bolt 0.19.1 → 0.20.0

data/vendored/puppet/lib/puppet/indirector/catalog/json.rb

@@ -1,24 +0,0 @@
-require 'puppet/resource/catalog'
-require 'puppet/indirector/json'
-
-class Puppet::Resource::Catalog::Json < Puppet::Indirector::JSON
-  desc "Store catalogs as flat files, serialized using JSON."
-
-  def from_json(text)
-    utf8 = text.force_encoding(Encoding::UTF_8)
-
-    if utf8.valid_encoding?
-      model.convert_from('json', utf8)
-    else
-      Puppet.info(_("Unable to deserialize catalog from json, retrying with pson"))
-      model.convert_from('pson', text.force_encoding(Encoding::BINARY))
-    end
-  end
-
-  def to_json(object)
-    object.render('json')
-  rescue Puppet::Network::FormatHandler::FormatError
-    Puppet.info(_("Unable to serialize catalog to json, retrying with pson"))
-    object.render('pson').force_encoding(Encoding::BINARY)
-  end
-end

data/vendored/puppet/lib/puppet/indirector/catalog/msgpack.rb

@@ -1,6 +0,0 @@
-require 'puppet/resource/catalog'
-require 'puppet/indirector/msgpack'
-
-class Puppet::Resource::Catalog::Msgpack < Puppet::Indirector::Msgpack
-  desc "Store catalogs as flat files, serialized using MessagePack."
-end

data/vendored/puppet/lib/puppet/indirector/catalog/rest.rb

@@ -1,6 +0,0 @@
-require 'puppet/resource/catalog'
-require 'puppet/indirector/rest'
-
-class Puppet::Resource::Catalog::Rest < Puppet::Indirector::REST
-  desc "Find resource catalogs over HTTP via REST."
-end

data/vendored/puppet/lib/puppet/indirector/catalog/store_configs.rb

@@ -1,8 +0,0 @@
-require 'puppet/indirector/store_configs'
-require 'puppet/resource/catalog'
-
-class Puppet::Resource::Catalog::StoreConfigs < Puppet::Indirector::StoreConfigs
-
-  desc %q{Part of the "storeconfigs" feature. Should not be directly set by end users.}
-
-end

data/vendored/puppet/lib/puppet/indirector/catalog/yaml.rb

@@ -1,22 +0,0 @@
-require 'puppet/resource/catalog'
-require 'puppet/indirector/yaml'
-
-class Puppet::Resource::Catalog::Yaml < Puppet::Indirector::Yaml
-  desc "Store catalogs as flat files, serialized using YAML."
-
-  private
-
-  # Override these, because yaml doesn't want to convert our self-referential
-  # objects.  This is hackish, but eh.
-  def from_yaml(text)
-    if config = YAML.load(text)
-      return config
-    end
-  end
-
-  def to_yaml(config)
-    # We can't yaml-dump classes.
-    #config.edgelist_class = nil
-    YAML.dump(config)
-  end
-end

data/vendored/puppet/lib/puppet/indirector/certificate/ca.rb

@@ -1,9 +0,0 @@
-require 'puppet/indirector/ssl_file'
-require 'puppet/ssl/certificate'
-
-class Puppet::SSL::Certificate::Ca < Puppet::Indirector::SslFile
-  desc "Manage the CA collection of signed SSL certificates on disk."
-
-  store_in :signeddir
-  store_ca_at :cacert
-end

data/vendored/puppet/lib/puppet/indirector/certificate/disabled_ca.rb

@@ -1,22 +0,0 @@
-require 'puppet/indirector/code'
-require 'puppet/ssl/certificate'
-
-class Puppet::SSL::Certificate::DisabledCa < Puppet::Indirector::Code
-  desc "Manage SSL certificates on disk, but reject any remote access
-to the SSL data store.  Used when a master has an explicitly disabled
-CA to prevent clients getting confusing 'success' behaviour."
-
-  def initialize
-    @file = Puppet::SSL::Certificate.indirection.terminus(:file)
-  end
-
-  [:find, :head, :search, :save, :destroy].each do |name|
-    define_method(name) do |request|
-      if request.remote?
-        raise Puppet::Error, _("this master is not a CA")
-      else
-        @file.send(name, request)
-      end
-    end
-  end
-end

