json2encrypted_data_bag.rb

#!/usr/bin/env ruby
require 'json'
require 'slop'
require 'chef/encrypted_data_bag_item'

def usage
  "Load JSON from STDIN and then convert JSON to encrypt data bag.
Usage: #{File.basename(__FILE__)} -s [secret_file]"
end

begin
  opts = Slop.parse!(:strict => true, :help => true) do
    banner usage
    on :s, 'secret-file', "secret file", {:argument => true, :required => true}
  end
rescue => e
  STDERR.puts e
  STDERR.puts usage
  exit 1
end

unless File.pipe?(STDIN)
  STDERR.puts "failed to load JSON from STDIN"
  STDERR.puts usage
  exit 1
end

begin
  bags = JSON.parse(STDIN.read)
  secret = Chef::EncryptedDataBagItem.load_secret(opts[:'secret-file'])
  ebags = Chef::EncryptedDataBagItem.new(bags, secret)

  new_bags = {}
  bags.each_key do |k|
    new_bags[k] = begin
                    ebags[k]
                  rescue
                    bags[k]
                  end
  end

  puts JSON.pretty_generate(Chef::EncryptedDataBagItem.encrypt_data_bag_item(new_bags, secret))
rescue => e
  STDERR.puts "failed to encrypt JSON"
  STDERR.puts e
  exit 1
end