@clicadigital/vault-sdk 0.1.0 → 0.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +126 -152
- package/dist/cjs/cli.js +72 -0
- package/dist/cjs/cli.js.map +1 -0
- package/dist/cjs/client.js +75 -0
- package/dist/cjs/client.js.map +1 -0
- package/dist/cjs/dotenv.js +24 -0
- package/dist/cjs/dotenv.js.map +1 -0
- package/dist/cjs/index.js +40 -0
- package/dist/cjs/index.js.map +1 -0
- package/dist/cjs/package.json +1 -0
- package/dist/cjs/types.js +3 -0
- package/dist/cjs/types.js.map +1 -0
- package/dist/cli.js +30 -75
- package/dist/cli.js.map +1 -1
- package/dist/client.d.ts +5 -11
- package/dist/client.d.ts.map +1 -1
- package/dist/client.js +41 -27
- package/dist/client.js.map +1 -1
- package/dist/index.d.ts +5 -46
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +13 -87
- package/dist/index.js.map +1 -1
- package/package.json +44 -43
- package/src/cli.ts +78 -132
- package/src/client.ts +85 -74
- package/src/dotenv.ts +22 -22
- package/src/index.ts +47 -167
- package/src/types.ts +14 -14
package/dist/cli.js
CHANGED
|
@@ -1,6 +1,5 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import {
|
|
3
|
-
import { createEnv, ensureEnvironment, pullVault } from "./index.js";
|
|
2
|
+
import { pullVault } from "./index.js";
|
|
4
3
|
function parseArgs(argv) {
|
|
5
4
|
const [cmd = "help", ...rest] = argv;
|
|
6
5
|
const flags = {};
|
|
@@ -14,99 +13,55 @@ function parseArgs(argv) {
|
|
|
14
13
|
flags[key] = true;
|
|
15
14
|
continue;
|
|
16
15
|
}
|
|
17
|
-
|
|
18
|
-
const list = Array.isArray(flags.var) ? flags.var : [];
|
|
19
|
-
list.push(next);
|
|
20
|
-
flags.var = list;
|
|
21
|
-
}
|
|
22
|
-
else {
|
|
23
|
-
flags[key] = next;
|
|
24
|
-
}
|
|
16
|
+
flags[key] = next;
|
|
25
17
|
i++;
|
|
26
18
|
}
|
|
27
19
|
return { cmd, flags };
|
|
28
20
|
}
|
|
29
21
|
function str(flags, key, fallback) {
|
|
30
|
-
const
|
|
31
|
-
if (typeof
|
|
32
|
-
return
|
|
22
|
+
const value = flags[key];
|
|
23
|
+
if (typeof value === "string" && value.length > 0)
|
|
24
|
+
return value;
|
|
33
25
|
if (fallback !== undefined)
|
|
34
26
|
return fallback;
|
|
35
27
|
throw new Error(`Missing --${key}`);
|
|
36
28
|
}
|
|
37
29
|
function printHelp() {
|
|
38
|
-
console.log(`@clicadigital/vault-sdk —
|
|
39
|
-
|
|
40
|
-
Usage:
|
|
41
|
-
vault-sdk
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
30
|
+
console.log(`@clicadigital/vault-sdk — carrega envs do vault
|
|
31
|
+
|
|
32
|
+
Usage:
|
|
33
|
+
vault-sdk pull --project <name> --env <name> [--out .env] [--no-inject] [--url <vpn-url>]
|
|
34
|
+
|
|
35
|
+
Env:
|
|
36
|
+
VAULT_URL opcional; default k8s: http://vault-api-service.vault.svc.cluster.local:3001
|
|
37
|
+
VAULT_PROJECT default --project
|
|
38
|
+
VAULT_ENV default --env
|
|
39
|
+
VAULT_SA_TOKEN_PATH path do token SA (default: /var/run/secrets/tokens/vault/token)
|
|
40
|
+
|
|
41
|
+
No código: loadVault({ project, env }) injeta em process.env.
