chef-rundeck2 0.1.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 3c1fecc0b9fa95eab60678b1b443f7f68e691e92
+  data.tar.gz: e65a72f264c89b841d3fdc6bd6187e7cdd24a2a4
+SHA512:
+  metadata.gz: d6c81435eee9815fbdf0714a1bb4366e973fbca1a11590d1531e8422daefa41eef2dcf6be1dd72bb2c55d9f213bcde4f2abed4387f182411e8dfecbdd9a0e25d
+  data.tar.gz: 4c277cb0fb6b603d026d137d12780eafe033d001a51659d4946394efb3870ce2d84f647801f77c1fcb2bdc678577b52745e70a3c1b450b6fcfe15f8af9c5a237

data/.gitignore

@@ -0,0 +1,8 @@
+*~
+*#
+.#*
+\#*#
+.*.sw[a-z]
+*.un~
+pkg/
+vendor/

data/.gitlab-ci.yml

@@ -0,0 +1,38 @@
+before_script:
+  - ruby -v
+  - which ruby
+  - gem install bundler --no-ri --no-rdoc
+  - bundle install --jobs $(nproc) --path vendor/bundle
+
+test:Ruby 2.2:
+  image: ruby:2.2
+  cache:
+    group: ruby_2.2
+    paths:
+      - .bundle
+      - vendor/bundle
+  script:
+    - bundle exec rubocop
+  tags:
+    - ruby
+  except:
+    - tags
+
+release:Ruby 2.2:
+  image: ruby:2.2
+  cache:
+    group: ruby_2.2
+    paths:
+      - .bundle
+      - vendor/bundle
+  script:
+    - bundle exec rubocop
+    - bundle exec rake build
+  artifacts:
+    name: "chef-rundeck2-$CI_BUILD_REF_NAME"
+    paths:
+      - pkg/*.gem
+  tags:
+    - ruby
+  only:
+    - tags

data/.rubocop.yml

@@ -0,0 +1,12 @@
+Style/ModuleFunction:
+  Enabled: false
+
+Style/WordArray:
+  Enabled: false
+
+Style/FileName:
+  Enabled: false
+
+AllCops:
+  Include:
+    - lib/

data/Gemfile

@@ -0,0 +1,15 @@
+source 'https://rubygems.org'
+
+gem 'chef-api' # => Chef API Interaction
+# => gem 'hashie' # => Data Structure
+# => gem 'logify' # => Logging
+gem 'mixlib-cli' # => Option Parsing
+gem 'rack-cache' # => Cache Responses
+gem 'sinatra' # => Web Server
+gem 'sinatra-contrib' # => For namespaces
+
+group :development do
+  gem 'rake'
+  gem 'rspec'
+  gem 'rubocop'
+end

data/Gemfile.lock

@@ -0,0 +1,76 @@
+GEM
+  remote: https://rubygems.org/
+  specs:
+    ast (2.3.0)
+    backports (3.6.8)
+    chef-api (0.6.0)
+      logify (~> 0.1)
+      mime-types
+    diff-lcs (1.2.5)
+    logify (0.2.0)
+    mime-types (3.1)
+      mime-types-data (~> 3.2015)
+    mime-types-data (3.2016.0521)
+    mixlib-cli (1.6.0)
+    multi_json (1.12.1)
+    parser (2.3.1.2)
+      ast (~> 2.2)
+    powerpack (0.1.1)
+    rack (1.6.4)
+    rack-cache (1.6.1)
+      rack (>= 0.4)
+    rack-protection (1.5.3)
+      rack
+    rack-test (0.6.3)
+      rack (>= 1.0)
+    rainbow (2.1.0)
+    rake (11.1.2)
+    rspec (3.4.0)
+      rspec-core (~> 3.4.0)
+      rspec-expectations (~> 3.4.0)
+      rspec-mocks (~> 3.4.0)
+    rspec-core (3.4.4)
+      rspec-support (~> 3.4.0)
+    rspec-expectations (3.4.0)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.4.0)
+    rspec-mocks (3.4.1)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.4.0)
+    rspec-support (3.4.1)
+    rubocop (0.40.0)
+      parser (>= 2.3.1.0, < 3.0)
+      powerpack (~> 0.1)
+      rainbow (>= 1.99.1, < 3.0)
+      ruby-progressbar (~> 1.7)
+      unicode-display_width (~> 1.0, >= 1.0.1)
+    ruby-progressbar (1.8.1)
+    sinatra (1.4.7)
+      rack (~> 1.5)
+      rack-protection (~> 1.4)
+      tilt (>= 1.3, < 3)
+    sinatra-contrib (1.4.7)
+      backports (>= 2.0)
+      multi_json
+      rack-protection
+      rack-test
+      sinatra (~> 1.4.0)
+      tilt (>= 1.3, < 3)
+    tilt (2.0.4)
+    unicode-display_width (1.0.5)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  chef-api
+  mixlib-cli
+  rack-cache
+  rake
+  rspec
+  rubocop
+  sinatra
+  sinatra-contrib
+
+BUNDLED WITH
+   1.12.5

