jerakia-datasource-vault 0.1.0

checksums.yaml

@@ -0,0 +1,15 @@
+---
+!binary "U0hBMQ==":
+  metadata.gz: !binary |-
+    YmE3MTMwZWMwYzliNzYzY2FiYjRmMjRjMjE1MDk4ZjY4ZjRkN2VjMQ==
+  data.tar.gz: !binary |-
+    ZTEyOGMwZTcxOWVlNmMzYTdlN2E1ZWNjN2U0NzNjYjlkYjYzYWNlZg==
+SHA512:
+  metadata.gz: !binary |-
+    NmI3NWIxODY4MDk5Y2Q0OWU5NDA5ZTVkNDEzODI4ZDc4Nzc1MDU0NDVlYmU3
+    YmVhYWRhNjc4ZjdlYjE1ZjdjN2RhNmZkY2VkNTE5ZDNhMWY0OGJiYjQwZDUz
+    M2VjOTFkZGViYTM3Y2M2ZDUzY2FmMzA1YTQ1NGI1Mjg3ODVjN2E=
+  data.tar.gz: !binary |-
+    ODFmYjY1NmUwN2FhNmFlZmMxMGNlOTJjZGNiY2EzOTc3NWY1MGZmYWVkMDcz
+    NjQzN2E1MmIxYTcxYWZiMTg1YmNlZjEwZTUwN2FiM2FmOTJkYmFiZGE3ZWNl
+    ODc1NmJmMTYxNTRlYWFiODkwMWVjNDc0MTc3ZGZmZDkzZDhhOGY=

data/lib/jerakia/datasource/vault.rb

@@ -0,0 +1,76 @@
+require 'jerakia'
+require 'vault'
+
+class Jerakia
+  class Datasource
+    module Vault
+
+      def run
+
+        option :host,       type:  String, default: '127.0.0.1'
+        option :port,       type:  Integer, default: 8200
+        option :scheme,     type:  Symbol, default: :http
+        option :token,      type:  String
+        option :searchpath, type:  Array,  default:  [ 'secret' ]
+        option :field,      type:  Symbol, default:  lookup.request.key.to_sym
+        option :dig,        type:  [FalseClass, TrueClass], default: true
+        option :map_key,    type:  [FalseClass, TrueClass], default: false
+
+
+        addr = "#{options[:scheme].to_s}://#{options[:host]}:#{options[:port]}"
+
+        Jerakia.log.debug("[jerakia-vault]: Using address #{addr}")
+
+        begin
+          vault = ::Vault::Client.new
+          vault.configure do |conf|
+            conf.address = addr
+            conf.token   = options[:token] if options[:token]
+          end
+
+          sealed = vault.sys.seal_status.sealed?
+
+        rescue ::Vault::HTTPConnectionError => e
+          raise Jerakia::Error, "Cannot connect to vault server.  #{e.message}"
+        end
+
+        raise Jerakia::Error, "Connected to sealed vault" if sealed
+
+        hierarchy = options[:searchpath].map { |s|
+          [s, lookup.request.namespace ].flatten.join("/")
+        }
+
+        hierarchy.each do |level|
+
+          # Don't perform any more lookups if Jerakia reports that
+          # it doesn't want any more.
+          break unless response.want?
+
+          # If map_key option is set then we should append the lookup key to
+          # the search path
+          level << "/#{lookup.request.key}" if options[:map_key]
+
+          Jerakia.log.debug("[jerakia-vault]: looking up #{level}")
+
+          secret = vault.logical.read(level)
+
+          if secret.is_a?(::Vault::Secret)
+            Jerakia.log.debug("[jerakia-vault]: valid answer returned #{secret.data}")
+
+            # If dig is true then we should lookup the key from the hash
+            # response, if not then we just return the whole hash
+            #
+            if options[:dig]
+              if result = secret.data[options[:field]]
+                Jerakia.log.debug("[jerakia-vault]: found key #{lookup.request.key.to_sym}")
+                response.submit result
+              end
+            else
+              response.submit secret.data unless secret.data.empty?
+            end
+          end
+        end
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,84 @@
+--- !ruby/object:Gem::Specification
+name: jerakia-datasource-vault
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Craig Dunn
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2016-09-27 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: jerakia
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '1.1'
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 1.1.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '1.1'
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 1.1.0
+- !ruby/object:Gem::Dependency
+  name: vault
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '0.6'
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.6.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '0.6'
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.6.0
+description: Jerakia datasource plugin for vault
+email: craig@craigdunn.org
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/jerakia/datasource/vault.rb
+homepage: http://github.com/crayfishx/jerakia-vault
+licenses:
+- Apache 2.0
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.5
+signing_key: 
+specification_version: 4
+summary: Jerakia data source plugin for vault
+test_files: []