legion-crypt 1.5.1 → 1.5.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a988afa9a1eca8337d8355120b5c5b7ea5a7feb5333477db6c3d22b1a9714bc2
-  data.tar.gz: '068dce6425c3bd706848b2daab7a8465b1b1a7ffe5aa207b386b6263685b2db6'
+  metadata.gz: 01cec7ac57c7d5448b5fba4237fdccc9ac8099966a4a546e95dd4888d838604f
+  data.tar.gz: ac81d602c9fc34493aeabe3fdeadd12f01fb36f8c248ac44687166fd24d9a48d
 SHA512:
-  metadata.gz: 6467a8507feb5172ea8fc081ddfe30fc82fd7fff7591a24ea0e10bd822a1939e326d98b7b6e8c9efdb8efe0ae4eb7e58b1ac9973beba5bf880db77a37589183a
-  data.tar.gz: c81cadc3cdc2cbbc78d51dcc8884b1f4a3259c00383f7ead23208443bf852cf606489e980bd01b2a3887d69f0b1c9de5aff6a889c33632a2c1c4a8172daaebf5
+  metadata.gz: dea3247dbaf00a49507ededcfdd72e9e3545485cbcec511657d2e2c602e03f2230c3c34e93108ae14ede71aa7a768a36573c3f852595444f2f6ed118a351bd8c
+  data.tar.gz: 011ac0f235a69f7655ab1237d2a87faf3d343de20ef1ffe1e9576b5a555e9c0e5d46dfc6d77dd137851835850e3877783c70f62a216c3dd1a4af9c3e080e9ed6

data/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Legion::Crypt
 
+## [1.5.2] - 2026-04-03
+
+### Fixed
+- LeaseManager `at_exit` hook now wraps shutdown in a 10s timeout to prevent process hang when Logger Monitor or network I/O is blocked during crash exit
+
 ## [1.5.1] - 2026-04-03
 
 ### Fixed

data/lib/legion/crypt/lease_manager.rb

@@ -2,6 +2,7 @@
 
 require 'legion/logging/helper'
 require 'singleton'
+require 'timeout'
 
 module Legion
   module Crypt
@@ -45,16 +46,8 @@ module Legion
               next
             end
 
-            @state_mutex.synchronize do
-              @lease_cache[name] = response.data || {}
-              @active_leases[name] = {
-                lease_id:       response.lease_id,
-                lease_duration: response.lease_duration,
-                renewable:      response.renewable?,
-                expires_at:     Time.now + (response.lease_duration || 0),
-                fetched_at:     Time.now
-              }
-            end
+            log_lease_response(name, response)
+            cache_lease(name, response)
             log.info("LeaseManager: fetched lease for '#{name}' from #{path}")
           rescue StandardError => e
             handle_exception(e, level: :warn, operation: 'crypt.lease_manager.start', lease_name: name, path: path)
@@ -164,13 +157,42 @@ module Legion
         at_exit do
           next if @state_mutex.synchronize { @active_leases.empty? }
 
-          shutdown
+          Timeout.timeout(10) { shutdown }
+        rescue Timeout::Error
+          warn '[LeaseManager] at_exit shutdown timed out after 10s'
         rescue StandardError # best effort on crash
           nil
         end
         @at_exit_registered = true
       end
 
+      def cache_lease(name, response)
+        @state_mutex.synchronize do
+          @lease_cache[name] = response.data || {}
+          @active_leases[name] = {
+            lease_id:       response.lease_id,
+            lease_duration: response.lease_duration,
+            renewable:      response.renewable?,
+            expires_at:     Time.now + (response.lease_duration || 0),
+            fetched_at:     Time.now
+          }
+        end
+      end
+
+      def log_lease_response(name, response)
+        data_keys = response.data&.keys&.map(&:to_s) || []
+        log.debug("LeaseManager[#{name}]: lease_id=#{response.lease_id}, " \
+                  "lease_duration=#{response.lease_duration}s, " \
+                  "renewable=#{response.renewable?}, " \
+                  "data_keys=#{data_keys.inspect}")
+        return unless response.data&.key?(:username)
+
+        log.debug("LeaseManager[#{name}]: username=#{response.data[:username]}, " \
+                  "password_length=#{response.data[:password]&.length || 0}, " \
+                  "vhost=#{response.data[:vhost] || 'N/A'}, " \
+                  "tags=#{response.data[:tags] || 'N/A'}")
+      end
+
       def logical
         client = @state_mutex.synchronize { @vault_client }
         client ? client.logical : ::Vault.logical

data/lib/legion/crypt/version.rb

@@ -2,6 +2,6 @@
 
 module Legion
   module Crypt
-    VERSION = '1.5.1'
+    VERSION = '1.5.2'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legion-crypt
 version: !ruby/object:Gem::Version
-  version: 1.5.1
+  version: 1.5.2
 platform: ruby
 authors:
 - Esity