|
|
42
|
+
Criar projeto, environment e allow é pela UI do vault.
|
|
51
43
|
`);
|
|
52
44
|
}
|
|
53
|
-
function applyUrl(flags) {
|
|
54
|
-
if (typeof flags.url === "string")
|
|
55
|
-
process.env.VAULT_URL = flags.url;
|
|
56
|
-
}
|
|
57
|
-
function parseVarList(flags) {
|
|
58
|
-
const out = {};
|
|
59
|
-
const list = Array.isArray(flags.var) ? flags.var : [];
|
|
60
|
-
for (const pair of list) {
|
|
61
|
-
const eq = pair.indexOf("=");
|
|
62
|
-
if (eq < 1)
|
|
63
|
-
throw new Error(`Invalid --var ${pair} (use KEY=VALUE)`);
|
|
64
|
-
out[pair.slice(0, eq)] = pair.slice(eq + 1);
|
|
65
|
-
}
|
|
66
|
-
return out;
|
|
67
|
-
}
|
|
68
45
|
async function main() {
|
|
69
46
|
const { cmd, flags } = parseArgs(process.argv.slice(2));
|
|
70
47
|
if (cmd === "help" || flags.help === true) {
|
|
71
48
|
printHelp();
|
|
72
49
|
return;
|
|
73
50
|
}
|
|
74
|
-
|
|
51
|
+
if (typeof flags.url === "string")
|
|
52
|
+
process.env.VAULT_URL = flags.url;
|
|
53
|
+
if (cmd !== "pull") {
|
|
54
|
+
printHelp();
|
|
55
|
+
process.exit(1);
|
|
56
|
+
}
|
|
75
57
|
const project = str(flags, "project", process.env.VAULT_PROJECT);
|
|
76
58
|
const env = str(flags, "env", process.env.VAULT_ENV);
|
|
77
|
-
const
|
|
78
|
-
const
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
const result = await createEnv({ project, env, url, vars, client });
|
|
84
|
-
console.log(JSON.stringify({ project, env, ...result }, null, 2));
|
|
85
|
-
return;
|
|
86
|
-
}
|
|
87
|
-
if (cmd === "ensure") {
|
|
88
|
-
const result = await ensureEnvironment({ project, env, client });
|
|
89
|
-
console.log(JSON.stringify({
|
|
90
|
-
project,
|
|
91
|
-
env,
|
|
92
|
-
projectId: result.projectId,
|
|
93
|
-
environmentId: result.environmentId,
|
|
94
|
-
createdProject: result.createdProject,
|
|
95
|
-
createdEnvironment: result.createdEnvironment,
|
|
96
|
-
}, null, 2));
|
|
97
|
-
return;
|
|
98
|
-
}
|
|
99
|
-
if (cmd === "pull") {
|
|
100
|
-
const out = typeof flags.out === "string" ? flags.out : undefined;
|
|
101
|
-
const inject = flags["no-inject"] !== true;
|
|
102
|
-
const result = await pullVault({ project, env, out, inject, client });
|
|
103
|
-
console.log(`pulled ${Object.keys(result.vars).length} vars for ${project}/${env}` +
|
|
104
|
-
(result.out ? ` → ${result.out}` : "") +
|
|
105
|
-
(inject ? " (injected into process.env)" : ""));
|
|
106
|
-
return;
|
|
107
|
-
}
|
|
108
|
-
printHelp();
|
|
109
|
-
process.exit(1);
|
|
59
|
+
const out = typeof flags.out === "string" ? flags.out : undefined;
|
|
60
|
+
const inject = flags["no-inject"] !== true;
|
|
61
|
+
const result = await pullVault({ project, env, out, inject });
|
|
62
|
+
console.log(`pulled ${Object.keys(result.vars).length} vars for ${project}/${env}` +
|
|
63
|
+
(result.out ? ` → ${result.out}` : "") +
|
|
64
|
+
(inject ? " (injected into process.env)" : ""));
|
|
110
65
|
}
|
|
111
66
|
main().catch((err) => {
|
|
112
67
|
console.error(err instanceof Error ? err.message : err);
|
package/dist/cli.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAIvC,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,CAAC,GAAG,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACrC,MAAM,KAAK,GAAU,EAAE,CAAC;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YAClB,SAAS;QACX,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAClB,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,GAAG,CAAC,KAAY,EAAE,GAAW,EAAE,QAAiB;IACvD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;CAab,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAExD,IAAI,GAAG,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC1C,SAAS,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC;IAErE,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CACT,UAAU,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,aAAa,OAAO,IAAI,GAAG,EAAE;QACpE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,CAAC,MAAM,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,EAAE,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
|
package/dist/client.d.ts
CHANGED
|
@@ -1,26 +1,20 @@
|
|
|
1
1
|
import type { EnvVar, ProjectTree } from "./types.js";
|
|
2
|
+
/** DNS interno do Service no k3s (namespace `vault`). Override com VAULT_URL. */
|
|
3
|
+
export declare const DEFAULT_VAULT_URL = "http://vault-api-service.vault.svc.cluster.local:3001";
|
|
2
4
|
export type VaultClientOptions = {
|
|
3
|
-
/** Base URL da API do vault na VPN, ex: http://vault-api.vpn.local:3001 */
|
|
4
5
|
baseUrl: string;
|
|
6
|
+
token?: string;
|
|
7
|
+
tokenPaths?: string[];
|
|
5
8
|
fetch?: typeof globalThis.fetch;
|
|
6
9
|
};
|
|
7
10
|
export declare class VaultClient {
|
|
8
11
|
readonly baseUrl: string;
|
|
12
|
+
private readonly token;
|
|
9
13
|
private readonly fetchFn;
|
|
10
14
|
constructor(opts: VaultClientOptions);
|
|
11
15
|
private request;
|
|
12
16
|
listProjects(): Promise<ProjectTree[]>;
|
|
13
|
-
createProject(name: string): Promise<{
|
|
14
|
-
id: string;
|
|
15
|
-
name: string;
|
|
16
|
-
}>;
|
|
17
|
-
createEnvironment(projectId: string, name: string): Promise<{
|
|
18
|
-
ok: boolean;
|
|
19
|
-
}>;
|
|
20
17
|
listVars(environmentId: string): Promise<EnvVar[]>;
|
|
21
|
-
upsertVar(environmentId: string, key: string, value: string): Promise<{
|
|
22
|
-
ok: boolean;
|
|
23
|
-
}>;
|
|
24
18
|
}
|
|
25
19
|
export declare function createClientFromEnv(env?: NodeJS.ProcessEnv): VaultClient;
|
|
26
20
|
//# sourceMappingURL=client.d.ts.map
|
package/dist/client.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAOtD,iFAAiF;AACjF,eAAO,MAAM,iBAAiB,0DAC2B,CAAC;AAE1D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACjC,CAAC;AAiBF,qBAAa,WAAW;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;gBAEtC,IAAI,EAAE,kBAAkB;YAMtB,OAAO;IAmBrB,YAAY,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAItC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAGnD;AAED,wBAAgB,mBAAmB,CACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,WAAW,CASb"}
|
package/dist/client.js
CHANGED
|
@@ -1,17 +1,47 @@
|
|
|
1
|
+
import { readFileSync, existsSync } from "node:fs";
|
|
2
|
+
const DEFAULT_TOKEN_PATHS = [
|
|
3
|
+
"/var/run/secrets/tokens/vault/token",
|
|
4
|
+
"/var/run/secrets/kubernetes.io/serviceaccount/token",
|
|
5
|
+
];
|
|
6
|
+
