beaker-pe 2.11.16 → 2.11.17
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.github/workflows/snyk_merge.yaml +30 -0
- data/CODEOWNERS +1 -1
- data/lib/beaker-pe/install/pe_utils.rb +56 -0
- data/lib/beaker-pe/version.rb +1 -1
- metadata +4 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: c2f1158ec22a1984b9cc1169e67201c868534857f11c243ae59a1d337e2abfb5
|
|
4
|
+
data.tar.gz: abc9ef3725fe4a305a3edbb503a5c48d28934b2539ac1c2cf32a95538059589f
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 2700a7024284981d6697b97c40b9885ae76616a310ad080eb22e108c9115da6ffd4205071524044023e15bc3cc3ceecc06d2025df5de061c26168a529dfbf2ce
|
|
7
|
+
data.tar.gz: 782e10c4809d2f81438f06fc653dd94d420f1c6f34a9a00e9cce1c4ad453ba521e79a49574111fbd3585083e7461c97f2c3476f707b4f84388c5285bc1a940b2
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: Snyk Scan
|
|
3
|
+
on: push
|
|
4
|
+
|
|
5
|
+
# Note: if your workflow involves working from branches
|
|
6
|
+
# on the puppetlabs repos directly rather from a fork
|
|
7
|
+
# you will probably want to use the below for events to
|
|
8
|
+
# reduce the reporting noise.
|
|
9
|
+
# on:
|
|
10
|
+
# push:
|
|
11
|
+
# branches:
|
|
12
|
+
# - main
|
|
13
|
+
|
|
14
|
+
jobs:
|
|
15
|
+
security:
|
|
16
|
+
runs-on: ubuntu-latest
|
|
17
|
+
steps:
|
|
18
|
+
- uses: actions/checkout@master
|
|
19
|
+
- name: setup ruby
|
|
20
|
+
uses: ruby/setup-ruby@v1
|
|
21
|
+
with:
|
|
22
|
+
ruby-version: 2.7
|
|
23
|
+
- name: create lock
|
|
24
|
+
run: bundle lock
|
|
25
|
+
- name: Run Snyk to check for vulnerabilities
|
|
26
|
+
uses: snyk/actions/ruby@master
|
|
27
|
+
env:
|
|
28
|
+
SNYK_TOKEN: ${{ secrets.SNYK_FOSS_KEY }}
|
|
29
|
+
with:
|
|
30
|
+
command: monitor
|
data/CODEOWNERS
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
#This Repository is maintained by both the beaker, installer, and Night's Watch teams, depending on the location of the changes
|
|
2
|
-
* @puppetlabs/
|
|
2
|
+
* @puppetlabs/dio
|
|
3
3
|
/lib/beaker-pe/install @puppetlabs/installer-and-management
|
|
4
4
|
/lib/beaker-pe/pe-client-tools @puppetlabs/night-s-watch
|
|
5
5
|
/spec/beaker-pe/install @puppetlabs/installer-and-management
|
|
@@ -884,6 +884,7 @@ module Beaker
|
|
|
884
884
|
end
|
|
885
885
|
|
|
886
886
|
install_hosts.each do |host|
|
|
887
|
+
solaris_key_chain_fix
|
|
887
888
|
|
|
888
889
|
if agent_only_check_needed && hosts_agent_only.include?(host) || install_via_msi?(host)
|
|
889
890
|
host['type'] = 'aio'
|
|
@@ -1332,6 +1333,60 @@ module Beaker
|
|
|
1332
1333
|
answers
|
|
1333
1334
|
end
|
|
1334
1335
|
|
|
1336
|
+
# If installing older versions of solaris, make sure the DigiCert cert is added to the keychain
|
|
1337
|
+
def solaris_key_chain_fix
|
|
1338
|
+
digicert = <<-EOM
|
|
1339
|
+
-----BEGIN CERTIFICATE-----
|
|
1340
|
+
MIIFkDCCA3igAwIBAgIQBZsbV56OITLiOQe9p3d1XDANBgkqhkiG9w0BAQwFADBi
|
|
1341
|
+
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
|
1342
|
+
d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg
|
|
1343
|
+
RzQwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBiMQswCQYDVQQGEwJV
|
|
1344
|
+
UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu
|
|
1345
|
+
Y29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIiMA0GCSqG
|
|
1346
|
+
SIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKnJS7JIT3y
|
|
1347
|
+
ithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/WBTxSD1If
|
|
1348
|
+
xp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHiLQwb7iDV
|
|
1349
|
+
ySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfISKhmV1efVFiO
|
|
1350
|
+
DCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jHtrHEtWoYOAMQ
|
|
1351
|
+
jdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6MUSaM0C/
|
|
1352
|
+
CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mXaXpI8OCi
