yage 0.5.0

A simple tool to manage encrypted secrets in YAML files with age encryption
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117

mod common;

use crate::common::*;
use assert_fs::prelude::*;
use predicates::str::{contains, is_empty};
use pretty_assertions::assert_eq;

#[test]
fn decrypt_to_stdout() {
    let (_tmp, key_path, _, yaml_path, encrypted_path) = generate_encrypted_file();
    let output = yage!("decrypt", "--key-file", &key_path, &encrypted_path)
        .stderr(is_empty())
        .get_output()
        .clone();
    assert_eq!(String::from_utf8(output.stdout).unwrap(), read(&yaml_path));
}

#[test]
fn decrypt_to_file() {
    let (tmp, key_path1, _, yaml_path, encrypted_path) = generate_encrypted_file();
    let (key_path2, _) = create_key(&tmp);
    let decrypted_path = tmp.child("file.dec.yaml");
    yage!(
        "decrypt",
        "--key-file",
        &key_path1,
        "-K",
        &key_path2,
        &encrypted_path,
        "--output",
        &decrypted_path
    )
    .stdout(is_empty())
    .stderr(is_empty());
    assert_eq!(read(&decrypted_path), read(&yaml_path));
}

#[test]
fn decrypt_from_stdin() {
    let (tmp, key_path, _, yaml_path, encrypted_path) = generate_encrypted_file();
    let decrypted_path = tmp.child("file.dec.yaml");
    yage_cmd!("decrypt", "--key", read(&key_path).trim(), "-", "--output", &decrypted_path)
        .write_stdin(read(&encrypted_path))
        .assert()
        .success()
        .stdout(is_empty())
        .stderr(is_empty());
    assert_eq!(read(&decrypted_path), read(&yaml_path));
}

#[test]
fn decrypt_key_stdin() {
    let (tmp, key_path, _, yaml_path, encrypted_path) = generate_encrypted_file();
    let decrypted_path = tmp.child("file.dec.yaml");
    yage_cmd!("decrypt", "--key-file", "-", &encrypted_path, "-o", &decrypted_path)
        .write_stdin(read(&key_path))
        .assert()
        .success()
        .stdout(is_empty())
        .stderr(is_empty());
    assert_eq!(read(&decrypted_path), read(&yaml_path));
}

#[test]
fn decrypt_in_place() {
    let (_tmp, key_path, _, yaml_path, encrypted_path) = generate_encrypted_file();
    yage!("decrypt", "-k", read(&key_path).trim(), &encrypted_path, "-i")
        .stdout(is_empty())
        .stderr(is_empty());
    assert_eq!(read(&encrypted_path), read(&yaml_path));
}

#[test]
fn decrypt_stdin_in_place() {
    yage_cmd!("decrypt", "--in-place", "-")
        .assert()
        .failure()
        .stdout(is_empty())
        .stderr(contains("error: stdin can't be modified in place"));
}

#[test]
fn decrypt_multiple_files_no_in_place() {
    yage_cmd!("decrypt", "foo.yaml", "bar.yaml")
        .assert()
        .failure()
        .stdout(is_empty())
        .stderr(contains("error: invalid number of input files"));
}

#[test]
fn decrypt_key_from_env() {
    let (tmp, key_path1, _, yaml_path, encrypted_path) = generate_encrypted_file();
    let (key_path2, _) = create_key(&tmp);
    let decrypted_path = tmp.child("file.dec.yaml");
    yage_cmd!("decrypt", &encrypted_path, "--output", &decrypted_path)
        .env("YAGE_KEY", format!("{},{}", read(&key_path1).trim(), read(&key_path2).trim()))
        .assert()
        .success()
        .stdout(is_empty())
        .stderr(is_empty());
    assert_eq!(read(&decrypted_path), read(&yaml_path));
}

#[test]
fn decrypt_key_file_from_env() {
    let (tmp, key_path1, _, yaml_path, encrypted_path) = generate_encrypted_file();
    let (key_path2, _) = create_key(&tmp);
    let decrypted_path = tmp.child("file.dec.yaml");
    yage_cmd!("decrypt", &encrypted_path, "--output", &decrypted_path)
        .env("YAGE_KEY_FILE", std::env::join_paths(vec![&key_path1, &key_path2]).unwrap())
        .assert()
        .success()
        .stdout(is_empty())
        .stderr(is_empty());
    assert_eq!(read(&decrypted_path), read(&yaml_path));
}