oc-cdtapi 3.20.0__py3-none-any.whl → 3.21.5__py3-none-any.whl

oc_cdtapi/VaultAPI.py

@@ -0,0 +1,76 @@
+import logging
+import os
+
+import hvac
+from hvac.exceptions import VaultError
+
+class VaultAPI:
+    def __init__(self,
+                 vault_enable=False,
+                 vault_url=None,
+                 vault_token=None,
+                 vault_mount_point=None,
+                 verify_ssl=True):
+        self.vault_enable = vault_enable or os.getenv("VAULT_ENABLE")
+        self.vault_url = vault_url or os.getenv("VAULT_URL")
+        self.vault_token = vault_token or os.getenv("VAULT_TOKEN")
+        self.mount_point = vault_mount_point or os.getenv("VAULT_MOUNT_POINT")
+        self.use_staging_secrets = os.getenv("USE_STAGING_ENVIRONMENT", "false").lower() == "true" #Check whether we have env USE_STAGING_ENVIRONMENT true or not
+        self.verify_ssl = verify_ssl
+        self._client = None
+
+    @property
+    def client(self):
+        if not self.vault_enable:
+            logging.warning("VAULT_ENABLE environment set to false, skip using vault")
+            return None
+
+        if self._client is None:
+            if not self.vault_url:
+                logging.warning("VAULT_URL environment variable or vault_url parameter is missing, skip using vault")
+                return None
+            if not self.vault_token:
+                logging.warning("VAULT_TOKEN environment variable or vault_token parameter is missing, skip using vault")
+                return None
+
+            self._client = hvac.Client(
+                url=self.vault_url,
+                token=self.vault_token,
+                verify=self.verify_ssl
+            )
+
+            if not self._client.is_authenticated():
+                logging.warning("Failed to authenticate with Vault - check credentials, skip using vault")
+                return None
+
+        return self._client
+
+    def parse_secret_name(self, name):
+        if 'USER' in name:
+            split_name = name.split('_USER')[0]
+            return split_name, 'USER'
+
+        if 'PASSWORD' in name:
+            split_name = name.split('_PASSWORD')[0]
+            return split_name, 'PASSWORD'
+
+        return 'OTHER', name
+
+    def get_secret_from_path(self, name):
+        client = self.client
+        if client is None:
+            return None
+
+        secret_path, credentials = self.parse_secret_name(name)
+        if self.use_staging_secrets:
+            secret_path = secret_path + "_TEST"
+
+        try:
+            response = client.secrets.kv.read_secret_version(path=secret_path, mount_point=self.mount_point)
+            return response['data']['data'].get(credentials)
+        except VaultError as e:
+            logging.warning(f"Failed getting data from vault for path {secret_path} and credentials {credentials}: {e}")
+            return None
+
+    def load_secret(self, name, default=None):
+        return self.get_secret_from_path(name) or os.getenv(name, default)

{oc_cdtapi-3.20.0.dist-info → oc_cdtapi-3.21.5.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: oc-cdtapi
-Version: 3.20.0
+Version: 3.21.5
 Summary: Custom Development python API libraries
 License: Apache2.0
 Requires-Python: >=3.6
@@ -9,6 +9,7 @@ License-File: LICENSE
 Requires-Dist: requests
 Requires-Dist: packaging
 Requires-Dist: psycopg2-binary
+Requires-Dist: hvac
 Dynamic: description
 Dynamic: description-content-type
 Dynamic: license

{oc_cdtapi-3.20.0.dist-info → oc_cdtapi-3.21.5.dist-info}/RECORD

@@ -10,10 +10,11 @@ oc_cdtapi/PgAPI.py,sha256=URSz7qu-Ir7AOj0jI3ucTXn2PM-nC96nmPZI746OLjA,14356
 oc_cdtapi/PgQAPI.py,sha256=CUN3TSvyglglJ5EgzIt-iE7PX6atKKycoPMHyLkT6oA,8658
 oc_cdtapi/RundeckAPI.py,sha256=O3LmcFaHSz8UqeUyIHTTEMJncDD191Utd-iZaeJay2s,24243
 oc_cdtapi/TestServer.py,sha256=HV97UWg2IK4gOYAp9yaMdwFUWsw9v66MxyZdI3qQctA,2715
+oc_cdtapi/VaultAPI.py,sha256=OgKS5GFDAzs_6YlAv412OzFy2Cd4H1z-KjBGKfb__tY,2838
 oc_cdtapi/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-oc_cdtapi-3.20.0.data/scripts/nexus.py,sha256=4teqZ_KtCSrwHDJVgA7lkreteod4Xt5XJFZNbwb7E6E,6858
-oc_cdtapi-3.20.0.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
-oc_cdtapi-3.20.0.dist-info/METADATA,sha256=vqmC6tuhx_8u9q1Z6Yal31uLdmKewZva6v0-ABgnrQk,484
-oc_cdtapi-3.20.0.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-oc_cdtapi-3.20.0.dist-info/top_level.txt,sha256=d4-5-D-0CSeSXYuLCP7-nIFCpjkfmJr-Y_muzds8iVU,10
-oc_cdtapi-3.20.0.dist-info/RECORD,,
+oc_cdtapi-3.21.5.data/scripts/nexus.py,sha256=4teqZ_KtCSrwHDJVgA7lkreteod4Xt5XJFZNbwb7E6E,6858
+oc_cdtapi-3.21.5.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
+oc_cdtapi-3.21.5.dist-info/METADATA,sha256=6Ea8d0B0yVRLtl9OI9JDgqZprnX5IShStL4mEyRrfbY,504
+oc_cdtapi-3.21.5.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+oc_cdtapi-3.21.5.dist-info/top_level.txt,sha256=d4-5-D-0CSeSXYuLCP7-nIFCpjkfmJr-Y_muzds8iVU,10
+oc_cdtapi-3.21.5.dist-info/RECORD,,