safe_yaml (~> 1.0.0)
     diff-lcs (1.3)
+    docile (1.1.5)
     dotenv (2.2.1)
     ec2-metadata (0.2.2)
     erubis (2.7.0)
@@ -73,6 +78,7 @@ GEM
     highline (1.7.8)
     i18n (0.8.6)
     jmespath (1.3.1)
+    json (2.1.0)
     loofah (2.0.3)
       nokogiri (>= 1.5.9)
     mail (2.6.6)
@@ -112,21 +118,28 @@ GEM
       activesupport (= 4.2.9)
       rake (>= 0.8.7)
       thor (>= 0.18.1, < 2.0)
-    rake (10.4.2)
-    rspec (3.5.0)
-      rspec-core (~> 3.5.0)
-      rspec-expectations (~> 3.5.0)
-      rspec-mocks (~> 3.5.0)
-    rspec-core (3.5.4)
-      rspec-support (~> 3.5.0)
-    rspec-expectations (3.5.0)
+    rake (10.5.0)
+    rspec (3.6.0)
+      rspec-core (~> 3.6.0)
+      rspec-expectations (~> 3.6.0)
+      rspec-mocks (~> 3.6.0)
+    rspec-core (3.6.0)
+      rspec-support (~> 3.6.0)
+    rspec-expectations (3.6.0)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.5.0)
-    rspec-mocks (3.5.0)
+      rspec-support (~> 3.6.0)
+    rspec-mocks (3.6.0)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.5.0)
-    rspec-support (3.5.0)
+      rspec-support (~> 3.6.0)
+    rspec-support (3.6.0)
+    rspec_junit_formatter (0.3.0)
+      rspec-core (>= 2, < 4, != 2.12.0)
     safe_yaml (1.0.4)
+    simplecov (0.14.1)
+      docile (~> 1.1.0)
+      json (>= 1.8, < 3)
+      simplecov-html (~> 0.10.0)
+    simplecov-html (0.10.1)
     sprockets (3.7.1)
       concurrent-ruby (~> 1.0)
       rack (> 1, < 3)
@@ -138,7 +151,7 @@ GEM
     thread_safe (0.3.6)
     tzinfo (1.2.3)
       thread_safe (~> 0.1)
-    vcr (3.0.3)
+    url (0.3.2)
     webmock (3.0.1)
       addressable (>= 2.3.6)
       crack (>= 0.3.2)
@@ -149,11 +162,12 @@ PLATFORMS
 
 DEPENDENCIES
   bundler (~> 1.15)
+  codecov (~> 0.1.0, ~> 0.1)
   hekate!
   rake (~> 10.0)
   rspec (~> 3.0)
-  vcr
-  webmock
+  rspec_junit_formatter (~> 0.3.0)
+  webmock (~> 3.0.0, ~> 3.0)
 
 BUNDLED WITH
    1.15.3

data/README.md

@@ -1,4 +1,9 @@
-# Hekate
+# [Hekate](http://www.ancient.eu/Hecate/)
+
+[![Gem Version](https://badge.fury.io/rb/hekate.svg)](https://badge.fury.io/rb/hekate)
+[![CircleCI](https://circleci.com/gh/krimsonkla/hekate.svg?style=svg)](https://circleci.com/gh/krimsonkla/hekate)
+[![codecov](https://codecov.io/gh/krimsonkla/hekate/branch/master/graph/badge.svg)](https://codecov.io/gh/krimsonkla/hekate)
+[![Dependency Status](https://gemnasium.com/badges/github.com/krimsonkla/hekate.svg)](https://gemnasium.com/github.com/krimsonkla/hekate)
 
 Hekate is a gem for encrypting, storing and consuming rails application secrets as Amazon SSM parameters
 
@@ -117,6 +122,9 @@ import - imports a .env formatted secrets file
 
 export - exports to a .env formatted secrets file
 
+### Working when offline
+In the event that you need to work offline hekate can fall back to using dotenv files. Offline mode is only available for development and test. Be sure to use `hekate export` to create the necessary files before going offline.
+
 ## Contributing
 
