yamload 0.4.0 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 40beadb62d3a94fe8748b01bcfc6a6bbdceab9b2b1fc3714c0d3f11ebb3b60a5
-  data.tar.gz: 7d7ed0b674fb0789713cd3e1f17e1a3d209481958211ed4f11af1a0afc10c5fb
+  metadata.gz: 4fdcbfb71834348eec7d1a41a9083dcfb84918b564702b6ebc32ac3f69a81dbd
+  data.tar.gz: 9c5859db3d1e10209540447671fa67f7fac5551bd0c0352216df5afd6597029b
 SHA512:
-  metadata.gz: '0149617ac1537ae5506b2607d8b8bae3bd91df1f5b6a53dbc1532eaf659afa52457c99fd277e318cc13ad18c5ed67f2aed68890ee8796b3731463dbb815de5ea'
-  data.tar.gz: a0bb5514455b867b09023ffe2df09427a9c717d6bb2e6cf567e80d328a27ebbb37929df0d21580abcd54a95e9905fd74face6a7488a26926948b9b90d1e41361
+  metadata.gz: 17cbf7b431ef2820ff545507bda639713ba2173af7286637be94b7a8820862353b50264933abef8e9d81970dda432b8823dd24292d1b2a1b67f1417fd92de4df
+  data.tar.gz: 36f0e38afbf4817d6a3437bcabbfa9cf73c8f6d6f929dba548371ab13427e1c3aaef7e7fc703555b0f81e4cfd97ba9113118b3cd31fd0ee53ad5bd307ce56d18

data/.travis.yml

@@ -11,3 +11,5 @@ notifications:
     secure: UInYCeoRfF7FEnNgW38nZDk3SXWfWN5rm+tKDWX/eWGIIUuynspe6A8776w+wG+9jSuzGt9J3WEIxxognkYiWmud96NYiKZIQDLx/6ql15A9jEvWwqnWbnaL4F368ujhwLo6V42Z6wRfTUqNeRQKki2WCw0NVmT6Y1bdTeNNy70=
 sudo: false
 cache: bundler
+env:
+  - AWS_REGION: us-east-1

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.5.0 (2020-07-02)
+
+ - [TT-7683] Add support for AWS SSM and AWS Secrets Manager
+
 ## 0.4.0 (2020-05-20)
 
  - [TT-7323] Bring all dependencies up to date

data/lib/yamload/loader.rb

@@ -1,5 +1,8 @@
 require 'yaml'
 require 'ice_nine'
+require 'aws-sdk-secretsmanager'
+require 'aws-sdk-ssm'
+
 require 'yamload/loading'
 require 'yamload/conversion'
 require 'yamload/defaults'

data/lib/yamload/loading/yaml.rb

@@ -33,7 +33,7 @@ module Yamload
 
       def erb_parsed_content
         raw_content = File.read(filepath, encoding: 'bom|utf-8', mode: 'r')
-        ERB.new(raw_content).result
+        ERB.new(raw_content).result(binding)
       end
 
       def filepath
@@ -41,6 +41,32 @@ module Yamload
         fail IOError, "#{@dir} is not a valid directory" unless File.directory?(@dir)
         File.join(@dir, "#{@file}.yml")
       end
+
+      def secrets_client
+        options = {}
+        options[:endpoint] = ENV['AWS_SECRETS_MANAGER_ENDPOINT'] if ENV.has_key?('AWS_SECRETS_MANAGER_ENDPOINT')
+        @secrets_client ||= Aws::SecretsManager::Client.new(options)
+      end
+
+      def get_secret(key)
+        secrets_client.get_secret_value(secret_id: key).secret_string
+      end
+
+      def ssm_client
+        options = {}
+        options[:endpoint] = ENV['AWS_SSM_ENDPOINT'] if ENV.has_key?('AWS_SSM_ENDPOINT')
+        @ssm_client ||= Aws::SSM::Client.new(options)
+      end
+
+      def get_parameter(key, encrypted: true)
+        ssm_client.get_parameter(
+          name: key,
+          with_decryption: encrypted
+        ).parameter.value
+      rescue Aws::SSM::Errors::ParameterNotFound => e
+        puts "Parameter #{key} not found"
+        raise e
+      end
     end
   end
 end

