repol 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: f3855243ab8a0aefe0ac92d7da11405448d39084
+  data.tar.gz: 94c3d8993f2aa644e1126eef07615e7cacd9fd5f
+SHA512:
+  metadata.gz: 1c83dceedaf415f0d2e60bd2c0c811f70b5195e4dbb7558fc89bc373aa1320cc2f7e9416d666bdc7bb52f1092f61325a8964f60ef7ef0581fa6e5542b3d148b9
+  data.tar.gz: 5830c74674af2d0d263f22b3311df5518c5836c6404533d03c5024330432906be495c6057a6eaca66aa72f45dd96dfef8059f6d2c558a30c23842c60f7b273f7

data/.gitignore

@@ -0,0 +1,11 @@
+/.bundle/
+/.yardoc
+/Gemfile.lock
+/_yardoc/
+/coverage/
+/doc/
+/pkg/
+/spec/reports/
+/tmp/
+RepolFile
+*.repol

data/.rspec

@@ -0,0 +1,2 @@
+--format documentation
+--color

data/.travis.yml

@@ -0,0 +1,4 @@
+language: ruby
+rvm:
+  - 2.2.4
+before_install: gem install bundler -v 1.11.2

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in repol.gemspec
+gemspec

data/LICENSE.txt

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2016 Genki Sugawara
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/README.md

@@ -0,0 +1,71 @@
+# Repol
+
+Repol is a tool to manage [ECR Repository Policy](http://docs.aws.amazon.com/AmazonECR/latest/userguide/RepositoryPolicies.html).
+
+It defines the state of ECR Repository Policy using DSL, and updates ECR Repository Policy according to DSL.
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'repol'
+```
+
+And then execute:
+
+    $ bundle
+
+Or install it yourself as:
+
+    $ gem install repol
+
+## Usage
+
+```sh
+export AWS_ACCESS_KEY_ID='...'
+export AWS_SECRET_ACCESS_KEY='...'
+repol -e -o RepolFile  # export Repository Policy
+vi RepolFile
+repol -a --dry-run
+repol -a               # apply `RepolFile`
+```
+
+## Help
+
+```
+Usage: repol [options]
+    -k, --access-key ACCESS_KEY
+    -s, --secret-key SECRET_KEY
+    -r, --region REGION
+        --profile PROFILE
+        --credentials-path PATH
+    -a, --apply
+    -f, --file FILE
+        --dry-run
+    -e, --export
+    -o, --output FILE
+        --split
+        --target REGEXP
+        --no-color
+        --debug
+        --request-concurrency N
+```
+
+## RepolFile example
+
+```ruby
+require 'other/RepolFile'
+
+repository "my_ecr_repo" do
+  {"Version"=>"2008-10-17",
+   "Statement"=>
+    [{"Sid"=>"PullOnly",
+      "Effect"=>"Allow",
+      "Principal"=>{"AWS"=>"arn:aws:iam::123456789012:root"},
+      "Action"=>
+       ["ecr:BatchCheckLayerAvailability",
+        "ecr:BatchGetImage",
+        "ecr:GetDownloadUrlForLayer"]}]}
+end
+```

data/Rakefile

@@ -0,0 +1,6 @@
+require 'bundler/gem_tasks'
+require 'rspec/core/rake_task'
+
+RSpec::Core::RakeTask.new(:spec)
+
+task :default => :spec

data/bin/console

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require "bundler/setup"
+require "repol"
+
+# You can add fixtures and/or initialization code here to make experimenting
+# with your gem easier. You can also use a different console, if you like.
+
+# (If you use this, don't forget to add pry to your Gemfile!)
+# require "pry"
+# Pry.start
+
+require "irb"
+IRB.start

data/bin/setup

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+IFS=$'\n\t'
+set -vx
+
+bundle install
+
+# Do any other automated setup that you need to do here

