Module: Legion::Extensions::Node::Runners::Vault

Includes:
Helpers::Lex
Defined in:
lib/legion/extensions/node/runners/vault.rb

Instance Method Summary collapse

Instance Method Details

#push_vault_token(public_key:, node_name:) ⇒ Object 



42
43
44
45
46
47
48
49
 
# File 'lib/legion/extensions/node/runners/vault.rb', line 42

def push_vault_token(public_key:, node_name:, **)
  return {} unless Legion::Settings[:crypt][:vault][:token]

  encrypted = Legion::Crypt.encrypt_from_keypair(message: Legion::Settings[:crypt][:vault][:token],
                                                 pub_key: public_key)
  Legion::Extensions::Node::Transport::Messages::PushVaultToken.new(token: encrypted, queue_name: node_name).publish
  {}
end

#receive_vault_token(message: nil, token: nil, cluster_name: nil, **opts) ⇒ Object 



20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
 
# File 'lib/legion/extensions/node/runners/vault.rb', line 20

def receive_vault_token(message: nil, token: nil, cluster_name: nil, **opts)
  return { success: false, already_connected: true } if Legion::Settings[:crypt][:vault][:connected]

  token ||= Legion::Crypt.decrypt_from_keypair(message: message)
  clusters = Legion::Settings[:crypt][:vault][:clusters]
  if cluster_name && clusters.is_a?(Hash) && clusters[cluster_name.to_sym]
    clusters[cluster_name.to_sym][:token] = token
    clusters[cluster_name.to_sym][:connected] = true
    return { success: true }
  end

  Legion::Settings[:crypt][:vault][:token] = token
  %i[protocol address port].each do |setting|
    next unless opts.key? setting
    next unless Legion::Settings[:crypt][:vault][setting].nil?

    Legion::Settings[:crypt][:vault][setting] = opts[setting]
  end
  Legion::Crypt.connect_vault
  {}
end

#request_token ⇒ Object 



8
9
10
11
12
13
 
# File 'lib/legion/extensions/node/runners/vault.rb', line 8

def request_token(**)
  return {} if Legion::Settings[:crypt][:vault][:connected]
  return {} unless Legion::Settings[:crypt][:vault][:enabled]

  request_vault_token
end

#request_vault_token ⇒ Object 



15
16
17
18
 
# File 'lib/legion/extensions/node/runners/vault.rb', line 15

def request_vault_token(**)
  Legion::Extensions::Node::Transport::Messages::RequestVaultToken.new.publish
  {}
end