lyra 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: fc3addb9ee2340c0fedb44a82abb5886656c47ee889ab82cddd6b540a3d30026
+  data.tar.gz: 9dbd0d75abd6c75c5fb1a64b3e3fde0b1c78f6c375b31953eddafe3d979a4d86
+SHA512:
+  metadata.gz: ec43997f86032a06fde828947f64d6da1f1ac5973440eae633e6405f3d2da191ed6e059d08d2242367a965efd820a3daa7f0d0f57859d0d91a7a28faef67386b
+  data.tar.gz: 71e6e0c8cab567b7a5d7f9426c04745ec4f6947f6ea31606cd41a482fb187365eca5f4c805e0bce1330eaced839cd732abf9a691bd5494307363662ff3225c39

data/.github/workflows/unit_tests.yml

@@ -0,0 +1,22 @@
+name: Unit Test
+
+on: [push, pull_request]
+
+jobs:
+  tests:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-ruby@v1
+        with:
+          ruby-version: '2.6'
+      - name: Bundle Install
+        run: gem install bundler:2.1.4 && bundle install
+      - name: Unit Tests
+        run: rake test
+      - name: Upload coverage results    
+        uses: actions/upload-artifact@master
+        if: always()
+        with:
+          name: coverage-report
+          path: coverage

data/.gitignore

@@ -0,0 +1,40 @@
+*.gem
+*.rbc
+/.config
+/coverage/
+/InstalledFiles
+/pkg/
+/spec/reports/
+/spec/examples.txt
+/test/tmp/
+/test/version_tmp/
+/tmp/
+
+# Used by dotenv library to load environment variables.
+# .env
+
+## Documentation cache and generated files:
+/.yardoc/
+/_yardoc/
+/doc/
+/rdoc/
+
+## Environment normalization:
+/.bundle/
+/vendor/bundle
+/lib/bundler/man/
+
+# for a library or gem, you might want to ignore these files since the code is
+# intended to run in multiple environments; otherwise, check them in:
+# Gemfile.lock
+# .ruby-version
+# .ruby-gemset
+
+# unless supporting rvm < 1.11.0 or doing something fancy, ignore this:
+.rvmrc
+.DS_Store
+
+# Jetbrains
+.idea/
+.rakeTasks
+test/tests/.tmp

data/.ruby-version

@@ -0,0 +1 @@
+2.7.0

data/Gemfile

@@ -0,0 +1,3 @@
+source 'https://rubygems.org'
+
+gemspec

data/Gemfile.lock

@@ -0,0 +1,62 @@
+PATH
+  remote: .
+  specs:
+    lyra (0.1.0)
+      aws-sdk-secretsmanager (~> 1.32.0)
+      json (~> 2.3.0)
+      rainbow (~> 3.0.0)
+      terminal-table (~> 1.8.0)
+      thor (~> 0.20.3)
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    aws-eventstream (1.0.3)
+    aws-partitions (1.281.0)
+    aws-sdk-core (3.91.0)
+      aws-eventstream (~> 1.0, >= 1.0.2)
+      aws-partitions (~> 1, >= 1.239.0)
+      aws-sigv4 (~> 1.1)
+      jmespath (~> 1.0)
+    aws-sdk-secretsmanager (1.32.0)
+      aws-sdk-core (~> 3, >= 3.71.0)
+      aws-sigv4 (~> 1.1)
+    aws-sigv4 (1.1.1)
+      aws-eventstream (~> 1.0, >= 1.0.2)
+    byebug (11.1.1)
+    coderay (1.1.2)
+    docile (1.3.2)
+    jmespath (1.4.0)
+    json (2.3.0)
+    method_source (0.9.2)
+    minitest (5.14.0)
+    pry (0.12.2)
+      coderay (~> 1.1.0)
+      method_source (~> 0.9.0)
+    pry-byebug (3.7.0)
+      byebug (~> 11.0)
+      pry (~> 0.10)
+    rainbow (3.0.0)
+    rake (13.0.1)
+    simplecov (0.18.5)
+      docile (~> 1.1)
+      simplecov-html (~> 0.11)
+    simplecov-html (0.12.2)
+    terminal-table (1.8.0)
+      unicode-display_width (~> 1.1, >= 1.1.1)
+    thor (0.20.3)
+    unicode-display_width (1.7.0)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  bundler (~> 2.0)
+  lyra!
+  minitest (~> 5.0)
+  pry-byebug (~> 3.7.0)
+  rake (~> 13.0)
+  simplecov (~> 0.18)
+
+BUNDLED WITH
+   2.1.4