/** DNS interno do Service no k3s (namespace `vault`). Override com VAULT_URL. */
|
|
7
|
+
export const DEFAULT_VAULT_URL = "http://vault-api-service.vault.svc.cluster.local:3001";
|
|
8
|
+
function resolveToken(opts) {
|
|
9
|
+
if (opts.token)
|
|
10
|
+
return opts.token;
|
|
11
|
+
const paths = opts.tokenPaths ?? DEFAULT_TOKEN_PATHS;
|
|
12
|
+
for (const path of paths) {
|
|
13
|
+
if (!existsSync(path))
|
|
14
|
+
continue;
|
|
15
|
+
try {
|
|
16
|
+
const token = readFileSync(path, "utf8").trim();
|
|
17
|
+
if (token)
|
|
18
|
+
return token;
|
|
19
|
+
}
|
|
20
|
+
catch {
|
|
21
|
+
// ignore unreadable path
|
|
22
|
+
}
|
|
23
|
+
}
|
|
24
|
+
return undefined;
|
|
25
|
+
}
|
|
1
26
|
export class VaultClient {
|
|
2
27
|
baseUrl;
|
|
28
|
+
token;
|
|
3
29
|
fetchFn;
|
|
4
30
|
constructor(opts) {
|
|
5
31
|
this.baseUrl = opts.baseUrl.replace(/\/+$/, "");
|
|
32
|
+
this.token = resolveToken(opts);
|
|
6
33
|
this.fetchFn = opts.fetch ?? globalThis.fetch.bind(globalThis);
|
|
7
34
|
}
|
|
8
35
|
async request(path, init) {
|
|
36
|
+
const headers = {
|
|
37
|
+
"content-type": "application/json",
|
|
38
|
+
...init?.headers,
|
|
39
|
+
};
|
|
40
|
+
if (this.token)
|
|
41
|
+
headers.authorization = `Bearer ${this.token}`;
|
|
9
42
|
const res = await this.fetchFn(`${this.baseUrl}${path}`, {
|
|
10
43
|
...init,
|
|
11
|
-
headers
|
|
12
|
-
"content-type": "application/json",
|
|
13
|
-
...(init?.headers ?? {}),
|
|
14
|
-
},
|
|
44
|
+
headers,
|
|
15
45
|
});
|
|
16
46
|
if (!res.ok) {
|
|
17
47
|
const body = (await res.json().catch(() => null));
|
|
@@ -24,33 +54,17 @@ export class VaultClient {
|
|
|
24
54
|
listProjects() {
|
|
25
55
|
return this.request("/v1/projects");
|
|
26
56
|
}
|
|
27
|
-
createProject(name) {
|
|
28
|
-
return this.request("/v1/projects", {
|
|
29
|
-
method: "POST",
|
|
30
|
-
body: JSON.stringify({ name }),
|
|
31
|
-
});
|
|
32
|
-
}
|
|
33
|
-
createEnvironment(projectId, name) {
|
|
34
|
-
return this.request(`/v1/projects/${projectId}/environments`, {
|
|
35
|
-
method: "POST",
|
|
36
|
-
body: JSON.stringify({ name }),
|
|
37
|
-
});
|
|
38
|
-
}
|
|
39
57
|
listVars(environmentId) {
|
|
40
58
|
return this.request(`/v1/environments/${environmentId}/vars`);
|
|
41
59
|
}
|
|
42
|
-
upsertVar(environmentId, key, value) {
|
|
43
|
-
return this.request(`/v1/environments/${environmentId}/vars`, {
|
|
44
|
-
method: "PUT",
|
|
45
|
-
body: JSON.stringify({ key, value }),
|
|
46
|
-
});
|
|
47
|
-
}
|
|
48
60
|
}
|
|
49
61
|
export function createClientFromEnv(env = process.env) {
|
|
50
|
-
const baseUrl = env.VAULT_URL ?? env.VAULT_API_URL ?? env.API_URL;
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
62
|
+
const baseUrl = env.VAULT_URL ?? env.VAULT_API_URL ?? env.API_URL ?? DEFAULT_VAULT_URL;
|
|
63
|
+
const tokenPath = env.VAULT_SA_TOKEN_PATH;
|
|
64
|
+
return new VaultClient({
|
|
65
|
+
baseUrl,
|
|
66
|
+
token: env.VAULT_SA_TOKEN,
|
|
67
|
+
tokenPaths: tokenPath ? [tokenPath, ...DEFAULT_TOKEN_PATHS] : undefined,
|
|
68
|
+
});
|
|
55
69
|
}
|
|
56
70
|
//# sourceMappingURL=client.js.map
|
