get-hc-secrets 1.5.6__tar.gz → 1.5.8__tar.gz

{get_hc_secrets-1.5.6 → get_hc_secrets-1.5.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: get_hc_secrets
-Version: 1.5.6
+Version: 1.5.8
 Summary: A package to read secrets from Hashicorp vault
 Author-email: Xavier Mayeur <xavier@mayeur.be>
 Project-URL: Homepage, https://github.com/xmayeur/getSecrets
@@ -21,7 +21,7 @@ getSecrets is a simple package that reads from the given engine ('secret' by def
 usage:
 
 ```
-from get_secrets import *
+from getSecrets import *
 
 data = get_secret(<id>, [<secret>])
 

{get_hc_secrets-1.5.6 → get_hc_secrets-1.5.8}/README.md

@@ -5,7 +5,7 @@ getSecrets is a simple package that reads from the given engine ('secret' by def
 usage:
 
 ```
-from get_secrets import *
+from getSecrets import *
 
 data = get_secret(<id>, [<secret>])
 

{get_hc_secrets-1.5.6 → get_hc_secrets-1.5.8}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "get_hc_secrets"
-version = '1.5.6'
+version = '1.5.8'
 authors = [
     { name = "Xavier Mayeur", email = "xavier@mayeur.be" }
 ]

{get_hc_secrets-1.5.6 → get_hc_secrets-1.5.8}/src/getSecrets/__init__.py

@@ -3,14 +3,28 @@ from os import getenv
 from os.path import join
 import requests
 import yaml
+import os
+import sys
 
 
-_config_file = "~/.config/.vault/vault.yml"
-_home = getenv("HOME")
-_config = yaml.safe_load(open(join(_home, _config_file.replace("~/", ''))))
 logging.basicConfig(level=logging.INFO, format='%(asctime)s %(message)s',
                     datefmt='%m/%d/%Y %I:%M:%S %p')
 
+_config_file = "~/.config/.vault/vault.yml"
+_home = getenv("HOME")
+
+try:
+    _config = yaml.safe_load(open(join(_home, _config_file.replace("~/", ''))))
+except FileNotFoundError:
+    if not os.path.exists("/etc/vault"):
+        os.makedirs("/etc/vault")
+    _home = "/etc/vault"
+    try:
+        _config = yaml.safe_load(open(join(_home, 'vault.yaml')))
+    except FileNotFoundError:
+        logging.error(f"No vault configuration found in {_home}")
+        sys.exit(1)
+
 
 def get_secret(id: str, repo: str = 'secret') -> dict:
     """
@@ -25,9 +39,12 @@ def get_secret(id: str, repo: str = 'secret') -> dict:
     """
 
     base_url = _config['vault']['vault_addr']
-    certs = join(_home, _config['vault']['certs'].replace("~/", ''))
-    token = _config['vault']['token']
+    if _home == '/etc/vault':
+        certs = '/etc/vault/bundle.pem'
+    else:
+        certs = join(_home, _config['vault']['certs'].replace("~/", ''))
 
+    token = _config['vault']['token']
     headers = {"X-Vault-Token": token}
     uri = f"/v1/{repo}/data/"
     url = f"{base_url}{uri}{id}"
@@ -134,4 +151,3 @@ def upd_secret(id: str, data, repo: str = 'secret'):
         print(f"http error {resp.status_code}")
         logging.error(f"Vault api error {resp}")
         return None, None
-

{get_hc_secrets-1.5.6 → get_hc_secrets-1.5.8}/src/get_hc_secrets.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: get_hc_secrets
-Version: 1.5.6
+Version: 1.5.8
 Summary: A package to read secrets from Hashicorp vault
 Author-email: Xavier Mayeur <xavier@mayeur.be>
 Project-URL: Homepage, https://github.com/xmayeur/getSecrets
@@ -21,7 +21,7 @@ getSecrets is a simple package that reads from the given engine ('secret' by def
 usage:
 
 ```
-from get_secrets import *
+from getSecrets import *
 
 data = get_secret(<id>, [<secret>])
 

{get_hc_secrets-1.5.6 → get_hc_secrets-1.5.8}/src/get_hc_secrets.egg-info/SOURCES.txt

@@ -6,4 +6,5 @@ src/get_hc_secrets.egg-info/PKG-INFO
 src/get_hc_secrets.egg-info/SOURCES.txt
 src/get_hc_secrets.egg-info/dependency_links.txt
 src/get_hc_secrets.egg-info/requires.txt
-src/get_hc_secrets.egg-info/top_level.txt
+src/get_hc_secrets.egg-info/top_level.txt
+tests/test_getsecrets.py

get_hc_secrets-1.5.8/tests/test_getsecrets.py

@@ -0,0 +1,24 @@
+import secrets
+import unittest
+import getSecrets as gs
+
+
+class TestGetSecrets(unittest.TestCase):
+
+    def test_listsecret(self):
+        secrets = gs.list_secret()
+        self.assertTrue('test' in secrets)
+
+    def test_getsecrets(self):
+        secret = gs.get_secret('test')
+        self.assertTrue('test' in secret)
+        self.assertEqual(secret['test'], 'test')
+
+    def test_usr_pwd(self):
+        usr, pwd = gs.get_user_pwd('test')
+        self.assertEqual(usr, 'test')
+        self.assertEqual(pwd, 'test')
+
+
+if __name__ == '__main__':
+    unittest.main()