Skip to content

Create CLI compatible with credstash#4

Open
nathan-muir wants to merge 3 commits intomasterfrom
credstash
Open

Create CLI compatible with credstash#4
nathan-muir wants to merge 3 commits intomasterfrom
credstash

Conversation

@nathan-muir
Copy link
Copy Markdown

@nathan-muir nathan-muir commented Dec 28, 2016

The goal of this PR is to create a CLI that is 100% compatible with credstash, using the API's of credsmash

Based on the work thus far, the following breaking changes must be resolved:

P1 Removed these options: --region, --profile or --arn as they can be configured via boto3 See History.md.

  • Add support for region, profile and arn to credsmash.boto3.get_session, use @lru_cache.

P2 Removed --version on credstash getall

  • Add version option to Credsmash.get_all and Credsmash.find_many

P3 Removed --digest on credstash put, & uses incompatible algo

  • Allow algorithm / algorithm_options to be configured with Credsmash.get_session or instantiate Credsmash manually in the credstash cli.

P4 Missing cosmetic features added to CLI since credstash==1.12.0

  • Implement upstream changes introduced in credstash>1.12.0

Consolidate api/cli into a single core module.

It's now much easier to load & call credsmash via python.

Core - Perform version/compare before sealing new secret.

DynamoDB - Create separate `get_one` and `get_latest`.

This also removes the `name` & `version` from the ciphertext output,
as it is an implementation detail of how DynamoDB stores data.
Crypto - Support additional authenticated data on key service
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant