kubes 0.6.4 → 0.6.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ce0d27f928a17e1013e97242990213cd4b375aee110dc14d3effc9aa8df2d490
-  data.tar.gz: 983312b9f64da2641ec8286dc76b9e7582dac9a575f77222ab4e9f9a145d26dd
+  metadata.gz: a5e335602466257bfe7751577e3544f5fcdf73e221e5791fd142275295eea548
+  data.tar.gz: 9172b806b49193341a4399adfd5c9372b1a02437f6bbd3395632a2c81ddebac0
 SHA512:
-  metadata.gz: 36dc2af17c87d9c58eca05f8f63848f57d95cccdfcd51894ddb467c7424c7eefade4aed9133c871f400f05997143d1f537aeb38c1d8288815ab05558f25ae31c
-  data.tar.gz: 3ed8687d0f1af629a7645a002536e7a187057ea2da504e52fb3227da933b4a0c98db8ad0f1170a2a720248cbe517f7206ad8941299467695772d5fca289c1160
+  metadata.gz: 83a7bc9cc35989a17b2960a7a931295d767f2454006eb696b476fed193a7973066a51a4f0e7309bea99b1fdebca71482ee646ab122820c6ae9e5570edb5cc367
+  data.tar.gz: d7baee331717cdab66b8dbf028c97fbc9c3e973a87a9497fdeccd5f1195a8af06193586b8075f4b29ea94910b7d55c12d35d07234391596c76be83da1081e294

data/CHANGELOG.md

@@ -3,6 +3,9 @@
 All notable changes to this project will be documented in this file.
 This project *loosely tries* to adhere to [Semantic Versioning](http://semver.org/), even before v1.0.
 
+## [0.6.5] - 2020-11-12
+- [#39](https://github.com/boltops-tools/kubes/pull/39) google secrets fetcher option
+
 ## [0.6.4] - 2020-11-11
 - [#38](https://github.com/boltops-tools/kubes/pull/38) fix auto auth for docker login to registry, docs for secret base64, update dependencies
 

data/docs/_docs/helpers/aws/secrets.md

@@ -55,7 +55,7 @@ By default, the values are automatically base64 encoded. You can change the defa
 
 ```ruby
 KubesAws.configure do |config|
-  config.base64_secrets = false
+  config.secrets.base64 = false
 end
 ```
 

data/docs/_docs/helpers/google.md

@@ -14,4 +14,22 @@ List of Google helpers:
 * By default, `KubeGoogle.logger = Kubes.logger`. This means, you can set `logger.level = "debug"` in `.kubes/config.rb` to see more details.
 * The `gcloud` cli is used to create IAM roles. So `gcloud` is required.
 * Note: Would like to use the google sdk, but it wasn't obvious how to do so. PRs are welcomed.
-* The Google helpers are provided by the [boltops-tools/kubes_google](https://github.com/boltops-tools/kubes_google) library.
+* The Google helpers are provided by the [boltops-tools/kubes_google](https://github.com/boltops-tools/kubes_google) library.
+
+## Authentication
+
+Most of the Google helpers use the SDK to call the Google Cloud API. As such, it needs to be authenticated.  You can do this by setting the `GOOGLE_APPLICATION_CREDENTIALS` environment variable point to the path with a service account credentials file. IE:
+
+.bash_profile
+
+    export GOOGLE_APPLICATION_CREDENTIALS=~/.gcp/service-account.json
+
+If you would like to use a user IAM credentials instead of a service account. You can also run use [application-default login](https://cloud.google.com/sdk/gcloud/reference/auth/application-default/login). Example:
+
+    gcloud auth application-default login
+
+This generates an Application Default Credentials at `.config/gcloud/application_default_credentials.json`. Note, make sure that `GOOGLE_APPLICATION_CREDENTIALS` is not set or else the `application_default_credentials.json` will not be used.  Also, the google sdk prints a warning to use a service account instead. You can suppress that warning with this:
+
+.bash_profile
+
+    export GOOGLE_AUTH_SUPPRESS_CREDENTIALS_WARNINGS=1

data/docs/_docs/helpers/google/gke.md

@@ -10,7 +10,7 @@ GKE Private Clusters whitelist and only allow authorized IPs to communicate with
 
 ## Setup
 
-To enable the GKE IP whitelisting feature, it's a single line:
+To enable the GKE IP whitelisting feature, it's a few simple configurations:
 
 .kubes/config/env/dev.rb
 
@@ -58,7 +58,7 @@ steps:
   - 'GOOGLE_PROJECT=$PROJECT_ID' # .kubes/config.rb: config.repo
   - 'KUBES_ENV=$_KUBES_ENV'
   - 'KUBES_EXTRA=$_KUBES_EXTRA'
-  - 'KUBES_REPO_AUTH=0'
+  - 'KUBES_REPO_AUTO_AUTH=0'
 
 substitutions:
   _KUBES_ENV: dev
@@ -67,7 +67,7 @@ options:
     substitution_option: 'ALLOW_LOOSE'
 ```
 
-Make sure to replace the substitutions with your own values. IE: _GCP_REGION, _GKE_CLUSTER, _KUBES_ENV, etc.
+Make sure to replace the substitutions with your own values. IE: _KUBES_ENV, etc.
 
 ## Google CloudBuild IAM Permissions
 

data/docs/_docs/helpers/google/secrets.md

@@ -63,7 +63,7 @@ By default, the values are automatically base64 encoded. You can change the defa
 
