fujin-secrets-doppler 0.16.0__tar.gz

fujin_secrets_doppler-0.16.0/PKG-INFO

@@ -0,0 +1,74 @@
+Metadata-Version: 2.3
+Name: fujin-secrets-doppler
+Version: 0.16.0
+Summary: Doppler secret adapter for Fujin
+Author: Tobi
+Author-email: Tobi <tobidegnon@proton.me>
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: fujin-cli>=0.16
+Requires-Dist: python-dotenv>=1.0.1
+Requires-Python: >=3.10
+Project-URL: Homepage, https://github.com/Tobi-De/fujin
+Project-URL: Issues, https://github.com/Tobi-De/fujin/issues
+Project-URL: Source, https://github.com/Tobi-De/fujin
+Description-Content-Type: text/markdown
+
+# Fujin Secrets - Doppler
+
+Doppler secret adapter for Fujin deployment tool.
+
+## Installation
+
+```bash
+pip install fujin-secrets-doppler
+```
+
+Or with uv:
+
+```bash
+uv pip install fujin-secrets-doppler
+```
+
+## Prerequisites
+
+Download and install the [Doppler CLI](https://docs.doppler.com/docs/cli) and sign in to your account.
+
+Move to your project root directory and run `doppler setup` to configure your project.
+
+## Configuration
+
+Add the following to your `fujin.toml` file:
+
+```toml
+[secrets]
+adapter = "doppler"
+```
+
+## Usage
+
+In your environment file (`.env` or configured via `envfile` in `fujin.toml`), prefix secret values with `$`:
+
+```env
+DEBUG=False
+AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID
+AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY
+```
+
+The `$` sign indicates to Fujin that it is a secret that should be resolved using the configured adapter.
+
+## How it Works
+
+The adapter:
+1. Uses the Doppler CLI configuration from your project setup
+2. Resolves all secrets concurrently using `doppler run --command "echo $<name>"`
+3. Returns the resolved environment variables
+
+## Related
+
+- [Fujin Documentation](https://github.com/Tobi-De/fujin)
+- [Doppler CLI Documentation](https://docs.doppler.com/docs/cli)

fujin_secrets_doppler-0.16.0/README.md

@@ -0,0 +1,54 @@
+# Fujin Secrets - Doppler
+
+Doppler secret adapter for Fujin deployment tool.
+
+## Installation
+
+```bash
+pip install fujin-secrets-doppler
+```
+
+Or with uv:
+
+```bash
+uv pip install fujin-secrets-doppler
+```
+
+## Prerequisites
+
+Download and install the [Doppler CLI](https://docs.doppler.com/docs/cli) and sign in to your account.
+
+Move to your project root directory and run `doppler setup` to configure your project.
+
+## Configuration
+
+Add the following to your `fujin.toml` file:
+
+```toml
+[secrets]
+adapter = "doppler"
+```
+
+## Usage
+
+In your environment file (`.env` or configured via `envfile` in `fujin.toml`), prefix secret values with `$`:
+
+```env
+DEBUG=False
+AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID
+AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY
+```
+
+The `$` sign indicates to Fujin that it is a secret that should be resolved using the configured adapter.
+
+## How it Works
+
+The adapter:
+1. Uses the Doppler CLI configuration from your project setup
+2. Resolves all secrets concurrently using `doppler run --command "echo $<name>"`
+3. Returns the resolved environment variables
+
+## Related
+
+- [Fujin Documentation](https://github.com/Tobi-De/fujin)
+- [Doppler CLI Documentation](https://docs.doppler.com/docs/cli)

fujin_secrets_doppler-0.16.0/pyproject.toml

@@ -0,0 +1,33 @@
+[build-system]
+build-backend = "uv_build"
+requires = [ "uv-build>=0.9.18,<0.10" ]
+
+[project]
+name = "fujin-secrets-doppler"
+version = "0.16.0"
+description = "Doppler secret adapter for Fujin"
+readme = "README.md"
+authors = [
+  { name = "Tobi", email = "tobidegnon@proton.me" },
+]
+requires-python = ">=3.10"
+classifiers = [
+  "Programming Language :: Python :: 3 :: Only",
+  "Programming Language :: Python :: 3.10",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
+  "Programming Language :: Python :: 3.13",
+  "Programming Language :: Python :: 3.14",
+]
+dependencies = [
+  "fujin-cli>=0.16",
+  "python-dotenv>=1.0.1",
+]
+
+urls.Homepage = "https://github.com/Tobi-De/fujin"
+urls.Issues = "https://github.com/Tobi-De/fujin/issues"
+urls.Source = "https://github.com/Tobi-De/fujin"
+entry-points."fujin.secrets".doppler = "fujin_secrets_doppler:doppler"
+
+[tool.uv.sources]
+fujin-cli = { workspace = true }

fujin_secrets_doppler-0.16.0/src/fujin_secrets_doppler/__init__.py

@@ -0,0 +1,96 @@
+"""Doppler secret adapter for Fujin."""
+
+from __future__ import annotations
+
+import subprocess
+from concurrent.futures import ThreadPoolExecutor, as_completed
+from contextlib import closing
+from io import StringIO
+
+from dotenv import dotenv_values
+from fujin.config import SecretConfig
+from fujin.errors import SecretResolutionError
+
+__version__ = "0.1.0"
+
+
+def doppler(env_content: str, secret_config: SecretConfig) -> str:
+    """Doppler secret adapter.
+
+    Retrieves secrets from Doppler using the `doppler` CLI.
+    Handles concurrent resolution of multiple secrets for performance.
+
+    Requires `doppler setup` to be run in project root first.
+
+    Configuration:
+        adapter = "doppler"
+
+    Args:
+        env_content: Raw environment file content
+        secret_config: Secret configuration (unused for doppler)
+
+    Returns:
+        Resolved environment content with secrets replaced
+
+    Raises:
+        SecretResolutionError: If secret not found or CLI fails
+    """
+    # Parse env file
+    with closing(StringIO(env_content)) as buffer:
+        env_dict = dotenv_values(stream=buffer)
+
+    # Identify secrets (values starting with $)
+    secrets = {
+        key: value for key, value in env_dict.items() if value and value.startswith("$")
+    }
+
+    if not secrets:
+        return env_content
+
+    # Resolve secrets concurrently
+    resolved_secrets = {}
+    with ThreadPoolExecutor() as executor:
+        future_to_key = {
+            executor.submit(_read_secret, secret[1:]): key
+            for key, secret in secrets.items()
+        }
+
+        for future in as_completed(future_to_key):
+            key = future_to_key[future]
+            try:
+                resolved_secrets[key] = future.result()
+            except Exception as e:
+                raise SecretResolutionError(
+                    f"Failed to retrieve secret for {key}: {e}",
+                    adapter="doppler",
+                    key=key,
+                ) from e
+
+    # Merge resolved secrets back into env dict
+    env_dict.update(resolved_secrets)
+
+    return "\n".join(f'{key}="{value}"' for key, value in env_dict.items())
+
+
+def _read_secret(name: str) -> str:
+    """Read a single secret from Doppler.
+
+    Args:
+        name: Secret/variable name
+
+    Returns:
+        Secret value
+
+    Raises:
+        SecretResolutionError: If secret not found
+    """
+    result = subprocess.run(
+        ["doppler", "run", "--command", f"echo ${name}"],
+        capture_output=True,
+        text=True,
+    )
+
+    if result.returncode != 0:
+        raise SecretResolutionError(result.stderr, adapter="doppler", key=name)
+
+    return result.stdout.strip()