kubes_aws 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 216f223229ec7e134e52a869f36507518c8376d768e3ae72ec5b557c7e1a31a7
-  data.tar.gz: 3fd50925b7906fe8c18f6b6e5c20065e895097aeaa57926093cf57ad1b445121
+  metadata.gz: 5cccbde70946470994346fb2e6464153312e4148518b46747137396682455f62
+  data.tar.gz: 93c32447c9c48b7feda8fc340022d763736d8d911942e3da10bb7291b8418875
 SHA512:
-  metadata.gz: ef86d09153f32cb9bd6ae87eb905ef4de3a07ffa86abae0ed039655ee2305bae228de3d895c7d77cc3112fa2166ffa25fa4632163bd17969034947b067d30446
-  data.tar.gz: 4437ae6bdc30d96afd98b0261893d52a4c195eeb135b14b8823d6024d601743f431eaefaccf787a90cb1600c6eedc405d59c8f94f958c76ef8109be39b6b6243
+  metadata.gz: 8a02025e42e55c83432dd8c3cc23d91078395474cb7ca363317ef4200df1a2747e24841ec02baaadbc6ee6808f39498edd40e9e5331ec4d34c00b87f16f94526
+  data.tar.gz: 8a9c098dfb2d3285cee9ef8145c71ce7a8a6d36a9e96470a2e6cffbe3e43b9c8f5edd7e3a877e80e7f1eb0d3029687f1ae621d0686e44bc4019ce91c11c7d5c0

data/CHANGELOG.md

@@ -3,5 +3,8 @@
 All notable changes to this project will be documented in this file.
 This project *loosely tries* to adhere to [Semantic Versioning](http://semver.org/), even before v1.0.
 
+## [0.2.0]
+- #1 helpers: aws_secret, aws_ssm
+
 ## [0.1.0]
 - Initial release.

data/kubes_aws.gemspec

@@ -23,6 +23,7 @@ Gem::Specification.new do |spec|
   spec.require_paths = ["lib"]
 
   spec.add_dependency "activesupport"
+  spec.add_dependency "aws-sdk-ecr"
   spec.add_dependency "aws-sdk-eks"
   spec.add_dependency "aws-sdk-iam"
   spec.add_dependency "aws-sdk-secretsmanager"

data/lib/kubes_aws.rb

@@ -18,3 +18,5 @@ module KubesAws
 
   extend self
 end
+
+Kubes::Plugin.register(KubesAws)

data/lib/kubes_aws/helpers.rb

@@ -0,0 +1,16 @@
+module KubesAws
+  module Helpers
+    extend Memoist
+    include Services
+
+    def aws_secret(name, options={})
+      fetcher = Secrets::Fetcher.new(options)
+      fetcher.fetch(name)
+    end
+
+    def aws_ssm(name, options={})
+      fetcher = SSM::Fetcher.new(options)
+      fetcher.fetch(name)
+    end
+  end
+end

data/lib/kubes_aws/iam_role.rb

@@ -5,7 +5,7 @@ require "json"
 module KubesAws
   class IamRole
     extend Memoist
-    include AwsServices
+    include Services
     include Logging
     include Prebaked
 

data/lib/kubes_aws/open_id.rb

@@ -5,7 +5,7 @@ require "openssl"
 module KubesAws
   class OpenId
     extend Memoist
-    include AwsServices
+    include Services
     include Logging
 
     def initialize(cluster)

data/lib/kubes_aws/secrets.rb

@@ -2,7 +2,7 @@ require "aws-sdk-secretsmanager"
 
 module KubesAws
   class Secrets
-    include AwsServices
+    include Services
 
     def initialize(upcase: false, base64: false, prefix: nil, filters: [])
       @upcase, @base64, @filters = upcase, base64, filters

