secrets_cli 1.6.0 → 1.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 8864c1b4454dfc4f453aef217c0709be35697347
-  data.tar.gz: 52dac7597cd7ee33afc8ea6b8f5676cd48f7e2b9
+  metadata.gz: 3b46cea0788b5373f0498f402bd1b5f12a9ec7cd
+  data.tar.gz: eaf28daf5525ac3228d0b72c967162219846c363
 SHA512:
-  metadata.gz: 2e16b34330c0f5bd1baff5672536d91a300fab81fb1cb2dba66d5247de5c16a7090bca9156d4f05838d718998116ef9cebb93712b4fc92d3adb9bdb8e6eeed18
-  data.tar.gz: 9f8bc89e94bb21bebc35cba307b4383d38a779cb9cf85769b8e3572b765c48cbadfd321d47441ed393d805764a0c6991e4071ef593044f9a523c15e4c21640fd
+  metadata.gz: 2f7201d35de52f516793c6e9f4593c1dcaeed114b08fb3d85ead9d5e4f5556aa7e14bcde84c54813c9a9d7bb5e7e74895ddc19b7854ec2b10e7e276d7debfb90
+  data.tar.gz: b0ffcde8c188ff4089f24adf5664ef97bcb200a1548798791443044c0fce9643e9c77d60190df535fea4b5f16963b63544d9cb3944df5f1fa2459c009deb3222

data/lib/secrets_cli/check/vault.rb

@@ -12,9 +12,12 @@ module SecretsCli
       def call
         error! 'Missing VAULT_ADDR env' if ENV['VAULT_ADDR'].nil?
         error! 'Missing VAULT_AUTH_METHOD env' if missing_auth_method?
-        if auth_method == 'app_id'
+        case auth_method
+        when 'app_id'
           error! 'Missing VAULT_AUTH_APP_ID' if missing_auth_app_id?
           error! 'Missing VAULT_AUTH_USER_ID' if missing_auth_user_id?
+        when 'approle'
+          error! 'Missing VAULT_AUTH_ROLE_ID' if missing_auth_role_id?
         else
           error! 'Missing VAULT_AUTH_TOKEN env' if missing_auth_token?
         end
@@ -38,6 +41,10 @@ module SecretsCli
         options.auth_user_id.nil? && ENV['VAULT_AUTH_USER_ID'].nil?
       end
 
+      def missing_auth_role_id?
+        options.auth_role_id.nil? && ENV['VAULT_AUTH_ROLE_ID'].nil?
+      end
+
       def auth_method
         ENV['VAULT_AUTH_METHOD']
       end

data/lib/secrets_cli/vault/auth.rb

@@ -6,15 +6,17 @@ module SecretsCli
       def initialize(options)
         super
         SecretsCli::Check::Vault.new(options).call
-        @auth_method = ENV['VAULT_AUTH_METHOD']
-        @auth_token = ENV['VAULT_AUTH_TOKEN']
-        @auth_app_id = ENV['VAULT_AUTH_APP_ID']
-        @auth_user_id = ENV['VAULT_AUTH_USER_ID']
+        @auth_method    = ENV['VAULT_AUTH_METHOD']
+        @auth_token     = ENV['VAULT_AUTH_TOKEN']
+        @auth_app_id    = ENV['VAULT_AUTH_APP_ID']
+        @auth_user_id   = ENV['VAULT_AUTH_USER_ID']
+        @auth_role_id   = ENV['VAULT_AUTH_ROLE_ID']
+        @auth_secret_id = ENV['VAULT_AUTH_SECRET_ID']
       end
 
       private
 
-      attr_reader :auth_token, :auth_method, :auth_app_id, :auth_user_id
+      attr_reader :auth_token, :auth_method, :auth_app_id, :auth_user_id, :auth_role_id, :auth_secret_id
 
       def command
         case auth_method
@@ -24,6 +26,8 @@ module SecretsCli
           ::Vault.auth.token(auth_token).auth.policies
         when 'app_id'
           ::Vault.auth.app_id(auth_app_id, auth_user_id).auth.policies
+        when 'approle'
+          ::Vault.auth.approle(auth_role_id, auth_secret_id).auth.policies
         else
           error! "Unknown auth method #{auth_method}"
         end

data/lib/secrets_cli/version.rb

@@ -1,3 +1,3 @@
 module SecretsCli
-  VERSION = '1.6.0'
+  VERSION = '1.7.0'
 end

data/secrets_cli.gemspec

@@ -34,5 +34,5 @@ Gem::Specification.new do |spec|
   spec.add_runtime_dependency 'commander'
   spec.add_runtime_dependency 'tty-prompt'
   spec.add_runtime_dependency 'tty-file'
-  spec.add_runtime_dependency 'vault', '~> 0.5.0'
+  spec.add_runtime_dependency 'vault', '~> 0.7'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: secrets_cli
 version: !ruby/object:Gem::Version
-  version: 1.6.0
+  version: 1.7.0
 platform: ruby
 authors:
 - Stjepan Hadjic
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-03-30 00:00:00.000000000 Z
+date: 2017-10-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.5.0
+        version: '0.7'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.5.0
+        version: '0.7'
 description: 
 email:
 - d4be4st@gmail.com
@@ -176,7 +176,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.5.1
+rubygems_version: 2.6.11
 signing_key: 
 specification_version: 4
 summary: This is a CLI for easier use of https://www.vaultproject.io/