yle-aws-role 1.1.0 → 2.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: f0336e6ed9e03daa76c15b4659a1e6283bb2943b
-  data.tar.gz: 8884cd5b0f1d602d2f14445cd1f83cafed9e07c0
+SHA256:
+  metadata.gz: c8b0f1070a9587c8e21af9afbdc5fe81b0f93d4015c1c3abc37835df1ea0c9e1
+  data.tar.gz: fd04107ea86be718b2c1859fd526d93a3326bc7c0cafd24f990eed4dd77ea4e3
 SHA512:
-  metadata.gz: 0a90525adf5e57867a8faba1d12bcda886c06940946e8b8bac2e901a383a27d78eef1d67c8cd3d91dcbab0d1eec22442bd68e8a94bbb5bd1292e312bac77087c
-  data.tar.gz: 26eb0863413abe01edb45f28113631eb347f8d3c7d9f9c591cbfbd0af7bc8ee01d9801f8c15e6c1c21af979e03255b1e0544a26bee07a6fc730bc5ae8c40bbc8
+  metadata.gz: b0c4ad64c3b2b79f4eb791f570ff293e003bcb6f654cc3348d6733f9bdac915905f9bf1b7bd1856e82c73af65cae4dcde998655d05ea4a9adbb6f8ebda95b0db
+  data.tar.gz: 491d7a7c1c44b4d228c31b6262487dfdb138865c3741811e25cf931c0a4a10df780c28ac559429987148d9c7155678e0cfc4417922c0f4a655e8905e9d711648

data/lib/yle/aws/role.rb

@@ -1,4 +1,4 @@
-require 'aws-sdk'
+require 'aws-sdk-core'
 require 'shellwords'
 
 require 'yle/aws/role/accounts'
@@ -54,12 +54,12 @@ module Yle
           duration_seconds: duration
         ).credentials
       rescue Aws::STS::Errors::ServiceError,
-        Aws::Errors::MissingCredentialsError => e
+             Aws::Errors::MissingCredentialsError => e
         raise Errors::AssumeRoleError, "Failed to assume role #{role_arn}: #{e}"
       end
 
       def with_env
-        old_env = set_env_vars(env_vars)
+        old_env = export_env_vars(env_vars)
         old_credentials = Aws.config[:credentials]
         Aws.config.update(credentials: credentials)
 
@@ -70,7 +70,7 @@ module Yle
         else
           Aws.config.delete(:credentials)
         end
-        set_env_vars(old_env)
+        export_env_vars(old_env)
       end
 
       def env_vars
@@ -82,7 +82,7 @@ module Yle
         }
       end
 
-      def set_env_vars(vars)
+      def export_env_vars(vars)
         old_env = {}
         vars.each do |key, value|
           old_env[key] = ENV[key]

data/lib/yle/aws/role/cli.rb

@@ -6,21 +6,24 @@ module Yle
   module AWS
     class Role
       class Cli
-        attr_reader :account_name, :command, :opts
+        attr_reader :account_name, :opts
 
         def initialize(argv)
           parse_args(argv)
         end
 
+        # rubocop:disable Metrics/AbcSize, Metrics/MethodLength
         def parse_args(argv)
           @opts = Slop.parse(argv) do |o|
             o.banner = 'Usage: asu <account> [options] -- [command ...]'
             o.separator '   or: asu --list'
             o.separator ''
             o.separator '    account         The account ID or pattern of the role account'
-            o.separator '    command         Command to execute with the role. Defaults to launching new shell session.'
+            o.separator '    command         Command to execute with the role. ' \
+                                            'Defaults to launching new shell session.'
             o.separator ''
-            o.integer '-d', '--duration', "Duration for the role credentials. Default: #{Role.default_duration}"
+            o.integer '-d', '--duration', 'Duration for the role credentials. ' \
+                                          "Default: #{Role.default_duration}"
             o.bool '--env', 'Print out environment variables and exit'
             o.bool '-l', '--list', 'Print out all configured account aliases'
             o.bool '-q', '--quiet', 'Be quiet'
@@ -52,14 +55,13 @@ module Yle
           STDERR.puts e
           exit 64
         end
+        # rubocop:enable Metrics/AbcSize, Metrics/MethodLength
 
