Skip to content

Instantly share code, notes, and snippets.

@tappleby
Forked from aaronjensen/edit_data_bag.rb
Last active December 16, 2015 04:58
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save tappleby/5380562 to your computer and use it in GitHub Desktop.
Save tappleby/5380562 to your computer and use it in GitHub Desktop.
Edit data bag when using chef solo. Changed to automatically write empty data bag if none exists.
#!/usr/bin/env ruby
Dir.chdir File.join(__FILE__, "../..")
unless ENV['EDITOR']
puts "No EDITOR found. Try:"
puts "export EDITOR=vim"
exit 1
end
unless ARGV.count == 2
puts "usage: #{$0} <data bag> <item name>"
exit 1
end
require 'chef/encrypted_data_bag_item'
require 'json'
require 'tempfile'
data_bag = ARGV[0]
item_name = ARGV[1]
encrypted_path = "data_bags/#{data_bag}/#{item_name}.json"
unless File.exists? encrypted_path
File.write encrypted_path, JSON.pretty_generate({})
end
data_bag_key_path = File.join(Dir.pwd, "data_bag_key")
unless File.exists? data_bag_key_path
puts "Get the data_bag_key and put it in #{data_bag_key_path}."
exit 1
end
secret = Chef::EncryptedDataBagItem.load_secret('data_bag_key')
decrypted_file = Tempfile.new ["#{data_bag}_#{item_name}",".json"]
at_exit { decrypted_file.delete }
encrypted_data = JSON.parse(File.read(encrypted_path))
plain_data = Chef::EncryptedDataBagItem.new(encrypted_data, secret).to_hash
decrypted_file.puts JSON.pretty_generate(plain_data)
decrypted_file.close
system "#{ENV['EDITOR']} #{decrypted_file.path}"
plain_data = JSON.parse(File.read(decrypted_file.path))
encrypted_data = Chef::EncryptedDataBagItem.encrypt_data_bag_item(plain_data, secret)
File.write encrypted_path, JSON.pretty_generate(encrypted_data)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment