secrets_cli 1.9.0 → 1.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 53a0fb33b59e2c3822709f7f1cd867950891ca681a44fcf283445e74bba4f083
-  data.tar.gz: ba8a2b7ca914db4d63364dccd98b3d6af90bf74c37d56efc1dd1d8cae26806dc
+  metadata.gz: a7c1d5dacd65932996391d02598e8f06d76a7d4f844cdf06b0a2de0ddad05f6e
+  data.tar.gz: 5fe3a3f7002d3f3b1922ad6db4f4d2f485eab1c2fb48d4405aec7893fcebfbca
 SHA512:
-  metadata.gz: 996fa8086874396b8af0b70cf8905d8ae554abec87370e873c62f60a7c287dc01f16589e556bdb0c17fd887a269cf837dbd14b7b4f062dc6a81e187c7f463e44
-  data.tar.gz: cbaa6ac7f1c577924d996b8ad3945fca240eb1f9e27b8c733c00393187916e35b09ee647f6448e63b7b3ea92e918020bbca9a295ba0c87d7e9f6f93bc1a0c3d8
+  metadata.gz: 90fa5d1a00f982fc2bcb49348a960bca4a0756ac9f814536ebaba2131b53d8439cd4b80460515df53e1612fbc7325122164f0627c86a3625e8db6d754c85bc58
+  data.tar.gz: 22a9d89f6d11560f5761b287fbd6c46ada673607bcbc0ca51c407c59b50ff0bf82a64b2a43274d0abd0be4df48e908a2792a374ba753b38110140ac70b2ba108

data/README.md

@@ -29,6 +29,7 @@ The following environment variables need to be set:
 For `vault` itself:
 
     VAULT_ADDR - this is an address to your vault server
+    VAULT_CACERT - if you have a self issued certificate, point this environment variable to the location of the root CA file
 
 For `secrets_cli`:
 
@@ -90,6 +91,16 @@ To read secrets from a different environment, use the `-e` flag:
 
     $ secrets read -e production
 
+### Edit
+
+    $ secrets edit
+
+This will allow you to edit secrets on the fly. You choose which editor to use by defining an `$EDITOR` variable, otherwise it will use one of these: `mate -w`, `vim`, `vi`, `emacs`, `nano`, `pico`
+
+The same flags apply for editing as for reading:
+
+    $ EDIOTR='atom -w' secrets edit -e production
+
 ### Pull
 
     $ secrets pull

data/exe/secrets

@@ -69,6 +69,17 @@ command :read do |c|
   end
 end
 
+command :edit do |c|
+  c.syntax = 'secrets edit [options]'
+  c.summary = 'Use to edit secrets directly in your favorite editor'
+  c.option '-e', '--environment STRING', String, 'Set environment, default: development'
+  c.option '-k', '--secrets_storage_key STRING', String, 'Override secrets_storage_key'
+  c.action do |_args, options|
+    SecretsCli::Vault::Auth.new(options).call
+    SecretsCli::Vault::Edit.new(options).call
+  end
+end
+
 command :list do |c|
   c.syntax = 'secrets list [options]'
   c.summary = 'Use to list all environemnts'

data/lib/secrets_cli.rb

@@ -17,10 +17,9 @@ require 'secrets_cli/vault/list'
 require 'secrets_cli/vault/read'
 require 'secrets_cli/vault/pull'
 require 'secrets_cli/vault/push'
+require 'secrets_cli/vault/edit'
 require 'secrets_cli/version'
 
-# require 'pry'
-
 module SecretsCli
   SECRETS_CONFIG_FILE = '.secrets'.freeze
   SECRETS_FIELD = :secrets

data/lib/secrets_cli/check/secrets.rb

@@ -24,7 +24,7 @@ module SecretsCli
       end
 
       def require_secrets_file?
-        action != :read
+        ![:read, :edit].include?(action)
       end
 
       def missing_secret_storage_key?

