stack_master 1.18.0-x64-mingw32 → 2.0.0-x64-mingw32

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: d3532d5cf6c91f4980b7f7f8173a93e39a6aa4ed
-  data.tar.gz: e19a8b88d91d49f20a6f351c9f071c0074e3b5bf
+  metadata.gz: 45cd0b3bcc0dfdb739876ee5a702786b63f5be93
+  data.tar.gz: 97a89dd2dd2c3245837deb358b94cf0ac3467d1e
 SHA512:
-  metadata.gz: d6cb5727e7d430164ab187159baf057bd42dcc423baf2dd84f2c9ea08ed7f2f6d1ad9926b62882f4cf401baa8ac0768a1dc1437518840c71cb26cfe5a007a817
-  data.tar.gz: 3726f1557c815827bd22f2eb1e40708b911b5e03174ecc45ee519be33ea6ce88541499d7a3bf0ecf31267379e9dfa19b223e64fc120e4ab604bac3b675ff452a
+  metadata.gz: 84524c1c665d2462762672a3f4ae624b4b95b2c2c558e231c8d2fc7594b9960c4cc2d9d95a9a36729e9e9f94ed119d75c363c7b8db3773ff7f24192558b79ea0
+  data.tar.gz: 2f7457f4b29501ec8e6b6f4e2aa356ed23403e4991c7c7c648f37432dddbe047b0d909116694b10650d8d3de233aebf3dae2a70e7f74030c9af8820921d9af1c

data/README.md

@@ -25,9 +25,8 @@ are displayed for review.
 - Stack events will be displayed until an end state is reached.
 
 Stack parameters can be dynamically resolved at runtime using one of the
-built in parameter resolvers. Parameters can be sourced from GPG encrypted YAML
-files, other stacks outputs, by querying various AWS APIs to get resource ARNs,
-etc.
+built in parameter resolvers. Parameters can be sourced from other stacks
+outputs, or by querying various AWS APIs to get resource ARNs, etc.
 
 ## Installation
 
@@ -64,13 +63,11 @@ stack_defaults:
   role_arn: service_role_arn
 region_defaults:
   us-east-1:
-    secret_file: production.yml.gpg
     tags:
       environment: production
     notification_arns:
       - test_arn
   ap-southeast-2:
-    secret_file: staging.yml.gpg
     tags:
       environment: staging
 stacks:
@@ -138,7 +135,7 @@ stacks:
 
 - `templates` - CloudFormation, SparkleFormation or CfnDsl templates.
 - `parameters` - Parameters as YAML files.
-- `secrets` - GPG encrypted secret files.
+- `secrets` - encrypted secret files.
 - `policies` - Stack policy JSON files.
 
 ## Templates
@@ -264,35 +261,10 @@ into parameters of dependent stacks.
 
 ### Secret
 
-Note: This resolver is not supported on Windows, you can instead use the [Parameter Store](#parameter-store).
+Note: The GPG parameter resolver has been extracted into a dedicated gem. Please install and
+follow the instructions for the [stack_master-gpg_parameter_resolver] gem.
 
-The secret parameters resolver expects a `secret_file` to be defined in the
-stack definition which is a GPG encrypted YAML file. Once decrypted and parsed,
-the value provided to the secret resolver is used to lookup the associated key
-in the secret file. A common use case for this is to store database passwords.
-
-stack_master.yml:
-
-```yaml
-stacks:
-  us-east-1:
-    my_app:
-      template: my_app.json
-      secret_file: production.yml.gpg
-```
-
-secrets/production.yml.gpg, when decrypted:
-
-```yaml
-db_password: my-password
-```
-
-parameters/my_app.yml:
-
-```yaml
-db_password:
-  secret: db_password
-```
+[stack_master-gpg_parameter_resolver]: https://github.com/envato/stack_master-gpg_parameter_resolver
 
 ### Parameter Store
 

data/lib/stack_master.rb

@@ -70,7 +70,6 @@ module StackMaster
     autoload :AmiFinder, 'stack_master/parameter_resolvers/ami_finder'
     autoload :StackOutput, 'stack_master/parameter_resolvers/stack_output'
     autoload :Ejson, 'stack_master/parameter_resolvers/ejson'
-    autoload :Secret, 'stack_master/parameter_resolvers/secret'
     autoload :SnsTopicName, 'stack_master/parameter_resolvers/sns_topic_name'
     autoload :SecurityGroup, 'stack_master/parameter_resolvers/security_group'
     autoload :LatestAmiByTags, 'stack_master/parameter_resolvers/latest_ami_by_tags'

data/lib/stack_master/commands/apply.rb

@@ -148,7 +148,7 @@ module StackMaster
 
       def upload_files
         return unless use_s3?
-        s3.upload_files(s3_options)
+        s3.upload_files(**s3_options)
       end
 
