terraspace_plugin_azurerm 0.3.2 → 0.3.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bfebfed0cf4e44986ab752e4ff8f642da04b3037b37c869811a49f4cdb6f4959
-  data.tar.gz: 7525c37602f54facae4281a53961a3531f8238aa2931e76cf11e0535a1042fe2
+  metadata.gz: 33dd9bb20fc1cc57ccd1e31f46e52621838ad043b118e67061b0c7b0bf96bf9c
+  data.tar.gz: c3721a61c30ad15870c1858ada72199380c9628572f80a3a0576750266a65b90
 SHA512:
-  metadata.gz: 194ee7307c72d33dabab6067386240c32cadaa995fd064fc25aa9fc61a6027919fe33919afa6b1fc365daf915a7899ef36425516a5ba6ab81fb933143c266dd8
-  data.tar.gz: 4a7a9e4f831682a3e2b0d902537d6a9bab1fea6658dfad7f55115cadb1ea8552cc01ea3cb99e6803c90c1d5577ad8e8aed7fafa455d625d11fd38250ce6c5fd5
+  metadata.gz: 442becc7f22e2b5b3bf1dc6c621a1dd52af1d4696934c3e6fd9dfc83e4f5d723fb5b5aceb29d24ef47b5b7be939a2676d8d205f77422618a31c8f381ce5d468a
+  data.tar.gz: 3e10754d0616e4877c34435cf30da1452eb58cafa938d82d3326ded07670b01cf202d11410ea114a3bb21dc177acadaf9dc4a05b3a524108bb5865ad3fe16d62

data/CHANGELOG.md

@@ -3,6 +3,9 @@
 All notable changes to this project will be documented in this file.
 This project *loosely tries* to adhere to [Semantic Versioning](http://semver.org/).
 
+## [0.3.3] - 2022-01-04
+- [#10](https://github.com/boltops-tools/terraspace_plugin_azurerm/pull/10) azure_secret support expansion automatically
+
 ## [0.3.2] - 2021-11-29
 - [#9](https://github.com/boltops-tools/terraspace_plugin_azurerm/pull/9) change starter resource_group_name to have env
 

data/lib/terraspace_plugin_azurerm/interfaces/helper/secret/fetcher.rb

@@ -4,11 +4,14 @@ class TerraspacePluginAzurerm::Interfaces::Helper::Secret
   class Fetcher
     class Error < StandardError; end
     class VaultNotFoundError < Error; end
+    class VaultNotConfiguredError < Error; end
 
     include TerraspacePluginAzurerm::Logging
     include TerraspacePluginAzurerm::Clients::Options
+    extend Memoist
 
-    def initialize
+    def initialize(mod, options={})
+      @mod, @options = mod, options
       o = base_client_options
       @client_id     = o[:client_id]
       @client_secret = o[:client_secret]
@@ -20,16 +23,21 @@ class TerraspacePluginAzurerm::Interfaces::Helper::Secret
       get_secret(name, opts)
     end
 
-    def get_secret(name, vault: nil, version: nil)
+    def get_secret(name, options={})
+      vault = options[:vault]
+      version = options[:version]
       unless token
         return "ERROR: Unable to authorize and get the temporary token. Double check your ARM_ env variables."
       end
 
       version = "/#{version}" if version
+      check_vault_configured!(vault)
       vault_subdomain = vault.downcase
       # Using Azure REST API since the old gem doesnt support secrets https://github.com/Azure/azure-sdk-for-ruby
       # https://docs.microsoft.com/en-us/rest/api/keyvault/getsecret/getsecret
+      name = expansion(name) if expand?
       url = "https://#{vault_subdomain}.vault.azure.net/secrets/#{name}#{version}?api-version=7.1"
+      logger.debug "Azure vault url #{url}"
       uri = URI(url)
       req = Net::HTTP::Get.new(uri)
       req["Authorization"] = token
@@ -55,6 +63,23 @@ class TerraspacePluginAzurerm::Interfaces::Helper::Secret
       end
     end
 
+    def check_vault_configured!(vault)
+      return if vault
+      logger.error "ERROR: Vault has not been configured or vault option not passed in the azure_secret helper method.".color(:red)
+      logger.error <<~EOL
+        Please configure the Azure KeyVault you want to use.  Example:
+
+        config/plugins/azurerm.rb
+
+            TerraspacePluginAzurerm.configure do |config|
+              config.secrets.vault = "REPLACE_WITH_YOUR_VAULT_NAME"
+            end
+
+        Docs: https://terraspace.cloud/docs/helpers/azure/secrets/
+      EOL
+      raise VaultNotConfiguredError.new
+    end
+
     def send_request(uri, req)
       http = Net::HTTP.new(uri.host, uri.port)
       http.open_timeout = http.read_timeout = 30
@@ -108,5 +133,16 @@ class TerraspacePluginAzurerm::Interfaces::Helper::Secret
         @@token = false
       end
     end
+
+  private
+    delegate :expansion, to: :expander
+    def expander
+      TerraspacePluginAzurerm::Interfaces::Expander.new(@mod)
+    end
+    memoize :expander
+
+    def expand?
+      !(@options[:expansion] == false || @options[:expand] == false)
+    end
   end
 end

data/lib/terraspace_plugin_azurerm/interfaces/helper/secret.rb

@@ -6,8 +6,8 @@ module TerraspacePluginAzurerm::Interfaces::Helper
     include TerraspacePluginAzurerm::Logging
     include TerraspacePluginAzurerm::Clients::Options
 
-    def initialize(options={})
-      @options = options
+    def initialize(mod, options={})
+      @mod, @options = mod, options
       @base64 = options[:base64]
     end
 
@@ -19,7 +19,7 @@ module TerraspacePluginAzurerm::Interfaces::Helper
     end
 
     def fetcher
-      Fetcher.new
+      Fetcher.new(@mod, @options)
     end
     memoize :fetcher
   end

data/lib/terraspace_plugin_azurerm/interfaces/helper.rb

@@ -3,7 +3,7 @@ module TerraspacePluginAzurerm::Interfaces
     include Terraspace::Plugin::Helper::Interface
 
     def azure_secret(name, options={})
-      Secret.new(options).fetch(name, options)
+      Secret.new(@mod, options).fetch(name, options)
     end
     cache_helper :azure_secret
   end

data/lib/terraspace_plugin_azurerm/version.rb

@@ -1,3 +1,3 @@
 module TerraspacePluginAzurerm
-  VERSION = "0.3.2"
+  VERSION = "0.3.3"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: terraspace_plugin_azurerm
 version: !ruby/object:Gem::Version
-  version: 0.3.2
+  version: 0.3.3
 platform: ruby
 authors:
 - Tung Nguyen
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2021-11-29 00:00:00.000000000 Z
+date: 2022-01-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: azure-storage-blob
@@ -179,7 +179,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.6
+rubygems_version: 3.2.32
 signing_key: 
 specification_version: 4
 summary: Terraspace Azurerm Cloud Plugin