 Bug reports and pull requests are welcome on GitHub at https://github.com/jasonrisch/hekate. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the [Contributor Covenant](http://contributor-covenant.org) code of conduct.

data/codecov.yml

@@ -0,0 +1,3 @@
+codecov:
+  ci:
+    - CircleCI

data/hekate.gemspec

@@ -26,11 +26,12 @@ Gem::Specification.new do |spec|
   spec.add_runtime_dependency 'ec2-metadata', '~> 0.2', '>= 0.2.0'
   spec.add_runtime_dependency 'railties', '~> 4.2', '>= 4.2.0'
   spec.add_runtime_dependency 'rails', '~> 4'
-  spec.add_runtime_dependency 'dotenv', '~> 0'
+  spec.add_runtime_dependency 'dotenv', '>= 2.2', '>= 2.2.1'
 
   spec.add_development_dependency 'bundler', '~> 1.15'
+  spec.add_development_dependency 'codecov', '~> 0.1', '~> 0.1.0'
   spec.add_development_dependency 'rake', '~> 10.0'
   spec.add_development_dependency 'rspec', '~> 3.0'
-  spec.add_development_dependency 'webmock', '~>3.0.0'
-  spec.add_development_dependency 'vcr', '~>3.0.0'
+  spec.add_development_dependency 'rspec_junit_formatter', '~> 0.3.0'
+  spec.add_development_dependency 'webmock', '~> 3.0', '~> 3.0.0'
 end

data/lib/hekate.rb

@@ -1,4 +1,5 @@
 require 'rails'
+require 'hekate/aws'
 require 'hekate/version'
 require 'hekate/railtie'
 require 'hekate/engine'

data/lib/hekate/aws.rb

@@ -0,0 +1,98 @@
+require 'aws-sdk'
+
+module Hekate
+  class Aws
+    def initialize(region)
+      @region = region
+    end
+
+    def get_parameter(name)
+      parameters = ssm.get_parameters(
+        names: [name],
+        with_decryption: true
+      ).parameters
+
+      if parameters.to_a.empty?
+        puts "Could not find parameter #{parameter_key}"
+      else
+        parameters.first['value']
+      end
+    end
+
+    def list_parameters(environment)
+      get_app_env_parameters(environment)
+    end
+
+    def get_parameters(names)
+      ssm.get_parameters(
+        names: names,
+        with_decryption: true
+      ).parameters
+    end
+
+    def put_parameter(name, value)
+      ssm.put_parameter(name: name,
+                        value: value,
+                        type: 'SecureString',
+                        key_id: kms_key,
+                        overwrite: true)
+    end
+
+    def delete_parameter(name)
+      ssm.delete_parameter(name: name)
+    end
+
+    private
+
+    def kms
+      @kms ||= ::Aws::KMS::Client.new(region: @region)
+    end
+
+    def ssm
+      @ssm ||= ::Aws::SSM::Client.new(region: @region)
+    end
+
+    def kms_key
+      return @kms_key if @kms_key
+
+      alias_name = "alias/#{Hekate::Engine.application}_#{@environment}"
+
+      if kms_alias_exists? alias_name
+        key = kms.describe_key(key_id: alias_name).key_metadata
+      else
+        key = kms.create_key.key_metadata
+        kms.create_alias(
+          alias_name: alias_name,
+          target_key_id: key.key_id
+        )
+      end
+
+      key.key_id
+    end
+
+    def kms_alias_exists?(kms_alias)
+      aliases = kms.list_aliases.aliases.map(&:alias_name)
+      aliases.include? kms_alias
+    end
+
+    def get_app_env_parameters(env, parameters = [], next_token = nil)
+      query = {
+        filters: [
+          {
+            key: 'Name',
+            values: ["#{Hekate::Engine.application}.#{env}"]
+          }
+        ],
+        max_results: 50
+      }
+      query[:next_token] = next_token if next_token
+      response = ssm.describe_parameters(query)
+
+      parameters += response.parameters
+
+      parameters = get_app_env_parameters(env, parameters, response.next_token) if response.next_token
+
+      parameters
+    end
+  end
+end

data/lib/hekate/engine.rb

@@ -1,4 +1,3 @@
-require 'aws-sdk'
 require 'commander/user_interaction'
 require 'dotenv'
 require 'ec2_metadata'
@@ -35,14 +34,20 @@ module Hekate
         end
       end
 
+      def root
+        @root ||= Rails::Engine.find_root_with_flag('config.ru', File.dirname($PROGRAM_NAME))
+      end
+
       def dotenv_files
-        root = Rails::Engine.find_root_with_flag("config.ru", File.dirname($0))
-        [
+        files = [
           root.join(".env.#{Rails.env}.local"),
           (root.join('.env.local') unless Rails.env.test?),
           root.join(".env.#{Rails.env}"),
           root.join('.env')
-        ].compact
+        ].compact.select { |file| File.exist? file }
+
+        raise 'Could not find .env files while falling back to dotenv' if files.empty?
+        files
       end
     end
 
@@ -52,19 +57,20 @@ module Hekate
       Hekate::Engine.application = application
     end
 
+    def awsclient
+      @awsclient ||= Hekate::Aws.new(@region)
+    end
+
     def load_environment
       if Hekate::Engine.online?
         ['root', @environment].each do |env|
           parameter_key = "#{Hekate::Engine.application}.#{env}."
 
-          parameters = get_app_env_parameters(env)
+          parameters = awsclient.list_parameters(env)
           parameters = parameters.map(&:name)
 
           parameters.each_slice(10) do |slice|
-            result = ssm.get_parameters(
-              names: slice,
-              with_decryption: true
-            ).parameters
+            result = awsclient.get_parameters(slice)
 
             result.each do |parameter|
               parameter_name = parameter.name.gsub(parameter_key, '')
@@ -75,7 +81,7 @@ module Hekate
       elsif Rails.env.development? || Rails.env.test?
         Dotenv.load(*Hekate::Engine.dotenv_files)
       else
-        Fail 'Could not find an internet connection or .env files'
+        raise 'Could not connect to parameter store'
       end
     end
 
@@ -100,56 +106,38 @@ module Hekate
     end
 
     def put(key, value)
-      ssm.put_parameter(name: "#{Hekate::Engine.application}.#{@environment}.#{key}",
-                        value: value,
-                        type: 'SecureString',
-                        key_id: kms_key.key_id,
-                        overwrite: true)
+      parameter_key = "#{Hekate::Engine.application}.#{@environment}.#{key}"
+      awsclient.put_parameter(parameter_key, value)
     end
 
     def get(key)
       parameter_key = "#{Hekate::Engine.application}.#{@environment}.#{key}"
-      parameters = ssm.get_parameters(
-        names: [parameter_key],
-        with_decryption: true
-      ).parameters
-
-      if parameters.to_a.empty?
-        puts "Could not find parameter #{parameter_key}"
-      else
-        parameters.first['value']
-      end
+      awsclient.get_parameter(parameter_key)
     end
 
     def delete_all
-      parameters = get_app_env_parameters(@environment)
-      parameters = parameters.map(&:name)
+      parameters = awsclient.list_parameters(@environment).map(&:name)
       progress = Commander::UI::ProgressBar.new(parameters.length)
-      parameters.each_slice(10) do |slice|
-        slice.each do |parameter|
-          progress.increment
-          ssm.delete_parameter(name: parameter)
-        end
+      parameters.each do |parameter|
+        progress.increment
+        awsclient.delete_parameter(parameter)
       end
     end
 
     def delete(key)
-      ssm.delete_parameter(name: "#{Hekate::Engine.application}.#{@environment}.#{key}")
+      parameter_key = "#{Hekate::Engine.application}.#{@environment}.#{key}"
+      awsclient.delete_parameter(parameter_key)
     end
 
     def export(env_file)
       parameter_key = "#{Hekate::Engine.application}.#{@environment}."
 
