legion-settings 1.3.1 → 1.3.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -0
- data/README.md +4 -3
- data/lib/legion/settings/loader.rb +4 -0
- data/lib/legion/settings/version.rb +1 -1
- data/lib/legion/settings.rb +7 -0
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 905fefabffcdb64f2d654827742feb7c2651a3603625eb7f4e2eb71930416c8e
|
|
4
|
+
data.tar.gz: e19c105841be33b885565d5dac97d2549ee9813897ea4286bf68977e35e95e63
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 71a352c5cd2a45145619ae24d31f9b9f3280c33c0d2f864c21c9549f7a78a4a48b45f06d4172bc6ed30d314a355ab1548bc141efa63638917734816b1c66c0ba
|
|
7
|
+
data.tar.gz: 6a7a29a655bc77c13352631a62763bc20c8cf9d2a7e84efeaa43b92cc70301425081aa8ed82e6d34a2c77aac9944500ff241ce404f09d0af76bb4de9aaf68baf
|
data/CHANGELOG.md
CHANGED
data/README.md
CHANGED
|
@@ -36,12 +36,13 @@ Each Legion module registers its own defaults via `merge_settings` during startu
|
|
|
36
36
|
|
|
37
37
|
### Secret Resolution
|
|
38
38
|
|
|
39
|
-
Settings values can reference external secret sources using URI syntax.
|
|
39
|
+
Settings values can reference external secret sources using URI syntax. Three schemes are supported:
|
|
40
40
|
|
|
41
41
|
| Scheme | Format | Resolution |
|
|
42
42
|
|--------|--------|------------|
|
|
43
|
-
| `vault://` | `vault://path/to/secret#key` | Reads from HashiCorp Vault via `Legion::Crypt` |
|
|
43
|
+
| `vault://` | `vault://path/to/secret#key` | Reads static KV secrets from HashiCorp Vault via `Legion::Crypt` |
|
|
44
44
|
| `env://` | `env://ENV_VAR_NAME` | Reads from environment variable |
|
|
45
|
+
| `lease://` | `lease://name#key` | Reads from dynamic Vault leases via `Legion::Crypt::LeaseManager` |
|
|
45
46
|
|
|
46
47
|
Array values act as fallback chains — the first non-nil result wins:
|
|
47
48
|
|
|
@@ -59,7 +60,7 @@ Call `Legion::Settings.resolve_secrets!` to resolve all URIs in-place. In the Le
|
|
|
59
60
|
|
|
60
61
|
```ruby
|
|
61
62
|
Legion::Settings.resolve_secrets!
|
|
62
|
-
# All vault
|
|
63
|
+
# All vault://, env://, and lease:// references are now replaced with their resolved values
|
|
63
64
|
```
|
|
64
65
|
|
|
65
66
|
### Schema Validation
|
data/lib/legion/settings.rb
CHANGED