data/lib/yamload/version.rb

@@ -1,3 +1,3 @@
 module Yamload
-  VERSION = '0.4.0'
+  VERSION = '0.5.0'
 end

data/spec/fixtures/erb.yml

@@ -1,2 +1,4 @@
 ---
 erb_var: <%= 'ERB RAN!' %>
+ssm_var: <%= get_parameter 'ssm_var' %>
+secret_var: <%= get_secret 'secret_var' %>

data/spec/fixtures/erb_bad.yml

@@ -0,0 +1 @@
+bad_key: <%= get_parameter 'bad_key' %>

data/spec/loader_spec.rb

@@ -32,10 +32,31 @@ describe Yamload::Loader do
   end
 
   context 'with a file containing ERB' do
+    before do
+      allow_any_instance_of(Aws::SSM::Client).to receive(:get_parameter).
+        with({ name: 'ssm_var', with_decryption: true }).
+        and_return(double(parameter: double(value: 'SSM SUCCESS')))
+      allow_any_instance_of(Aws::SecretsManager::Client).to receive(:get_secret_value).
+        with({ secret_id: 'secret_var' }).
+        and_return(double(secret_string: 'SECRET SUCCESS'))
+    end
+
     let(:file) { :erb }
-    let(:expected_content) { { "erb_var" => "ERB RAN!" } }
+    let(:expected_content) { { "erb_var" => "ERB RAN!", "ssm_var" => "SSM SUCCESS", "secret_var" => "SECRET SUCCESS" } }
     specify { expect(loader).to exist }
     specify { expect(content).to eq expected_content }
+
+    context 'with bad parameter key' do
+      before do
+        allow_any_instance_of(Aws::SSM::Client).to receive(:get_parameter).
+          with({ name: 'bad_key', with_decryption: true }).
+          and_raise(Aws::SSM::Errors::ParameterNotFound.new(Seahorse, 'bad_key'))
+      end
+      let(:file) { :erb_bad }
+      specify {
+        expect { content }.to raise_error Aws::SSM::Errors::ParameterNotFound
+      }
+    end
   end
 
   context 'with a file defining an array' do

data/yamload.gemspec

@@ -22,6 +22,8 @@ Gem::Specification.new do |spec|
 
   spec.add_dependency 'anima', '>= 0.2'
   spec.add_dependency 'facets', '>= 3.0'
+  spec.add_dependency 'aws-sdk-secretsmanager'
+  spec.add_dependency 'aws-sdk-ssm'
 
   spec.add_development_dependency 'bundler', '>= 1.7'
   spec.add_development_dependency 'rake', '>= 10.0'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: yamload
 version: !ruby/object:Gem::Version
-  version: 0.4.0
+  version: 0.5.0
 platform: ruby
 authors:
 - Alessandro Berardi
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-05-20 00:00:00.000000000 Z
+date: 2020-08-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: anima
@@ -39,6 +39,34 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: aws-sdk-secretsmanager
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: aws-sdk-ssm
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -184,6 +212,7 @@ files:
 - spec/fixtures/array.yml
 - spec/fixtures/empty.yml
 - spec/fixtures/erb.yml
+- spec/fixtures/erb_bad.yml
 - spec/fixtures/string.yml
 - spec/fixtures/test.yml
 - spec/loader_spec.rb
@@ -218,6 +247,7 @@ test_files:
 - spec/fixtures/array.yml
 - spec/fixtures/empty.yml
 - spec/fixtures/erb.yml
+- spec/fixtures/erb_bad.yml
 - spec/fixtures/string.yml
 - spec/fixtures/test.yml
 - spec/loader_spec.rb