vault_config 0.0.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 94cee626131c002d05356bb6d78df44482b208f7357bd3fad72cea302e8372e9
-  data.tar.gz: ab2928e4f527018c10d21b54decb4e46c13ef79a57c0b098cc71548a29ec1e15
+  metadata.gz: 34c2b9b4363eb262639ab2c4e8a2b2015d563b752ea5fbf7ea98df467519dfac
+  data.tar.gz: 355b5ded01bb65959a852448169c17e35dcfff59be49f2c23357ff28e5610cd3
 SHA512:
-  metadata.gz: 11b59fd36fcd4560ac3253e317e61f2b3e41beae7cb84a828d6bd893ab96dea0f1e45fdb8572b61a90ade9f3cd69a552dff697c4942239aaddc4f7bb3c6afc4c
-  data.tar.gz: e0868461013a3c48d83c52cc0574e8b6abcd2defbb1ff61e1cd2b1c4fab1473d108b6030696b4e452b5ed5d16fb33a0fd430634d283f22bd38ef1b273b40077f
+  metadata.gz: b0fb4f51e8b5c8f54519843d941a85c01b7f4fdfd29b8700387d1e49575347bd71a18f3bd8f8db8a9505fab1ee5615c46393904fbf169a5e148e5d076734d41e
+  data.tar.gz: 6438334f04add8afe4280341316ca82131dcba2807ca32eb13fbafbd8dbf6a628ef0ff821b3856eb3d78581bd4e1949e5c5157618b0153f0990bc0fecac16ec7

data/lib/vault_config.rb

@@ -12,12 +12,57 @@ class VaultConfig
     client.load!
   end
 
+  def self.load_with_warning(app)
+    begin
+      client = self.new(app)
+      client.load!
+    rescue => exception
+      puts "Warning: VaultConfig.load error --- ignore \n #{exception.message}"
+    end
+  end
+
+  # https://learn.hashicorp.com/tutorials/vault/tokens
+  def self.renew(token = nil, increment = '12h')
+    uri = URI(File.join(ENV['VAULT_ADDR'], '/v1/auth/token/renew'))
+    header = {
+      'X-Vault-Token':  ENV['VAULT_TOKEN'],
+      'content-type':'application/json'
+    }
+    response = Net::HTTP.post(uri, {
+      token: token || ENV['VAULT_TOKEN'],
+      increment: increment,
+    }.to_json, header)
+    JSON.parse(response.body)
+  end
+
   def load!
-    uri = URI(File.join(ENV['VAULT_ADDR'], 'v1/secret/data', @app))
-    header = {'X-Vault-Token': ENV['VAULT_TOKEN']}
-    response = Net::HTTP.get_response(uri, header)
-    JSON.parse(response.body)['data']['data'].each do |k, v|
+    ret = get client_uri, headers
+    ret['data']['data'].each do |k, v|
       ENV[k] = v
     end
   end
+
+  private def get(uri, headers = {})
+    Net::HTTP.start(uri.host, uri.port) do |http|
+      request = Net::HTTP::Get.new uri, headers
+      response = http.request request
+      return JSON.parse(response.body)
+    end
+  end
+
+  private def headers
+    @headers ||= {}
+    @headers['X-Vault-Token'] = ENV['VAULT_TOKEN']
+    @headers
+  end
+
+  private def client_uri
+    @client_uri ||= if @app.start_with?('/')
+      arr = @app.split('/')
+      arr[1] = "#{arr[1]}/data"
+      URI(File.join(ENV['VAULT_ADDR'], 'v1/', arr.join('/')))
+    else
+      URI(File.join(ENV['VAULT_ADDR'], 'v1/secret/data', @app))
+    end
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: vault_config
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.1.2
 platform: ruby
 authors:
 - azhao
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-12-30 00:00:00.000000000 Z
+date: 2022-01-05 00:00:00.000000000 Z
 dependencies: []
 description: default safe in a easy way by using HashiCorp Vault
 email: azhao.1981@gmail.com