+        # rubocop:disable Metrics/AbcSize
         def execute
-          if opts[:list]
-            puts Role.accounts
-            return
-          end
+          return list_accounts if opts[:list]
 
-          Role.assume_role(account_name, opts[:role], opts[:duration]) do |role|
+          assume_role(account_name, opts[:role], opts[:duration]) do |role|
             STDERR.puts("Assumed role #{role.name}") if !opts[:quiet]
 
             if opts[:env]
@@ -68,27 +70,40 @@ module Yle
               run_command
             end
           end
+        end
+        # rubocop:enable Metrics/AbcSize
+
+        def list_accounts
+          puts Role.accounts
+        end
+
+        def assume_role(account_name, role_name, duration, &block)
+          Role.assume_role(account_name, role_name, duration, &block)
         rescue Errors::AssumeRoleError => e
           STDERR.puts e
           exit 1
         end
 
         def run_command
-          cmd = command
-          if cmd.empty?
-            shell = ENV.fetch('SHELL', 'bash')
-            cmd = [shell]
-
-            if !opts[:quiet]
-              puts "Executing shell '#{shell}' with the assumed role"
-              puts "Use `exit` to quit"
-              puts
-            end
+          ret = system(*command)
+          STDERR.puts "Failed to execute '#{command.first}'" if ret.nil?
+          exit(1) if !ret
+        end
+
+        def command
+          @command ||= [shell]
+        end
+
+        def shell
+          shell = ENV.fetch('SHELL', 'bash')
+
+          if !opts[:quiet]
+            puts "Executing shell '#{shell}' with the assumed role"
+            puts 'Use `exit` to quit'
+            puts
           end
 
-          ret = system(*cmd)
-          STDERR.puts "Failed to execute '#{cmd.first}'" if ret.nil?
-          exit(1) if !ret
+          [shell]
         end
       end
     end

data/lib/yle/aws/role/config.rb

@@ -3,6 +3,7 @@ require 'yaml'
 module Yle
   module AWS
     class Role
+      # rubocop:disable Metrics/BlockLength
       Config = Struct.new(:accounts, :defaults) do
         def self.default_path
           ENV.fetch('ASU_CONFIG') { File.join(Dir.home, '.aws', 'asu.yaml') }
@@ -38,6 +39,7 @@ module Yle
           )
         end
       end
+      # rubocop:enable Metrics/BlockLength
     end
   end
 end

data/lib/yle/aws/role/version.rb

@@ -1,7 +1,7 @@
 module Yle
   module AWS
     class Role
-      VERSION = '1.1.0'.freeze
+      VERSION = '2.0.0'.freeze
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: yle-aws-role
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 2.0.0
 platform: ruby
 authors:
 - Yleisradio
@@ -10,22 +10,22 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-05-23 00:00:00.000000000 Z
+date: 2018-01-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: aws-sdk
+  name: aws-sdk-core
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.6'
+        version: '3.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.6'
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: slop
   requirement: !ruby/object:Gem::Requirement
@@ -92,15 +92,6 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
-- ".gitignore"
-- ".rspec"
-- ".travis.yml"
-- CHANGELOG.md
-- CODE_OF_CONDUCT.md
-- Gemfile
-- LICENSE.txt
-- README.md
-- Rakefile
 - bin/asu
 - lib/yle-aws-role.rb
 - lib/yle/aws/role.rb
@@ -109,7 +100,6 @@ files:
 - lib/yle/aws/role/config.rb
 - lib/yle/aws/role/errors.rb
 - lib/yle/aws/role/version.rb
-- yle-aws-role.gemspec
 homepage: https://github.com/Yleisradio/yle-aws-role
 licenses:
 - MIT
@@ -130,7 +120,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.11
+rubygems_version: 2.7.3
 signing_key: 
 specification_version: 4
 summary: Tooling to help to assume AWS IAM roles

