traceroute53 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d14ec1cd7f7bd6d16e0a1cf3e68680ce364852269e3e26cee6148af18cdde960
-  data.tar.gz: 6d75e452eb15b4bc1936aaa7086e1bd51ec2bc9dc7c25f4c37f064686eea0ced
+  metadata.gz: d55232ad71eb5f5decdc7eb2c619ceb1474b3f36131da40ee319142cfefa2fbc
+  data.tar.gz: 59fecd8ce6c98b5ba84f242b54a0e02f133a69cfb1b759b5668f487a61e01b19
 SHA512:
-  metadata.gz: ed37b10833cd4e6cb866dcfe2bb20b3e9dd5a1225104df91920519e0ac9ba5f021e8cb218812eafcc02ee9bb8650e26c75ebe07156c6657e4b06e87bdeed0943
-  data.tar.gz: 575dcae80e93269651904cba2e5c78ab63c5f2967376edc8d5ba570178b34dab7bc66deb776784e6fe54faa21d6a1a7a0bbeed8aea027f2d8173180c8e635441
+  metadata.gz: 2b75ae1d67d4b603e7181a3495a6922fcba215e65c6ceb1aca9777a2b08bc8c06a1be371f265830778b3092aea304eca4e16c6ea45fb507495074f870627b85b
+  data.tar.gz: 1d69b8b9457c473c6c405abc16d48affef8cd9ab8f8258e665035f3006adbe5ca094a6e7b89fb08701dbf03df66966b3a706b58cffe1c8acb88ab066f2646c7e

data/README.md

@@ -2,26 +2,64 @@
 
 A tool to investigate Route53, ELB, EC2 and Security Groups
 
+[![Gem Version](https://badge.fury.io/rb/traceroute53.svg)](https://badge.fury.io/rb/traceroute53)
+
 ## Installation
 
 Add this line to your application's Gemfile:
 
 ```ruby
-gem 'traceroute53'
+gem install traceroute53
 ```
 
-And then execute:
+## Usage
 
-    $ bundle
+```
+traceroute53 <domain>
+```
 
-Or install it yourself as:
+To pass credentials, [set environment variables](https://docs.aws.amazon.com/sdk-for-ruby/v3/developer-guide/setup-config.html#aws-ruby-sdk-credentials-environment) or speicfy `--profile=PROFILE` option.
 
