tfwrapper 0.6.2 → 0.6.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4a404a81c05bcc07e29ef34eef1d881aa9c47faa1e5ba0ed127a34b8ae1202c5
-  data.tar.gz: f0078c62815fd5d7e49c14d201d9da2154ed91f6c4786a7a7be65914582cd4d8
+  metadata.gz: d800160edbaa04ea415c64a6153496bc11ac26134f37cdec619ad79f1ac790f7
+  data.tar.gz: 3052aaa38b88c2faaebbbe3e924d693eb2acfed70ed5ea9f201bd1eeebbe8921
 SHA512:
-  metadata.gz: db129accb7e439c570ca8a8eb2d56a259acb98221a5acf5e451cc4aa44516627abd6e29603574abbf4dcd16c968b58607552bbec3a1b50ce7df44de9659968a7
-  data.tar.gz: f9f99bcc2e51e2aa4cedabd0e1179a1954dbc3e3e4d44149ab2d171218cc6e55a940ef2372869c6cd694c77be0282d5230f7a7d142eaea53479794c78550e810
+  metadata.gz: 2927add435fcb35ff775884b748a5c1e2ab3c5ae8ab3766dd53c32cae56dcbaba33c80d7d5e39a94133bdad9bb822c32a81bc2c58627872e795fd818c5e151fa
+  data.tar.gz: 2510df4efa55b5f7c304c073afea722ef85a22218c8ad8b6374a4c2f8ca5d903de926be3a4218f7c49e4c6c1a51b05a5c40197f602e8b370e7a4dc4087428245

data/ChangeLog.md

@@ -1,3 +1,7 @@
+Version 0.6.3
+
+  - Fix bug with ``tf_sensitive_vars``. Prevent values from being printed in ``update_consul_stack_env_vars``.
+
 Version 0.6.2
 
   - Add ``tf_sensitive_vars`` option.

data/README.md

@@ -345,7 +345,7 @@ require 'tfwrapper/raketasks'
 
 TFWrapper::RakeTasks.install_tasks(
   '.',
-  tf_vars_from_env: {'foo' => 'FOO', 'bar' => 'BAR', 'secret' => 'abc'},
+  tf_vars_from_env: {'foo' => 'FOO', 'bar' => 'BAR', 'secret' => 'SECRET'},
   tf_sensitive_vars: ['secret']
 )
 ```

data/lib/tfwrapper/raketasks.rb

@@ -468,7 +468,16 @@ module TFWrapper
 
       puts "Writing stack information to #{@consul_url} at: "\
         "#{@consul_env_vars_prefix}"
-      puts JSON.pretty_generate(data)
+
+      redacted_list = (%w[aws_access_key aws_secret_key] +
+        @tf_sensitive_vars)
+      sanitized_data = data.clone
+      @tf_vars_from_env.each do |k, v|
+        # We are trying to determine which ENV var maps
+        #   to the sensitive terraform variable
+        sanitized_data[v] = '(redacted)' if redacted_list.include?(k)
+      end
+      puts JSON.pretty_generate(sanitized_data)
       raw = JSON.generate(data)
       Diplomat::Kv.put(@consul_env_vars_prefix, raw)
     end

data/lib/tfwrapper/version.rb

@@ -4,5 +4,5 @@ module TFWrapper
   # version of the Gem/module; used in the gemspec and in messages.
   # NOTE: When updating this, also update the version in the "Installation"
   # section of README.md
-  VERSION = '0.6.2'
+  VERSION = '0.6.3'
 end

data/spec/unit/raketasks_spec.rb

@@ -1421,21 +1421,28 @@ describe TFWrapper::RakeTasks do
   describe '#update_consul_stack_env_vars' do
     context 'when @consul_url and @consul_env_vars_prefix are specified' do
       it 'saves the variables in Consul' do
-        vars = { 'foo' => 'bar', 'baz' => 'blam' }
-        expected = { 'bar' => 'barVal', 'blam' => 'blamVal' }
+        vars = { 'foo' => 'bar', 'baz' => 'blam', 'secret' => 'SECRET' }
+        expected = { 'bar' => 'barVal',
+                     'blam' => 'blamVal',
+                     'SECRET' => 'abc' }
+        sanitized = { 'bar' => 'barVal',
+                      'blam' => 'blamVal',
+                      'SECRET' => '(redacted)' }
         subject.instance_variable_set('@tf_vars_from_env', vars)
         subject.instance_variable_set('@consul_url', 'foo://bar')
         subject.instance_variable_set('@consul_env_vars_prefix', 'my/prefix')
+        subject.instance_variable_set('@tf_sensitive_vars', ['secret'])
         allow(ENV).to receive(:[])
         allow(ENV).to receive(:[]).with('CONSUL_HOST').and_return('chost')
         allow(ENV).to receive(:[]).with('bar').and_return('barVal')
         allow(ENV).to receive(:[]).with('blam').and_return('blamVal')
+        allow(ENV).to receive(:[]).with('SECRET').and_return('abc')
         allow(Diplomat::Kv).to receive(:put)
 
         expect(STDOUT).to receive(:puts).once
           .with('Writing stack information to foo://bar at: my/prefix')
         expect(STDOUT).to receive(:puts).once
-          .with(JSON.pretty_generate(expected))
+          .with(JSON.pretty_generate(sanitized))
         expect(Diplomat::Kv).to receive(:put)
           .once.with('my/prefix', JSON.generate(expected))
         subject.update_consul_stack_env_vars

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: tfwrapper
 version: !ruby/object:Gem::Version
-  version: 0.6.2
+  version: 0.6.3
 platform: ruby
 authors:
 - jantman
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-09-17 00:00:00.000000000 Z
+date: 2020-09-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: retries