       def template_method

data/lib/stack_master/stack_definition.rb

@@ -9,7 +9,6 @@ module StackMaster
                   :notification_arns,
                   :base_dir,
                   :template_dir,
-                  :secret_file,
                   :ejson_file,
                   :ejson_file_region,
                   :ejson_file_kms,
@@ -47,7 +46,6 @@ module StackMaster
         @allowed_accounts == other.allowed_accounts &&
         @notification_arns == other.notification_arns &&
         @base_dir == other.base_dir &&
-        @secret_file == other.secret_file &&
         @ejson_file == other.ejson_file &&
         @ejson_file_region == other.ejson_file_region &&
         @ejson_file_kms == other.ejson_file_kms &&

data/lib/stack_master/stack_events/fetcher.rb

@@ -1,8 +1,8 @@
 module StackMaster
   module StackEvents
     class Fetcher
-      def self.fetch(*args)
-        new(*args).fetch
+      def self.fetch(stack_name, region, **args)
+        new(stack_name, region, **args).fetch
       end
 
       def initialize(stack_name, region, from: nil)

data/lib/stack_master/stack_events/streamer.rb

@@ -3,8 +3,8 @@ module StackMaster
     class Streamer
       StackFailed = Class.new(StandardError)
 
-      def self.stream(*args, &block)
-        new(*args, &block).stream
+      def self.stream(stack_name, region, **args, &block)
+        new(stack_name, region, **args, &block).stream
       end
 
       def initialize(stack_name, region, from: Time.now, break_on_finish_state: true, sleep_between_fetches: 1, io: nil, &block)

data/lib/stack_master/version.rb

@@ -1,3 +1,3 @@
 module StackMaster
-  VERSION = "1.18.0"
+  VERSION = "2.0.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: stack_master
 version: !ruby/object:Gem::Version
-  version: 1.18.0
+  version: 2.0.0
 platform: x64-mingw32
 authors:
 - Steve Hodgkiss
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-12-23 00:00:00.000000000 Z
+date: 2020-01-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -462,7 +462,6 @@ files:
 - lib/stack_master/parameter_resolvers/latest_container.rb
 - lib/stack_master/parameter_resolvers/one_password.rb
 - lib/stack_master/parameter_resolvers/parameter_store.rb
-- lib/stack_master/parameter_resolvers/secret.rb
 - lib/stack_master/parameter_resolvers/security_group.rb
 - lib/stack_master/parameter_resolvers/sns_topic_name.rb
 - lib/stack_master/parameter_resolvers/stack_output.rb
@@ -517,8 +516,8 @@ licenses:
 metadata:
   bug_tracker_uri: https://github.com/envato/stack_master/issues
   changelog_uri: https://github.com/envato/stack_master/blob/master/CHANGELOG.md
-  documentation_uri: https://www.rubydoc.info/gems/stack_master/1.18.0
-  source_code_uri: https://github.com/envato/stack_master/tree/v1.18.0
+  documentation_uri: https://www.rubydoc.info/gems/stack_master/2.0.0
+  source_code_uri: https://github.com/envato/stack_master/tree/v2.0.0
 post_install_message: 
 rdoc_options: []
 require_paths:
@@ -527,7 +526,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.1.0
+      version: 2.4.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="

data/lib/stack_master/parameter_resolvers/secret.rb

@@ -1,52 +0,0 @@
-require 'os'
-
-module StackMaster
-  module ParameterResolvers
-    class Secret < Resolver
-      SecretNotFound = Class.new(StandardError)
-      PlatformNotSupported = Class.new(StandardError)
-
-      unless OS.windows?
-        require 'dotgpg'
-        array_resolver  
-      end
-
-      def initialize(config, stack_definition)
-        @config = config
-        @stack_definition = stack_definition
-      end
-
-      def resolve(value)
-        raise PlatformNotSupported, "The GPG Secret Parameter Resolver does not support Windows" if OS.windows?
-        secret_key = value
-        raise ArgumentError, "No secret_file defined for stack definition #{@stack_definition.stack_name} in #{@stack_definition.region}" unless !@stack_definition.secret_file.nil?
-        raise ArgumentError, "Could not find secret file at #{secret_file_path}" unless File.exist?(secret_file_path)
-        secrets_hash.fetch(secret_key) do
-          raise SecretNotFound, "Unable to find key #{secret_key} in file #{secret_file_path}"
-        end
-      end
-
-      private
-
-      def secrets_hash
-        @secrets_hash ||= YAML.load(decrypt_with_dotgpg)
-      end
-
-      def decrypt_with_dotgpg
-        Dotgpg.interactive = true
-        dir = Dotgpg::Dir.closest(secret_file_path)
-        stream = StringIO.new
-        dir.decrypt(secret_path_relative_to_base, stream)
-        stream.string
-      end
-
-      def secret_path_relative_to_base
-        @secret_path_relative_to_base ||= File.join('secrets', @stack_definition.secret_file)
-      end
-
-      def secret_file_path
-        @secret_file_path ||= File.join(@config.base_dir, secret_path_relative_to_base)
-      end
-    end
-  end
-end