-    $ gem install traceroute53
+### An example for healthy domain
 
-## Usage
+Below is an example for healty domain. It show the ELB has a target instance and it can foward requests to it. Because the security group associated the instance allows LB's security group.
 
 ```
-traceroute53 <domain>
+% traceroute53 foo-development.example.com
+hosted zone: example.com.
+dns name: internal-foo-aws-1-123456.us-east-1.elb.amazonaws.com.
+load balancer: foo-aws-1 ["sg-0aaaaaaaaaaaaaa1", "sg-ccccccccccccccccc"]
+listener[0]: port:443 arn:aws:elasticloadbalancing:us-east-1:567890123456:listener/app/foo-aws-1/7890123456789abc/0cdef01234567789
+listener[0]action[0]: forward arn:aws:elasticloadbalancing:us-east-1:567890123456:targetgroup/foo-aws-1/89abcdef01234567
+listener[0]action[0]target[0]: i-0cdef0123456789ab:8080 healthy
+group_ids[0]: ["sg-09988776655443322", "sg-39393939"]
+group_ids[0]sg[0]: sg-09988776655443322
+group_ids[0]sg[0]ip[0]: port:8080 ["sg-ccccccccccccccccc"]
+group_ids[0]sg[0]ip[1]: port:22 ["sg-05566778899aabbcc", "sg-f8e8d8c8"]
+group_ids[0]sg[1]: sg-39393939
+group_ids[0]sg[1]ip[0]: port:8080 ["sg-11223344"]
+group_ids[0]sg[1]ip[1]: port:nil ["sg-f8f8f8f8"]
+group_ids[0]sg[1]ip[2]: port:22 ["sg-33886655"]
+```
+
+### An example for unhealthy domain
+
+In this example Route53's hosted zone correctly have dns resource, which has correct dns\_name, listener, target group but its 2nd security group's Permission set is empty.
+
+```
+% traceroute53 bar-blah.example.com
+hosted zone: example.com.
+dns name: internal-bar-blah-aws-tokyo-1-999888333.ap-northeast-1.elb.amazonaws.com.
+load balancer: bar-blah-aws-tokyo-1 ["sg-0eeddccbbaa998877", "sg-06665554443332221"]
+listener[0]: port:443 arn:aws:elasticloadbalancing:ap-northeast-1:567890123456:listener/app/bar-blah-aws-tokyo-1/ef0123456789abcd/cccaaabbb9996667
+listener[0]action[0]: forward arn:aws:elasticloadbalancing:ap-northeast-1:567890123456:targetgroup/bar-blah-atyo-1/fedcba9876543210
+listener[0]action[0]target[0]: i-0cc123456789abcd:8080 unhealthy
+group_ids[0]: ["sg-c57c55cc", "sg-0336699ccff003366"]
+group_ids[0]sg[0]: sg-c57c55cc
+group_ids[0]sg[0]ip[0]: port:8080 ["sg-99776655"]
+group_ids[0]sg[0]ip[1]: port:nil ["sg-11335577"]
+group_ids[0]sg[0]ip[2]: port:22 ["sg-fe87dc65"]
+group_ids[0]sg[1]: sg-0336699ccff003366
 ```
 
 ## Development

data/exe/traceroute53

@@ -103,10 +103,18 @@ def describe_instances(client, instance_ids)
 end
 
 def describe_security_groups(client, group_ids)
-  resp = client.describe_security_groups({
-    group_ids: group_ids,
-  })
-  resp.security_groups
+  marker = nil
+  security_groups = []
+  loop do
+    resp = client.describe_security_groups({
+      group_ids: group_ids,
+      next_token: marker,
+    })
+    security_groups.concat resp.security_groups
+    marker = resp.next_token
+    break unless marker
+  end
+  security_groups
 end
 
 def describe_target_health(client, target_group_arn)

data/lib/traceroute53/version.rb

@@ -1,3 +1,3 @@
 module Traceroute53
-  VERSION = "0.1.0"
+  VERSION = "0.1.1"
 end

data/traceroute53.gemspec

@@ -10,7 +10,7 @@ Gem::Specification.new do |spec|
   spec.email         = ["naruse@airemix.jp"]
 
   spec.summary       = %q{A tool to investigate Route53, ELB, EC2 and Security Groups}
-  spec.description   = %q{An tool to investigate Route53, ELB, EC2 and Security Groups}
+  spec.description   = %q{A tool to investigate Route53, ELB, EC2 and Security Groups}
   spec.homepage      = "https://github.com/nurse/traceroute53"
   spec.license       = "MIT"
 
@@ -36,6 +36,7 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ["lib"]
 
+  spec.add_dependency "aws-sdk", "~> 3"
   spec.add_development_dependency "bundler", "~> 1.17"
   spec.add_development_dependency "rake", "~> 10.0"
   spec.add_development_dependency "rspec", "~> 3.0"

metadata

@@ -1,15 +1,29 @@
 --- !ruby/object:Gem::Specification
 name: traceroute53
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - NARUSE, Yui
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-03-07 00:00:00.000000000 Z
+date: 2019-03-13 00:00:00.000000000 Z
 dependencies:
+- !ruby/object:Gem::Dependency
+  name: aws-sdk
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -52,7 +66,7 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.0'
-description: An tool to investigate Route53, ELB, EC2 and Security Groups
+description: A tool to investigate Route53, ELB, EC2 and Security Groups
 email:
 - naruse@airemix.jp
 executables: