709419e465
## Description: Fix a lint issue in credstash script. **Related issue (if applicable):** fixes #<home-assistant issue number goes here> **Pull request in [home-assistant.io](https://github.com/home-assistant/home-assistant.io) with documentation (if applicable):** home-assistant/home-assistant.io#<home-assistant.io PR number goes here> ## Example entry for `configuration.yaml` (if applicable): ```yaml ``` ## Checklist: - [ ] The code change is tested and works locally. - [ ] Local tests pass with `tox`. **Your PR cannot be merged unless tests pass** - [ ] There is no commented out code in this PR. If user exposed functionality or configuration variables are added/changed: - [ ] Documentation added/updated in [home-assistant.io](https://github.com/home-assistant/home-assistant.io) If the code communicates with devices, web services, or third-party tools: - [ ] New dependencies have been added to the `REQUIREMENTS` variable ([example][ex-requir]). - [ ] New dependencies are only imported inside functions that use them ([example][ex-import]). - [ ] New or updated dependencies have been added to `requirements_all.txt` by running `script/gen_requirements_all.py`. - [ ] New files were added to `.coveragerc`. If the code does not interact with devices: - [ ] Tests have been added to verify that the new code works. [ex-requir]: https://github.com/home-assistant/home-assistant/blob/dev/homeassistant/components/keyboard/__init__.py#L14 [ex-import]: https://github.com/home-assistant/home-assistant/blob/dev/homeassistant/components/keyboard/__init__.py#L23
71 lines
2.4 KiB
Python
71 lines
2.4 KiB
Python
"""Script to get, put and delete secrets stored in credstash."""
|
|
import argparse
|
|
import getpass
|
|
|
|
from homeassistant.util.yaml import _SECRET_NAMESPACE
|
|
|
|
REQUIREMENTS = ['credstash==1.15.0']
|
|
|
|
|
|
def run(args):
|
|
"""Handle credstash script."""
|
|
parser = argparse.ArgumentParser(
|
|
description=("Modify Home Assistant secrets in credstash."
|
|
"Use the secrets in configuration files with: "
|
|
"!secret <name>"))
|
|
parser.add_argument(
|
|
'--script', choices=['credstash'])
|
|
parser.add_argument(
|
|
'action', choices=['get', 'put', 'del', 'list'],
|
|
help="Get, put or delete a secret, or list all available secrets")
|
|
parser.add_argument(
|
|
'name', help="Name of the secret", nargs='?', default=None)
|
|
parser.add_argument(
|
|
'value', help="The value to save when putting a secret",
|
|
nargs='?', default=None)
|
|
|
|
# pylint: disable=import-error, no-member
|
|
import credstash
|
|
|
|
args = parser.parse_args(args)
|
|
table = _SECRET_NAMESPACE
|
|
|
|
try:
|
|
credstash.listSecrets(table=table)
|
|
except Exception: # pylint: disable=broad-except
|
|
credstash.createDdbTable(table=table)
|
|
|
|
if args.action == 'list':
|
|
secrets = [i['name'] for i in credstash.listSecrets(table=table)]
|
|
deduped_secrets = sorted(set(secrets))
|
|
|
|
print('Saved secrets:')
|
|
for secret in deduped_secrets:
|
|
print(secret)
|
|
return 0
|
|
|
|
if args.name is None:
|
|
parser.print_help()
|
|
return 1
|
|
|
|
if args.action == 'put':
|
|
if args.value:
|
|
the_secret = args.value
|
|
else:
|
|
the_secret = getpass.getpass('Please enter the secret for {}: '
|
|
.format(args.name))
|
|
current_version = credstash.getHighestVersion(args.name, table=table)
|
|
credstash.putSecret(args.name,
|
|
the_secret,
|
|
version=int(current_version) + 1,
|
|
table=table)
|
|
print('Secret {} put successfully'.format(args.name))
|
|
elif args.action == 'get':
|
|
the_secret = credstash.getSecret(args.name, table=table)
|
|
if the_secret is None:
|
|
print('Secret {} not found'.format(args.name))
|
|
else:
|
|
print('Secret {}={}'.format(args.name, the_secret))
|
|
elif args.action == 'del':
|
|
credstash.deleteSecrets(args.name, table=table)
|
|
print('Deleted secret {}'.format(args.name))
|