data/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2019 Mat Cartmill
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

data/README.md

@@ -0,0 +1,143 @@
+# Lyra
+
+![Unit Test](https://github.com/HelloMustard/lyra/workflows/Unit%20Test/badge.svg?branch=master)
+
+Lyra is a Ruby gem that fetches your application's passwords from AWS Secrets Manager and builds a file containing them using a `Templatefile` as the guide. This results in a simple and platform-agnostic approach to rendering your application password in to a compilable file.
+
+## Installation
+
+`gem install lyra`
+
+## Usage
+
+Once the gem is installed, simply running `lyra exec` is enough to get you started. However, should you want to pass in specific command line options instead of specifying values in your `Lyrafile`, you can do that as well.
+
+```
+--access_key_id [String] Your AWS Access Key ID
+```
+```
+--secret_access_key [String] Your AWS Secret Access Key
+```
+```
+--aws_region [String] Your AWS Region
+```
+```
+--environment [String] Your specified secret environment
+```
+```
+--config [String] Path to your Lyrafile
+```
+
+**Note**: Parameters passed in via CLI take precedence over those listed in your `Lyrafile`.
+
+## Lyrafile
+
+The Lyrafile is used to tell Lyra what to do. It is a YAML file with a basic structure and contains the following properties:
+
+1. **access_key_id**  
+  The environment variable that your `AWS_ACCESS_KEY_ID` is associated with. Do **not** commit your actual access key ID to the Lyrafile
+2. **secret_access_key**  
+  The environment variable that your `AWS_SECRET_ACCESS_KEY` is associated with. Do **not** commit your actual secret access key to the Lyrafile
+3. **aws_region**  
+  The AWS region that your Secrets Manager instance is in. Eg: `us-east-2`
+4. **template_path**  
+  The relative path from the project root to the file containing your template
+5. **output_path**  
+  The relative path from the project root to the desired location of the file containing your application's passwords
+6. **environment**  
+  Optional. If you've given your passwords an environment in Secrets Manager, add the environment here. Eg: `prod/someProvider`, enter `prod`. This will prefix **all** searches in Secrets Manager with the environment value and a trailing slash.
+7. **secrets**  
+  An array of secrets from Secrets Manager, and the item mapping for your template
+
+As an example, an `Lyrafile` could similar to this:
+
+```yml
+access_key_id: MY_AWS_KEY_ENV_VAR
+secret_access_key: MY_AWS_SECRET_ENV_VAR
+aws_region: us-east-2
+template_path: .lyra/Templatefile
+output_path: Keys.swift
+environment: prod
+secrets:
+- name: ProviderA
+  items:
+  - key: apiKey
+    property_name: apiKey
+  - key: apiSecret
+    property_name: apiSecret
+- name: ProviderB
+  items:
+  - key: some.longer.key.from.aws.secretmanager.password
+    property_name: password
+```
+
+For more information about the `secrets` portion of the `Lyrafile`, see below.
+
+## Templatefile
+
+The Templatefile contains your template rendering code, written in Ruby, and is customizable however you want, as long as it remains valid syntax for use with `ERB`.
+
+As an example, a `Templatefile` could look similar to this if we were adding secrets to a Swift application:
+
+```ruby
+enum Keys {
+    <% @secrets.each do |secret| %>
+        enum <%= secret.name %> {
+            <% secret.items.each do |item| %>
+                static let <%= item.property_name %> = <%= item.value %>
+            <% end %>
+        }
+    <% end %>
+}
+```
+
+This very simple template could translate to
+
+```swift
+enum Keys {
+    enum ProviderA {
+        static let apiKey = "someApiKeyForProviderA"
+        static let apiSecret = "someApiSecretForProviderA"
+    }
+    enum ProviderB {
+        static let password = "somePasswordForProviderB"
+    }
+}
+```
+
+## Secret Mapping
+
+AWS Secrets Manager allows users to combine multiple key-value pairs under a single `secret name`. For example, in Secrets Manager you could create the following (*schema for information purposes only*):
+
+```
+{
+  secret_name: "prod/ProviderA"
+  secret_values: [
+    {
+      "key": "apiKey",
+      "value": "s0m3R3@a1LySt120nG@P1K3y!"
+    },
+    {
+      "key": "apiSecret",
+      "value": "s0m3R3@a1LySt120nG$3cR37!"
+    }
+  ]
+}
+```
+
+In the `Lyrafile` we would use the `secret_name` as the parent secret name, and the individual `secret_values` would be `item`s for that `secret`. As an example, the above would translate to the following `Lyrafile` format:
+
+```yml
+environment: prod
+secrets:
+- name: ProviderA
+  items:
+  - key: apiKey
+    property_name: apiKey
+  - key: apiSecret
+    property_name: apiSecret
+```
+
+The `property_name` attribute of the `item` only pertains to how the item is rendered in the template. Specifically, it is the name of the property that will be used to hold the secret value. You can give the `property_name` attribute any value you would like.
+
+**Remember**: try to prefix all of your secrets with your environment in  Secrets Manager, and use the `environment` attribute of the `Lyrafile` / CLI param to automatically append the `environment` to every secret fetch.

