rake_vault 0.1.0.pre.5 → 0.1.0.pre.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 99db32c0edc26b78c7a0e8f4b6f7c165f0b21132c376fcd0405139707eb0f479
-  data.tar.gz: f47d19e2dd4b744e98d44b5e0d7050c61147e87652ffad55fe3889fc807bbecd
+  metadata.gz: b01699d74e5893f3eb8f978f1ca03bb8e2986601d50f06c080c01c12f3f6382b
+  data.tar.gz: 69daea8a65712ebf4df4cb334171a64afc3ba05be03e30d804a8033b09a46c7b
 SHA512:
-  metadata.gz: 90c85056a77d92adbc1fadd4cf913b1d6813a50a3a67d628d84cc9758189b2d3767a37b4b71d2f4856e2b1a3a992903cc4214c9e0337edb783fc0e26b5fd84f0
-  data.tar.gz: 9bcdc62fcaa3dc3651e284ee450993f324a36d8b7281695d7a249aa75d86d59dbb03f83421d0d87f148132460790fda986a283099bccb5f05cf94bb0f56d9fcc
+  metadata.gz: 07a9779bd95c58ea2ab7bdb523fe88c903da9528ec3a0c0738fb26b85edec14bb6852515f289328dcfce0f9e2d2b589d99e4293eaad780caef2551d5b67c6775
+  data.tar.gz: 8a7faa744063b0fc8ecdd8281630a8026bfee1d246e98cebe73b748e691894dad119cbee354e5aefc7cc036bf211cd40778de44107957b37b4e4c99e091dd53a

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    rake_vault (0.1.0.pre.5)
+    rake_vault (0.1.0.pre.8)
       colored2 (~> 3.1)
       rake_dependencies (~> 3.1)
       rake_factory (~> 0.23)
@@ -45,7 +45,7 @@ GEM
       sawyer (~> 0.9)
     open4 (1.3.4)
     parallel (1.22.1)
-    parser (3.1.2.0)
+    parser (3.1.2.1)
       ast (~> 2.4.1)
     public_suffix (4.0.7)
     rainbow (3.1.1)
@@ -90,17 +90,17 @@ GEM
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.11.0)
     rspec-support (3.11.0)
-    rubocop (1.33.0)
+    rubocop (1.34.1)
       json (~> 2.3)
       parallel (~> 1.10)
-      parser (>= 3.1.0.0)
+      parser (>= 3.1.2.1)
       rainbow (>= 2.2.2, < 4.0)
       regexp_parser (>= 1.8, < 3.0)
       rexml (>= 3.2.5, < 4.0)
-      rubocop-ast (>= 1.19.1, < 2.0)
+      rubocop-ast (>= 1.20.0, < 2.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 1.4.0, < 3.0)
-    rubocop-ast (1.19.1)
+    rubocop-ast (1.21.0)
       parser (>= 3.1.1.0)
     rubocop-rake (0.6.0)
       rubocop (~> 1.0)
@@ -152,4 +152,4 @@ DEPENDENCIES
   simplecov
 
 BUNDLED WITH
-   2.3.19
+   2.3.20

data/lib/rake_vault/tasks/app_role_auth.rb

@@ -1,13 +1,39 @@
 # frozen_string_literal: true
 
 require 'rake_factory'
+require_relative '../token_file'
 
 module RakeVault
   module Tasks
     class AppRoleAuth < RakeFactory::Task
       default_name :login
-      action do |_t|
-        puts 'done'
+      default_prerequisites(RakeFactory::DynamicValue.new do |t|
+        [t.ensure_task_name]
+      end)
+      default_description(RakeFactory::DynamicValue.new do |_task|
+        'Login with app role using vault'
+      end)
+      parameter :address
+      parameter :ensure_task_name, default: :'vault:ensure'
+      parameter :path, default: 'auth/approle/login'
+      parameter :role_id
+      parameter :secret_id
+
+      action do |task|
+        role_id = task.role_id ? "role_id=#{task.role_id}" : nil
+        secret_id = task.secret_id ? "secret_id=#{task.secret_id}" : nil
+
+        stdout = StringIO.new
+
+        RubyVault.configure(stdout: stdout)
+        RubyVault.write(
+          address: task.address,
+          path: task.path,
+          data: [role_id, secret_id].compact,
+          format: 'json'
+        )
+        RubyVault.reset!
+        RakeVault::TokenFile.write(stdout.string)
       end
     end
   end

data/lib/rake_vault/tasks/oidc_auth.rb

@@ -7,8 +7,16 @@ module RakeVault
   module Tasks
     class OidcAuth < RakeFactory::Task
       default_name :login
+      default_prerequisites(RakeFactory::DynamicValue.new do |t|
+        [t.ensure_task_name]
+      end)
+      default_description(RakeFactory::DynamicValue.new do |_t|
+        'Login with oidc using vault'
+      end)
       parameter :role
       parameter :address
+      parameter :ensure_task_name, default: :'vault:ensure'
+      parameter :no_print, default: false
 
       action do |task|
         auth = task.role ? ["role=#{task.role}"] : []
@@ -16,7 +24,8 @@ module RakeVault
         RubyVault.login(
           method: 'oidc',
           auth: auth,
-          address: task.address
+          address: task.address,
+          no_print: task.no_print
         )
       end
     end

data/lib/rake_vault/token_file.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+module RakeVault
+  module TokenFile
+    def self.write(json_string)
+      json = JSON.parse(json_string)
+      token = json['auth']['client_token']
+      RakeVault::TokenFile.write_token_to_file(token)
+    end
+
+    def self.write_token_to_file(token)
+      file = File.open('~/.vault-token', 'w')
+      file.write(token)
+      file.close
+    end
+  end
+end

data/lib/rake_vault/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module RakeVault
-  VERSION = '0.1.0.pre.5'
+  VERSION = '0.1.0.pre.8'
 end

data/lib/rake_vault.rb

@@ -3,6 +3,7 @@
 require 'rake_vault/tasks'
 require 'rake_vault/task_sets'
 require 'rake_vault/version'
+require 'rake_vault/token_file'
 
 module RakeVault
   def self.define_installation_tasks(opts = {})
@@ -12,4 +13,8 @@ module RakeVault
   def self.define_oidc_auth_task(opts = {}, &block)
     RakeVault::Tasks::OidcAuth.define(opts, &block)
   end
+
+  def self.define_app_role_auth_task(opts = {}, &block)
+    RakeVault::Tasks::AppRoleAuth.define(opts, &block)
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rake_vault
 version: !ruby/object:Gem::Version
-  version: 0.1.0.pre.5
+  version: 0.1.0.pre.8
 platform: ruby
 authors:
 - InfraBlocks Maintainers
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-08-09 00:00:00.000000000 Z
+date: 2022-08-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: colored2
@@ -283,6 +283,7 @@ files:
 - lib/rake_vault/tasks.rb
 - lib/rake_vault/tasks/app_role_auth.rb
 - lib/rake_vault/tasks/oidc_auth.rb
+- lib/rake_vault/token_file.rb
 - lib/rake_vault/version.rb
 - rake_vault.gemspec
 homepage: https://github.com/infrablocks/rake_vault