ansible-vars 1.0.14__py3-none-any.whl → 1.0.15__py3-none-any.whl

ansible_vars/cli.py

@@ -178,8 +178,7 @@ The sync works as long as the command is running, after which the target root di
 ''',
     'cmd_get': '''
 Looks up the value of a key in a vault and displays it if it exists.
-If the key resolves to a leaf value, the value is recursively decrypted and displayed.
-For a list or dictionary, the full YAML code is printed, but child values are not automatically decrypted.
+The value will be shown in (recursively) decrypted form.
 
 JSON mode formatting:
 - [ ... ] or { ... } for lists/dictionaries, "<value>" for strings, <value> for numbers

ansible_vars/vault.py

@@ -30,7 +30,7 @@ class EncryptedVar():
 
     def __init__(self, cipher: str, name: str | None = None) -> None:
         '''Initialize an encrypted variable with an optional variable name. The name is only used for internal representation.'''
-        # Encrypted has to hold a string like '$ANSIBLE_VAULT;1.2;AES256;ramiio\n123456<...>' (the newline is important)
+        # Encrypted has to hold a string like '$ANSIBLE_VAULT;1.2;AES256;someid\n123456<...>' (the newline is important)
         self.cipher: str = cipher
         self.name: str | None = name
 
@@ -107,7 +107,7 @@ class Vault():
         Parses a vault's (potentially encrypted) contents. Automatically detects if the content is wholly encrypted.
         If no keyring is supplied, only plain vars and content are supported.
         '''
-        # If no keyring is supplied, create an empty one which will raise an Error if we try to en-/decrypt anything
+        # If no keyring is supplied, create an empty one which will raise an error if we try to en-/decrypt anything
         self.keyring: VaultKeyring = keyring or VaultKeyring(keys=None, detect_available_keys=False)
         # Full vault encryption, may also contain single encrypted variables either way
         self.full_encryption: bool

ansible_vars/vault_crypt.py

@@ -3,6 +3,7 @@
 # Standard library imports
 import os, re
 from typing import Type, cast
+from contextlib import chdir
 
 # External library imports
 import ansible.constants as Ansible
@@ -202,16 +203,12 @@ class VaultKeyring():
         # Load secrets for discovered vault IDs
         if not vault_ids:
             return []
-        prev_dir: str = os.getcwd()
-        try:
-            # XXX Hacky, but loading a vault ID like 'vaultid@get-password.sh' will be resolved from CWD
-            #     Could possibly be avoided by splitting the detected vault IDs and transforming any right-hand paths
-            os.chdir(pardir)
+        # XXX Hacky, but the right-hand path from loading a vault ID like 'vaultid@get-password.sh' will be resolved from CWD
+        #     Could possibly be avoided by splitting the detected vault IDs and transforming any right-hand paths
+        with chdir(pardir):
             secrets: list[tuple[str | None, VaultSecret]] = \
                 CLI.setup_vault_secrets(DataLoader(), vault_ids, auto_prompt=False, initialize_context=False) # type: ignore
             return list(map(VaultKey.from_ansible_secret, secrets))
-        finally:
-            os.chdir(prev_dir)
 
     def __repr__(self) -> str:
         return f"VaultKeyring({ ', '.join(map(lambda key: key.id, self.keys)) or 'no keys' })"

{ansible_vars-1.0.14.dist-info → ansible_vars-1.0.15.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ansible-vars
-Version: 1.0.14
+Version: 1.0.15
 Summary: Manage vaults and variable files for Ansible
 Project-URL: Homepage, https://github.com/xorwow/ansible-vars
 Project-URL: Issues, https://github.com/xorwow/ansible-vars/issues
@@ -219,7 +219,7 @@ Starts a daemon which mirrors the decrypted contents of one or multiple vault or
 
 #### get
 
-Displays the (optionally recursively decrypted) value of a specified key in a vault or variable file. Supports dictionary and list traversal, and JSON output.
+Displays the (by default recursively decrypted) value of a specified key in a vault or variable file. Supports dictionary and list traversal, and JSON output.
 
 #### set, del (experimental)
 
@@ -269,7 +269,7 @@ Contains the classes `Vault` and `VaultFile`. A `Vault` is initialized using the
 
 The `VaultKey` class represents a single vault secret, comprised of an identifier and an `ansible.parsing.vault.VaultSecret`. Can be initialized using a plain passphrase instead of a `VaultSecret` as well.
 