data/vendored/puppet/lib/puppet/indirector/certificate/file.rb

@@ -1,9 +0,0 @@
-require 'puppet/indirector/ssl_file'
-require 'puppet/ssl/certificate'
-
-class Puppet::SSL::Certificate::File < Puppet::Indirector::SslFile
-  desc "Manage SSL certificates on disk."
-
-  store_in :certdir
-  store_ca_at :localcacert
-end

data/vendored/puppet/lib/puppet/indirector/certificate/rest.rb

@@ -1,16 +0,0 @@
-require 'puppet/ssl/certificate'
-require 'puppet/indirector/rest'
-
-class Puppet::SSL::Certificate::Rest < Puppet::Indirector::REST
-  desc "Find certificates over HTTP via REST."
-
-  use_server_setting(:ca_server)
-  use_port_setting(:ca_port)
-  use_srv_service(:ca)
-
-  def find(request)
-    return nil unless result = super
-    result.name = request.key unless result.name == request.key
-    result
-  end
-end

data/vendored/puppet/lib/puppet/indirector/certificate_request/ca.rb

@@ -1,22 +0,0 @@
-require 'puppet/indirector/ssl_file'
-require 'puppet/ssl/certificate_request'
-
-class Puppet::SSL::CertificateRequest::Ca < Puppet::Indirector::SslFile
-  desc "Manage the CA collection of certificate requests on disk."
-
-  store_in :csrdir
-
-  def save(request)
-    if host = Puppet::SSL::Host.indirection.find(request.key)
-      if Puppet[:allow_duplicate_certs]
-        Puppet.notice _("%{request} already has a %{host} certificate; new certificate will overwrite it") % { request: request.key, host: host.state }
-      else
-        raise _("%{request} already has a %{host} certificate; ignoring certificate request") % { request: request.key, host: host.state }
-      end
-    end
-
-    result = super
-    Puppet.notice _("%{request} has a waiting certificate request") % { request: request.key }
-    result
-  end
-end

data/vendored/puppet/lib/puppet/indirector/certificate_request/disabled_ca.rb

@@ -1,22 +0,0 @@
-require 'puppet/indirector/code'
-require 'puppet/ssl/certificate_request'
-
-class Puppet::SSL::CertificateRequest::DisabledCa < Puppet::Indirector::Code
-  desc "Manage SSL certificate requests on disk, but reject any remote access
-to the SSL data store. Used when a master has an explicitly disabled CA to
-prevent clients getting confusing 'success' behaviour."
-
-  def initialize
-    @file = Puppet::SSL::CertificateRequest.indirection.terminus(:file)
-  end
-
-  [:find, :head, :search, :save, :destroy].each do |name|
-    define_method(name) do |request|
-      if request.remote?
-        raise Puppet::Error, _("this master is not a CA")
-      else
-        @file.send(name, request)
-      end
-    end
-  end
-end

data/vendored/puppet/lib/puppet/indirector/certificate_request/file.rb

@@ -1,8 +0,0 @@
-require 'puppet/indirector/ssl_file'
-require 'puppet/ssl/certificate_request'
-
-class Puppet::SSL::CertificateRequest::File < Puppet::Indirector::SslFile
-  desc "Manage the collection of certificate requests on disk."
-
-  store_in :requestdir
-end

data/vendored/puppet/lib/puppet/indirector/certificate_request/memory.rb

@@ -1,6 +0,0 @@
-require 'puppet/ssl/certificate_request'
-require 'puppet/indirector/memory'
-
-class Puppet::SSL::CertificateRequest::Memory < Puppet::Indirector::Memory
-  desc "Store certificate requests in memory. This is used for testing puppet."
-end

data/vendored/puppet/lib/puppet/indirector/certificate_request/rest.rb

@@ -1,10 +0,0 @@
-require 'puppet/ssl/certificate_request'
-require 'puppet/indirector/rest'
-
-class Puppet::SSL::CertificateRequest::Rest < Puppet::Indirector::REST
-  desc "Find and save certificate requests over HTTP via REST."
-
-  use_server_setting(:ca_server)
-  use_port_setting(:ca_port)
-  use_srv_service(:ca)
-end

data/vendored/puppet/lib/puppet/indirector/certificate_revocation_list/ca.rb

@@ -1,8 +0,0 @@
-require 'puppet/indirector/ssl_file'
-require 'puppet/ssl/certificate_revocation_list'
-
-class Puppet::SSL::CertificateRevocationList::Ca < Puppet::Indirector::SslFile
-  desc "Manage the CA collection of certificate requests on disk."
-
-  store_at :cacrl
-end

data/vendored/puppet/lib/puppet/indirector/certificate_revocation_list/disabled_ca.rb