package/dist/client.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGnD,MAAM,mBAAmB,GAAG;IAC1B,qCAAqC;IACrC,qDAAqD;CACtD,CAAC;AAEF,iFAAiF;AACjF,MAAM,CAAC,MAAM,iBAAiB,GAC5B,uDAAuD,CAAC;AAS1D,SAAS,YAAY,CAAC,IAAwB;IAC5C,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,OAAO,WAAW;IACb,OAAO,CAAS;IACR,KAAK,CAAqB;IAC1B,OAAO,CAA0B;IAElD,YAAY,IAAwB;QAClC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,IAAkB;QACvD,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,GAAI,IAAI,EAAE,OAA8C;SACzD,CAAC;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC;QAE/D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YACvD,GAAG,IAAI;YACP,OAAO;SACR,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA8B,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,IAAI,aAAa,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC9C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACtC,CAAC;IAED,QAAQ,CAAC,aAAqB;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,oBAAoB,aAAa,OAAO,CAAC,CAAC;IAChE,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GACX,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,OAAO,IAAI,iBAAiB,CAAC;IACzE,MAAM,SAAS,GAAG,GAAG,CAAC,mBAAmB,CAAC;IAC1C,OAAO,IAAI,WAAW,CAAC;QACrB,OAAO;QACP,KAAK,EAAE,GAAG,CAAC,cAAc;QACzB,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS;KACxE,CAAC,CAAC;AACL,CAAC"}
|
package/dist/index.d.ts
CHANGED
|
@@ -1,54 +1,13 @@
|
|
|
1
|
-
|
|
2
|
-
import { toDotEnv, varsToRecord } from "./dotenv.js";
|
|
3
|
-
import type { EnvVar } from "./types.js";
|
|
4
|
-
export type { EnvVar, ProjectTree, ProjectTreeEnv } from "./types.js";
|
|
5
|
-
export { VaultClient, createClientFromEnv, type VaultClientOptions };
|
|
6
|
-
export { toDotEnv, varsToRecord };
|
|
7
|
-
export type ResolveOptions = {
|
|
1
|
+
export type LoadVaultOptions = {
|
|
8
2
|
project: string;
|
|
9
3
|
env: string;
|
|
10
|
-
client?: VaultClient;
|
|
11
4
|
};
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
export type PullOptions = ResolveOptions & {
|
|
5
|
+
/** Lê o environment e injeta as variáveis em `process.env`. */
|
|
6
|
+
export declare function loadVault(opts: LoadVaultOptions): Promise<void>;
|
|
7
|
+
export declare function pullVault(opts: LoadVaultOptions & {
|
|
16
8
|
out?: string;
|
|
17
9
|
inject?: boolean;
|
|
18
|
-
}
|
|
19
|
-
export type CreateEnvOptions = {
|
|
20
|
-
project: string;
|
|
21
|
-
env: string;
|
|
22
|
-
/** URL da API do vault na VPN (cluster-internal) */
|
|
23
|
-
url?: string;
|
|
24
|
-
vars?: Record<string, string>;
|
|
25
|
-
client?: VaultClient;
|
|
26
|
-
};
|
|
27
|
-
export declare function resolveEnvironment(opts: ResolveOptions): Promise<{
|
|
28
|
-
projectId: string;
|
|
29
|
-
environmentId: string;
|
|
30
|
-
}>;
|
|
31
|
-
/** Garante projeto + environment na VPN (cria se não existir). */
|
|
32
|
-
export declare function ensureEnvironment(opts: EnsureOptions): Promise<{
|
|
33
|
-
projectId: string;
|
|
34
|
-
environmentId: string;
|
|
35
|
-
createdProject: boolean;
|
|
36
|
-
createdEnvironment: boolean;
|
|
37
|
-
}>;
|
|
38
|
-
/**
|
|
39
|
-
* Cria (ou garante) o environment no vault via URL da VPN
|
|
40
|
-
* e opcionalmente faz upsert das variáveis.
