hiera-secrets-manager 0.1.3 → 0.1.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8ea0390ea826b9696478fe46bf2d245d985a190443e5e65c4301e1f2d7b2c757
-  data.tar.gz: c64a6ccefcdd2795f3027b93f6b1b1ba1f7ed566cfdeebb2553a5dd119bfe35d
+  metadata.gz: 8e6505dc6790800b73b011f92e66a036c4dab43b1bf1060c639eebb9bc7698fb
+  data.tar.gz: c8e277d0ab550c45c6d141108d38e6dced16c81174bd8d0e993f4a2f1d8f25e7
 SHA512:
-  metadata.gz: b8177666fc2e49e319c2663af9062072fd5a0bfe025440766438dfc6b283896acf8db6a4c5c97b548968758e758242cc8679ebc532bc079ac7440584b45d40c7
-  data.tar.gz: d5f5880cb140880b0e76ffe4a8e71ad722ad40ce8dd3ad63149bf15beee66267e87beddb014adb83cf0d44dae03d874bc1a2a258963a6567412bd9d040250f55
+  metadata.gz: 00ad1a3b9f93e1c7addb8a7f5e3ee85c15e419be4dfcc2961db763cdc64c51bfed21e8f72f570e02f73a85b0739d88b7183dc56b7f0aa8cc59c23593240f99ac
+  data.tar.gz: a705d68e5959729582b4818f5ed3a1a332518c9895a8ce59b928037fb83f4356e795d59379207735b9ebe07b4eb4496174eaa6c8d0551d5fff356359737a0049

data/lib/hiera/backend/secrets_manager_backend.rb

@@ -23,7 +23,9 @@ class Hiera
         key_to_query = format_key(key, scope, Config[:secrets_manager])
 
         begin
-          answer = @client.get_secret_value(secret_id: key_to_query)['secret_string']
+          response = @client.get_secret_value(secret_id: key_to_query)
+          answer = response['secret_string']
+          Hiera.debug("Retrieved Secret '#{key}' with version '#{response['version_id']}'")
         rescue Aws::SecretsManager::Errors::ResourceNotFoundException => error
           Hiera.debug("#{key} not found: #{error.message}")
         rescue StandardError => error

data/spec/secrets_manager_backend_spec.rb

@@ -117,6 +117,16 @@ class Hiera
           expect(answer).to eq(secret_string)
         end
 
+        it 'should log the secret version for successful lookup' do
+          @mock_client.stubs(:get_secret_value)
+                      .returns('version_id'    => 'secret_version_UUID',
+                               'secret_string' => 'i_am_a_secret')
+          Hiera
+              .expects(:debug)
+              .with("Retrieved Secret 'some_secret' with version 'secret_version_UUID'")
+          @backend.lookup('some_secret', @scope, nil, nil)
+        end
+
         it 'should not return a secret that does not exist' do
           nonexistent_secret = 'does_not_exist'
           prefixed_nonexistent_secret = 'production/does_not_exist'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: hiera-secrets-manager
 version: !ruby/object:Gem::Version
-  version: 0.1.3
+  version: 0.1.4
 platform: ruby
 authors:
 - Unruly
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-08-29 00:00:00.000000000 Z
+date: 2018-08-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-secretsmanager