data/LICENSE.txt

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2016 Brian Dwyer - Intelligent Digital Services
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/README.md

@@ -0,0 +1,98 @@
+# Chef-RunDeck
+
+Welcome to your new gem! In this directory, you'll find the files you need to be able to package up your Ruby library into a gem. Put your Ruby code in the file `lib/chef-rundeck`. To experiment with that code, run `bin/console` for an interactive prompt.
+
+TODO: Delete this and the text above, and describe your gem
+
+## Background
+This project started out to act as a proxy for administrative Chef Server interactions, namely client/node deletion.
+
+If you are familiar with Chef & Terraform, you are likely aware that Terraform currently does not remove the client/node pair from the Chef server upon destruction.  Additionally, you are likely aware that deletion of client/node objects requires elevated privileges on the Chef server; privileges that the validation client does not provide.
+To work around this, one might use `knife` configured with administrative client.  When combined with RunDeck, the security outlook does not look good as one might easily run a `cat` on the PEM file from the Command interface, allowing them to view the credential.  Unless otherwise orchestrated, any/all local commands will run under the context of the RunDeck user, likely the same user with ownership of said PEM file, so using `knife` under the RunDeck context is inherently insecure if the RunDeck is used for other things and/or the Command interface is exposed.
+
+The idea here is to run this Gem under a different user's context, proxying administrative commands via simple GET/POST requests.  The administrative PEM is then owned by a seperate user, preventing one from easily accessing it.  Additionally, a simple `state` endpoint can be used to maintain an audit trail of who created what node, and allow said user to then delete the node.  Deletion is limited to only member nodes of the `state`, and only by the original creator, unless the user is an administrator.  The security here is rather primitive, as the user is passed in as a query parameter, but better than nothing.  I had the idea of combining this with a sort of API key unique to the user, but have yet to implement it.  The limitation of only deleting nodes belonging to the current `state` is the current stop gap.  Also, this means if you have existing nodes, you'll likely want to populate your `state` file with them.  A sample state object is available at `config/state.json`.
+
+**NOTE:** This API should **NOT** be exposed to the world unless you plan to secure it with a reverse-proxy or something.  It is intended to only be bound to `localhost` on the same server as RunDeck.
+
+## RunDeck Options Provider
+This gem also serves as a RunDeck options provider, delivering node search results in the RunDeck `RESOURCE-JSON` format.
+* This project **ONLY** uses partial search.  You can add additional values to the search filter with the `extras` param (comma-separated) or inside project-specific config (Array).
+* The search/return is customizable, either by passing query parameters, or by creating project-specific configuration and hitting the project endpoint.
+* Query parameters will overrule project-specific configuration.
+* You don't have to pass in a user, granting the ability to set that sort of configuration in the RunDeck project configuration.
+
+## State Functions
+* Display the State - GET - http://localhost:9125/chef/v1/state
+* List the Node's for a User - GET -  http://localhost:9125/chef/v1/list/${USERNAME}
+* Add a node to the State - POST - http://localhost:9125/chef/v1/add/${NODENAME}/${USERNAME} - type=${TYPE} can be specified as query_param in URL or POST Body