|
|
41
|
-
*/
|
|
42
|
-
export declare function createEnv(opts: CreateEnvOptions): Promise<{
|
|
43
|
-
projectId: string;
|
|
44
|
-
environmentId: string;
|
|
45
|
-
createdProject: boolean;
|
|
46
|
-
createdEnvironment: boolean;
|
|
47
|
-
upserted: string[];
|
|
48
|
-
}>;
|
|
49
|
-
export declare function fetchVars(opts: ResolveOptions): Promise<EnvVar[]>;
|
|
50
|
-
export declare function loadVault(opts: ResolveOptions): Promise<Record<string, string>>;
|
|
51
|
-
export declare function pullVault(opts: PullOptions): Promise<{
|
|
10
|
+
}): Promise<{
|
|
52
11
|
vars: Record<string, string>;
|
|
53
12
|
out?: string;
|
|
54
13
|
}>;
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAiBF,+DAA+D;AAC/D,wBAAsB,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAKrE;AAED,wBAAsB,SAAS,CAC7B,IAAI,EAAE,gBAAgB,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAC1D,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAYzD"}
|
package/dist/index.js
CHANGED
|
@@ -1,110 +1,36 @@
|
|
|
1
1
|
import { writeFile } from "node:fs/promises";
|
|
2
|
-
import { createClientFromEnv
|
|
2
|
+
import { createClientFromEnv } from "./client.js";
|
|
3
3
|
import { toDotEnv, varsToRecord } from "./dotenv.js";
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
const
|
|
8
|
-
return tree.find((p) => p.name === name);
|
|
9
|
-
}
|
|
10
|
-
function resolveClient(opts) {
|
|
11
|
-
if (opts.client)
|
|
12
|
-
return opts.client;
|
|
13
|
-
if (opts.url)
|
|
14
|
-
return new VaultClient({ baseUrl: opts.url });
|
|
15
|
-
return createClientFromEnv();
|
|
16
|
-
}
|
|
17
|
-
export async function resolveEnvironment(opts) {
|
|
18
|
-
const client = opts.client ?? createClientFromEnv();
|
|
19
|
-
const project = await findProject(client, opts.project);
|
|
4
|
+
async function readVars(opts) {
|
|
5
|
+
const client = createClientFromEnv();
|
|
6
|
+
const projects = await client.listProjects();
|
|
7
|
+
const project = projects.find((item) => item.name === opts.project);
|
|
20
8
|
if (!project)
|
|
21
9
|
throw new Error(`Project not found: ${opts.project}`);
|
|
22
|
-
const environment = project.environments.find((
|
|
10
|
+
const environment = project.environments.find((item) => item.name === opts.env);
|
|
23
11
|
if (!environment) {
|
|
24
12
|
throw new Error(`Environment "${opts.env}" not found in project "${opts.project}"`);
|
|
25
13
|
}
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
/** Garante projeto + environment na VPN (cria se não existir). */
|
|
29
|
-
export async function ensureEnvironment(opts) {
|
|
30
|
-
const client = opts.client ?? createClientFromEnv();
|
|
31
|
-
let createdProject = false;
|
|
32
|
-
let createdEnvironment = false;
|
|
33
|
-
let project = await findProject(client, opts.project);
|
|
34
|
-
if (!project) {
|
|
35
|
-
if (opts.createProject === false) {
|
|
36
|
-
throw new Error(`Project not found: ${opts.project}`);
|
|
37
|
-
}
|
|
38
|
-
await client.createProject(opts.project);
|
|
39
|
-
createdProject = true;
|
|
40
|
-
project = await findProject(client, opts.project);
|
|
41
|
-
if (!project)
|
|
42
|
-
throw new Error(`Failed to create project: ${opts.project}`);
|
|
43
|
-
}
|
|
44
|
-
let environment = project.environments.find((e) => e.name === opts.env);
|
|
45
|
-
if (!environment) {
|
|
46
|
-
await client.createEnvironment(project.id, opts.env);
|
|
47
|
-
createdEnvironment = true;
|
|
48
|
-
const refreshed = await findProject(client, opts.project);
|
|
49
|
-