data/exe/repol

@@ -0,0 +1,169 @@
+#!/usr/bin/env ruby
+$: << File.expand_path('../../lib', __FILE__)
+
+require 'repol'
+require 'optparse'
+
+Version = Repol::VERSION
+
+DEFAULT_FILENAME = 'RepolFile'
+
+MAGIC_COMMENT = <<-EOS
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+EOS
+
+def parse_options(argv)
+  options = {
+    file: DEFAULT_FILENAME,
+    output: '-',
+    dry_run: false,
+    color: true,
+    request_concurrency: 8,
+    aws: {region: 'us-east-1'}, # TODO: Fix region
+  }
+
+  opt = OptionParser.new
+  opt.on('-k', '--access-key ACCESS_KEY') {|v| options[:aws][:access_key_id]     = v }
+  opt.on('-s', '--secret-key SECRET_KEY') {|v| options[:aws][:secret_access_key] = v }
+  opt.on('-r', '--region REGION')         {|v| options[:aws][:region]            = v }
+
+  opt.on('', '--profile PROFILE') do |v|
+    options[:aws][:credentials] ||= {}
+    options[:aws][:credentials][:profile_name] = v
+  end
+
+  opt.on('', '--credentials-path PATH') do |v|
+    options[:aws][:credentials] ||= {}
+    options[:aws][:credentials][:path] = v
+  end
+
+  opt.on('-a', '--apply')         {    options[:mode]    = :apply        }
+  opt.on('-f', '--file FILE')     {|v| options[:file]    = v             }
+  opt.on(''  , '--dry-run')       {    options[:dry_run] = true          }
+  opt.on('-e', '--export')        {    options[:mode]    = :export       }
+  opt.on('-o', '--output FILE')   {|v| options[:output]  = v             }
+  opt.on(''  , '--split')         {    options[:split]   = :true         }
+  opt.on(''  , '--target REGEXP') {|v| options[:target]  = Regexp.new(v) }
+  opt.on(''  , '--no-color')      {    options[:color]   = false         }
+  opt.on(''  , '--debug')         {    options[:debug]   = true          }
+
+  opt.on(''  , '--request-concurrency N', Integer) do |v|
+    options[:request_concurrency] = v
+  end
+
+  opt.parse!(argv)
+
+  unless options[:mode]
+    puts opt.help
+    exit 1
+  end
+
+  if options[:aws][:credentials]
+    credentials = Aws::SharedCredentials.new(options[:aws][:credentials])
+    options[:aws][:credentials] = credentials
+  end
+
+  Aws.config.update(options[:aws])
+  String.colorize = options[:color]
+
+  if options[:debug]
+    Repol::Logger.instance.set_debug(options[:debug])
+
+    Aws.config.update(
+      :http_wire_trace => true,
+      :logger => Repol::Logger.instance
+    )
+  end
+
+  options
+rescue => e
+  $stderr.puts("[ERROR] #{e.message}")
+  exit 1
+end
+
+def main(argv)
+  options = parse_options(argv)
+  client = Repol::Client.new(options)
+  logger = Repol::Logger.instance
+
+  case options[:mode]
+  when :export
+    exported = client.export
+    output = options[:output]
+
+    if options[:split]
+      logger.info('Export Repository Policy')
+
+      output = DEFAULT_FILENAME if output == '-'
+      dir = File.dirname(output)
+      FileUtils.mkdir_p(dir)
+      requires = []
+
+      exported.each do |repository_name, policy|
+        next unless policy
+
+        filename = "#{repository_name}.repol"
+        requires << filename
+        repol_file = File.join(dir, filename)
+
+        logger.info("  write `#{repol_file}`")
+
+        dsl = Repol::DSL.convert({repository_name => policy}, options)
+
+        open(repol_file, 'wb') do |f|
+          f.puts MAGIC_COMMENT
+          f.puts dsl
+        end
+      end
+
+      logger.info("  write `#{output}`")
+
+      open(output, 'wb') do |f|
+        f.puts MAGIC_COMMENT
+
+        requires.each do |repol_file|
+          f.puts "require '#{repol_file}'"
+        end
+      end
+    else
+      dsl = Repol::DSL.convert(exported, options)
+
+      if output == '-'
+        logger.info('# Export Repository Policy')
+        puts dsl
+      else
+        logger.info("Export Repository Policy to `#{output}`")
+        open(output, 'wb') do |f|
+          f.puts MAGIC_COMMENT
+          f.puts dsl
+        end
+      end
+    end
+  when :apply
+    file = options[:file]
+
+    unless File.exist?(file)
+      raise "No RepolFile found (looking for: #{file})"
+    end
+
+    message = "Apply `#{file}` to Repository Policy"
+    message << ' (dry-run)' if options[:dry_run]
+    logger.info(message)
+
+    updated = client.apply(file)
+
+    logger.info('No change'.intense_blue) unless updated
+  else
+    raise "Unknown mode: #{options[:mode]}"
+  end
+rescue => e
+  if options[:debug]
+    raise e
+  else
+    $stderr.puts("[ERROR] #{e.message}".red)
+    exit 1
+  end
+end
+
+main(ARGV)

