secrets_cli 1.6.0 → 1.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. checksums.yaml +4 -4
  2. data/lib/secrets_cli/check/vault.rb +8 -1
  3. data/lib/secrets_cli/vault/auth.rb +9 -5
  4. data/lib/secrets_cli/version.rb +1 -1
  5. data/secrets_cli.gemspec +1 -1
  6. metadata +5 -5
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: 8864c1b4454dfc4f453aef217c0709be35697347
4
- data.tar.gz: 52dac7597cd7ee33afc8ea6b8f5676cd48f7e2b9
3
+ metadata.gz: 3b46cea0788b5373f0498f402bd1b5f12a9ec7cd
4
+ data.tar.gz: eaf28daf5525ac3228d0b72c967162219846c363
5
5
  SHA512:
6
- metadata.gz: 2e16b34330c0f5bd1baff5672536d91a300fab81fb1cb2dba66d5247de5c16a7090bca9156d4f05838d718998116ef9cebb93712b4fc92d3adb9bdb8e6eeed18
7
- data.tar.gz: 9f8bc89e94bb21bebc35cba307b4383d38a779cb9cf85769b8e3572b765c48cbadfd321d47441ed393d805764a0c6991e4071ef593044f9a523c15e4c21640fd
6
+ metadata.gz: 2f7201d35de52f516793c6e9f4593c1dcaeed114b08fb3d85ead9d5e4f5556aa7e14bcde84c54813c9a9d7bb5e7e74895ddc19b7854ec2b10e7e276d7debfb90
7
+ data.tar.gz: b0ffcde8c188ff4089f24adf5664ef97bcb200a1548798791443044c0fce9643e9c77d60190df535fea4b5f16963b63544d9cb3944df5f1fa2459c009deb3222
data/lib/secrets_cli/check/vault.rb CHANGED
@@ -12,9 +12,12 @@ module SecretsCli
12
12
  def call
13
13
  error! 'Missing VAULT_ADDR env' if ENV['VAULT_ADDR'].nil?
14
14
  error! 'Missing VAULT_AUTH_METHOD env' if missing_auth_method?
15
- if auth_method == 'app_id'
15
+ case auth_method
16
+ when 'app_id'
16
17
  error! 'Missing VAULT_AUTH_APP_ID' if missing_auth_app_id?
17
18
  error! 'Missing VAULT_AUTH_USER_ID' if missing_auth_user_id?
19
+ when 'approle'
20
+ error! 'Missing VAULT_AUTH_ROLE_ID' if missing_auth_role_id?
18
21
  else
19
22
  error! 'Missing VAULT_AUTH_TOKEN env' if missing_auth_token?
20
23
  end
@@ -38,6 +41,10 @@ module SecretsCli
38
41
  options.auth_user_id.nil? && ENV['VAULT_AUTH_USER_ID'].nil?
39
42
  end
40
43
 
44
+ def missing_auth_role_id?
45
+ options.auth_role_id.nil? && ENV['VAULT_AUTH_ROLE_ID'].nil?
46
+ end
47
+
41
48
  def auth_method
42
49
  ENV['VAULT_AUTH_METHOD']
43
50
  end
data/lib/secrets_cli/vault/auth.rb CHANGED
@@ -6,15 +6,17 @@ module SecretsCli
6
6
  def initialize(options)
7
7
  super
8
8
  SecretsCli::Check::Vault.new(options).call
9
- @auth_method = ENV['VAULT_AUTH_METHOD']
10
- @auth_token = ENV['VAULT_AUTH_TOKEN']
11
- @auth_app_id = ENV['VAULT_AUTH_APP_ID']
12
- @auth_user_id = ENV['VAULT_AUTH_USER_ID']
9
+ @auth_method = ENV['VAULT_AUTH_METHOD']
10
+ @auth_token = ENV['VAULT_AUTH_TOKEN']
11
+ @auth_app_id = ENV['VAULT_AUTH_APP_ID']
12
+ @auth_user_id = ENV['VAULT_AUTH_USER_ID']
13
+ @auth_role_id = ENV['VAULT_AUTH_ROLE_ID']
14
+ @auth_secret_id = ENV['VAULT_AUTH_SECRET_ID']
13
15
  end
14
16
 
15
17
  private
16
18
 
17
- attr_reader :auth_token, :auth_method, :auth_app_id, :auth_user_id
19
+ attr_reader :auth_token, :auth_method, :auth_app_id, :auth_user_id, :auth_role_id, :auth_secret_id
18
20
 
19
21
  def command
20
22
  case auth_method
@@ -24,6 +26,8 @@ module SecretsCli
24
26
  ::Vault.auth.token(auth_token).auth.policies
25
27
  when 'app_id'
26
28
  ::Vault.auth.app_id(auth_app_id, auth_user_id).auth.policies
29
+ when 'approle'
30
+ ::Vault.auth.approle(auth_role_id, auth_secret_id).auth.policies
27
31
  else
28
32
  error! "Unknown auth method #{auth_method}"
29
33
  end
data/lib/secrets_cli/version.rb CHANGED
@@ -1,3 +1,3 @@
1
1
  module SecretsCli
2
- VERSION = '1.6.0'
2
+ VERSION = '1.7.0'
3
3
  end
data/secrets_cli.gemspec CHANGED
@@ -34,5 +34,5 @@ Gem::Specification.new do |spec|
34
34
  spec.add_runtime_dependency 'commander'
35
35
  spec.add_runtime_dependency 'tty-prompt'
36
36
  spec.add_runtime_dependency 'tty-file'
37
- spec.add_runtime_dependency 'vault', '~> 0.5.0'
37
+ spec.add_runtime_dependency 'vault', '~> 0.7'
38
38
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: secrets_cli
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.6.0
4
+ version: 1.7.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Stjepan Hadjic
8
8
  autorequire:
9
9
  bindir: exe
10
10
  cert_chain: []
11
- date: 2017-03-30 00:00:00.000000000 Z
11
+ date: 2017-10-30 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: bundler
@@ -114,14 +114,14 @@ dependencies:
114
114
  requirements:
115
115
  - - "~>"
116
116
  - !ruby/object:Gem::Version
117
- version: 0.5.0
117
+ version: '0.7'
118
118
  type: :runtime
119
119
  prerelease: false
120
120
  version_requirements: !ruby/object:Gem::Requirement
121
121
  requirements:
122
122
  - - "~>"
123
123
  - !ruby/object:Gem::Version
124
- version: 0.5.0
124
+ version: '0.7'
125
125
  description:
126
126
  email:
127
127
  - d4be4st@gmail.com
@@ -176,7 +176,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
176
176
  version: '0'
177
177
  requirements: []
178
178
  rubyforge_project:
179
- rubygems_version: 2.5.1
179
+ rubygems_version: 2.6.11
180
180
  signing_key:
181
181
  specification_version: 4
182
182
  summary: This is a CLI for easier use of https://www.vaultproject.io/