data/lib/kubes_aws/secrets/fetcher.rb

@@ -0,0 +1,26 @@
+class KubesAws::Secrets
+  class Fetcher
+    include KubesAws::Logging
+    include KubesAws::Services
+
+    def initialize(options={})
+      @options = options
+      @base64 = options[:base64].nil? ? true : options[:base64]
+    end
+
+    def fetch(secret_id)
+      value = fetch_value(secret_id)
+      value = Base64.strict_encode64(value).strip if @base64
+      value
+    end
+
+    def fetch_value(secret_id)
+      secret_value = secrets.get_secret_value(secret_id: secret_id)
+      secret_value.secret_string
+    rescue Aws::SecretsManager::Errors::ResourceNotFoundException => e
+      logger.info "WARN: secret_id #{secret_id} not found".color(:yellow)
+      logger.info e.message
+      "NOT FOUND #{secret_id}" # simple string so Kubernetes YAML is valid
+    end
+  end
+end

data/lib/kubes_aws/{aws_services.rb → services.rb}

@@ -1,8 +1,10 @@
 require "aws-sdk-eks"
 require "aws-sdk-iam"
+require "aws-sdk-secretsmanager"
+require "aws-sdk-ssm"
 
 module KubesAws
-  module AwsServices
+  module Services
     extend Memoist
 
     def eks

data/lib/kubes_aws/ssm.rb

@@ -1,8 +1,6 @@
-require "aws-sdk-ssm"
-
 module KubesAws
   class SSM
-    include AwsServices
+    include Services
 
     def initialize(upcase: false, base64: false, prefix: nil, filters: [])
       @upcase, @base64, @filters = upcase, base64, filters

data/lib/kubes_aws/ssm/fetcher.rb

@@ -0,0 +1,26 @@
+class KubesAws::SSM
+  class Fetcher
+    include KubesAws::Logging
+    include KubesAws::Services
+
+    def initialize(options={})
+      @options = options
+      @base64 = options[:base64].nil? ? true : options[:base64]
+    end
+
+    def fetch(name)
+      value = fetch_value(name)
+      value = Base64.strict_encode64(value).strip if @base64
+      value
+    end
+
+    def fetch_value(name)
+      resp = ssm.get_parameter(name: name, with_decryption: true)
+      resp.parameter.value
+    rescue Aws::SSM::Errors::ParameterNotFound => e
+      logger.info "WARN: name #{name} not found".color(:yellow)
+      logger.info e.message
+      "NOT FOUND #{name}" # simple string so Kubernetes YAML is valid
+    end
+  end
+end

data/lib/kubes_aws/version.rb

@@ -1,3 +1,3 @@
 module KubesAws
-  VERSION = "0.1.0"
+  VERSION = "0.2.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: kubes_aws
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Tung Nguyen
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-10-28 00:00:00.000000000 Z
+date: 2020-11-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -24,6 +24,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: aws-sdk-ecr
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: aws-sdk-eks
   requirement: !ruby/object:Gem::Requirement
@@ -139,13 +153,16 @@ files:
 - kubes_aws.gemspec
 - lib/kubes_aws.rb
 - lib/kubes_aws/autoloader.rb
-- lib/kubes_aws/aws_services.rb
+- lib/kubes_aws/helpers.rb
 - lib/kubes_aws/iam_role.rb
 - lib/kubes_aws/iam_role/prebaked.rb
 - lib/kubes_aws/logging.rb
 - lib/kubes_aws/open_id.rb
 - lib/kubes_aws/secrets.rb
+- lib/kubes_aws/secrets/fetcher.rb
+- lib/kubes_aws/services.rb
 - lib/kubes_aws/ssm.rb
+- lib/kubes_aws/ssm/fetcher.rb
 - lib/kubes_aws/version.rb
 homepage: https://github.com/boltops-tools/kubes_aws
 licenses:
@@ -167,7 +184,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.2
+rubygems_version: 3.1.4
 signing_key: 
 specification_version: 4
 summary: Kubes AWS Helpers Library