data/Rakefile

@@ -0,0 +1,10 @@
+require 'bundler/gem_tasks'
+require 'rake/testtask'
+
+Rake::TestTask.new(:test) do |t|
+  t.libs << 'test'
+  t.libs << 'lib'
+  t.test_files = FileList['test/**/*_test.rb']
+end
+
+task default: :test

data/exe/lyra

@@ -0,0 +1,4 @@
+#!/usr/bin/env ruby
+require 'lyra'
+
+Lyra::CLI.start

data/lib/lyra.rb

@@ -0,0 +1,85 @@
+require 'rainbow'
+require 'lyra/client'
+require 'lyra/client_config'
+require 'lyra/config'
+require 'lyra/item'
+require 'lyra/logger'
+require 'lyra/secret'
+require 'lyra/template'
+require 'lyra/version'
+require 'terminal-table'
+require 'thor'
+
+module Lyra
+  class Error < StandardError; end
+
+  class CLI < Thor
+    class_option :verbose, aliases: :v, type: :boolean, default: false
+
+    desc 'exec --access_key_id <aws access key id> --secret_access_key <aws secret access key> --config <path to Lyrafile>', 'Pulls the secrets from your AWS Secrets Manager instance and builds a file from template'
+    option :access_key_id, aliases: :b, type: :string
+    option :secret_access_key, aliases: :s, type: :string
+    option :aws_region, aliases: :r, type: :string
+    option :environment, aliases: :e, type: :string
+    option :config, aliases: :c, type: :string, default: "#{ENV['PWD']}/Lyrafile"
+    option :working_directory, aliases: :d, type: :string, default: '.'
+    def exec
+      configure_logger(verbose: options[:verbose])
+
+      raise Thor::Error, Rainbow("Cannot find Lyrafile at #{@options[:config]}").red unless File.exist?(@options[:config])
+
+      @config = Lyra::Config.new(path: @options[:config])
+
+      access_key_id = @options[:access_key_id] || ENV[@config.access_key_id]
+      raise Thor::Error, Rainbow("access_key_id cannot be nil").red if access_key_id.nil?
+      raise Thor::Error, Rainbow("access_key_id cannot be empty").red if access_key_id.empty?
+
+      secret_access_key = @options[:secret_access_key] || ENV[@config.secret_access_key]
+      raise Thor::Error, Rainbow("secret_access_key cannot be nil").red if secret_access_key.nil?
+      raise Thor::Error, Rainbow("secret_access_key cannot be empty").red if secret_access_key.empty?
+
+      aws_region = @options[:aws_region] || @config.aws_region
+      raise Thor::Error, Rainbow("aws_region cannot be nil").red if aws_region.nil?
+      raise Thor::Error, Rainbow("aws_region cannot be empty").red if aws_region.empty?
+
+      environment = @options[:environment] || @config.environment
+
+      client_config = Lyra::ClientConfig.new(access_key_id: access_key_id,
+                                               secret_access_key: secret_access_key,
+                                               aws_region: aws_region,
+                                               environment: environment)
+      @client = Lyra::Client.new(config: client_config)
+
+      secret_list = []
+
+      secrets = @config.secrets
+      secrets.each do |s|
+        secret = Lyra::Secret.new(hash: s)
+        item_list = []
+
+        remote_values = JSON.parse(@client.fetch_secret(secret_name: secret.name))
+        secret.items.each do |i|
+          item = Lyra::Item.new(hash: i)
+
+          raise Thor::Error, Rainbow("Could not retrieve value for item #{item.name}").red if remote_values[item.key].nil?
+
+          item.value = remote_values[item.key]
+          item_list.append(item)
+        end
+
+        secret.items = item_list
+        secret_list.append(secret)
+      end
+
+      template = Lyra::Template.new(secrets: secret_list, template_path: @config.template_path)
+      template.generate(output_path: @config.output_path)
+    end
+
+    private
+
+    def configure_logger(verbose: Boolean)
+      log.level = verbose ? Logger::DEBUG : Logger::INFO
+    end
+  end
+
+end

