Sha256: 14d52404d4b0d6c851aba0e40239e8711117bed8e8c4d0c684557acbd6fff546
Contents?: true
Size: 1.34 KB
Versions: 17
Compression:
Stored size: 1.34 KB
Contents
# frozen_string_literal: true
module Bolt
class Secret
class Base
def hooks
%i[resolve_reference secret_encrypt secret_decrypt secret_createkeys validate_resolve_reference]
end
def encode(raw)
coded = Base64.encode64(raw).strip
"ENC[#{name.upcase},#{coded}]"
end
def decode(code)
format = %r{\AENC\[(?<plugin>\w+),(?<encoded>[\w\s+-=/]+)\]\s*\z}
match = format.match(code)
raise Bolt::ValidationError, "Could not parse as an encrypted value: #{code}" unless match
raw = Base64.decode64(match[:encoded])
[raw, match[:plugin]]
end
def secret_encrypt(opts)
encrypted = encrypt_value(opts['plaintext_value'])
encode(encrypted)
end
def secret_decrypt(opts)
raw, _plugin = decode(opts['encrypted_value'])
decrypt_value(raw)
end
alias resolve_reference secret_decrypt
def validate_resolve_reference(opts)
# TODO: Remove deprecation warning
if opts.include?('encrypted-value')
msg = "Parsing error: The 'encrypted-value' key is deprecated and can no longer be used. " \
"In your Bolt config files, please use 'encrypted_value' instead."
raise Bolt::ValidationError, msg
end
decode(opts['encrypted_value'])
end
end
end
end
Version data entries
17 entries across 17 versions & 1 rubygems