chef-server-api 0.8.2
Sign up to get free protection for your applications and to get access to all the features.
- data/LICENSE +201 -0
- data/README.rdoc +92 -0
- data/Rakefile +59 -0
- data/app/controllers/application.rb +289 -0
- data/app/controllers/clients.rb +111 -0
- data/app/controllers/cookbooks.rb +213 -0
- data/app/controllers/data.rb +75 -0
- data/app/controllers/data_item.rb +108 -0
- data/app/controllers/exceptions.rb +40 -0
- data/app/controllers/main.rb +18 -0
- data/app/controllers/nodes.rb +102 -0
- data/app/controllers/roles.rb +73 -0
- data/app/controllers/search.rb +60 -0
- data/app/controllers/users.rb +77 -0
- data/app/helpers/application_helper.rb +163 -0
- data/app/helpers/exceptions_helper.rb +6 -0
- data/app/helpers/global_helpers.rb +25 -0
- data/app/helpers/nodes_helper.rb +26 -0
- data/app/helpers/roles_helper.rb +5 -0
- data/app/helpers/tarball_helper.rb +82 -0
- data/app/views/exceptions/bad_request.json.erb +1 -0
- data/app/views/exceptions/internal_server_error.html.erb +216 -0
- data/app/views/exceptions/not_acceptable.html.haml +5 -0
- data/app/views/exceptions/not_found.html.erb +47 -0
- data/app/views/exceptions/standard_error.html.erb +217 -0
- data/app/views/layout/chef_server_api.html.haml +23 -0
- data/app/views/main/index.html.haml +5 -0
- data/config/init.rb +45 -0
- data/config/router.rb +6 -0
- data/lib/chef-server-api.rb +158 -0
- data/lib/chef-server-api/merbtasks.rb +103 -0
- data/lib/chef-server-api/slicetasks.rb +20 -0
- data/lib/chef-server-api/spectasks.rb +53 -0
- data/public/images/avatar.png +0 -0
- data/public/images/indicator.gif +0 -0
- data/public/images/merb.jpg +0 -0
- data/public/stylesheets/base.css +336 -0
- data/public/stylesheets/chef.css +157 -0
- data/public/stylesheets/themes/bec-green/style.css +290 -0
- data/public/stylesheets/themes/bec/style.css +301 -0
- data/public/stylesheets/themes/blue/style.css +280 -0
- data/public/stylesheets/themes/default/style.css +267 -0
- data/public/stylesheets/themes/djime-cerulean/style.css +298 -0
- data/public/stylesheets/themes/kathleene/style.css +272 -0
- data/public/stylesheets/themes/orange/style.css +263 -0
- data/public/stylesheets/themes/reidb-greenish/style.css +301 -0
- data/stubs/app/controllers/application.rb +2 -0
- data/stubs/app/controllers/main.rb +2 -0
- metadata +193 -0
data/LICENSE
ADDED
@@ -0,0 +1,201 @@
|
|
1
|
+
Apache License
|
2
|
+
Version 2.0, January 2004
|
3
|
+
http://www.apache.org/licenses/
|
4
|
+
|
5
|
+
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
6
|
+
|
7
|
+
1. Definitions.
|
8
|
+
|
9
|
+
"License" shall mean the terms and conditions for use, reproduction,
|
10
|
+
and distribution as defined by Sections 1 through 9 of this document.
|
11
|
+
|
12
|
+
"Licensor" shall mean the copyright owner or entity authorized by
|
13
|
+
the copyright owner that is granting the License.
|
14
|
+
|
15
|
+
"Legal Entity" shall mean the union of the acting entity and all
|
16
|
+
other entities that control, are controlled by, or are under common
|
17
|
+
control with that entity. For the purposes of this definition,
|
18
|
+
"control" means (i) the power, direct or indirect, to cause the
|
19
|
+
direction or management of such entity, whether by contract or
|
20
|
+
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
21
|
+
outstanding shares, or (iii) beneficial ownership of such entity.
|
22
|
+
|
23
|
+
"You" (or "Your") shall mean an individual or Legal Entity
|
24
|
+
exercising permissions granted by this License.
|
25
|
+
|
26
|
+
"Source" form shall mean the preferred form for making modifications,
|
27
|
+
including but not limited to software source code, documentation
|
28
|
+
source, and configuration files.
|
29
|
+
|
30
|
+
"Object" form shall mean any form resulting from mechanical
|
31
|
+
transformation or translation of a Source form, including but
|
32
|
+
not limited to compiled object code, generated documentation,
|
33
|
+
and conversions to other media types.
|
34
|
+
|
35
|
+
"Work" shall mean the work of authorship, whether in Source or
|
36
|
+
Object form, made available under the License, as indicated by a
|
37
|
+
copyright notice that is included in or attached to the work
|
38
|
+
(an example is provided in the Appendix below).