data/lib/lyra/client.rb

@@ -0,0 +1,29 @@
+require 'aws-sdk-secretsmanager'
+
+module Lyra
+  class Client
+
+    def initialize(config: Lyra::ClientConfig)
+      @config = config
+      credentials = Aws::Credentials.new(@config.access_key_id, @config.secret_access_key)
+      @client = Aws::SecretsManager::Client.new(credentials: credentials, region: @config.aws_region)
+    end
+
+    def fetch_secret(secret_name: String)
+      response = @client.get_secret_value({
+        secret_id: make_secret_name(from: secret_name)
+      })
+
+      response.secret_string
+    end
+
+    private
+
+    def make_secret_name(from: String)
+      environment_prefix = ''
+      environment_prefix = "#{@config.environment}/" unless @config.environment.nil? || @config.environment.empty?
+      "#{environment_prefix}#{from}"
+    end
+
+  end
+end

data/lib/lyra/client_config.rb

@@ -0,0 +1,15 @@
+module Lyra
+  class ClientConfig
+    attr_reader :access_key_id
+    attr_reader :secret_access_key
+    attr_reader :aws_region
+    attr_reader :environment
+
+    def initialize(access_key_id: String, secret_access_key: String, aws_region: String, environment: String)
+      @access_key_id = access_key_id
+      @secret_access_key = secret_access_key
+      @aws_region = aws_region
+      @environment = environment
+    end
+  end
+end

data/lib/lyra/config.rb

@@ -0,0 +1,26 @@
+require 'yaml'
+
+module Lyra
+
+  class Config
+    attr_reader :access_key_id
+    attr_reader :secret_access_key
+    attr_reader :aws_region
+    attr_reader :environment
+    attr_reader :output_path
+    attr_reader :secrets
+    attr_reader :template_path
+
+    def initialize(path: 'Lyrafile')
+      config = YAML::load_file(path).transform_keys(&:to_sym)
+      @access_key_id = config[:access_key_id]
+      @secret_access_key = config[:secret_access_key]
+      @aws_region = config[:aws_region]
+      @environment = config[:environment]
+      @output_path = config[:output_path]
+      @secrets = config[:secrets]
+      @template_path = config[:template_path]
+    end
+  end
+
+end

data/lib/lyra/item.rb

@@ -0,0 +1,16 @@
+module Lyra
+
+  class Item
+    attr_reader :key
+    attr_reader :property_name
+    attr_accessor :value
+
+    def initialize(hash: Hash)
+      hash = hash.transform_keys(&:to_sym)
+      @key = hash[:key]
+      @property_name = hash[:property_name]
+      @value = ''
+    end
+  end
+
+end

data/lib/lyra/logger.rb

@@ -0,0 +1,16 @@
+require 'logger'
+
+class Object
+  def self.logger
+    if @logger.nil?
+      @logger = Logger.new(STDOUT)
+      @logger.level = Logger::DEBUG
+    end
+
+    @logger
+  end
+
+  def log
+    Object.logger
+  end
+end

data/lib/lyra/secret.rb

@@ -0,0 +1,14 @@
+module Lyra
+
+  class Secret
+    attr_reader :name
+    attr_accessor :items
+
+    def initialize(hash: Hash)
+      hash = hash.transform_keys(&:to_sym)
+      @name = hash[:name]
+      @items = hash[:items]
+    end
+  end
+
+end

data/lib/lyra/template.rb

@@ -0,0 +1,25 @@
+require 'erb'
+
+module Lyra
+  class Template
+    attr_reader :secrets
+    attr_reader :template_path
+    attr_reader :output_path
+
+    def initialize(secrets: Array, template_path: String)
+      @secrets = secrets
+      @template_path = template_path
+    end
+
+    def render
+      ERB.new(File.read(@template_path), trim_mode: '<>').result(binding)
+    end
+
+    def generate(output_path: String)
+      File.open(output_path, 'w+') do |f|
+        f.write(render)
+        f.close
+      end
+    end
+  end
+end

