@meistrari/mise-en-place 2.16.0 → 2.18.0

package/Makefile

@@ -16,7 +16,7 @@ mise-en-place: .editorconfig ## Setup the mise en place to start cooking
 	@echo "Mise en place is ready! 🍳"
 
 .PHONY: global-envs
-global-envs:
+global-envs: ## Export global environment variables from Infisical
 	@infisical export --env development --projectId $(INFISICAL_PROJECT_ID_GLOBALS)
 # endregion
 

package/mise/tasks/check-infisical-login.sh

@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+#MISE description="Check if Infisical is logged in. Triggers login if not."
+#USAGE flag "--login" negate="--no-login" default=#true help="Trigger login if not logged in. If false, exits with code 1 if not logged in."
+#USAGE flag "-f --force" default=#false help="Force login even if already logged in."
+#USAGE flag "-d --domain <domain>" default="https://app.infisical.com" help="Infisical domain to pass to login command." env="INFISICAL_DOMAIN"
+#MISE quiet=true
+#MISE interactive=true
+
+set -euo pipefail
+
+
+check_status() {
+  infisical login status &>/dev/null
+}
+
+login () {
+  infisical login --domain $usage_domain --silent
+}
+
+if [ $usage_force = true ]; then
+  login
+fi
+
+if [ $usage_login = false ]; then
+  check_status || exit 1
+  exit 0
+fi
+
+if ! check_status; then
+  login
+fi

package/mise/tasks/import-secrets.sh

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+#MISE description="Import secrets from VaultSecrets"
+
+set -euo pipefail
+
+export VAULT_ADDR="${VAULT_ADDR:-https://secrets.tela.tools}"
+
+APP_NAME="${1:-${APP_NAME:-}}"
+
+if [ -z "$APP_NAME" ]; then
+    echo "APP_NAME is required. Pass it as the first argument or set the APP_NAME environment variable." >&2
+    exit 1
+fi
+
+WORKLOAD_PATH="${2:-${WORKLOAD_PATH:-}}"
+
+if [ -z "$WORKLOAD_PATH" ]; then
+    echo "WORKLOAD_PATH is required. Pass it as the second argument or set the WORKLOAD_PATH environment variable." >&2
+    exit 1
+fi
+
+FILE_NAME="${3:-${FILE_NAME:-}}"
+
+if [ -z "$FILE_NAME" ]; then
+    echo "FILE_NAME is required. Pass it as the third argument or set the FILE_NAME environment variable." >&2
+    exit 1
+fi
+
+ENV=development
+
+SECRET_PATH="$APP_NAME/$ENV/$WORKLOAD_PATH"
+
+if ! SECRET_JSON="$(vault kv get -mount=kv -format=json "$SECRET_PATH" 2>&1)"; then
+    echo "Failed to read kv/$SECRET_PATH from $VAULT_ADDR:" >&2
+    echo "$SECRET_JSON" >&2
+    echo "" >&2
+    echo "Inspect it in the browser: $VAULT_ADDR/ui/vault/secrets/kv/kv/list/${APP_NAME}/" >&2
+    exit 1
+fi
+
+echo "$SECRET_JSON" \
+    | jq -r '.data.data | to_entries[] | "\(.key)=\(.value | @sh)"' > "$FILE_NAME"

package/mise/tasks/vault-secrets-login.sh

@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+#MISE description="Login to VaultSecrets"
+
+export VAULT_ADDR="${VAULT_ADDR:-https://secrets.tela.tools}"
+
+vault login -method=oidc

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meistrari/mise-en-place",
-  "version": "2.16.0",
+  "version": "2.18.0",
   "description": "",
   "repository": {
     "type": "git",