|
39
|
+
|
40
|
+
"Derivative Works" shall mean any work, whether in Source or Object
|
41
|
+
form, that is based on (or derived from) the Work and for which the
|
42
|
+
editorial revisions, annotations, elaborations, or other modifications
|
43
|
+
represent, as a whole, an original work of authorship. For the purposes
|
44
|
+
of this License, Derivative Works shall not include works that remain
|
45
|
+
separable from, or merely link (or bind by name) to the interfaces of,
|
46
|
+
the Work and Derivative Works thereof.
|
47
|
+
|
48
|
+
"Contribution" shall mean any work of authorship, including
|
49
|
+
the original version of the Work and any modifications or additions
|
50
|
+
to that Work or Derivative Works thereof, that is intentionally
|
51
|
+
submitted to Licensor for inclusion in the Work by the copyright owner
|
52
|
+
or by an individual or Legal Entity authorized to submit on behalf of
|
53
|
+
the copyright owner. For the purposes of this definition, "submitted"
|
54
|
+
means any form of electronic, verbal, or written communication sent
|
55
|
+
to the Licensor or its representatives, including but not limited to
|
56
|
+
communication on electronic mailing lists, source code control systems,
|
57
|
+
and issue tracking systems that are managed by, or on behalf of, the
|
58
|
+
Licensor for the purpose of discussing and improving the Work, but
|
59
|
+
excluding communication that is conspicuously marked or otherwise
|
60
|
+
designated in writing by the copyright owner as "Not a Contribution."
|
61
|
+
|
62
|
+
"Contributor" shall mean Licensor and any individual or Legal Entity
|
63
|
+
on behalf of whom a Contribution has been received by Licensor and
|
64
|
+
subsequently incorporated within the Work.
|
65
|
+
|
66
|
+
2. Grant of Copyright License. Subject to the terms and conditions of
|
67
|
+
this License, each Contributor hereby grants to You a perpetual,
|
68
|
+
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
69
|
+
copyright license to reproduce, prepare Derivative Works of,
|
70
|
+
publicly display, publicly perform, sublicense, and distribute the
|
71
|
+
Work and such Derivative Works in Source or Object form.
|
72
|
+
|
73
|
+
3. Grant of Patent License. Subject to the terms and conditions of
|
74
|
+
this License, each Contributor hereby grants to You a perpetual,
|
75
|
+
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
76
|
+
(except as stated in this section) patent license to make, have made,
|
77
|
+
use, offer to sell, sell, import, and otherwise transfer the Work,
|
78
|
+
where such license applies only to those patent claims licensable
|
79
|
+
by such Contributor that are necessarily infringed by their
|
80
|
+
Contribution(s) alone or by combination of their Contribution(s)
|
81
|
+
with the Work to which such Contribution(s) was submitted. If You
|
82
|
+
institute patent litigation against any entity (including a
|
83
|
+
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
84
|
+
or a Contribution incorporated within the Work constitutes direct
|
85
|
+
or contributory patent infringement, then any patent licenses
|
86
|
+
granted to You under this License for that Work shall terminate
|
87
|
+
as of the date such litigation is filed.
|
88
|
+
|
89
|
+
4. Redistribution. You may reproduce and distribute copies of the
|
90
|
+
Work or Derivative Works thereof in any medium, with or without
|
91
|
+
modifications, and in Source or Object form, provided that You
|
92
|
+
meet the following conditions:
|
93
|
+
|
94
|
+
(a) You must give any other recipients of the Work or
|
95
|
+
Derivative Works a copy of this License; and
|
96
|
+
|
97
|
+
(b) You must cause any modified files to carry prominent notices
|
98
|
+
stating that You changed the files; and
|
99
|
+
|
100
|
+
(c) You must retain, in the Source form of any Derivative Works
|
101
|
+
that You distribute, all copyright, patent, trademark, and
|
102
|
+
attribution notices from the Source form of the Work,
|
103
|
+
excluding those notices that do not pertain to any part of
|
104
|
+
the Derivative Works; and
|
105
|
+
|
106
|
+
(d) If the Work includes a "NOTICE" text file as part of its
|
107
|
+
distribution, then any Derivative Works that You distribute must
|
108
|
+
include a readable copy of the attribution notices contained
|
109
|
+
within such NOTICE file, excluding those notices that do not
|
110
|
+
pertain to any part of the Derivative Works, in at least one
|
111
|
+
of the following places: within a NOTICE text file distributed
|
112
|
+
as part of the Derivative Works; within the Source form or
|
113
|
+
documentation, if provided along with the Derivative Works; or,
|
114
|
+
within a display generated by the Derivative Works, if and
|
115
|
+
wherever such third-party notices normally appear. The contents
|
116
|
+
of the NOTICE file are for informational purposes only and
|
117
|
+
do not modify the License. You may add Your own attribution
|
118
|
+
notices within Derivative Works that You distribute, alongside
|
119
|
+
or as an addendum to the NOTICE text from the Work, provided
|
120
|
+
that such additional attribution notices cannot be construed
|
121
|
+
as modifying the License.