 ```ruby
 KubesGoogle.configure do |config|
-  config.base64_secrets = true
+  config.secrets.base64 = true
 end
 ```
 
@@ -77,3 +77,19 @@ google_secret("demo-#{Kubes.env}-PASS", base64: false)
 ```
 
 {% include helpers/base64.md %}
+
+## Fetcher Strategy
+
+Some systems configured with a VPN seem to have issues with the Google secrets SDK. You may see an error:
+
+    Handshake failed with fatal error SSL_ERROR_SSL: error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER.
+
+As a workaround to this error, you can use the `gcloud` instead of the default `sdk` fetcher strategy. To configure it:
+
+.kubes/config.rb
+
+```ruby
+KubesGoogle.configure do |config|
+  config.secrets.fetcher = "gcloud"
+end
+```

data/docs/_docs/plugins/aws.md

@@ -8,10 +8,14 @@ The AWS Kubes Plugin adds support helpers like `aws_secret`. You can configure i
 
 ```ruby
 KubesAws.configure do |config|
-  config.base64_secrets = false
+  config.secrets.base64 = false
 end
 ```
 
+## Options Reference Table
+
+Here's a table with the options:
+
 Name | Description | Default
 ---|---|---
-base64_secrets | Whether or not to automatically base64 encoded values returned by the `aws_secret` helper. | true
+secrets.base64 | Whether or not to automatically base64 encoded values returned by the `aws_secret` helper. | true

data/docs/_docs/plugins/google.md

@@ -8,11 +8,15 @@ The Google Kubes Plugin adds support helpers like `google_secret`. You can confi
 
 ```ruby
 KubesGoogle.configure do |config|
-  config.base64_secrets = true
+  config.secrets.base64 = true
 end
 ```
 
+## Options Reference Table
+
+Here's a table with the options:
+
 Name | Description | Default
 ---|---|---
-base64_secrets | Whether or not to automatically base64 encoded values returned by the `google_secret` helper. | true
+secrets.base64 | Whether or not to automatically base64 encoded values returned by the `google_secret` helper. | true
 {% include plugins/gke-config.md %}

data/docs/_docs/vs/custom.md

@@ -4,7 +4,7 @@ nav_text: Custom Solutions
 categories: vs
 ---
 
-Kubernetes provide a great platform to run and manage Docker containers. The `kubectl` command how you usually interact with a Kubernetes cluster.  It does its job well and is quite a powerful tool.
+Kubernetes provides a great platform to run and manage Docker containers. The `kubectl` command is usually how you interact with a Kubernetes cluster.  It does its job well and is quite a powerful tool.
 
 {% include vs/article.md %}
 
@@ -51,7 +51,7 @@ We've duplicated `service.yaml` and `deployment.yaml`, though. Instead, it'll be
 
 ## PreBuilt Docker Image
 
-Additionally, the Docker image is expected to be prebuilt. Because you must first build the Docker image, folks will usually write bash script that perform these additional steps and then glue things together.
+Additionally, the Docker image is expected to be prebuilt. Because you must first build the Docker image, folks will usually write bash script that performs these additional steps and then glue things together.
 
 ## Kubernetes Resources Galore
 
@@ -82,7 +82,7 @@ The same code is used to create different environments. Kubes achieves this with
 
 ## Hooks
 
-Kubes support a variety of hooks run scripts at any part of the `kubectl` commands. This allows you customize and add app-specific logic needed. Example:
+Kubes support a variety of hooks run scripts at any part of the `kubectl` commands. This allows you to customize and add app-specific logic needed. Example:
 
 .kubes/config/hooks/kubectl.rb
 

data/docs/_includes/variables/generator.md

@@ -9,4 +9,15 @@ To help you get started quickly, you can generate starter variable code.
 
 ```ruby
 @example = "dev-value"
-```
+```
+
+To create the prod variables, set `KUBES_ENV=prod`.
+
+    $ KUBES_ENV=prod kubes new variable
+          create  .kubes/variables/prod.rb
+
+.kubes/variables/prod.rb
+
+```ruby
+@example = "prod-value"
+```

data/lib/kubes/version.rb

@@ -1,3 +1,3 @@
 module Kubes
-  VERSION = "0.6.4"
+  VERSION = "0.6.5"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: kubes
 version: !ruby/object:Gem::Version
-  version: 0.6.4
+  version: 0.6.5
 platform: ruby
 authors:
 - Tung Nguyen
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-11-11 00:00:00.000000000 Z
+date: 2020-11-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport