sanctum 0.8.6.rc1 → 0.8.6.rc2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b898d2e916e8ec1febdcaaa482017484aa1d2c0d7bb407cd0f1e93fb58615622
-  data.tar.gz: 5f34552ae0916fdce2b8903e0548e3656a60e9f950b1e5a656a9f54d500f78f4
+  metadata.gz: ba4b9d50924b59fe4a6365a89832acc020c03652f9e13328884ef9eb9aa13243
+  data.tar.gz: e9d50c2a7ca6bb056fede8c907f7d6d76dac120882573080840d2bd789a2682e
 SHA512:
-  metadata.gz: d72a9696fc57f35c6eb1da437069ba9eb369aec6ce871095296bdd09b753528ac8eeb5ed3023a52f3ae3826df81a5dd70dda8e19a07bdbf860ebd3fd761de895
-  data.tar.gz: c63d24c16472a5170a54f3da4fa2ba5caf472f5cc5b25bbe3ce2d3bd8c41e087ff8efbc640289b45decdbaf74a7e32e30bbdfa5c8344fc33f4b79054808991cf
+  metadata.gz: d77c68c98546c98277e19ee8b6342cf9de622c9961502450d38a7ea3c2484bc6f65bf372c8a9bad75b3c977721bda24d08d4e22c7e80e46b6dcd0c0ad36da21b
+  data.tar.gz: 78a5cb4094ee395fb9660eb62a78bab20778968179f389180818df04d4774bc88e30a3bd9a9de99b17f44a4453a4d89161820076294ea0a57b84851b1deef2a8

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    sanctum (0.8.6.rc1)
+    sanctum (0.8.6.rc2)
       gli (~> 2.18)
       hashdiff (~> 0.3)
       tty-editor (~> 0.5)

data/lib/sanctum/command/diff_helper.rb

@@ -5,6 +5,11 @@ module Sanctum
     module DiffHelper
 
       def hash_diff(first_hash, second_hash)
+        # Recently changed how data is written to local system and vault
+        # TODO: The transform_values can be removed at a later date
+        first_hash = first_hash.each { |_, v| v.transform_values!(&:to_s) }
+        second_hash = second_hash.each { |_, v| v.transform_values!(&:to_s) }
+
         differences = HashDiff.best_diff(first_hash, second_hash, delimiter: " => ", array_path: true)
 
         differences.each do |diff|
@@ -20,6 +25,11 @@ module Sanctum
       end
 
       def compare_secrets(vault_secrets, local_secrets, name, direction="both")
+        # Recently changed how data is written to local system and vault
+        # TODO: The transform_values can be removed at a later date
+        vault_secrets = vault_secrets.each { |_, v| v.transform_values!(&:to_s) }
+        local_secrets = local_secrets.each { |_, v| v.transform_values!(&:to_s) }
+
         if vault_secrets == local_secrets
           warn yellow("Target #{name}: contains no differences")
         else

data/lib/sanctum/command/sanctum.example.yaml

@@ -44,3 +44,17 @@ sync:
     #transit_key: transit/keys/app-bar
     #secrets_version: 2
     #force: false
+  # Example shows if you need to specify multiple nested prefixs
+  # You will want to namespace the local `path`
+  #- name: app-baz-micro
+    #prefix: app-baz/prod/micro
+    #path: vault/app-baz-micro/prod/micro
+    #transit_key: transit/keys/app-baz-micro
+    #secrets_version: 2
+    #force: false
+  #- name: app-baz-all
+    #prefix: app-baz
+    #path: vault/app-baz-all/prod/micro
+    #transit_key: transit/keys/app-baz-all
+    #secrets_version: 2
+    #force: false

data/lib/sanctum/vault_transit.rb

@@ -33,7 +33,15 @@ module Sanctum
       secrets
     end
 
+    # Writes secrets encrypted with transit to local files
+    #
+    # @param vault_client [VaultClient] client used interact with the vault api
+    # @param secrets [hash] {"/local/path": {key: value}}
+    # @param transit_key [String] key used to encrypt blobs via the transit backend
     def self.write_to_file(vault_client, secrets, transit_key)
+      # Coerce vault data values to strings
+      # To ensure a consistent experience pulling and pushing to vault
+      secrets.each { |_, v| v.transform_values!(&:to_s) }
       secrets = encrypt(vault_client, secrets, transit_key)
       secrets.each do |k, v|
         create_path(k)
@@ -41,8 +49,16 @@ module Sanctum
       end
     end
 
+    # Writes secrets to vault
+    #
+    # @param vault_client [VaultClient] client used to interact with the vault api
+    # @param secrets [hash] {"/vault/path": {key: value}}
+    # @param secrets_version [String] vault backend version[1, 2]
     def self.write_to_vault(vault_client, secrets, secrets_version="1")
       secrets.each do |k, v|
+        # Coerce vault data values to strings
+        # To ensure a consistent experience pulling and pushing to vault
+        v.transform_values!(&:to_s)
         secrets_version == "2" ? vault_client.logical.write(k, data: v) : vault_client.logical.write(k, v)
       end
     end

data/lib/sanctum/version.rb

@@ -1,3 +1,3 @@
 module Sanctum
-  VERSION = "0.8.6.rc1"
+  VERSION = "0.8.6.rc2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sanctum
 version: !ruby/object:Gem::Version
-  version: 0.8.6.rc1
+  version: 0.8.6.rc2
 platform: ruby
 authors:
 - Corban Raun
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-03-08 00:00:00.000000000 Z
+date: 2019-03-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: gli