+** Subsequent calls to this endpoint for an existing node will add to the audit trail of the node in it's `Last_Modified:` field.  Type cannot be edited after inception.
+* Delete a node from the State and Chef Server - POST - http://localhost:9125/chef/v1/delete/${NODENAME} - auth_user=${USERNAME} as query_param in URL or POST Body
+
+
+## Other API Functions
+### Node Search - Return the Node Object in JSON Format
+* Exact Case Match - `http://localhost:9125/chef/v1/node/BD-MBPro.local`
+* Case-Insensitive Match - `http://localhost:9125/chef/v1/node/Bd-MbPrO.lOcAl?regex=1`
+
+## Node List - JSON Array of all Node Object Name's on the Chef Server (No Search Parameters)
+* `http://localhost:9125/chef/v1/list`
+
+## Configuration
+This project can use a JSON configuration file to seed configuration parameters.  Most configuration can also be passed in via the CLI, except Project definitions.
+* You can (and should) opt to use regular credentials for Unprivileged Chef API calls.  This does not have to be a validation client; a regular client can suffice.  This is passed in via `chef-api-client-name` & `chef-api-client-key`
+* Priviledged Chef Server credentials can be passed in via `chef-api-admin-name` and `chef-api-admin-key`. Be sure to keep the permissions tight on the PEM file.
+
+
+## Running as a Service
+You'll likely want to run this as a service, `SystemD` or `Upstart` will likely be your friend in this regard.
+
+## Security
+You should lock down permissions on all configuration files in this project to only the user which this runs as...
+
+To run this project securely, **DON'T** run it as the RunDeck user.
+
+## Caching
+This leans on `rack-cache` to serve as a caching mechanism.  The objective here was to make sure we don't pummel the Chef API with redundant queries.
+* Timeout can be configured via the `cache_timeout` setting. **Default:** *30 seconds*
+
+## Credits
+This Gem leans heavily on Seth Vargo's `ChefAPI` gem.  I also took many ideas from his Gem to build this one, as I've never written anything like this before.  Thank you, Seth, for both the `ChefAPI` gem and for your consistent high quality contributions to the DevOps community.
+
+Also, thank you to Adam Jacob for initially developing the `chef-rundeck` gem which served as a baseline for building the Options Provider portion of this one. Thanks for Chef, you've greatly reduce the amount of chaos in my work life!
+
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'chef-rundeck2'
+```
+
+And then execute:
+
+    $ bundle
+
+Or install it yourself as:
+
+    $ gem install chef-rundeck2
+
+## Usage
+
+TODO: Write usage instructions here
+
+## Development
+
+After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake spec` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.
+
+To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).
+
+## Contributing
+
+Bug reports and pull requests are welcome on GitHub at https://github.com/bdwyertech/chef-rundeck. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the [Contributor Covenant](http://contributor-covenant.org) code of conduct.
+
+
+## License
+
+The gem is available as open source under the terms of the [MIT License](http://opensource.org/licenses/MIT).
+

data/Rakefile

@@ -0,0 +1,6 @@
+require 'bundler/gem_tasks'
+require 'rspec/core/rake_task'
+
+RSpec::Core::RakeTask.new(:spec)
+
+task :default => :spec

data/bin/console

@@ -0,0 +1,17 @@
+#!/usr/bin/env ruby
+
+lib = File.expand_path(File.join(File.dirname(__FILE__), '..', 'lib'))
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+
+require 'bundler/setup'
+require 'chef-rundeck'
+
+# You can add fixtures and/or initialization code here to make experimenting
+# with your gem easier. You can also use a different console, if you like.
+
+# (If you use this, don't forget to add pry to your Gemfile!)
+# require "pry"
+# Pry.start
+
+require 'irb'
+IRB.start