if (!refreshed)
|
|
50
|
-
throw new Error(`Failed to reload project: ${opts.project}`);
|
|
51
|
-
project = refreshed;
|
|
52
|
-
environment = project.environments.find((e) => e.name === opts.env);
|
|
53
|
-
if (!environment)
|
|
54
|
-
throw new Error(`Failed to create environment: ${opts.env}`);
|
|
55
|
-
}
|
|
56
|
-
return {
|
|
57
|
-
projectId: project.id,
|
|
58
|
-
environmentId: environment.id,
|
|
59
|
-
createdProject,
|
|
60
|
-
createdEnvironment,
|
|
61
|
-
};
|
|
62
|
-
}
|
|
63
|
-
/**
|
|
64
|
-
* Cria (ou garante) o environment no vault via URL da VPN
|
|
65
|
-
* e opcionalmente faz upsert das variáveis.
|
|
66
|
-
*/
|
|
67
|
-
export async function createEnv(opts) {
|
|
68
|
-
const client = resolveClient(opts);
|
|
69
|
-
const ensured = await ensureEnvironment({
|
|
70
|
-
project: opts.project,
|
|
71
|
-
env: opts.env,
|
|
72
|
-
client,
|
|
73
|
-
});
|
|
74
|
-
const upserted = [];
|
|
75
|
-
if (opts.vars) {
|
|
76
|
-
for (const [key, value] of Object.entries(opts.vars)) {
|
|
77
|
-
await client.upsertVar(ensured.environmentId, key, value);
|
|
78
|
-
upserted.push(key);
|
|
79
|
-
}
|
|
80
|
-
}
|
|
81
|
-
return { ...ensured, upserted };
|
|
82
|
-
}
|
|
83
|
-
export async function fetchVars(opts) {
|
|
84
|
-
const client = opts.client ?? createClientFromEnv();
|
|
85
|
-
const { environmentId } = await resolveEnvironment({ ...opts, client });
|
|
86
|
-
return client.listVars(environmentId);
|
|
14
|
+
const rows = await client.listVars(environment.id);
|
|
15
|
+
return varsToRecord(rows);
|
|
87
16
|
}
|
|
17
|
+
/** Lê o environment e injeta as variáveis em `process.env`. */
|
|
88
18
|
export async function loadVault(opts) {
|
|
89
|
-
const
|
|
90
|
-
const
|
|
91
|
-
for (const [key, value] of Object.entries(record)) {
|
|
19
|
+
const vars = await readVars(opts);
|
|
20
|
+
for (const [key, value] of Object.entries(vars)) {
|
|
92
21
|
process.env[key] = value;
|
|
93
22
|
}
|
|
94
|
-
return record;
|
|
95
23
|
}
|
|
96
24
|
export async function pullVault(opts) {
|
|
97
|
-
const
|
|
98
|
-
const vars = varsToRecord(rows);
|
|
25
|
+
const vars = await readVars(opts);
|
|
99
26
|
if (opts.inject !== false) {
|
|
100
27
|
for (const [key, value] of Object.entries(vars)) {
|
|
101
28
|
process.env[key] = value;
|
|
102
29
|
}
|
|
103
30
|
}
|
|
104
31
|
const out = opts.out;
|
|
105
|
-
if (out)
|
|
32
|
+
if (out)
|
|
106
33
|
await writeFile(out, toDotEnv(vars), "utf8");
|
|
107
|
-
}
|
|
108
34
|
return out ? { vars, out } : { vars };
|
|
109
35
|
}
|
|
110
36
|
//# sourceMappingURL=index.js.map
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAOrD,KAAK,UAAU,QAAQ,CAAC,IAAsB;IAC5C,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC;IACpE,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAEpE,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;IAChF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,GAAG,2BAA2B,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACnD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAsB;IACpD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAA2D;IAE3D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAElC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,IAAI,GAAG;QAAE,MAAM,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACtD,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AACxC,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,43 +1,44 @@
|
|
|
1
|
-
{
|
|
2
|
-
"name": "@clicadigital/vault-sdk",
|
|
3
|
-
"version": "0.