@@ -1,22 +0,0 @@
-require 'puppet/indirector/code'
-require 'puppet/ssl/certificate_revocation_list'
-
-class Puppet::SSL::CertificateRevocationList::DisabledCa < Puppet::Indirector::Code
-  desc "Manage SSL certificate revocation lists, but reject any remote access
-to the SSL data store. Used when a master has an explicitly disabled CA to
-prevent clients getting confusing 'success' behaviour."
-
-  def initialize
-    @file = Puppet::SSL::CertificateRevocationList.indirection.terminus(:file)
-  end
-
-  [:find, :head, :search, :save, :destroy].each do |name|
-    define_method(name) do |request|
-      if request.remote?
-        raise Puppet::Error, _("this master is not a CA")
-      else
-        @file.send(name, request)
-      end
-    end
-  end
-end

data/vendored/puppet/lib/puppet/indirector/certificate_revocation_list/file.rb

@@ -1,8 +0,0 @@
-require 'puppet/indirector/ssl_file'
-require 'puppet/ssl/certificate_revocation_list'
-
-class Puppet::SSL::CertificateRevocationList::File < Puppet::Indirector::SslFile
-  desc "Manage the global certificate revocation list."
-
-  store_at :hostcrl
-end

data/vendored/puppet/lib/puppet/indirector/certificate_revocation_list/rest.rb

@@ -1,22 +0,0 @@
-require 'puppet/ssl/certificate_revocation_list'
-require 'puppet/indirector/rest'
-
-class Puppet::SSL::CertificateRevocationList::Rest < Puppet::Indirector::REST
-  desc "Find and save certificate revocation lists over HTTP via REST."
-
-  use_server_setting(:ca_server)
-  use_port_setting(:ca_port)
-  use_srv_service(:ca)
-
-  def find(request)
-    if !Puppet::FileSystem.exist?(Puppet[:hostcrl])
-      msg =  "Disable certificate revocation checking when fetching the CRL and no CRL is present"
-      overrides = {certificate_revocation: false}
-      Puppet.override(overrides, msg) do
-        super
-      end
-    else
-      super
-    end
-  end
-end

data/vendored/puppet/lib/puppet/indirector/certificate_status.rb

@@ -1,4 +0,0 @@
-require 'puppet/indirector'
-
-class Puppet::Indirector::CertificateStatus
-end

