rcredstash 0.8.0 → 0.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 0c503a48bd56dbfee13222514549626a636005dd
-  data.tar.gz: f664fc01a74b9ae7e9914338dc590377d47746d4
+  metadata.gz: 400e378c187be7aabf11ec9b40c30481a28c7f7b
+  data.tar.gz: b30e9a9d3c57aa482e566b992c5f4522ce81fc79
 SHA512:
-  metadata.gz: 1f387818f34421f318e478f98908467723e43c817e50fb47dcdc375de21166864b587f4676e0eef904bc80aa6bac5211436eaabfe4b79e228b91939a4c7c8cd4
-  data.tar.gz: 30df72810770015138b66e23c0fada77aa1a9b247ac913f9337ce83d8f95ade4e75aa87459e1d0bcf53568f1a5eeacf12bde50d97670c599041866ec7ad3ac3c
+  metadata.gz: 59f2ca9b2e3359f05bf0131b02e5bdc7faefb568205f28b445b048d9807e4c3f492e35608c580000dcda3a0690b28db5cd368c22d97286653ec4ad4d9af21183
+  data.tar.gz: 630d47addd867cc9fd1e58d05bb642b7bf6a52857df2c26fef98eee6b6a23c05f17d6a3c7f725dae90f33f115f965a61335137e4812929f2a83060d84b671fd9

data/lib/cred_stash.rb

@@ -16,9 +16,9 @@ module CredStash
       nil
     end
 
-    def put(name, value, context: {})
+    def put(name, value, kms_key_id: nil, context: {})
       secret = Secret.new(name: name, value: value, context: context)
-      secret.encrypt!
+      secret.encrypt!(kms_key_id: kms_key_id)
       secret.save
     end
 

data/lib/cred_stash/cipher_key.rb

@@ -1,9 +1,12 @@
 class CredStash::CipherKey
+  DEFAULT_KMS_KEY_ID = "alias/credstash".freeze
+
   attr_reader :data_key, :hmac_key, :wrapped_key
 
-  def self.generate(client: Aws::KMS::Client.new, context: {})
+  def self.generate(client: Aws::KMS::Client.new, kms_key_id: nil,
+                    context: {})
     res = client.generate_data_key(
-      key_id: 'alias/credstash',
+      key_id: kms_key_id || DEFAULT_KMS_KEY_ID,
       number_of_bytes: 64,
       encryption_context: context
     )

data/lib/cred_stash/secret.rb

@@ -10,8 +10,8 @@ class CredStash::Secret
     @context = context
   end
 
-  def encrypt!
-    @key = CredStash::CipherKey.generate(context: @context)
+  def encrypt!(kms_key_id: nil)
+    @key = CredStash::CipherKey.generate(kms_key_id: kms_key_id, context: @context)
     @encrypted_value = @key.encrypt(@value)
     @hmac = @key.hmac(@encrypted_value)
   end

data/lib/cred_stash/version.rb

@@ -1,3 +1,3 @@
 module CredStash
-  VERSION = "0.8.0"
+  VERSION = "0.9.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rcredstash
 version: !ruby/object:Gem::Version
-  version: 0.8.0
+  version: 0.9.0
 platform: ruby
 authors:
 - adorechic
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-04-14 00:00:00.000000000 Z
+date: 2017-04-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk