get-hc-secrets 1.5.21__tar.gz → 1.5.22__tar.gz

{get_hc_secrets-1.5.21 → get_hc_secrets-1.5.22}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: get_hc_secrets
-Version: 1.5.21
+Version: 1.5.22
 Summary: A package to read secrets from Hashicorp vault or from a local file
 Author-email: Xavier Mayeur <xavier@mayeur.be>
 Project-URL: Homepage, https://github.com/xmayeur/getSecrets

{get_hc_secrets-1.5.21 → get_hc_secrets-1.5.22}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "get_hc_secrets"
-version = '1.5.21'
+version = '1.5.22'
 authors = [
     { name = "Xavier Mayeur", email = "xavier@mayeur.be" }
 ]

{get_hc_secrets-1.5.21 → get_hc_secrets-1.5.22}/src/getSecrets/__init__.py

@@ -1,5 +1,7 @@
 import logging
 import os
+import re
+import socket
 import sys
 from os import getenv
 from os.path import join
@@ -7,6 +9,7 @@ from os.path import join
 import requests
 import urllib3
 import yaml
+from certifi import where
 
 logging.basicConfig(level=logging.INFO, format='%(asctime)s %(message)s',
                     datefmt='%m/%d/%Y %I:%M:%S %p')
@@ -49,6 +52,10 @@ def get_secret(id: str, repo: str = 'secret') -> dict:
             certs = '/etc/vault/bundle.pem'
         else:
             certs = join(_home, _config['vault']['certs'].replace("~/", ''))
+        hostname = re.sub(r'https://(.*?)[:/?].*', r'\1', base_url)
+        ip = socket.gethostbyname(hostname)
+        if '192.168.' not in ip:
+            certs = where()
         # check if file exist, else make insecure
         if not (os.path.exists(certs)):
             certs = False

{get_hc_secrets-1.5.21 → get_hc_secrets-1.5.22}/src/get_hc_secrets.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: get_hc_secrets
-Version: 1.5.21
+Version: 1.5.22
 Summary: A package to read secrets from Hashicorp vault or from a local file
 Author-email: Xavier Mayeur <xavier@mayeur.be>
 Project-URL: Homepage, https://github.com/xmayeur/getSecrets