data/vendored/puppet/lib/puppet/indirector/certificate_status/file.rb

@@ -1,91 +0,0 @@
-require 'puppet'
-require 'puppet/indirector/certificate_status'
-require 'puppet/ssl/certificate'
-require 'puppet/ssl/certificate_authority'
-require 'puppet/ssl/certificate_request'
-require 'puppet/ssl/host'
-require 'puppet/ssl/key'
-
-class Puppet::Indirector::CertificateStatus::File < Puppet::Indirector::Code
-
-  desc "Manipulate certificate status on the local filesystem. Only functional
-    on the CA."
-
-  def ca
-    raise ArgumentError, _("This process is not configured as a certificate authority") unless Puppet::SSL::CertificateAuthority.ca?
-    Puppet::SSL::CertificateAuthority.new
-  end
-
-  def destroy(request)
-    deleted = []
-    [
-      Puppet::SSL::Certificate,
-      Puppet::SSL::CertificateRequest,
-      Puppet::SSL::Key,
-    ].collect do |part|
-      if part.indirection.destroy(request.key)
-        deleted << "#{part}"
-      end
-    end
-
-    return _("Nothing was deleted") if deleted.empty?
-    _("Deleted for %{request}: %{deleted}") % { request: request.key, deleted: deleted.join(", ") }
-  end
-
-  def save(request)
-    if request.instance.desired_state == "signed"
-      certificate_request = Puppet::SSL::CertificateRequest.indirection.find(request.key)
-      raise Puppet::Error, _("Cannot sign for host %{request} without a certificate request") % { request: request.key } unless certificate_request
-      ca.sign(request.key)
-    elsif request.instance.desired_state == "revoked"
-      certificate = Puppet::SSL::Certificate.indirection.find(request.key)
-      raise Puppet::Error, _("Cannot revoke host %{request} because has it doesn't have a signed certificate") % { request: request.key } unless certificate
-      ca.revoke(request.key)
-    else
-      raise Puppet::Error, _("State %{state} invalid; Must specify desired state of 'signed' or 'revoked' for host %{request}") % { state: request.instance.desired_state, request: request.key }
-    end
-
-  end
-
-  def search(request)
-    # Support historic interface wherein users provide classes to filter
-    # the search.  When used via the REST API, the arguments must be
-    # a Symbol or an Array containing Symbol objects.
-    klasses = case request.options[:for]
-    when Class
-      [request.options[:for]]
-    when nil
-      [
-        Puppet::SSL::Certificate,
-        Puppet::SSL::CertificateRequest,
-        Puppet::SSL::Key,
-      ]
-    else
-      [request.options[:for]].flatten.map do |klassname|
-        indirection.class.model(klassname.to_sym)
-      end
-    end
-
-    klasses.collect do |klass|
-      klass.indirection.search(request.key, request.options)
-    end.flatten.collect do |result|
-      result.name
-    end.uniq.collect(&Puppet::SSL::Host.method(:new))
-  end
-
-  def find(request)
-    ssl_host = Puppet::SSL::Host.new(request.key)
-    public_key = Puppet::SSL::Certificate.indirection.find(request.key)
-
-    if ssl_host.certificate_request || public_key
-      ssl_host
-    else
-      nil
-    end
-  end
-
-  def validate_key(request)
-    # We only use desired_state from the instance and use request.key
-    # otherwise, so the name does not need to match
-  end
-end

data/vendored/puppet/lib/puppet/indirector/certificate_status/rest.rb

@@ -1,11 +0,0 @@
-require 'puppet/ssl/host'
-require 'puppet/indirector/rest'
-require 'puppet/indirector/certificate_status'
-
-class Puppet::Indirector::CertificateStatus::Rest < Puppet::Indirector::REST
-  desc "Sign, revoke, search for, or clean certificates & certificate requests over HTTP."
-
-  use_server_setting(:ca_server)
-  use_port_setting(:ca_port)
-  use_srv_service(:ca)
-end

data/vendored/puppet/lib/puppet/indirector/code.rb

@@ -1,6 +0,0 @@
-require 'puppet/indirector/terminus'
-
-# Do nothing, requiring that the back-end terminus do all
-# of the work.
-class Puppet::Indirector::Code < Puppet::Indirector::Terminus
-end

data/vendored/puppet/lib/puppet/indirector/data_binding/hiera.rb

@@ -1,7 +0,0 @@
-require 'puppet/indirector/hiera'
-require 'hiera/scope'
-
-class Puppet::DataBinding::Hiera < Puppet::Indirector::Hiera
-  desc "Retrieve data using Hiera."
-end
-

data/vendored/puppet/lib/puppet/indirector/data_binding/none.rb

@@ -1,8 +0,0 @@
-require 'puppet/indirector/none'
-
-class Puppet::DataBinding::None < Puppet::Indirector::None
-  desc "A Dummy terminus that always throws :no_such_key for data lookups."
-  def find(request)
-    throw :no_such_key
-  end
-end

data/vendored/puppet/lib/puppet/indirector/direct_file_server.rb

@@ -1,17 +0,0 @@
-require 'puppet/file_serving/terminus_helper'
-require 'puppet/indirector/terminus'
-
-class Puppet::Indirector::DirectFileServer < Puppet::Indirector::Terminus
-
-  include Puppet::FileServing::TerminusHelper
-
-  def find(request)
-    return nil unless Puppet::FileSystem.exist?(request.key)
-    path2instance(request, request.key)
-  end
-
-  def search(request)
-    return nil unless Puppet::FileSystem.exist?(request.key)
-    path2instances(request, request.key)
-  end
-end

data/vendored/puppet/lib/puppet/indirector/envelope.rb

@@ -1,11 +0,0 @@
-require 'puppet/indirector'
-
-# Provide any attributes or functionality needed for indirected
-# instances.
-module Puppet::Indirector::Envelope
-  attr_accessor :expiration
-
-  def expired?
-    expiration and expiration < Time.now
-  end
-end