secrets_cli 1.7.0 → 1.8.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 3b46cea0788b5373f0498f402bd1b5f12a9ec7cd
-  data.tar.gz: eaf28daf5525ac3228d0b72c967162219846c363
+SHA256:
+  metadata.gz: 5f4e5fa55b2abbfd5be5a5f3da7c5a9a4a8679ff50b3023a04c70e15e0f93326
+  data.tar.gz: '097bf36c06562f0f36115316629741c5106882d66e265890ebfffdce57bed132'
 SHA512:
-  metadata.gz: 2f7201d35de52f516793c6e9f4593c1dcaeed114b08fb3d85ead9d5e4f5556aa7e14bcde84c54813c9a9d7bb5e7e74895ddc19b7854ec2b10e7e276d7debfb90
-  data.tar.gz: b0ffcde8c188ff4089f24adf5664ef97bcb200a1548798791443044c0fce9643e9c77d60190df535fea4b5f16963b63544d9cb3944df5f1fa2459c009deb3222
+  metadata.gz: 4c09fe3b51acae59593df39c2d984226e01608071fcf3777aa4371b2981b21b8f2f176e9d0f8a04705b624113e99bd6af3f4b596cdc54e894c699c9441567bde
+  data.tar.gz: 39ee66eaef512340eacd536a52dcb908311d44cb1effd9b8b6f12abef51dccf665ac047232965cd0442f0a2f3085d30a7740bd587da7cc4d73c3bea47069acca

data/README.md

@@ -32,10 +32,12 @@ For `vault` itself:
 
 For `secrets_cli`:
 
-    VAULT_AUTH_METHOD - this is auth method ('github', 'token' or 'app_id' supported for now)
+    VAULT_AUTH_METHOD - this is auth method ('github', 'token', 'app_id' and 'approle' supported for now)
     VAULT_AUTH_TOKEN - this is vault auth token
-    VAULT_AUTH_APP_ID - machine app_id
-    VAULT_AUTH_USER_ID - machine user_id which matches app_id
+    VAULT_AUTH_APP_ID - machine app_id (for app_id auth)
+    VAULT_AUTH_USER_ID - machine user_id which matches app_id (for app_id auth)
+    VAULT_AUTH_ROLE_id - machine role_id (for approle auth)
+    VAULT_AUTH_SECRET_ID - machine secret_id which matches role_id (for approle auth)
 
 For github token you only need `read:org` permissions.
 

data/lib/secrets_cli/check/secrets.rb

@@ -3,15 +3,17 @@ module SecretsCli
     class Secrets
       include SecretsCli::Helpers
 
+      attr_reader :action
       attr_reader :options
 
-      def initialize(options)
+      def initialize(action, options)
+        @action = action
         @options = options
       end
 
       def call
         error! 'Missing .secrets' unless File.exist?('.secrets')
-        error! 'Missing secrets_file' if missing_secret_file?
+        error! 'Missing secrets_file' if require_secrets_file? && missing_secret_file?
         error! 'Missing secrets_storage_key' if missing_secret_storage_key?
       end
 
@@ -21,6 +23,10 @@ module SecretsCli
         options.secrets_file.nil? && config.secrets_file.nil?
       end
 
+      def require_secrets_file?
+        action != :read
+      end
+
       def missing_secret_storage_key?
         options.secrets_storage_key && config.secrets_storage_key.nil?
       end

data/lib/secrets_cli/vault/pull.rb

@@ -5,7 +5,7 @@ module SecretsCli
 
       def initialize(options)
         super
-        SecretsCli::Check::Secrets.new(options).call
+        SecretsCli::Check::Secrets.new(:pull, options).call
         @secrets_file = options.secrets_file || config.secrets_file
         @secrets_dir = options.secrets_dir || '.'
       end

data/lib/secrets_cli/vault/push.rb

@@ -5,7 +5,7 @@ module SecretsCli
 
       def initialize(options)
         super
-        SecretsCli::Check::Secrets.new(options).call
+        SecretsCli::Check::Secrets.new(:push, options).call
         @secrets_storage_key = options.secrets_storage_key || config.secrets_storage_key
         @secrets_file = options.secrets_file || config.secrets_file
         @secrets = File.read(secrets_file)

data/lib/secrets_cli/vault/read.rb

@@ -4,7 +4,7 @@ module SecretsCli
       def initialize(options)
         super
         options.default(verbose: !options.ci_mode)
-        SecretsCli::Check::Secrets.new(options).call
+        SecretsCli::Check::Secrets.new(:read, options).call
         @secrets_storage_key = options.secrets_storage_key || config.secrets_storage_key
       end
 

data/lib/secrets_cli/version.rb

@@ -1,3 +1,3 @@
 module SecretsCli
-  VERSION = '1.7.0'
+  VERSION = '1.8.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: secrets_cli
 version: !ruby/object:Gem::Version
-  version: 1.7.0
+  version: 1.8.0
 platform: ruby
 authors:
 - Stjepan Hadjic
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-10-30 00:00:00.000000000 Z
+date: 2018-01-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -176,7 +176,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.11
+rubygems_version: 2.7.3
 signing_key: 
 specification_version: 4
 summary: This is a CLI for easier use of https://www.vaultproject.io/