sanctum 0.8.6.rc2 → 0.8.6.rc3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ba4b9d50924b59fe4a6365a89832acc020c03652f9e13328884ef9eb9aa13243
-  data.tar.gz: e9d50c2a7ca6bb056fede8c907f7d6d76dac120882573080840d2bd789a2682e
+  metadata.gz: 46c1275f8059a02fc701ef91c2e4a8ddab9e5d7221f832ad5d4112d42c13d091
+  data.tar.gz: f06b1944d320cf3a0a1df7f78e928fd1fab95f39f29d422fb53ac5ef0962b86b
 SHA512:
-  metadata.gz: d77c68c98546c98277e19ee8b6342cf9de622c9961502450d38a7ea3c2484bc6f65bf372c8a9bad75b3c977721bda24d08d4e22c7e80e46b6dcd0c0ad36da21b
-  data.tar.gz: 78a5cb4094ee395fb9660eb62a78bab20778968179f389180818df04d4774bc88e30a3bd9a9de99b17f44a4453a4d89161820076294ea0a57b84851b1deef2a8
+  metadata.gz: 283bb7fd1215cc8284da0ef3288791b3008feab3c29e9d3f45d302a0d57371ddb7098e8d98ebacedc988e8753e6bee12a5fbb47de945939fb9fa80b51fae64f4
+  data.tar.gz: 3d070fbbc2cbee3e0ad9150b1d1da64dd7767f48c1968e216f9cc5e08123418b7edf3877866498669a1299f1eaa027e7884048e5f174adcaad47c2d12142d163

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    sanctum (0.8.6.rc2)
+    sanctum (0.8.6.rc3)
       gli (~> 2.18)
       hashdiff (~> 0.3)
       tty-editor (~> 0.5)
@@ -11,7 +11,9 @@ GEM
   remote: https://rubygems.org/
   specs:
     ast (2.4.0)
-    aws-sigv4 (1.0.3)
+    aws-eventstream (1.0.2)
+    aws-sigv4 (1.1.0)
+      aws-eventstream (~> 1.0, >= 1.0.2)
     coderay (1.1.2)
     diff-lcs (1.3)
     equatable (0.5.0)

data/README.md

@@ -76,6 +76,7 @@ sanctum pull   - Pull vault secrets to local files (encrypted).
 sanctum config - Generate an example config file.
 sanctum create - Create an encrypted local file.
 sanctum edit   - Edit an encrypted local file.
+sanctum import - Import an existing plaintext YAML file.
 sanctum view   - View an encrypted local file.
 sanctum update - Update secrets backend to v2 API.
 ```

data/lib/sanctum/cli.rb

@@ -73,6 +73,15 @@ module Sanctum
       end
     end
 
+    desc 'Import a plaintext YAML file'
+    arg_name 'path/to/file path/to/encryptedfile'
+    command :import do |c|
+      common_options c, :targets, :config, :force
+      c.action do |_,_,args|
+        Command::Import.new(@options_hash, args).run
+      end
+    end
+
     desc 'View encrypted file[s]'
     arg_name 'path/to/file'
     command :view do |c|

data/lib/sanctum/command.rb

@@ -10,6 +10,7 @@ require 'sanctum/command/base'
 require 'sanctum/command/check'
 require 'sanctum/command/config'
 require 'sanctum/command/create'
+require 'sanctum/command/import'
 require 'sanctum/command/edit'
 require 'sanctum/command/pull'
 require 'sanctum/command/push'

data/lib/sanctum/command/import.rb

@@ -0,0 +1,56 @@
+require 'fileutils'
+require 'tempfile'
+require 'yaml'
+require 'json'
+
+module Sanctum
+  module Command
+    class Import < Base
+
+      def run(&block)
+        if args.count != '2'
+          source_path,dest_path = args
+          transit_key = determine_transit_key(dest_path, targets)
+
+          if options[:cli][:force]
+            force = options[:cli][:force]
+          end
+
+          import_file(source_path, dest_path, transit_key, force)
+        else
+          raise ArgumentError, red('Please pass the path to both the source and the destination file')
+        end
+      end
+
+      private
+      def import_file(source_path, dest_path, transit_key, force=nil)
+        begin
+          tmp_file = Tempfile.new(File.basename(source_path))
+          FileUtils.cp(source_path, tmp_file)
+
+          previous_contents = File.read(tmp_file.path)
+          TTY::Editor.open(tmp_file.path) unless force
+          contents = File.read(tmp_file.path)
+
+          # Encrypt the data
+          data_hash = {"#{tmp_file.path}" => validate(contents)}
+          write_encrypted_data(vault_client, data_hash, transit_key)
+          tmp_file.close
+
+          FileUtils.cp(tmp_file.path, dest_path)
+
+        rescue Exception => e
+          # If write_encrypted_data failed, data would fail to write to disk
+          # It would be sad to lose that data, at least this would print the contents to the console.
+          puts red("Contents may have failed to write\nError: #{e}")
+          puts yellow("Contents: \n#{contents}")
+        ensure
+          tmp_file.close
+          secure_erase(tmp_file.path, tmp_file.length)
+          tmp_file.unlink
+        end
+      end
+
+    end
+  end
+end

data/lib/sanctum/version.rb

@@ -1,3 +1,3 @@
 module Sanctum
-  VERSION = "0.8.6.rc2"
+  VERSION = "0.8.6.rc3"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sanctum
 version: !ruby/object:Gem::Version
-  version: 0.8.6.rc2
+  version: 0.8.6.rc3
 platform: ruby
 authors:
 - Corban Raun
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-03-12 00:00:00.000000000 Z
+date: 2019-03-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: gli
@@ -180,6 +180,7 @@ files:
 - lib/sanctum/command/diff_helper.rb
 - lib/sanctum/command/edit.rb
 - lib/sanctum/command/editor_helper.rb
+- lib/sanctum/command/import.rb
 - lib/sanctum/command/paths_helper.rb
 - lib/sanctum/command/pull.rb
 - lib/sanctum/command/push.rb