data/.gitignore

@@ -1,9 +0,0 @@
-/.bundle/
-/.yardoc
-/Gemfile.lock
-/_yardoc/
-/coverage/
-/doc/
-/pkg/
-/spec/reports/
-/tmp/

data/.rspec

@@ -1 +0,0 @@
---color

data/.travis.yml

@@ -1,7 +0,0 @@
-language: ruby
-cache: bundler
-
-rvm:
-  - 2.4.1
-  - 2.3.4
-  - 2.2.7

data/CHANGELOG.md

@@ -1,8 +0,0 @@
-## 1.1.0 / 2017-05-23
-
-- Support default role in the `Role` class
-- Support `require 'yle-aws-role'`
-
-## 1.0.1 / 2017-05-16
-
-- Initial public release

data/CODE_OF_CONDUCT.md

@@ -1,74 +0,0 @@
-# Contributor Covenant Code of Conduct
-
-## Our Pledge
-
-In the interest of fostering an open and welcoming environment, we as
-contributors and maintainers pledge to making participation in our project and
-our community a harassment-free experience for everyone, regardless of age, body
-size, disability, ethnicity, gender identity and expression, level of experience,
-nationality, personal appearance, race, religion, or sexual identity and
-orientation.
-
-## Our Standards
-
-Examples of behavior that contributes to creating a positive environment
-include:
-
-* Using welcoming and inclusive language
-* Being respectful of differing viewpoints and experiences
-* Gracefully accepting constructive criticism
-* Focusing on what is best for the community
-* Showing empathy towards other community members
-
-Examples of unacceptable behavior by participants include:
-
-* The use of sexualized language or imagery and unwelcome sexual attention or
-advances
-* Trolling, insulting/derogatory comments, and personal or political attacks
-* Public or private harassment
-* Publishing others' private information, such as a physical or electronic
-  address, without explicit permission
-* Other conduct which could reasonably be considered inappropriate in a
-  professional setting
-
-## Our Responsibilities
-
-Project maintainers are responsible for clarifying the standards of acceptable
-behavior and are expected to take appropriate and fair corrective action in
-response to any instances of unacceptable behavior.
-
-Project maintainers have the right and responsibility to remove, edit, or
-reject comments, commits, code, wiki edits, issues, and other contributions
-that are not aligned to this Code of Conduct, or to ban temporarily or
-permanently any contributor for other behaviors that they deem inappropriate,
-threatening, offensive, or harmful.
-
-## Scope
-
-This Code of Conduct applies both within project spaces and in public spaces
-when an individual is representing the project or its community. Examples of
-representing a project or community include using an official project e-mail
-address, posting via an official social media account, or acting as an appointed
-representative at an online or offline event. Representation of a project may be
-further defined and clarified by project maintainers.
-
-## Enforcement
-
-Instances of abusive, harassing, or otherwise unacceptable behavior may be
-reported by contacting the project team at teemu.matilainen@iki.fi. All
-complaints will be reviewed and investigated and will result in a response that
-is deemed necessary and appropriate to the circumstances. The project team is
-obligated to maintain confidentiality with regard to the reporter of an incident.
-Further details of specific enforcement policies may be posted separately.
-
-Project maintainers who do not follow or enforce the Code of Conduct in good
-faith may face temporary or permanent repercussions as determined by other
-members of the project's leadership.
-
-## Attribution
-
-This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4,
-available at [http://contributor-covenant.org/version/1/4][version]
-
-[homepage]: http://contributor-covenant.org
-[version]: http://contributor-covenant.org/version/1/4/

data/Gemfile

@@ -1,4 +0,0 @@
-source 'https://rubygems.org'
-
-# Specify your gem's dependencies in yle-aws-assume_role.gemspec
-gemspec

data/LICENSE.txt

@@ -1,21 +0,0 @@
-The MIT License (MIT)
-
-Copyright (c) 2016-2017 Yleisradio Oy
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.

data/README.md

@@ -1,72 +0,0 @@
-# yle-aws-role
-
-Tooling to help to assume [AWS IAM roles](http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html).
-
-Offers a command-line helper tool, `asu`, and a Ruby library. After assuming the specified role, it sets the standard environment variables and configures the Ruby SDK for the role.
-
-## Installation
-
-The project can be installed in a shell:
-
-```sh
-gem install yle-aws-role
-```
-
-To use the Ruby library, add this line to your application's Gemfile:
-
-```ruby
-gem 'yle-aws-role'
-```
-
-and then execute `bundle`
-
-## Usage
-
-```plain
-Usage: asu <account> [options] -- [command ...]
-   or: asu --list
-
-    account         The account ID or pattern of the role account
-    command         Command to execute with the role. Defaults to launching new shell session.
-
-    -d, --duration  Duration for the role credentials. Default: 900
-    --env           Print out environment variables and exit
-    -l, --list      Print out all configured account aliases
-    -q, --quiet     Be quiet
-    -r, --role      Name of the role
-
-    -h, --help      Prints this help
-    -v, --version   Prints the version information
-```
-
-### Configuration
-
-Account aliases and their IDs can be specified in a configuration file. Then you can list the known accounts with `asu --list`, and use aliases (even with partial matching) when specifying the account for `asu`. Also the default role can be set.
-
-The configuration file location defaults to _$HOME/.aws/asu.yaml_, but can be specified with the `ASU_CONFIG` environment variable.
-
-Example configuration:
-
-```yaml
-defaults:
-  role: "dev"
-
-accounts:
-  foo-bar: "123456789012"
-  baz:     "987654321098"
-```
-
-With this you can just call for example
-
-```sh
-asu foo -- aws s3 ls s3://mybucket/
-```
-
-## Contributing
-
-Bug reports and pull requests are welcome on GitHub at https://github.com/Yleisradio/yle-aws-role. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the [Contributor Covenant](http://contributor-covenant.org) code of conduct.
-
-
-## License
-
-The gem is available as open source under the terms of the [MIT License](http://opensource.org/licenses/MIT).

data/Rakefile

@@ -1,6 +0,0 @@
-require 'bundler/gem_tasks'
-require 'rspec/core/rake_task'
-
-RSpec::Core::RakeTask.new(:spec)
-
-task default: :spec

data/yle-aws-role.gemspec

@@ -1,39 +0,0 @@
-# coding: utf-8
-lib = File.expand_path('../lib', __FILE__)
-$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
-require 'yle/aws/role/version'
-
-Gem::Specification.new do |spec|
-  spec.name        = 'yle-aws-role'
-  spec.version     = Yle::AWS::Role::VERSION
-  spec.summary     = 'Tooling to help to assume AWS IAM roles'
-  spec.description = spec.summary
-  spec.homepage    = 'https://github.com/Yleisradio/yle-aws-role'
-  spec.license     = 'MIT'
-
-  spec.authors = [
-    'Yleisradio',
-    'Teemu Matilainen',
-    'Antti Forsell',
-  ]
-  spec.email = [
-    'devops@yle.fi',
-    'teemu.matilainen@iki.fi',
-    'antti@fosu.me',
-  ]
-
-  spec.files = `git ls-files -z`.split("\x0").reject do |f|
-    f.match(%r{^(test|spec|features)/})
-  end
-
-  spec.bindir        = 'bin'
-  spec.executables   = ['asu']
-  spec.require_paths = ['lib']
-
-  spec.add_dependency 'aws-sdk', '~> 2.6'
-  spec.add_dependency 'slop', '~> 4.4'
-
-  spec.add_development_dependency 'bundler', '~> 1.13'
-  spec.add_development_dependency 'rake', '~> 12.0'
-  spec.add_development_dependency 'rspec', '~> 3.5'
-end