sambot 0.1.184 → 0.1.185

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 3e71a9be06098e06cf9ece4994cc612b6bbe90c3
-  data.tar.gz: 75057abc94f0426a275e81688b0e224113373724
+  metadata.gz: 8d675645367588e60d53110037db46869d57de7b
+  data.tar.gz: 9a39bf623bec6708de2b26d0551353a8e45e9e77
 SHA512:
-  metadata.gz: 83ac3d0b048af4024ee7eba7b443cb45738c5d6e1a92628610cd148d97c701f27f03b79c6ff940ccc79d9270f590b3e332636011840d669202b95b7537f9e016
-  data.tar.gz: 5b12090622c58d9a562cdc58fe97011fb24292121b81870db60a455d36d0b7d19560a8ee23d5f259bd03891469b2b484849f782c00523f6c7c2c647f6f373640
+  metadata.gz: badfa93e6c8101e736b0941c430c4f2177945e0a93ef449e704ceba66ae673d7354f1c16e46ea761e2a0159ec933958ae6f5cc8a34966ff6c76b985e5200f40b
+  data.tar.gz: 34aa0d4396aad5b70a750923f0600bb450680100531e82054e8c1480f23422531ad05acf38429549bb6932565941ea60abd68f6975d38a51c2edfaf06ad310b7

data/lib/sambot/templates/Vagrantfile.erb

@@ -1,3 +1,5 @@
+require 'sambot'
+
 <% config[:vagrantfiles].each do |vagrantfile| %>
   require "<%= vagrantfile %>"
 <% end %>
@@ -86,8 +88,13 @@ Vagrant.configure("2") do |c|
     c.vm.synced_folder <%= source.inspect %>, <%= destination.inspect %>, <%= options %>
   <% end %>
 
+  #################################################################################
+  # The steps below run the bootstrap script for th newly created boxes.          #
+  # As part of the bootstrapping, a wrapped token is generated and given to       #
+  # bootstrap script.                                                             #
+  #################################################################################
   <% if config[:box] =~ /centos/ %>
-    c.vm.provision "shell", inline: "bash /vagrant/bootstrap.sh"
+    c.vm.provision "shell", inline: "bash /vagrant/bootstrap.sh <%= ::Sambot::Testing::VaultHelper.generate_wrapped_token %>"
   <% else %>
     c.vm.provision "shell", inline: "powershell -ExecutionPolicy Bypass -File C:/Vagrant/bootstrap.ps1"
   <% end %>

data/lib/sambot/templates/bootstrap_scripts/local/docker/bootstrap.sh.erb

@@ -28,7 +28,7 @@
 #                                                                               #
 #################################################################################
 
-yum install -y unzip
+yum install -y unzip wget
 
 #################################################################################
 # Download and install Hashicorp Vault.                                         #

data/lib/sambot/testing/vault_helper.rb

@@ -12,6 +12,20 @@ module Sambot
         WORKING_DIR = '/tmp/sambot/testing/vault'
         VAULT_POLICIES_REPO = 'git@github.exacttarget.com:ads-devops/vault-policies.git'
 
+        def generate_wrapped_token
+          ::Vault.configure do |config|
+            config.address = 'http://127.0.0.1:8200'
+            config.token = 'root'
+            config.ssl_verify = false
+          end
+          token = ''
+          begin
+            token = Vault.auth_token.create(wrap_ttl: "72h", role: 'nightswatch-ro', policy: 'nightswatch-ro').wrap_info.token
+          rescue
+          end
+          token
+        end
+
         def setup
           FileUtils.rm_r(WORKING_DIR) if Dir.exist?(WORKING_DIR)
           FileUtils.mkpath WORKING_DIR

data/lib/sambot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Sambot
-  VERSION = '0.1.184'.freeze
+  VERSION = '0.1.185'.freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: sambot
 version: !ruby/object:Gem::Version
-  version: 0.1.184
+  version: 0.1.185
 platform: ruby
 authors:
 - Olivier Kouame
@@ -429,7 +429,6 @@ files:
 - lib/sambot/templates/test_kitchen/local.yml.erb
 - lib/sambot/templates/test_kitchen/rackspace.yml.erb
 - lib/sambot/templates/vault-config
-- lib/sambot/templates/vault_helper.rb
 - lib/sambot/templates/winrm_config
 - lib/sambot/testing/consul_helper.rb
 - lib/sambot/testing/fixtures.rb

data/lib/sambot/templates/vault_helper.rb

@@ -1,35 +0,0 @@
-require 'yaml'
-require 'vault'
-
-def info(msg)
-  puts msg
-end
-
-def read_secrets(filename)
-  info("Reading the secrets file at '.vault.yml'")
-  contents = File.read(filename)
-  if contents.empty?
-    info("No secrets were found in the '.vault.yml' secrets file")
-  else
-    store_secrets(contents)
-  end
-end
-
-def store_secrets(contents)
-  secrets = YAML.load(contents)
-  secrets.each { |secret| store_secret(secret) }
-end
-
-def store_secret(secret)
-  data = secret['contents']
-  data = File.read(data.gsub(/file::/, '')) if data.start_with?('file::')
-  Vault.logical.write(secret['path'], value: data)
-  puts "Updated the secret located at #{secret['path']}"
-end
-
-filename = File.expand_path(File.join(File.dirname(__FILE__), '../../.vault.yml'))
-if File.exist?(filename)
-  read_secrets(filename)
-else
-  info("No '.vault.yml' file is available so Vault was not populated with any secrets")
-end