-The `VaultKeyring` combines a collection of `VaultKey`s. It supports auto-detection of any secrets available in the present working directory using the `ansible.cli` module, appending them to the `<keyring>.keys` collection. While all keys are tried in order for decryption operations, only one key can be used for encrypting data. This key is usually the first key in the `<keyring>.keys` collection, unless explicitly specified otherwise using `<keyring>.default_encryption_key` or passing a key to the `<keyring>.encrypt()` method.
+The `VaultKeyring` combines a collection of `VaultKey`s. It supports auto-detection of any secrets available in the present working directory (or a custom source) using the `ansible.cli` module, appending them to the `<keyring>.keys` collection. While all keys are tried in order for decryption operations, only one key can be used for encrypting data. This key is usually the first key in the `<keyring>.keys` collection, unless explicitly specified otherwise using `<keyring>.default_encryption_key` or passing a key to the `<keyring>.encrypt()` method.
 
 #### util module
 

ansible_vars-1.0.15.dist-info/RECORD

@@ -0,0 +1,13 @@
+ansible_vars/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+ansible_vars/cli.py,sha256=D2_gUY3u3EpeP4T76YTez9n9gUrBySPwFRyKcrW2auI,66339
+ansible_vars/constants.py,sha256=VNr78qbzdJ0Vn0psbzjjQngNG3VbHhk6NXTz30VNUno,1622
+ansible_vars/errors.py,sha256=6dzyksPKWira9O2-Ir3MIOwr4XjN9MSBiRp5e6siY6Q,1256
+ansible_vars/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+ansible_vars/util.py,sha256=UwGPBT19pee7lBpWuBzLPAvcrHUBAn6i1MrJvzM9OQ4,21265
+ansible_vars/vault.py,sha256=F8Eyn8ebduC3Cmst07280Bt7Wmy293ZRt9QrwshVVCA,47011
+ansible_vars/vault_crypt.py,sha256=Hv_bBn6gazVAnfo-h2ufsg1qAdaPB_Lvpicjl-rR-r8,11818
+ansible_vars-1.0.15.dist-info/METADATA,sha256=LAixHYmmBpn82kfAGuBR16Xt3FbRG6plmEI1o1y1vlk,21071
+ansible_vars-1.0.15.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+ansible_vars-1.0.15.dist-info/entry_points.txt,sha256=RrhkEH0MbfRzflguVrfYfthsFC5V2fkFnizUG3uHMtQ,55
+ansible_vars-1.0.15.dist-info/licenses/LICENSE,sha256=ocyJHLG5wD12qB4uam2pqWTHIJmzloiyNyTex6Q2DKo,1062
+ansible_vars-1.0.15.dist-info/RECORD,,

ansible_vars-1.0.14.dist-info/RECORD

@@ -1,12 +0,0 @@
-ansible_vars/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-ansible_vars/cli.py,sha256=0RScnMrG__L5mXu_OmEgxB3x4lTJ1lAyowlOJvQNcrE,66476
-ansible_vars/constants.py,sha256=VNr78qbzdJ0Vn0psbzjjQngNG3VbHhk6NXTz30VNUno,1622
-ansible_vars/errors.py,sha256=6dzyksPKWira9O2-Ir3MIOwr4XjN9MSBiRp5e6siY6Q,1256
-ansible_vars/util.py,sha256=UwGPBT19pee7lBpWuBzLPAvcrHUBAn6i1MrJvzM9OQ4,21265
-ansible_vars/vault.py,sha256=aGTU_GmJLw0QGjBQiNlRE_E-rRMEVVbwdr8IV2U2duk,47011
-ansible_vars/vault_crypt.py,sha256=58CECQrjHSKubUGL38TLuYF9h8KmO2e70swRgkS-Rn0,11870
-ansible_vars-1.0.14.dist-info/METADATA,sha256=iGS5L6S7IQF8agJHlDDvL5NvAv3eFcjbBhS9XtkIogA,21050
-ansible_vars-1.0.14.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-ansible_vars-1.0.14.dist-info/entry_points.txt,sha256=RrhkEH0MbfRzflguVrfYfthsFC5V2fkFnizUG3uHMtQ,55
-ansible_vars-1.0.14.dist-info/licenses/LICENSE,sha256=ocyJHLG5wD12qB4uam2pqWTHIJmzloiyNyTex6Q2DKo,1062
-ansible_vars-1.0.14.dist-info/RECORD,,