terraspace_plugin_aws 0.2.2 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 02f00424891d3dd2fb55d6c26a3b0f70fd423e5bace9e69c31557a8184c8d657
-  data.tar.gz: a67b077f4eacfea2ad50e7111573183d7f54be493260482c17dd3f80063f9c87
+  metadata.gz: b62c32aa56b1d692d2438f73de9a320cc428b6905b37f622576c0ecb47ae4e08
+  data.tar.gz: 4f3e359016f41e102f4666a5494d76114bad4b0e24ea98530dea4167764643c8
 SHA512:
-  metadata.gz: be16aac9b487ce05c885aa8dab761481792cb7fbbb29e46d3280f2d2caf204a62e64401d7f0bb7a77ee82edeb947705f42dbd46d8813ec4a991138a3278711ce
-  data.tar.gz: 5a519f3d261f8406196a1251fce341779ec521fbef270eda820577a37b7be20a0411861160a687571f708d396a16140eac46afbac1496a5ea7dab154d716803f
+  metadata.gz: 2db6fa9293af079f29af0823e77176a26b8b5634bdc03a4cf057add8c5b945b53adf58e48ab5bf84758ad219bff3298428e129545a977db0b7a6e9aff8c53391
+  data.tar.gz: bad12d3090b11d5320e0636b3abfd2ad5722963ad48ae7a96f58864e716b1150fbde41bc96ad4da097e9a13cf723333b67bae2f1f8295aae61ef31d15c24d440

data/CHANGELOG.md

@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 This project *loosely tries* to adhere to [Semantic Versioning](http://semver.org/).
 
+## [0.3.0] - 2020-11-15
+- [#5](https://github.com/boltops-tools/terraspace_plugin_aws/pull/5) helper and secrets support
+- aws_secret and aws_ssm helpers
+
 ## [0.2.2]
 - #4 default access logging to false
 - set prefix to @folder for performance improvement

data/lib/templates/hcl/project/config/terraform/backend.tf.tt

@@ -1,7 +1,7 @@
 terraform {
   backend "s3" {
-    bucket         = "<%%= expansion('terraform-state-:ACCOUNT-:REGION-:ENV') %>"     # expanded by terraspace IE: terraform-state-112233445566-us-west-2-dev
-    key            = "<%%= expansion(':REGION/:ENV/:BUILD_DIR/terraform.tfstate') %>" # expanded by terraspace IE: us-west-2/dev/modules/vm/terraform.tfstate
+    bucket         = "<%%= expansion('terraform-state-:ACCOUNT-:REGION-:ENV') %>"
+    key            = "<%%= expansion(':REGION/:ENV/:BUILD_DIR/terraform.tfstate') %>"
     region         = "<%%= expansion(':REGION') %>"
     encrypt        = true
     dynamodb_table = "terraform_locks"

data/lib/terraspace_plugin_aws.rb

@@ -22,12 +22,22 @@ module TerraspacePluginAws
     Interfaces::Config.instance.config
   end
 
+  @@logger = nil
+  def logger
+    @@logger ||= Terraspace.logger
+  end
+
+  def logger=(v)
+    @@logger = v
+  end
+
   extend self
 end
 
 Terraspace::Plugin.register("aws",
   backend: "s3",
   config_class: TerraspacePluginAws::Interfaces::Config,
-  layer_class: TerraspacePluginAws::Interfaces::Layer, # used for layering
+  helper_class: TerraspacePluginAws::Interfaces::Helper,
+  layer_class: TerraspacePluginAws::Interfaces::Layer,
   root: File.dirname(__dir__),
 )

data/lib/terraspace_plugin_aws/autoloader.rb

@@ -4,7 +4,7 @@ module TerraspacePluginAws
   class Autoloader
     class Inflector < Zeitwerk::Inflector
       def camelize(basename, _abspath)
-        map = { cli: "CLI", version: "VERSION" }
+        map = { cli: "CLI", ssm: "SSM", version: "VERSION" }
         map[basename.to_sym] || super
       end
     end

data/lib/terraspace_plugin_aws/clients.rb

@@ -1,5 +1,7 @@
 require "aws-sdk-dynamodb"
 require "aws-sdk-s3"
+require "aws-sdk-secretsmanager"
+require "aws-sdk-ssm"
 
 module TerraspacePluginAws
   module Clients
@@ -10,6 +12,16 @@ module TerraspacePluginAws
     end
     memoize :s3
 