|
|
4
|
-
"description": "
|
|
5
|
-
"type": "module",
|
|
6
|
-
"license": "UNLICENSED",
|
|
7
|
-
"main": "./dist/index.js",
|
|
8
|
-
"types": "./dist/index.d.ts",
|
|
9
|
-
"bin": {
|
|
10
|
-
"vault-sdk": "./dist/cli.js"
|
|
11
|
-
},
|
|
12
|
-
"exports": {
|
|
13
|
-
".": {
|
|
14
|
-
"types": "./dist/index.d.ts",
|
|
15
|
-
"bun": "./src/index.ts",
|
|
16
|
-
"import": "./dist/index.js",
|
|
17
|
-
"
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
"
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
"
|
|
27
|
-
"
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
"
|
|
35
|
-
"
|
|
36
|
-
"
|
|
37
|
-
"
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
"
|
|
42
|
-
|
|
43
|
-
}
|
|
1
|
+
{
|
|
2
|
+
"name": "@clicadigital/vault-sdk",
|
|
3
|
+
"version": "0.4.0",
|
|
4
|
+
"description": "Load vault env vars into process.env via cluster ServiceAccount (k3s/k8s)",
|
|
5
|
+
"type": "module",
|
|
6
|
+
"license": "UNLICENSED",
|
|
7
|
+
"main": "./dist/cjs/index.js",
|
|
8
|
+
"types": "./dist/index.d.ts",
|
|
9
|
+
"bin": {
|
|
10
|
+
"vault-sdk": "./dist/cli.js"
|
|
11
|
+
},
|
|
12
|
+
"exports": {
|
|
13
|
+
".": {
|
|
14
|
+
"types": "./dist/index.d.ts",
|
|
15
|
+
"bun": "./src/index.ts",
|
|
16
|
+
"import": "./dist/index.js",
|
|
17
|
+
"require": "./dist/cjs/index.js",
|
|
18
|
+
"default": "./dist/cjs/index.js"
|
|
19
|
+
}
|
|
20
|
+
},
|
|
21
|
+
"files": [
|
|
22
|
+
"dist",
|
|
23
|
+
"src"
|
|
24
|
+
],
|
|
25
|
+
"scripts": {
|
|
26
|
+
"build": "tsc -p tsconfig.json && tsc -p tsconfig.cjs.json && bun scripts/mark-cjs.ts",
|
|
27
|
+
"prepublishOnly": "bun run build",
|
|
28
|
+
"vault": "bun run src/cli.ts"
|
|
29
|
+
},
|
|
30
|
+
"engines": {
|
|
31
|
+
"node": ">=18"
|
|
32
|
+
},
|
|
33
|
+
"keywords": [
|
|
34
|
+
"vault",
|
|
35
|
+
"env",
|
|
36
|
+
"secrets",
|
|
37
|
+
"kubernetes",
|
|
38
|
+
"clicadigital"
|
|
39
|
+
],
|
|
40
|
+
"devDependencies": {
|
|
41
|
+
"@types/node": "^22.16.5",
|
|
42
|
+
"typescript": "^5.8.3"
|
|
43
|
+
}
|
|
44
|
+
}
|