data/lib/lyra/version.rb

@@ -0,0 +1,3 @@
+module Lyra
+  VERSION = "0.1.0"
+end

data/lyra.gemspec

@@ -0,0 +1,41 @@
+lib = File.expand_path('lib', __dir__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'lyra/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = 'lyra'
+  spec.version       = Lyra::VERSION
+  spec.authors       = ['Mat Cartmill']
+  spec.email         = ['mat@hellomustard.com']
+
+  spec.summary       = %q{A gem for pulling secrets from AWS Secrets Manager.}
+  spec.description   = %q{Retrieves secrets to from AWS Secrets Manager and creates a file matching your template with your secrets populated.}
+  spec.homepage      = 'https://github.com/HelloMustard/lyra'
+  spec.license       = 'MIT'
+
+  spec.metadata['homepage_uri'] = spec.homepage
+  spec.metadata['source_code_uri'] = 'https://github.com/HelloMustard/lyra'
+  spec.metadata['changelog_uri'] = 'https://github.com/HelloMustard/lyra'
+
+  spec.required_ruby_version = '>= 2.6'
+
+  # Specify which files should be added to the gem when it is released.
+  # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
+  spec.files = Dir.chdir(File.expand_path('..', __FILE__)) do
+    `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
+  end
+  spec.bindir        = 'exe'
+  spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
+  spec.require_paths = ['lib']
+
+  spec.add_development_dependency 'bundler', '~> 2.0'
+  spec.add_development_dependency 'minitest', '~> 5.0'
+  spec.add_development_dependency 'pry-byebug', '~> 3.7.0'
+  spec.add_development_dependency 'rake', '~> 13.0'
+  spec.add_development_dependency 'simplecov', '~> 0.18'
+  spec.add_runtime_dependency 'aws-sdk-secretsmanager', '~> 1.32.0'
+  spec.add_runtime_dependency 'json', '~> 2.3.0'
+  spec.add_runtime_dependency 'rainbow', '~> 3.0.0'
+  spec.add_runtime_dependency 'terminal-table', '~> 1.8.0'
+  spec.add_runtime_dependency 'thor', '~> 0.20.3'
+end

metadata

@@ -0,0 +1,207 @@
+--- !ruby/object:Gem::Specification
+name: lyra
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Mat Cartmill
+autorequire: 
+bindir: exe
+cert_chain: []
+date: 2020-03-16 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: minitest
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '5.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '5.0'
+- !ruby/object:Gem::Dependency
+  name: pry-byebug
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.7.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.7.0
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+- !ruby/object:Gem::Dependency
+  name: simplecov
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.18'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.18'
+- !ruby/object:Gem::Dependency
+  name: aws-sdk-secretsmanager
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.32.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.32.0
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.3.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.3.0
+- !ruby/object:Gem::Dependency
+  name: rainbow
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.0.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.0.0
+- !ruby/object:Gem::Dependency
+  name: terminal-table
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.8.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.8.0
+- !ruby/object:Gem::Dependency
+  name: thor
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.20.3
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.20.3
+description: Retrieves secrets to from AWS Secrets Manager and creates a file matching
+  your template with your secrets populated.
+email:
+- mat@hellomustard.com
+executables:
+- lyra
+extensions: []
+extra_rdoc_files: []
+files:
+- ".github/workflows/unit_tests.yml"
+- ".gitignore"
+- ".ruby-version"
+- Gemfile
+- Gemfile.lock
+- LICENSE
+- README.md
+- Rakefile
+- exe/lyra
+- lib/lyra.rb
+- lib/lyra/client.rb
+- lib/lyra/client_config.rb
+- lib/lyra/config.rb
+- lib/lyra/item.rb
+- lib/lyra/logger.rb
+- lib/lyra/secret.rb
+- lib/lyra/template.rb
+- lib/lyra/version.rb
+- lyra.gemspec
+homepage: https://github.com/HelloMustard/lyra
+licenses:
+- MIT
+metadata:
+  homepage_uri: https://github.com/HelloMustard/lyra
+  source_code_uri: https://github.com/HelloMustard/lyra
+  changelog_uri: https://github.com/HelloMustard/lyra
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '2.6'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.1.2
+signing_key: 
+specification_version: 4
+summary: A gem for pulling secrets from AWS Secrets Manager.
+test_files: []