data/lib/repol.rb

@@ -0,0 +1,23 @@
+require 'aws-sdk'
+require 'diffy'
+require 'hashie'
+require 'json'
+require 'logger'
+require 'parallel'
+require 'pp'
+require 'singleton'
+require 'term/ansicolor'
+
+require 'repol/version'
+require 'repol/ext/hash_ext'
+require 'repol/ext/string_ext'
+require 'repol/logger'
+require 'repol/utils'
+
+require 'repol/client'
+require 'repol/driver'
+require 'repol/dsl'
+require 'repol/dsl/template_helper'
+require 'repol/dsl/context'
+require 'repol/dsl/converter'
+require 'repol/exporter'

data/lib/repol/client.rb

@@ -0,0 +1,87 @@
+class Repol::Client
+  include Repol::Utils::Helper
+  include Repol::Logger::Helper
+
+  def initialize(options = {})
+    @options = options
+    @client = @options[:client] || Aws::ECR::Client.new
+    @driver = Repol::Driver.new(@client, @options)
+    @exporter = Repol::Exporter.new(@client, @options)
+  end
+
+  def export
+    @exporter.export
+  end
+
+  def apply(file)
+    walk(file)
+  end
+
+  private
+
+  def walk(file)
+    expected = load_file(file)
+    actual = @exporter.export
+
+    updated = walk_repositories(expected, actual)
+
+    if @options[:dry_run]
+      false
+    else
+      updated
+    end
+  end
+
+  def walk_repositories(expected, actual)
+    updated = false
+
+    expected.each do |repository_name,  expected_policy|
+      next unless matched?(repository_name)
+
+      actual_policy = actual[repository_name]
+
+      if actual_policy
+        updated = walk_policy(repository_name, expected_policy, actual_policy) || updated
+      elsif actual.has_key?(repository_name)
+        actual.delete(repository_name)
+
+        if expected_policy
+          @driver.create_policy(repository_name, expected_policy)
+          updated = true
+        end
+      else
+        log(:warn, "No such repository: #{repository_name}")
+      end
+    end
+
+    updated
+  end
+
+  def walk_policy(repository_name, expected_policy, actual_policy)
+    updated = false
+
+    if expected_policy
+      if expected_policy != actual_policy
+        @driver.update_policy(repository_name, expected_policy, actual_policy)
+        updated = true
+      end
+    else
+      @driver.delete_policy(repository_name)
+      updated = true
+    end
+
+    updated
+  end
+
+  def load_file(file)
+    if file.kind_of?(String)
+      open(file) do |f|
+        Repol::DSL.parse(f.read, file)
+      end
+    elsif file.respond_to?(:read)
+      Repol::DSL.parse(file.read, file.path)
+    else
+      raise TypeError, "can't convert #{file} into File"
+    end
+  end
+end