data/bin/setup

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+IFS=$'\n\t'
+set -vx
+
+bundle install
+
+# Do any other automated setup that you need to do here

data/chef-rundeck2.gemspec

@@ -0,0 +1,44 @@
+# encoding: utf-8
+# rubocop: disable LineLength
+
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'chef-rundeck/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = 'chef-rundeck2'
+  spec.version       = ChefRunDeck::VERSION
+  spec.authors       = ['Brian Dwyer']
+  spec.email         = ['bdwyer@IEEE.org']
+
+  spec.summary       = %q(Chef Options Provider for RunDeck with Extras)
+  # => spec.description   = %q(TODO: Write a longer description or delete this line.)
+  spec.homepage      = 'https://github.com/bdwyertech/chef-rundeck2'
+  spec.license       = 'MIT'
+
+  # Prevent pushing this gem to RubyGems.org. To allow pushes either set the 'allowed_push_host'
+  # to allow pushing to a single host or delete this section to allow pushing to any host.
+  if spec.respond_to?(:metadata)
+    spec.metadata['allowed_push_host'] = 'https://rubygems.org'
+  else
+    raise 'RubyGems 2.0 or newer is required to protect against public gem pushes.'
+  end
+
+  spec.files         = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
+  spec.bindir        = 'exe'
+  spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
+  spec.require_paths = ['lib']
+
+  # => Dependencies
+  spec.add_runtime_dependency 'chef-api', '~> 0.6'
+  spec.add_runtime_dependency 'mixlib-cli', '~> 1.6'
+  spec.add_runtime_dependency 'rack-cache', '~> 1.6'
+  spec.add_runtime_dependency 'sinatra', '~> 1.4'
+  spec.add_runtime_dependency 'sinatra-contrib', '~> 1.4'
+
+  # => Development Dependencies
+  spec.add_development_dependency 'bundler', '~> 1.12'
+  spec.add_development_dependency 'rake', '~> 10.0'
+  spec.add_development_dependency 'rspec', '~> 3.0'
+  spec.add_development_dependency 'rubocop'
+end

data/config/auth.json

@@ -0,0 +1,13 @@
+{
+  "bdwyer": {
+    "auth_key": "abcd",
+    "roles": [
+      "admin"
+    ]
+  },
+  "testme": {
+    "roles": [
+      "alpha"
+    ]
+  }
+}

data/config/config.json

@@ -0,0 +1,13 @@
+{
+  "cache_timeout": 30,
+  "auth_file": "/tmp/auth.json",
+  "state_file": "/tmp/state.json",
+  "host": "localhost",
+  "port": 9125,
+  "environment": "production",
+  "chef_api_endpoint": "https://chef.contoso.com/organizations/contoso",
+  "chef_api_client": "rundeck-chef-client",
+  "chef_api_client_key": "~/.chef/CHEF_CONTOSO/rundeck-chef-client.pem",
+  "chef_api_admin": "bdwyertech",
+  "chef_api_admin_key": "~/.chef/CHEF_CONTOSO/bdwyer.pem"
+}

data/config/projects.json

@@ -0,0 +1,17 @@
+{
+  "cloud_project": {
+    "pattern": "digital_ocean:*",
+    "username": "hello",
+    "extras": [
+      "cloud",
+      "cloud_v2"
+    ]
+  },
+  "cool_project": {
+    "pattern": "*:*",
+    "username": "cooldude",
+    "extras": [
+      "cpu"
+    ]
+  }
+}

data/config/state.json

@@ -0,0 +1,22 @@
+[
+  {
+    "name": "Alpha-Bravo",
+    "created": "2016-05-28T12:04:54-04:00",
+    "creator": "bdweezy"
+  },
+  {
+    "name": "alpha-vagrant",
+    "created": "2016-05-28T12:05:45-04:00",
+    "creator": "vagrant"
+  },
+  {
+    "name": "BD-MBPro.local",
+    "created": "2016-05-28T12:04:16-04:00",
+    "creator": "bdweezy"
+  },
+  {
+    "name": "cloud-controller",
+    "created": "2016-05-28T12:05:24-04:00",
+    "creator": "vagrant"
+  }
+]