|
|
1353
|
+
EhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZxd9LBADM
|
|
1354
|
+
fRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfhvbfmQ6QY
|
|
1355
|
+
uKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ERElvlEFDrMcXK
|
|
1356
|
+
chYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4KJpn15GkvmB0t
|
|
1357
|
+
9dmpsh3lGwIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB
|
|
1358
|
+
hjAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wDQYJKoZIhvcNAQEMBQAD
|
|
1359
|
+
ggIBALth2X2pbL4XxJEbw6GiAI3jZGgPVs93rnD5/ZpKmbnJeFwMDF/k5hQpVgs2
|
|
1360
|
+
SV1EY+CtnJYYZhsjDT156W1r1lT40jzBQ0CuHVD1UvyQO7uYmWlrx8GnqGikJ9yd
|
|
1361
|
+
+SeuMIW59mdNOj6PWTkiU0TryF0Dyu1Qen1iIQqAyHNm0aAFYF/opbSnr6j3bTWc
|
|
1362
|
+
fFqK1qI4mfN4i/RN0iAL3gTujJtHgXINwBQy7zBZLq7gcfJW5GqXb5JQbZaNaHqa
|
|
1363
|
+
sjYUegbyJLkJEVDXCLG4iXqEI2FCKeWjzaIgQdfRnGTZ6iahixTXTBmyUEFxPT9N
|
|
1364
|
+
cCOGDErcgdLMMpSEDQgJlxxPwO5rIHQw0uA5NBCFIRUBCOhVMt5xSdkoF1BN5r5N
|
|
1365
|
+
0XWs0Mr7QbhDparTwwVETyw2m+L64kW4I1NsBm9nVX9GtUw/bihaeSbSpKhil9Ie
|
|
1366
|
+
4u1Ki7wb/UdKDd9nZn6yW0HQO+T0O/QEY+nvwlQAUaCKKsnOeMzV6ocEGLPOr0mI
|
|
1367
|
+
r/OSmbaz5mEP0oUA51Aa5BuVnRmhuZyxm7EAHu/QD09CbMkKvO5D+jpxpchNJqU1
|
|
1368
|
+
/YldvIViHTLSoCtU7ZpXwdv6EM8Zt4tKG48BtieVU+i2iW1bvGjUI+iLUaJW+fCm
|
|
1369
|
+
gKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP82Z+
|
|
1370
|
+
-----END CERTIFICATE-----
|
|
1371
|
+
EOM
|
|
1372
|
+
hosts.each do |host|
|
|
1373
|
+
if host.platform=~ /solaris-11(\.2)?-(i386|sparc)/
|
|
1374
|
+
create_remote_file(host, "DigiCertTrustedRootG4.crt.pem", digicert)
|
|
1375
|
+
on(host, 'chmod a+r /root/DigiCertTrustedRootG4.crt.pem')
|
|
1376
|
+
on(host, 'cp -p /root/DigiCertTrustedRootG4.crt.pem /etc/certs/CA/')
|
|
1377
|
+
on(host, 'rm /root/DigiCertTrustedRootG4.crt.pem')
|
|
1378
|
+
on(host, '/usr/sbin/svcadm restart /system/ca-certificates')
|
|
1379
|
+
timeout = 60
|
|
1380
|
+
counter = 0
|
|
1381
|
+
while on(host, 'svcs -x ca-certificates').output !~ /State: online/ do
|
|
1382
|
+
raise 'ca-certificates services failed start up' if counter > timeout
|
|
1383
|
+
sleep 5
|
|
1384
|
+
counter = counter + 5
|
|
1385
|
+
end
|
|
1386
|
+
end
|
|
1387
|
+
end
|
|
1388
|
+
end
|
|
1389
|
+
|
|
1335
1390
|
# Builds the agent_only and not_agent_only arrays needed for installation.
|
|
1336
1391
|
#
|
|
1337
1392
|
# @param [Array<Host>] hosts hosts to split up into the arrays
|
|
@@ -2016,6 +2071,7 @@ module Beaker
|
|
|
2016
2071
|
# @param [Array] agent only nodes from Beaker hosts
|
|
2017
2072
|
# @param [Hash] opts The Beaker options hash
|
|
2018
2073
|
def install_agents_only_on(agent_nodes, opts)
|
|
2074
|
+
solaris_key_chain_fix
|
|
2019
2075
|
unless agent_nodes.empty?
|
|
2020
2076
|
configure_type_defaults_on(agent_nodes)
|
|
2021
2077
|
|
data/lib/beaker-pe/version.rb
CHANGED
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: beaker-pe
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 2.11.
|
|
4
|
+
version: 2.11.17
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Puppetlabs
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2022-03-16 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: rspec
|
|
@@ -249,6 +249,7 @@ extensions: []
|
|
|
249
249
|
extra_rdoc_files: []
|
|
250
250
|
files:
|
|
251
251
|
- ".github/dependabot.yml"
|
|
252
|
+
- ".github/workflows/snyk_merge.yaml"
|
|
252
253
|
- ".gitignore"
|
|
253
254
|
- ".rspec"
|
|
254
255
|
- ".simplecov"
|
|
@@ -307,7 +308,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
307
308
|
- !ruby/object:Gem::Version
|
|
308
309
|
version: '0'
|
|
309
310
|
requirements: []
|
|
310
|
-
rubygems_version: 3.0.
|
|
311
|
+
rubygems_version: 3.0.9
|
|
311
312
|
signing_key:
|
|
312
313
|
specification_version: 4
|
|
313
314
|
summary: Beaker PE DSL Helpers!
|