hephaestus 0.7.2.5 → 0.7.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c7765d138fdb8d7567ed081a07b5445ac63ed443d157a0622a9976c8fbdb3d8d
-  data.tar.gz: aad9b84f65184358444a6230a102b65f851543c95e3e45c71e1234780d112b3f
+  metadata.gz: 91b531cccc87d3a9fcae1a7ea99e8f13ba90eae812714b6970a2f22ed8323044
+  data.tar.gz: 1a4834089b078d4cb8314184593f67abb7944b04fe5271b7a88110f46d9e6588
 SHA512:
-  metadata.gz: 49665bc3c14076f8b51bb2bb0716e5ee42f4ec86628a273e5c68e9c1a2c3c6dc1f1d25c82b59ec61a078df0cb4e43c1668e3bf71b7d0ead49a9d846ff5980b22
-  data.tar.gz: d922e000736affd17405f938395aecb86e843a152174e73f07d6f43180e57c0c11f95f45c252ef755ca6a0da9e5244298b164c5e341db39cadc2f1439ea178ce
+  metadata.gz: 495e0ed949252efb927737af75b3a72b676dfe1979ca019f334f375d1f499bdeadcd8105aa476315b2dd34c144e01696b17ccf9637bdbd9c2246be8b48bd0d00
+  data.tar.gz: 940b2bc510db04444eaea768b761f8895c9ddc505f9d043f383b6626adbc947122ae099f05a16043ea718aefbd8ba66270c6113d07a869760166de15398bb1bb

data/CHANGELOG.md

@@ -1,3 +1,11 @@
+# [v0.7.3.1] - 19-11-2024
+**Full Changelog**: https://github.com/yettoapp/hephaestus/compare/v0.7.3...v0.7.3.1
+# [v0.7.3] - 18-11-2024
+## What's Changed
+* Grab entire document of secrets by @gjtorikian in https://github.com/yettoapp/hephaestus/pull/41
+
+
+**Full Changelog**: https://github.com/yettoapp/hephaestus/compare/v0.7.2.5...v0.7.3
 # [v0.7.2.5] - 18-11-2024
 ## What's Changed
 * This can be empty by @gjtorikian in https://github.com/yettoapp/hephaestus/pull/39

data/config/initializers/environment.rb

@@ -13,7 +13,15 @@ def fetch_infra_secret(label:, default:)
   if productionish?
     op_read("op://Infra/Global Secrets/#{label}")
   else
-    ENV.fetch(label.to_s, default.is_a?(Pathname) ? default.read : default)
+    ENV.fetch(label, default.is_a?(Pathname) ? default.read : default)
+  end
+end
+
+def fetch_document_secret(document_secrets, label:, default:)
+  if productionish?
+    document_secrets[label]
+  else
+    ENV.fetch(label, default.is_a?(Pathname) ? default.read : default)
   end
 end
 
@@ -21,6 +29,13 @@ def op_read(label)
   %x(op read "#{label}").chomp
 end
 
+# technically, this gets every secret, including ones UNIQUE
+# to the platform, but we're not using those yet. feels "better"
+# to have the plugs manage those on their own
+def op_get_secrets(vault:, tag:)
+  %x(op item list --vault #{vault} --tags #{tag} --format json | op item get - --reveal --format=json)
+end
+
 def productionish?
   Rails.env.production? || Rails.env.staging?
 end
@@ -75,7 +90,12 @@ module Hephaestus
     "web.yetto.test"
   end
 
-  SLACK_LOG_URL = fetch_infra_secret(
+  # Every plug has these secrets; to reduce the amount of API calls to 1Password,
+  # we can grab one document that contains all the secrets we need
+  fetched_secrets = op_get_secrets(vault: "Plug-#{plug_name}", tag: ENV["RAILS_ENV"])
+
+  SLACK_LOG_URL = fetch_document_secret(
+    fetched_secrets,
     label: "SLACK_LOG_URL",
     default: "https://slack.com/the_log_room",
   )
@@ -83,8 +103,21 @@ module Hephaestus
   YETTO_API_URL = "#{YETTO_URL}/api"
   YETTO_REDIRECT_URL = productionish? ? "#{PROTOCOL}#{YETTO_URL}" : "#{PROTOCOL}127.0.0.1:3000"
 
-  # Every plug has these secrets
-  YETTO_PLUG_PEM = fetch_plug_env_secret(label: "YETTO_PLUG_PEM", default: Rails.root.join("test/fixtures/files/fake_pem_file/fake.pem"))
-  YETTO_SIGNING_SECRET = fetch_plug_env_secret(label: "YETTO_SIGNING_SECRET", default: "super-secret")
-  YETTO_PLUG_ID = fetch_plug_env_secret(label: "YETTO_PLUG_ID", default: "plug-id")
+  YETTO_PLUG_PEM = fetch_document_secret(
+    fetched_secrets,
+    label: "YETTO_PLUG_PEM",
+    default: Rails.root.join("test/fixtures/files/fake_pem_file/fake.pem"),
+  )
+
+  YETTO_SIGNING_SECRET = fetch_document_secret(
+    fetched_secrets,
+    label: "YETTO_SIGNING_SECRET",
+    default: "super-secret",
+  )
+
+  YETTO_PLUG_ID = fetch_document_secret(
+    fetched_secrets,
+    label: "YETTO_PLUG_ID",
+    default: "plug-id",
+  )
 end

data/lib/hephaestus/version.rb

@@ -2,7 +2,7 @@
 # frozen_string_literal: true
 
 module Hephaestus
-  VERSION = "0.7.2.5"
+  VERSION = "0.7.3.1"
   RAILS_VERSION = ">= 8.0"
   RUBY_VERSION = File
     .read("#{File.dirname(__FILE__)}/../../.ruby-version")

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: hephaestus
 version: !ruby/object:Gem::Version
-  version: 0.7.2.5
+  version: 0.7.3.1
 platform: ruby
 authors:
 - Garen Torikian
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-11-18 00:00:00.000000000 Z
+date: 2024-11-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bootsnap