data/exe/chef-rundeck2

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+# encoding: UTF-8
+# RunDeck Provider - Chef
+# Brian Dwyer - Intelligent Digital Services - 5/24/16
+
+lib = File.expand_path(File.join(File.dirname(__FILE__), '..', 'lib'))
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+
+# => Catch Ctrl+C's to avoid stack traces
+Signal.trap('INT') { abort }
+
+require 'chef-rundeck'
+
+ChefRunDeck::CLI.run(ARGV)

data/lib/chef-rundeck/api.rb

@@ -0,0 +1,215 @@
+# Encoding: UTF-8
+# rubocop: disable LineLength
+#
+# Gem Name:: chef-rundeck
+# Module:: API
+#
+# Copyright (C) 2016 Brian Dwyer - Intelligent Digital Services
+#
+# All rights reserved - Do Not Redistribute
+#
+
+# => NOTE: Anything other than a STATUS 200 will trigger an error in the RunDeck plugin due to a hardcode in org.boon.HTTP
+
+require 'sinatra/base'
+require 'sinatra/namespace'
+require 'json'
+require 'rack/cache'
+require 'chef-rundeck/auth'
+require 'chef-rundeck/chef'
+require 'chef-rundeck/config'
+require 'chef-rundeck/state'
+
+# => Chef Options Provider for RunDeck
+module ChefRunDeck
+  # => HTTP API
+  class API < Sinatra::Base # rubocop: disable ClassLength
+    #######################
+    # =>    Sinatra    <= #
+    #######################
+
+    # => Configure Sinatra
+    enable :logging, :static, :raise_errors # => disable :dump_errors, :show_exceptions
+    set :port, Config.port || 8080
+    set :bind, Config.bind || 'localhost'
+    set :environment, Config.environment || :production
+
+    # => Enable NameSpace Support
+    register Sinatra::Namespace
+
+    if development?
+      require 'sinatra/reloader'
+      register Sinatra::Reloader
+    end
+
+    use Rack::Cache do
+      set :verbose, true
+      set :metastore,   'file:' + File.join(Dir.tmpdir, 'rack', 'meta')
+      set :entitystore, 'file:' + File.join(Dir.tmpdir, 'rack', 'body')
+    end
+
+    ########################
+    # =>    JSON API    <= #
+    ########################
+
+    # => Current Configuration & Healthcheck Endpoint
+    get '/config' do
+      content_type 'application/json'
+      JSON.pretty_generate(
+        [
+          ChefRunDeck.inspect + ' is up and running!',
+          'Author: ' + Config.author,
+          'Environment: ' + Config.environment.to_s,
+          'Root: ' + Config.root.to_s,
+          'Config File: ' + (Config.config_file if File.exist?(Config.config_file)).to_s,
+          'Auth File: ' + (Config.auth_file if File.exist?(Config.auth_file)).to_s,
+          'State File: ' + (Config.state_file if File.exist?(Config.state_file)).to_s,
+          { State: State.state.map { |n| n[:name] } },
+          'Params: ' + params.inspect,
+          'Cache Timeout: ' + Config.cache_timeout.to_s,
+          'BRIAN IS COOooooooL',
+          { AppConfig: Config.options },
+          { 'Sinatra Info' => env }
+        ].compact
+      )
+    end
+
+    get '/state' do
+      content_type 'application/json'
+      State.state.to_json
+    end
+
+    ########################
+    # =>    JSON API    <= #
+    ########################
+
+    namespace '/chef/v1' do
+      # => Define our common namespace parameters
+      before do
+        # => This is a JSON API
+        content_type 'application/json'
+        # => Grab the Authentication Key if Exists
+        params['auth_key'] ||= env['HTTP_AUTHORIZATION']
+        # => Make the Params Globally Accessible
+        Config.define_setting :query_params, params
+        # => Instantiate the Default Client
+        Chef.api_client
+        # => User Authorization
+        Auth.parse(params['auth_user'])
+      end
+
+      # => Clean Up
