hiera-vault 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 1c933fc24a5577d1995fbf580c2ac0962e43209a
+  data.tar.gz: dd4a9674fc7a9a2c6ad12b09ffc5f337abaccf8f
+SHA512:
+  metadata.gz: 9592032d96dc0071c6669a6647f6db148eec193f07ce099ad7a815f2e361dfaa02b4f50af1bfee8a7540e96a7d88ecb3de0148f59779f185c256698f5c805b0a
+  data.tar.gz: e03475798b24dd14c8837a2fe20e1b2f5376aa37dd2592a6e521bacf0635935ed45979ddff9c5523a4dfbca1ebd4e933bf9d0e4680a7fcb17415b285fb6e854e

data/lib/hiera/backend/vault_backend.rb

@@ -0,0 +1,37 @@
+# Vault backend for Hiera
+class Hiera
+  module Backend
+    class Vault_backend
+
+      def initialize()
+        require 'json'
+        require 'vault'
+
+        @config = Config[:vault]
+        @vault = Vault::Client.new(address: @config[:addr], token: @config[:token])
+        Hiera.debug("[hiera-vault] Client configured to connect to #{@vault.address}")
+      end
+
+      def lookup(key, scope, order_override, resolution_type)
+        begin
+          secret = @vault.logical.read(key)
+          Hiera.debug("[hiera-vault] Read secret: #{key}")
+
+        rescue Vault::HTTPConnectionError
+          Hiera.warn("[hiera-vault] Could not connect to read secret: #{key}")
+        rescue Vault::HTTPError => e
+          Hiera.warn("[hiera-vault] Could not read secret #{key}: #{e.errors.join("\n").rstrip}")
+        end
+
+        return nil if secret.nil?
+
+        # Turn secret's hash keys into strings
+        data = secret.data.inject({}) { |h, (k, v)| h[k.to_s] = v; h }
+        answer = Backend.parse_answer(data, scope)
+
+        return nil unless answer.kind_of? Hash
+        return answer
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,78 @@
+--- !ruby/object:Gem::Specification
+name: hiera-vault
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Jonathan Sokolowski
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-06-04 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: vault
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.1.3
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.1.3
+description: Hiera backend for looking up secrets stored in Vault
+email: jonathan.sokolowski@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/hiera/backend/vault_backend.rb
+homepage: http://github.com/jsok/hiera-vault
+licenses:
+- Apache-2.0
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.4.5
+signing_key: 
+specification_version: 4
+summary: Module for using vault as a hiera backend
+test_files: []