legion-crypt 1.4.26 → 1.4.28

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ea29b8a42c33a47e97c578af649f6114b03e3ef155386fcb4e929afb3518b56c
-  data.tar.gz: f1c915cf4c52f269f536248805cb53d13cd6fca2bc237f41ab998102081e94a3
+  metadata.gz: '082f74f156f2cbf27b9905d81276292945c3ca03c8cc47608cd60bc9f8c9c303'
+  data.tar.gz: a10a0f6d3afa1f6a9acc0a9e66c48e9ae4576ae8921409a8d7c52a14433f1953
 SHA512:
-  metadata.gz: d525f2ae8f8552d881e96912e6f828de345e869537e2319559e6da577ecc729d68709e1211b0ec986c4d14b3d7372b541be47a4fabd9615e627f02e96136026a
-  data.tar.gz: 0a42c458345ecf8d04e31db279377afb8886b5b77bb0e73faddda6971c7191dc602e06343c09dee9830c1d071fd7839707a5804a2fff90b4ec6fef40555e8c0f
+  metadata.gz: 86f52e9d2a8d91d6aacc0639771e494085d0c5c1022a33797873ff7a4dd1029a54809b27eaa2f577183b565b912641b094bc93163bf45424b8a298631112c7c3
+  data.tar.gz: f5422d69c6264f2b291d6fe333724cebb3d798626a815b7f19e4ee2e5ca2f5b7d03d84838153dce99970a7899af8c9cf133db2b194730b39fdd6c9b5683eaedb

data/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Legion::Crypt
 
+## [1.4.28] - 2026-03-31
+
+### Fixed
+- `Helper#vault_write` now accepts keyword args (`**data`) and splats to `Crypt.write`, fixing `ArgumentError` on Ruby 3.4 when writing to Vault KV
+
+## [1.4.27] - 2026-03-31
+
+### Fixed
+- `connect_vault` now sets `::Vault.namespace` from `vault_namespace` setting, fixing 403 errors for non-cluster Vault connections in namespaced environments
+- Extracted `resolve_vault_address` and `log_vault_connection_error` to reduce `connect_vault` complexity
+
 ## [1.4.26] - 2026-03-28
 
 ### Fixed

data/lib/legion/crypt/helper.rb

@@ -11,8 +11,8 @@ module Legion
         Legion::Crypt.get(vault_path(path))
       end
 
-      def vault_write(path, data)
-        Legion::Crypt.write(vault_path(path), data)
+      def vault_write(path, **data)
+        Legion::Crypt.write(vault_path(path), **data)
       end
 
       def vault_exist?(path = nil)

data/lib/legion/crypt/vault.rb

@@ -15,35 +15,20 @@ module Legion
       def connect_vault
         @sessions = []
         vault_settings = Legion::Settings[:crypt][:vault]
-        protocol = vault_settings[:protocol] || 'http'
-        address  = vault_settings[:address] || 'localhost'
-        port     = vault_settings[:port] || 8200
-
-        if address.match?(%r{\Ahttps?://})
-          uri = URI.parse(address)
-          protocol = uri.scheme
-          address  = uri.host
-          port     = uri.port if vault_settings[:port].nil?
-        end
-
-        ::Vault.address = "#{protocol}://#{address}:#{port}"
+        ::Vault.address = resolve_vault_address(vault_settings)
 
         Legion::Settings[:crypt][:vault][:token] = ENV['VAULT_DEV_ROOT_TOKEN_ID'] if ENV.key? 'VAULT_DEV_ROOT_TOKEN_ID'
         return nil if Legion::Settings[:crypt][:vault][:token].nil?
 
         ::Vault.token = Legion::Settings[:crypt][:vault][:token]
+        namespace = vault_settings[:vault_namespace]
+        ::Vault.namespace = namespace if namespace
         if vault_healthy?
           Legion::Settings[:crypt][:vault][:connected] = true
-          Legion::Logging.info "Vault connected at #{::Vault.address}" if defined?(Legion::Logging)
+          Legion::Logging.info "Vault connected at #{::Vault.address} (namespace=#{namespace || 'none'})" if defined?(Legion::Logging)
         end
       rescue StandardError => e
-        if defined?(Legion::Logging) && Legion::Logging.respond_to?(:log_exception)
-          Legion::Logging.log_exception(e, lex: 'crypt', component_type: :helper)
-        elsif defined?(Legion::Logging) && Legion::Logging.respond_to?(:error)
-          Legion::Logging.error "Vault connection failed: #{e.class}=#{e.message}\n#{Array(e.backtrace).first(10).join("\n")}"
-        else
-          warn "Vault connection failed: #{e.class}=#{e.message}"
-        end
+        log_vault_connection_error(e)
         Legion::Settings[:crypt][:vault][:connected] = false
         false
       end
@@ -206,6 +191,31 @@ module Legion
         data[:data]
       end
 
+      def resolve_vault_address(vault_settings)
+        protocol = vault_settings[:protocol] || 'http'
+        address  = vault_settings[:address] || 'localhost'
+        port     = vault_settings[:port] || 8200
+
+        if address.match?(%r{\Ahttps?://})
+          uri = URI.parse(address)
+          protocol = uri.scheme
+          address  = uri.host
+          port     = uri.port if vault_settings[:port].nil?
+        end
+
+        "#{protocol}://#{address}:#{port}"
+      end
+
+      def log_vault_connection_error(error)
+        if defined?(Legion::Logging) && Legion::Logging.respond_to?(:log_exception)
+          Legion::Logging.log_exception(error, lex: 'crypt', component_type: :helper)
+        elsif defined?(Legion::Logging) && Legion::Logging.respond_to?(:error)
+          Legion::Logging.error "Vault connection failed: #{error.class}=#{error.message}\n#{Array(error.backtrace).first(10).join("\n")}"
+        else
+          warn "Vault connection failed: #{error.class}=#{error.message}"
+        end
+      end
+
       def log_vault_debug(message)
         Legion::Logging.debug(message) if defined?(Legion::Logging)
       end

data/lib/legion/crypt/version.rb

@@ -2,6 +2,6 @@
 
 module Legion
   module Crypt
-    VERSION = '1.4.26'
+    VERSION = '1.4.28'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legion-crypt
 version: !ruby/object:Gem::Version
-  version: 1.4.26
+  version: 1.4.28
 platform: ruby
 authors:
 - Esity