data/lib/repol/driver.rb

@@ -0,0 +1,42 @@
+class Repol::Driver
+  include Repol::Utils::Helper
+  include Repol::Logger::Helper
+
+  def initialize(client, options = {})
+    @client = client
+    @options = options
+  end
+
+  def create_policy(repository_name, policy)
+    log(:info, "Create Repository `#{repository_name}` Policy", color: :cyan)
+
+    unless @options[:dry_run]
+      @client.set_repository_policy(
+        repository_name: repository_name,
+        policy_text: JSON.dump(policy)
+      )
+    end
+  end
+
+  def delete_policy(repository_name)
+    log(:info, "Delete Repository `#{repository_name}` Policy", color: :red)
+
+    unless @options[:dry_run]
+      @client.delete_repository_policy(
+        repository_name: repository_name
+      )
+    end
+  end
+
+  def update_policy(repository_name, policy, old_policy)
+    log(:info, "Update Repository `#{repository_name}` Policy", color: :green)
+    log(:info, diff(old_policy, policy, color: @options[:color]), color: false)
+
+    unless @options[:dry_run]
+      @client.set_repository_policy(
+        repository_name: repository_name,
+        policy_text: JSON.dump(policy)
+      )
+    end
+  end
+end

data/lib/repol/dsl.rb

@@ -0,0 +1,11 @@
+class Repol::DSL
+  class << self
+    def convert(exported, options = {})
+      Repol::DSL::Converter.convert(exported, options)
+    end
+
+    def parse(dsl, path, options = {})
+      Repol::DSL::Context.eval(dsl, path, options).result
+    end
+  end # of class methods
+end

data/lib/repol/dsl/context.rb

@@ -0,0 +1,55 @@
+class Repol::DSL::Context
+  include Repol::DSL::TemplateHelper
+
+  def self.eval(dsl, path, options = {})
+    self.new(path, options) {
+      eval(dsl, binding, path)
+    }
+  end
+
+  def result
+    @result.sort_array!
+  end
+
+  def initialize(path, options = {}, &block)
+    @path = path
+    @options = options
+    @result = {}
+
+    @context = Hashie::Mash.new(
+      :path => path,
+      :options => options,
+      :templates => {}
+    )
+
+    instance_eval(&block)
+  end
+
+  def template(name, &block)
+    @context.templates[name.to_s] = block
+  end
+
+  private
+
+  def require(file)
+    repolfile = (file =~ %r|\A/|) ? file : File.expand_path(File.join(File.dirname(@path), file))
+
+    if File.exist?(repolfile)
+      instance_eval(File.read(repolfile), repolfile)
+    elsif File.exist?(repolfile + '.rb')
+      instance_eval(File.read(repolfile + '.rb'), repolfile + '.rb')
+    else
+      Kernel.require(file)
+    end
+  end
+
+  def repository(name)
+    name = name.to_s
+
+    if @result[name]
+      raise "Repository `#{name}` is already defined"
+    end
+
+    @result[name] = yield
+  end
+end

data/lib/repol/dsl/converter.rb

@@ -0,0 +1,42 @@
+class Repol::DSL::Converter
+  include Repol::Utils::Helper
+
+  def self.convert(exported, options = {})
+    self.new(exported, options).convert
+  end
+
+  def initialize(exported, options = {})
+    @exported = exported
+    @options = options
+  end
+
+  def convert
+    output_repositories(@exported)
+  end
+
+  private
+
+  def output_repositories(policy_by_repository)
+    repositories = []
+
+    policy_by_repository.sort_by(&:first).each do |repository_name, policy|
+      if not policy or not matched?(repository_name)
+        next
+      end
+
+      repositories << output_repository(repository_name, policy)
+    end
+
+    repositories.join("\n")
+  end
+
+  def output_repository(repository_name, policy)
+    policy = policy.pretty_inspect.gsub(/^/, '  ').strip
+
+    <<-EOS
+repository #{repository_name.inspect} do
+  #{policy}
+end
+    EOS
+  end
+end