+      after do
+        # => Reset the API Client to Default Values
+        Chef.reset!
+        # => Reset Authorization
+        Auth.reset!
+      end
+
+      get '/state' do
+        # => Internal Redirect to Root /state
+        call env.merge('PATH_INFO' => '/state')
+      end
+
+      # => Retrieve a List of Nodes
+      get '/list' do
+        cache_control :public, max_age: Config.cache_timeout
+        Chef.list.to_json
+      end
+
+      # => Deliver Nodes the User is Authorized to Delete
+      get '/list/:user' do |user|
+        # => User is part of this Route, not a Query-Param
+        Auth.parse(user)
+        # => Admins can see all Nodes
+        return State.state.map { |n| n[:name] }.to_json if Auth.admin?
+        # => Determine Role Admin Nodes
+        admin = State.state.select { |n| n[:type] && Auth.auth['roles'].any? { |r| r.to_s.casecmp(n[:type].to_s) == 0 } }.map { |n| n[:name] }
+        # => Find User-Created Nodes
+        created = State.state.select { |n| n[:creator].casecmp(user) == 0 }.map { |n| n[:name] }
+        # => Return the Nodes
+        (admin + created).uniq.to_json
+      end
+
+      # => Check if a Node Exists (Pass regex param for case insensitivity)
+      get '/node/:node' do |node|
+        cache_control :public, max_age: Config.cache_timeout
+        regex = true if params['regex'] == '1'
+        Chef.get_node(node, regex).to_json
+      end
+
+      # => View User Authorization
+      get '/auth' do
+        # => Return User Authorization
+        {
+          User: params['auth_user'],
+          Admin: Auth.admin?,
+          Authorization: Auth.auth,
+          Auth_Key_Match?: Auth.key?
+        }.to_json
+      end
+
+      # => View User Authorization
+      post '/auth' do
+        # => Return User Authorization
+        {
+          User: params['auth_user'],
+          Admin: Auth.admin?,
+          Authorization: Auth.auth,
+          Auth_Key_Match?: Auth.key?
+        }.to_json
+        # => {
+        # =>   'Sinatra Info' => env,
+        # =>   Headers: headers
+        # => }.to_json
+      end
+
+      # => Search for Matching Nodes
+      get '/search' do
+        cache_control :public, max_age: Config.cache_timeout
+        Chef.search.to_json
+      end
+
+      # => View Project-Specific Configuration
+      get '/:project/config' do |project|
+        Chef.project_settings(project).to_json
+      end
+
+      # => Search for Matching Nodes (Project-Specific)
+      get '/:project/search' do |project|
+        cache_control :public, max_age: Config.cache_timeout
+        # => Pass the Project into the Query Parameters
+        Config.query_params['project'] = project
+        # => Search & Return
+        Chef.search.to_json
+      end
+
+      # => Add Node to the State
+      post '/add/:node/:user' do |node, user|
+        status 200
+        State.add_state(node, user, params).to_json
+      end
+
+      # => Delete Node from the Chef Server
+      post '/delete/:node' do |node|
+        unless State.state.any? { |n| n[:name] == node }
+          status 404
+          return "#{node} not found in State".to_json
+        end
+
+        # => Check Authorization
+        if Auth.admin? || Auth.creator?(node) || Auth.role_admin?(Chef.run_list(node)) # => Auth.project_admin?(node)
+          status 200
+          # => Delete the Node
+          Chef.delete(node)
+          # => Remove it from the State
+          State.delete_state(node)
+          "#{node} Successfully Deleted".to_json
+        else
+          status 401
+          return 'Unauthorized'.to_json
+        end
+      end
+    end
+  end
+end