super_top_secret 0.1.6 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: a9ed2b2e800813e1439cd9fc93f5aa50177b2474
-  data.tar.gz: 24e39b751fde5488fa2bb9f3acbb66fded3199b4
+  metadata.gz: 02c43bd4c3d8138ac3924000e9f4f9cf8a3d24c9
+  data.tar.gz: b561a558a03f7497cb9ce751fe6770a93562cf50
 SHA512:
-  metadata.gz: 4caf194d1d6bbd502044864580d59662ceb386e4b0bfa763665f9984648ec0fc2ab3a0a0c85d01b27ca6af3916aa4edfee508e5b5ccc5d213ba18f69e4897359
-  data.tar.gz: e6d63a7a5b94a96e924820ef949777730a7afc29c36c88a7d8c399b6eea2df48ab257ce5530c56003296d97e909dc4ac55ab63b8993914393a9f7f9ab76b1773
+  metadata.gz: 62b15cb51a0c53981c7bd47fde9cd15b1ef5a9b285c392285f6fb315715cefb656e0b2fb316d24d9bcb35212a3655ab07322e40de27b2edede2de6b335c3baa6
+  data.tar.gz: 7b180f316f722c08e86e835bf9900d82a7c03891062014c6d140119264fb5c9e0a93e44225296f0c6ea228c6ea9b7ce468c0a95cd68f4487b53b64d20c457b2f

data/lib/super_top_secret/Injector.rb

@@ -0,0 +1,27 @@
+module SuperTopSecret
+
+  class Injector
+    def self.generate_config(app_file, secret_file)
+      app_hash = YAML.load(File.read(app_file))
+      secret_hash = YAML.load(File.read(secret_file))
+
+      injected_hash = {}
+
+      app_hash.each do |key, val|
+        if val.class == Hash # inside inner hash
+          val.each do |nested_key, nested_val|
+            nested_val = secret_hash[key][nested_val] if nested_val.include?("53CR3T_")
+            injected_hash[key] = val
+            injected_hash[key][nested_key] = nested_val
+          end
+        else # top level hash
+          val = secret_hash[val] if val.include?("53CR3T_")
+          injected_hash[key] = val
+        end
+      end
+
+      File.open("config/application.yml", "w+"){|f| f.write(injected_hash.to_yaml)}
+    end
+  end
+
+end

data/lib/super_top_secret/version.rb

@@ -1,3 +1,3 @@
 module SuperTopSecret
-  VERSION = '0.1.6'
+  VERSION = '0.2.0'
 end

data/lib/super_top_secret.rb

@@ -1,3 +1,4 @@
 module SuperTopSecret
-  require 'super_top_secret/railtie' if defined?(Rails)
+  require 'super_top_secret/railtie'
+  require 'super_top_secret/injector'
 end

data/lib/tasks/super_top_secret_tasks.rake

@@ -1,21 +1,29 @@
 namespace :secrets do
   desc "Decrypt your secrets rake secrets:decrypt"
   task :decrypt do
-    puts "Decrypting your files, sir and/or madam. Whatever you are, your files are being worked on."
-    %w(config/application.yml config/database.yml).each do |p|
-      if File.file?("#{p}.enc")
-        sh("aws kms decrypt --ciphertext-blob fileb://#{p}.enc --output text --query Plaintext | base64 --decode > #{p}")
-      end
+    puts "Decrypting your file, sir and/or madam. Whatever you are, your file is being worked on."
+    if File.file?("config/application_secrets.yml.enc")
+      sh("aws kms decrypt --ciphertext-blob fileb://config/application_secrets.yml.enc --output text --query Plaintext | base64 --decode > config/application_secrets.yml")
     end
   end
 
   desc "Encrypt your secrets rake secrets:encrypt"
   task :encrypt do
-    puts "Encrypting your files, sir and/or madam. Whatever you are, your files are being worked on."
-    %w(config/application.yml config/database.yml).each do |p|
-      if File.file?(p)
-        sh("aws kms encrypt --key-id arn:aws:kms:us-west-2:155751353262:alias/properties --plaintext fileb://#{p} --output text --query CiphertextBlob | base64 --decode > #{p}.enc")
-      end
+    puts "Encrypting your file, sir and/or madam. Whatever you are, your file is being worked on."
+    if File.file?("config/application_secrets.yml")
+      sh("aws kms encrypt --key-id arn:aws:kms:us-west-2:155751353262:alias/properties --plaintext fileb://config/application_secrets.yml --output text --query CiphertextBlob | base64 --decode > config/application_secrets.yml.enc")
     end
   end
+
+  desc "Inject your secrets into your application.yml"
+  task :inject do
+    if File.file?("config/application_keys.yml") && File.file?("config/application_secrets.yml")
+      puts "Injecting your files, sir and/or madam. Whatever you are, your files are being worked on."
+      SuperTopSecret::Injector.generate_config("config/application_keys.yml", "config/application_secrets.yml")
+    else
+      puts "File(s) missing. config/application_keys.yml && config/application_secrets.yml are both required."
+      return
+    end
+
+  end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: super_top_secret
 version: !ruby/object:Gem::Version
-  version: 0.1.6
+  version: 0.2.0
 platform: ruby
 authors:
 - Cody Stringham
@@ -49,6 +49,7 @@ files:
 - README.md
 - Rakefile
 - lib/super_top_secret.rb
+- lib/super_top_secret/Injector.rb
 - lib/super_top_secret/railtie.rb
 - lib/super_top_secret/version.rb
 - lib/tasks/super_top_secret_tasks.rake