data/lib/repol/dsl/template_helper.rb

@@ -0,0 +1,18 @@
+module Repol::DSL::TemplateHelper
+  def include_template(template_name, context = {})
+    tmplt = @context.templates[template_name.to_s]
+
+    unless tmplt
+      raise "Template `#{template_name}` is not defined"
+    end
+
+    context_orig = @context
+    @context = @context.merge(context)
+    instance_eval(&tmplt)
+    @context = context_orig
+  end
+
+  def context
+    @context
+  end
+end

data/lib/repol/exporter.rb

@@ -0,0 +1,51 @@
+class Repol::Exporter
+  include Repol::Utils::Helper
+
+  def initialize(client, options = {})
+    @client = client
+    @options = options
+  end
+
+  def export
+    export_repositories.sort_array!
+  end
+
+  private
+
+  def export_repositories
+    result = {}
+    repositories = get_repositories
+    concurrency = @options[:request_concurrency]
+
+    Parallel.each(repositories, in_threads: concurrency) do |repository|
+      name = repository.repository_name
+      next unless matched?(name)
+      policy = export_repository_policy(repository)
+      result[name] = policy
+    end
+
+    result
+  end
+
+  def export_repository_policy(repository)
+    name = repository.repository_name
+    resp = @client.get_repository_policy(repository_name: name)
+    JSON.parse(resp.policy_text)
+  rescue Aws::ECR::Errors::RepositoryPolicyNotFoundException
+    nil
+  end
+
+  def get_repositories
+    repositories = []
+    next_token = nil
+
+    loop do
+      resp = @client.describe_repositories(next_token: next_token)
+      repositories.concat(resp.repositories)
+      next_token = resp.next_token
+      break unless next_token
+    end
+
+    repositories
+  end
+end

data/lib/repol/ext/hash_ext.rb

@@ -0,0 +1,33 @@
+module Repol::Ext
+  module HashExt
+    def sort_array!
+      keys.each do |key|
+        value = self[key]
+        self[key] = sort_array0(value)
+      end
+
+      self
+    end
+
+    private
+
+    def sort_array0(value)
+      case value
+      when Hash
+        new_value = {}
+
+        value.each do |k, v|
+          new_value[k] = sort_array0(v)
+        end
+
+        new_value
+      when Array
+        value.map {|v| sort_array0(v) }.sort_by(&:to_s)
+      else
+        value
+      end
+    end
+  end
+end
+
+Hash.include(Repol::Ext::HashExt)

data/lib/repol/ext/string_ext.rb

@@ -0,0 +1,28 @@
+module Repol::Ext
+  module StringExt
+    module ClassMethods
+      def colorize=(value)
+        @colorize = value
+      end
+
+      def colorize
+        @colorize
+      end
+    end # ClassMethods
+
+    Term::ANSIColor::Attribute.named_attributes.each do |attribute|
+      class_eval(<<-EOS, __FILE__, __LINE__ + 1)
+        def #{attribute.name}
+          if String.colorize
+            Term::ANSIColor.send(#{attribute.name.inspect}, self)
+          else
+            self
+          end
+        end
+      EOS
+    end
+  end
+end
+
+String.include(Repol::Ext::StringExt)
+String.extend(Repol::Ext::StringExt::ClassMethods)

data/lib/repol/logger.rb

@@ -0,0 +1,28 @@
+class Repol::Logger < ::Logger
+  include Singleton
+
+  def initialize
+    super($stdout)
+
+    self.formatter = proc do |severity, datetime, progname, msg|
+      "#{msg}\n"
+    end
+
+    self.level = Logger::INFO
+  end
+
+  def set_debug(value)
+    self.level = value ? Logger::DEBUG : Logger::INFO
+  end
+
+  module Helper
+    def log(level, message, log_options = {})
+      global_option = @options || {}
+      message = "[#{level.to_s.upcase}] #{message}" unless level == :info
+      message << ' (dry-run)' if global_option[:dry_run]
+      message = message.send(log_options[:color]) if log_options[:color]
+      logger = global_option[:logger] || Repol::Logger.instance
+      logger.send(level, message)
+    end
+  end
+end

data/lib/repol/utils.rb

@@ -0,0 +1,23 @@
+class Repol::Utils
+  module Helper
+    def matched?(name)
+      if @options[:target]
+        @options[:target] =~ name
+      else
+        true
+      end
+    end
+
+    def diff(obj1, obj2, options = {})
+      diffy = Diffy::Diff.new(
+        obj1.pretty_inspect,
+        obj2.pretty_inspect,
+        :diff => '-u'
+      )
+
+      out = diffy.to_s(options[:color] ? :color : :text).gsub(/\s+\z/m, '')
+      out.gsub!(/^/, options[:indent]) if options[:indent]
+      out
+    end
+  end
+end

data/lib/repol/version.rb

@@ -0,0 +1,3 @@
+module Repol
+  VERSION = '0.1.0'
+end

data/repol.gemspec

@@ -0,0 +1,31 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'repol/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = 'repol'
+  spec.version       = Repol::VERSION
+  spec.authors       = ['Genki Sugawara']
+  spec.email         = ['sugawara@cookpad.com']
+
+  spec.summary       = %q{Repol is a tool to manage ECR Repository Policy.}
+  spec.description   = %q{Repol is a tool to manage ECR Repository Policy.}
+  spec.homepage      = 'https://github.com/winebarrel/repol'
+  spec.license       = 'MIT'
+
+  spec.files         = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
+  spec.bindir        = 'exe'
+  spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
+  spec.require_paths = ['lib']
+
+  spec.add_dependency 'aws-sdk', '~> 2.3.0'
+  spec.add_dependency 'diffy'
+  spec.add_dependency 'hashie'
+  spec.add_dependency 'parallel'
+  spec.add_dependency 'term-ansicolor'
+
+  spec.add_development_dependency 'bundler'
+  spec.add_development_dependency 'rake'
+  spec.add_development_dependency 'rspec', '~> 3.0'
+end

metadata

@@ -0,0 +1,181 @@
+--- !ruby/object:Gem::Specification
+name: repol
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Genki Sugawara
+autorequire: 
+bindir: exe
+cert_chain: []
+date: 2016-05-21 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: aws-sdk
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.3.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.3.0
+- !ruby/object:Gem::Dependency
+  name: diffy
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: hashie
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: parallel
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: term-ansicolor
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+description: Repol is a tool to manage ECR Repository Policy.
+email:
+- sugawara@cookpad.com
+executables:
+- repol
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".rspec"
+- ".travis.yml"
+- Gemfile
+- LICENSE.txt
+- README.md
+- Rakefile
+- bin/console
+- bin/setup
+- exe/repol
+- lib/repol.rb
+- lib/repol/client.rb
+- lib/repol/driver.rb
+- lib/repol/dsl.rb
+- lib/repol/dsl/context.rb
+- lib/repol/dsl/converter.rb
+- lib/repol/dsl/template_helper.rb
+- lib/repol/exporter.rb
+- lib/repol/ext/hash_ext.rb
+- lib/repol/ext/string_ext.rb
+- lib/repol/logger.rb
+- lib/repol/utils.rb
+- lib/repol/version.rb
+- repol.gemspec
+homepage: https://github.com/winebarrel/repol
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.4.5.1
+signing_key: 
+specification_version: 4
+summary: Repol is a tool to manage ECR Repository Policy.
+test_files: []