data/lib/secrets_cli/vault/auth.rb

@@ -21,16 +21,16 @@ module SecretsCli
       def command
         case auth_method
         when 'github'
-          ::Vault.auth.github(auth_token).auth.policies
+          ::Vault.auth.github(auth_token)
         when 'token'
-          ::Vault.auth.token(auth_token).auth.policies
+          ::Vault.auth.token(auth_token)
         when 'app_id'
-          ::Vault.auth.app_id(auth_app_id, auth_user_id).auth.policies
+          ::Vault.auth.app_id(auth_app_id, auth_user_id)
         when 'approle'
-          ::Vault.auth.approle(auth_role_id, auth_secret_id).auth.policies
+          ::Vault.auth.approle(auth_role_id, auth_secret_id)
         else
           error! "Unknown auth method #{auth_method}"
-        end
+        end.auth.policies
       end
     end
   end

data/lib/secrets_cli/vault/base.rb

@@ -18,12 +18,20 @@ module SecretsCli
       private
 
       def command
-        fail NotImplementedError
+        raise NotImplementedError
       end
 
       def secrets_full_storage_key
         File.join(secrets_storage_key, config.environment)
       end
+
+      def compare(first, second)
+        diff = TTY::File.diff(first, second, verbose: false)
+        return if diff == ''
+        prompt.ok('There are some differences:')
+        pretty_diff(diff)
+        exit 0 unless prompt.yes?('Are you sure you want to override?')
+      end
     end
   end
 end

data/lib/secrets_cli/vault/edit.rb

@@ -0,0 +1,28 @@
+module SecretsCli
+  module Vault
+    class Edit < SecretsCli::Vault::Base
+      def initialize(options)
+        super
+        SecretsCli::Check::Secrets.new(:edit, options).call
+        @secrets_storage_key = options.secrets_storage_key || config.secrets_storage_key
+      end
+
+      private
+
+      attr_reader :secrets_storage_key
+
+      def command
+        secrets = ::Vault.logical.read(secrets_full_storage_key)
+        new_secrets = ask_editor(content(secrets))
+        compare(content(secrets), new_secrets)
+        ::Vault.logical.write(secrets_full_storage_key, SECRETS_FIELD => new_secrets)
+        new_secrets
+      end
+
+      def content(secrets)
+        return '' if secrets.nil?
+        secrets.data[SECRETS_FIELD]
+      end
+    end
+  end
+end

data/lib/secrets_cli/vault/pull.rb

@@ -14,19 +14,11 @@ module SecretsCli
 
       def command
         secrets = super
-        compare(secrets) unless options.ci_mode
+        compare(secrets_file, secrets) unless options.ci_mode
         write(secrets)
         secrets
       end
 
-      def compare(secrets)
-        diff = TTY::File.diff(secrets_file, secrets, verbose: false)
-        return if diff == ''
-        prompt.ok("There are some differences between #{secrets_file} and vault:")
-        pretty_diff(diff)
-        exit 0 unless prompt.yes?("Are you sure you want to override #{secrets_file}?")
-      end
-
       def write(secrets)
         print_verbose("Writing to #{secrets_file}")
         File.open(secrets_path, 'w') { |file| file.write(secrets) }

data/lib/secrets_cli/version.rb

@@ -1,3 +1,3 @@
 module SecretsCli
-  VERSION = '1.9.0'
+  VERSION = '1.10.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: secrets_cli
 version: !ruby/object:Gem::Version
-  version: 1.9.0
+  version: 1.10.0
 platform: ruby
 authors:
 - Stjepan Hadjic
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2018-02-02 00:00:00.000000000 Z
+date: 2018-10-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -151,6 +151,7 @@ files:
 - lib/secrets_cli/prompts/secrets_storage_key.rb
 - lib/secrets_cli/vault/auth.rb
 - lib/secrets_cli/vault/base.rb
+- lib/secrets_cli/vault/edit.rb
 - lib/secrets_cli/vault/list.rb
 - lib/secrets_cli/vault/pull.rb
 - lib/secrets_cli/vault/push.rb