+    def secretsmanager
+      Aws::SecretsManager::Client.new
+    end
+    memoize :secretsmanager
+
+    def ssm
+      Aws::SSM::Client.new
+    end
+    memoize :ssm
+
     def dynamodb
       Aws::DynamoDB::Client.new
     end

data/lib/terraspace_plugin_aws/interfaces/backend/base.rb

@@ -3,13 +3,10 @@ require "s3-secure"
 class TerraspacePluginAws::Interfaces::Backend
   class Base
     include TerraspacePluginAws::Clients
+    include TerraspacePluginAws::Logging
 
     def initialize(info)
       @info = info
     end
-
-    def logger
-      Terraspace.logger
-    end
   end
 end

data/lib/terraspace_plugin_aws/interfaces/helper.rb

@@ -0,0 +1,15 @@
+module TerraspacePluginAws::Interfaces
+  module Helper
+    include Terraspace::Plugin::Helper::Interface
+
+    def aws_secret(name, options={})
+      Secret.new(options).fetch(name)
+    end
+    cache_helper :aws_secret
+
+    def aws_ssm(name, options={})
+      SSM.new(options).fetch(name)
+    end
+    cache_helper :aws_ssm
+  end
+end

data/lib/terraspace_plugin_aws/interfaces/helper/secret.rb

@@ -0,0 +1,18 @@
+module TerraspacePluginAws::Interfaces::Helper
+  class Secret < SecretBase
+    def fetch(secret_id)
+      value = fetch_value(secret_id)
+      value = Base64.strict_encode64(value).strip if @base64
+      value
+    end
+
+    def fetch_value(secret_id)
+      secret_value = secretsmanager.get_secret_value(secret_id: secret_id)
+      secret_value.secret_string
+    rescue Aws::SecretsManager::Errors::ResourceNotFoundException => e
+      logger.info "WARN: secret_id #{secret_id} not found".color(:yellow)
+      logger.info e.message
+      "NOT FOUND #{secret_id}" # simple string so Kubernetes YAML is valid
+    end
+  end
+end

data/lib/terraspace_plugin_aws/interfaces/helper/secret_base.rb

@@ -0,0 +1,13 @@
+require "base64"
+
+module TerraspacePluginAws::Interfaces::Helper
+  class SecretBase
+    include TerraspacePluginAws::Clients
+    include TerraspacePluginAws::Logging
+
+    def initialize(options={})
+      @options = options
+      @base64 = options[:base64]
+    end
+  end
+end

data/lib/terraspace_plugin_aws/interfaces/helper/ssm.rb

@@ -0,0 +1,18 @@
+module TerraspacePluginAws::Interfaces::Helper
+  class SSM < SecretBase
+    def fetch(name)
+      value = fetch_value(name)
+      value = Base64.strict_encode64(value).strip if @base64
+      value
+    end
+
+    def fetch_value(name)
+      resp = ssm.get_parameter(name: name, with_decryption: true)
+      resp.parameter.value
+    rescue Aws::SSM::Errors::ParameterNotFound => e
+      logger.info "WARN: name #{name} not found".color(:yellow)
+      logger.info e.message
+      "NOT FOUND #{name}" # simple string so tfvars valid
+    end
+  end
+end

data/lib/terraspace_plugin_aws/logging.rb

@@ -0,0 +1,7 @@
+module TerraspacePluginAws
+  module Logging
+    def logger
+      Terraspace.logger
+    end
+  end
+end

data/lib/terraspace_plugin_aws/version.rb

@@ -1,3 +1,3 @@
 module TerraspacePluginAws
-  VERSION = "0.2.2"
+  VERSION = "0.3.0"
 end

data/terraspace_plugin_aws.gemspec

@@ -24,6 +24,8 @@ Gem::Specification.new do |spec|
 
   spec.add_dependency "aws-sdk-dynamodb"
   spec.add_dependency "aws-sdk-s3"
+  spec.add_dependency "aws-sdk-secretsmanager"
+  spec.add_dependency "aws-sdk-ssm"
   spec.add_dependency "aws_data"
   spec.add_dependency "memoist"
   spec.add_dependency "s3-secure"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: terraspace_plugin_aws
 version: !ruby/object:Gem::Version
-  version: 0.2.2
+  version: 0.3.0
 platform: ruby
 authors:
 - Tung Nguyen
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-09-20 00:00:00.000000000 Z
+date: 2020-11-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-dynamodb
@@ -38,6 +38,34 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: aws-sdk-secretsmanager
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: aws-sdk-ssm
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: aws_data
   requirement: !ruby/object:Gem::Requirement
@@ -149,8 +177,13 @@ files:
 - lib/terraspace_plugin_aws/interfaces/decorator/aws_security_group.rb
 - lib/terraspace_plugin_aws/interfaces/decorator/base.rb
 - lib/terraspace_plugin_aws/interfaces/expander.rb
+- lib/terraspace_plugin_aws/interfaces/helper.rb
+- lib/terraspace_plugin_aws/interfaces/helper/secret.rb
+- lib/terraspace_plugin_aws/interfaces/helper/secret_base.rb
+- lib/terraspace_plugin_aws/interfaces/helper/ssm.rb
 - lib/terraspace_plugin_aws/interfaces/layer.rb
 - lib/terraspace_plugin_aws/interfaces/summary.rb
+- lib/terraspace_plugin_aws/logging.rb
 - lib/terraspace_plugin_aws/version.rb
 - terraspace_plugin_aws.gemspec
 homepage: https://github.com/boltops-tools/terraspace_plugin_aws
@@ -173,7 +206,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.2
+rubygems_version: 3.1.4
 signing_key: 
 specification_version: 4
 summary: Terraspace AWS Plugin