hiera-gosecret 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: ac515df9e60bea11edf33c55fcee36c06de08d5a
+  data.tar.gz: 02ea8bfbc1746496a6fbf0a61e4c26dfbcf472c7
+SHA512:
+  metadata.gz: 01cffadb998359a3687d264bc283d9c661b05ff6ffdce5ffbd89a985b0788c89779184fb93fb84b0a72c2176ea0e22207fed1ccdd3d687bbd09d0c7f3e74714e
+  data.tar.gz: f24de8d0a33af9003221ddf71d58aa36a3febf906fcee83f7cca024da4072e3508f4aaf5d86f23a1409b57c44b1fa00e94bb5f420284cdf4c8923ace8d54ed08

data/LICENSE

@@ -0,0 +1,13 @@
+Copyright 2014 Cimpress
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

data/lib/hiera/backend/gosecret_backend.rb

@@ -0,0 +1,41 @@
+##
+## Look up key in other backends and return decrypted value if it's a gosecret
+## otherwise return nil
+##
+## :gosecret:keydir must be defined in config
+##
+require "base64"
+
+class Hiera
+  module Backend
+    class Gosecret_backend
+
+      @backends = nil
+
+      def initialize(cache=nil)
+        @backends = []
+        Config[:backends].each do |p|
+          next if p == "gosecret"
+          backend = p.slice(0,1).capitalize + p.slice(1..-1) + "_backend"
+          @backends.push(Hiera::Backend.const_get(backend).new()) if Hiera::Backend.const_defined?(backend)
+        end
+      end
+
+      def lookup(key, scope, order_override, resolution_type)
+        answer = nil
+        @backends.each do |b|
+          answer = b.lookup(key, scope, order_override, resolution_type)
+          break if answer != nil
+        end
+        decrypt(answer) if answer != nil and answer.is_a? String and answer.start_with? "[gosecret|"
+      end
+
+      GOSECRET_REGEX = /\[(gosecret(\|[^\]\|]*){4})\]/
+
+      def decrypt(value)
+        `gosecret -keystore=#{Config[:gosecret][:keydir]} -mode=decrypt -value="#{value}"`
+      end
+
+    end
+  end
+end

metadata

@@ -0,0 +1,47 @@
+--- !ruby/object:Gem::Specification
+name: hiera-gosecret
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Calvin Leung Huang
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-01-05 00:00:00.000000000 Z
+dependencies: []
+description: Hiera backend for decrypting gosecret-encrypted values
+email: 
+executables:
+- gosecret
+extensions: []
+extra_rdoc_files: []
+files:
+- LICENSE
+- bin/gosecret
+- lib/hiera/backend/gosecret_backend.rb
+homepage: http://github.com/Cimpress-MCP/hiera-gosecret
+licenses:
+- Apache 2.0
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.4.3
+signing_key: 
+specification_version: 4
+summary: Hiera gosecret backend
+test_files: []