-      parameters = get_app_env_parameters(@environment)
-      parameters = parameters.map(&:name)
+      parameters = awsclient.list_parameters(@environment).map(&:name)
 
       progress = Commander::UI::ProgressBar.new(parameters.length)
       open(env_file, 'w') do |file|
         parameters.each_slice(10) do |slice|
-          result = ssm.get_parameters(
-            names: slice,
-            with_decryption: true
-          ).parameters
+          result = awsclient.get_parameters(slice)
 
           result.each do |parameter|
             progress.increment
@@ -159,58 +147,5 @@ module Hekate
         end
       end
     end
-
-    private
-
-    def kms
-      @kms ||= Aws::KMS::Client.new(region: @region)
-    end
-
-    def ssm
-      @ssm ||= Aws::SSM::Client.new(region: @region)
-    end
-
-    def kms_key
-      return @kms_key if @kms_key
-
-      alias_name = "alias/#{Hekate::Engine.application}_#{@environment}"
-
-      if kms_alias_exists? alias_name
-        key = kms.describe_key(key_id: alias_name).key_metadata
-      else
-        key = kms.create_key.key_metadata
-        kms.create_alias(
-          alias_name: alias_name,
-          target_key_id: key.key_id
-        )
-      end
-
-      key
-    end
-
-    def kms_alias_exists?(kms_alias)
-      aliases = kms.list_aliases.aliases.map(&:alias_name)
-      aliases.include? kms_alias
-    end
-
-    def get_app_env_parameters(env, parameters = [], next_token = nil)
-      query = {
-        filters: [
-          {
-            key: 'Name',
-            values: ["#{Hekate::Engine.application}.#{env}"]
-          }
-        ],
-        max_results: 50
-      }
-      query[:next_token] = next_token if next_token
-      response = ssm.describe_parameters(query)
-
-      parameters += response.parameters
-
-      parameters = get_app_env_parameters(env, parameters, response.next_token) if response.next_token
-
-      parameters
-    end
   end
 end

data/lib/hekate/version.rb

@@ -1,3 +1,3 @@
 module Hekate
-  VERSION = '0.1.0.pre10'.freeze
+  VERSION = '0.1.0.pre11'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: hekate
 version: !ruby/object:Gem::Version
-  version: 0.1.0.pre10
+  version: 0.1.0.pre11
 platform: ruby
 authors:
 - jasonrisch
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-08-09 00:00:00.000000000 Z
+date: 2017-08-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk
@@ -108,16 +108,22 @@ dependencies:
   name: dotenv
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '2.2'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.2.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.2'
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 2.2.1
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -132,6 +138,26 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.15'
+- !ruby/object:Gem::Dependency
+  name: codecov
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.1.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.1.0
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -161,23 +187,26 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '3.0'
 - !ruby/object:Gem::Dependency
-  name: webmock
+  name: rspec_junit_formatter
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.0.0
+        version: 0.3.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.0.0
+        version: 0.3.0
 - !ruby/object:Gem::Dependency
-  name: vcr
+  name: webmock
   requirement: !ruby/object:Gem::Requirement
     requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
     - - "~>"
       - !ruby/object:Gem::Version
         version: 3.0.0
@@ -185,6 +214,9 @@ dependencies:
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
     - - "~>"
       - !ruby/object:Gem::Version
         version: 3.0.0
@@ -196,6 +228,7 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
+- ".circleci/config.yml"
 - ".gitignore"
 - ".idea/vcs.xml"
 - ".rspec"
@@ -208,6 +241,7 @@ files:
 - bin/console
 - bin/hekate
 - bin/setup
+- codecov.yml
 - docs/delete.md
 - docs/delete_all.md
 - docs/export.md
@@ -216,6 +250,7 @@ files:
 - docs/put.md
 - hekate.gemspec
 - lib/hekate.rb
+- lib/hekate/aws.rb
 - lib/hekate/engine.rb
 - lib/hekate/railtie.rb
 - lib/hekate/version.rb