vault-provision 0.1.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 79f872c69434db5cf504adcd6efeea369c1bff7c
-  data.tar.gz: eabe325c9cff5d09bbc2ad8b58a364aa4d948d0d
+  metadata.gz: 07ea7e20d39900ca94b02dff1b460933ea9e2a7b
+  data.tar.gz: 974204a47b957a7532d1750c9248e408ce1baaeb
 SHA512:
-  metadata.gz: 624e211242329581f89cad36cdf018f70d5f5244366f25e81ca1df8d05463e91374edc532e14890d935dfdec8219392f388198360d52c94ce7db376d6fe02389
-  data.tar.gz: 7aba52e8656f2a035c2871ca19e6d08b03a7c4d6c1ed8b962ef19bf26cfd3fda3640f9b94a117ce947f07454befbf0f6ea7fbbf3f957c5879239994360b3af48
+  metadata.gz: fd1561e9ae836c4e51d0930157b6ebbfdf5fb7210fdfeecfc192d778070e76f782277be085e8e4bfad8814de3ce988f493ca897f3695ae56c3de65ffd225ab31
+  data.tar.gz: 19d8c9a168a5c4c9f983fdbccc181c08affffe07ef9170b1dc86a16c7b8df2fe2b9ebbd88359fe47a370055677fef2d4b723ad3a665e08b99b9354014089ba66

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    vault-provision (0.1.0)
+    vault-provision (0.1.1)
       vault (~> 0.9.0)
 
 GEM

data/VERSION

@@ -1 +1 @@
-0.1.1
+0.1.2

data/lib/vault/provision/auth/ldap/groups.rb

@@ -1,3 +1,25 @@
 # placeholder
 class Vault::Provision::Auth::Ldap::Groups < Vault::Provision::Prototype
+  def group_files auth_point
+    Find.find("#{@instance_dir}/auth/#{auth_point}/groups/").select do |rf|
+      FileTest.file?(rf) && rf.end_with?('.json')
+    end
+  end
+
+  def repo_files
+    #auths = @vault.sys.auths
+    #auths.keys.select { |ap| auths[ap].type == 'ldap' }
+    #     .inject([]) { |acc, elem| acc + group_files(elem) }
+    @vault.sys.auths.select { |_,v| v.type == 'ldap' }
+          .keys
+          .inject([]) { |acc, elem| acc + group_files(elem) }
+  end
+
+  def provision!
+    repo_files.each do |rf|
+      group = File.basename(rf, '.json')
+      auth_point = rf.split('/')[-3]
+      @vault.post "v1/auth/#{auth_point}/groups/#{group}", File.read(rf)
+    end
+  end
 end

data/lib/vault/provision.rb

@@ -36,7 +36,7 @@ class Vault::Provision
       Pki::Roles,
       Generic,
       Sys::Policy,
-      #Auth::Ldap::Groups,
+      Auth::Ldap::Groups,
     ]
   end
 

data/spec/vault_provision_spec.rb

@@ -10,6 +10,18 @@ describe Vault::Provision do
     expect(client.sys.auths[:ldap].type).to be == 'ldap'
   end
 
+  it "has an ldap admin group" do
+    resp = client.get('v1/auth/ldap/groups/admin')
+    expect(resp[:data]).to be
+    expect(resp[:data][:policies].split(',')).to include 'security_admin'
+  end
+
+  it "has an ldap operators group" do
+    resp = client.get('v1/auth/ldap/groups/operators')
+    expect(resp[:data]).to be
+    expect(resp[:data][:policies]).to include 'master_of_secrets'
+  end
+
   it "has a token auth" do
     expect(client.sys.auths[:token].type).to be == 'token'
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: vault-provision
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: ruby
 authors:
 - Tom Maher