|
122
|
+
|
123
|
+
You may add Your own copyright statement to Your modifications and
|
124
|
+
may provide additional or different license terms and conditions
|
125
|
+
for use, reproduction, or distribution of Your modifications, or
|
126
|
+
for any such Derivative Works as a whole, provided Your use,
|
127
|
+
reproduction, and distribution of the Work otherwise complies with
|
128
|
+
the conditions stated in this License.
|
129
|
+
|
130
|
+
5. Submission of Contributions. Unless You explicitly state otherwise,
|
131
|
+
any Contribution intentionally submitted for inclusion in the Work
|
132
|
+
by You to the Licensor shall be under the terms and conditions of
|
133
|
+
this License, without any additional terms or conditions.
|
134
|
+
Notwithstanding the above, nothing herein shall supersede or modify
|
135
|
+
the terms of any separate license agreement you may have executed
|
136
|
+
with Licensor regarding such Contributions.
|
137
|
+
|
138
|
+
6. Trademarks. This License does not grant permission to use the trade
|
139
|
+
names, trademarks, service marks, or product names of the Licensor,
|
140
|
+
except as required for reasonable and customary use in describing the
|
141
|
+
origin of the Work and reproducing the content of the NOTICE file.
|
142
|
+
|
143
|
+
7. Disclaimer of Warranty. Unless required by applicable law or
|
144
|
+
agreed to in writing, Licensor provides the Work (and each
|
145
|
+
Contributor provides its Contributions) on an "AS IS" BASIS,
|
146
|
+
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
147
|
+
implied, including, without limitation, any warranties or conditions
|
148
|
+
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
149
|
+
PARTICULAR PURPOSE. You are solely responsible for determining the
|
150
|
+
appropriateness of using or redistributing the Work and assume any
|
151
|
+
risks associated with Your exercise of permissions under this License.
|
152
|
+
|
153
|
+
8. Limitation of Liability. In no event and under no legal theory,
|
154
|
+
whether in tort (including negligence), contract, or otherwise,
|
155
|
+
unless required by applicable law (such as deliberate and grossly
|
156
|
+
negligent acts) or agreed to in writing, shall any Contributor be
|
157
|
+
liable to You for damages, including any direct, indirect, special,
|
158
|
+
incidental, or consequential damages of any character arising as a
|
159
|
+
result of this License or out of the use or inability to use the
|
160
|
+
Work (including but not limited to damages for loss of goodwill,
|
161
|
+
work stoppage, computer failure or malfunction, or any and all
|
162
|
+
other commercial damages or losses), even if such Contributor
|
163
|
+
has been advised of the possibility of such damages.
|
164
|
+
|
165
|
+
9. Accepting Warranty or Additional Liability. While redistributing
|
166
|
+
the Work or Derivative Works thereof, You may choose to offer,
|
167
|
+
and charge a fee for, acceptance of support, warranty, indemnity,
|
168
|
+
or other liability obligations and/or rights consistent with this
|
169
|
+
License. However, in accepting such obligations, You may act only
|
170
|
+
on Your own behalf and on Your sole responsibility, not on behalf
|
171
|
+
of any other Contributor, and only if You agree to indemnify,
|
172
|
+
defend, and hold each Contributor harmless for any liability
|
173
|
+
incurred by, or claims asserted against, such Contributor by reason
|
174
|
+
of your accepting any such warranty or additional liability.
|
175
|
+
|
176
|
+
END OF TERMS AND CONDITIONS
|
177
|
+
|
178
|
+
APPENDIX: How to apply the Apache License to your work.
|
179
|
+
|
180
|
+
To apply the Apache License to your work, attach the following
|
181
|
+
boilerplate notice, with the fields enclosed by brackets "[]"
|
182
|
+
replaced with your own identifying information. (Don't include
|
183
|
+
the brackets!) The text should be enclosed in the appropriate
|
184
|
+
comment syntax for the file format. We also recommend that a
|
185
|
+
file or class name and description of purpose be included on the
|
186
|
+
same "printed page" as the copyright notice for easier
|
187
|
+
identification within third-party archives.
|
188
|
+
|
189
|
+
Copyright [yyyy] [name of copyright owner]
|
190
|
+
|
191
|
+
Licensed under the Apache License, Version 2.0 (the "License");
|
192
|
+
you may not use this file except in compliance with the License.
|
193
|
+
You may obtain a copy of the License at
|
194
|
+
|
195
|
+
http://www.apache.org/licenses/LICENSE-2.0
|
196
|
+
|
197
|
+
Unless required by applicable law or agreed to in writing, software
|
198
|
+
distributed under the License is distributed on an "AS IS" BASIS,
|
199
|
+
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
200
|
+
See the License for the specific language governing permissions and
|
201
|
+
limitations under the License.
|
data/README.rdoc
ADDED
@@ -0,0 +1,92 @@
|
|
1
|
+
= chef
|
2
|
+
|
3
|
+
* http://www.opscode.com/chef
|
4
|
+
|
5
|
+
== DESCRIPTION:
|
6
|
+
|
7
|
+
Chef is a systems management framework masquerading as a configuration management tool.
|
8
|
+
|
9
|
+
I'm in ur netwerk, cookin up yer servers. :)
|
10
|
+
|
11
|
+
== REQUIREMENTS:
|
12
|
+
|
13
|
+
chef:
|
14
|
+
|
15
|
+
* ruby-openid
|
16
|
+
* json
|
17
|
+
* erubis
|
18
|
+
* extlib
|
19
|
+
* stomp
|
20
|
+
* ohai
|
21
|
+
|
22
|
+
chef-server and the chef-server-api (merb slice), same requires as chef above, plus:
|
23
|
+
|
24
|
+
* merb-core
|
25
|
+
* merb-haml
|
26
|
+
* thin
|
27
|
+
* haml
|
28
|
+
* ruby-openid
|
29
|
+
* syntax
|
30
|
+
|
31
|
+
Interim Note:
|
32
|
+
|
33
|
+
Once the {chef,chef-server,chefserverslice}.gem set is installed, do the following:
|
34
|
+
|
35
|
+
> cd /Library/Ruby/Gems/1.8/gems/chef-server<xxx> # or wherever your gems land
|
36
|
+
> sudo rake slices:chefserverslice:install
|
37
|
+
|
38
|
+
This installs the chefserverslice into the chef-server merb application
|
39
|
+
|
40
|
+
External Servers:
|
41
|
+
|
42
|
+
* stompserver (for easy stomp mq testing)
|
43
|
+
* CouchDB
|
44
|
+
|
45
|
+
== INSTALL:
|
46
|
+
|
47
|
+
Install all of the above. To fire up a develpment environment, do the following:
|
48
|
+
|
49
|
+
* Start CouchDB with 'couchdb'
|
50
|
+
* Start stompserver with 'stompserver'
|
51
|
+
* Start chef-indexer with:
|
52
|
+
|
53
|
+
chef-indexer -l debug
|
54
|
+
|
55
|
+
* Start chef-server:
|
56
|
+
|
57
|
+
chef-server -N -c 2
|
58
|
+
|
59
|
+
* Test run chef to begin node registration:
|
60
|
+
|
61
|
+
sudo ./bin/chef-client
|
62
|
+
|
63
|
+
* Validate the node registration:
|
64
|
+
|
65
|
+
Visit http://localhost:4000
|
66
|
+
Login, enter an openid URL (see http://openid.net/get/)
|
67
|
+
Registrations, click Validate
|
68
|
+
|
69
|
+
* Test run chef with:
|
70
|
+
|
71
|
+
chef-client
|
72
|
+
|
73
|
+
== LICENSE:
|
74
|
+
|
75
|
+
Chef - A configuration management system
|
76
|
+
|
77
|
+
Author:: Adam Jacob (<adam@opscode.com>)
|
78
|
+
Copyright:: Copyright (c) 2008 Opscode, Inc.
|
79
|
+
License:: Apache License, Version 2.0
|
80
|
+
|
81
|
+
Licensed under the Apache License, Version 2.0 (the "License");
|
82
|
+
you may not use this file except in compliance with the License.
|
83
|
+
You may obtain a copy of the License at
|
84
|
+
|
85
|
+
http://www.apache.org/licenses/LICENSE-2.0
|
86
|
+
|
87
|
+
Unless required by applicable law or agreed to in writing, software
|
88
|
+
distributed under the License is distributed on an "AS IS" BASIS,
|
89
|
+
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
90
|
+
See the License for the specific language governing permissions and
|
91
|
+
limitations under the License.
|
92
|
+
|
data/Rakefile
ADDED
@@ -0,0 +1,59 @@
|
|
1
|
+
require 'rubygems'
|
2
|
+
require 'rake/gempackagetask'
|
3
|
+
|
4
|
+
require 'merb-core'
|
5
|
+
require 'merb-core/tasks/merb'
|
6
|
+
|
7
|
+
GEM_NAME = "chef-server-api"
|
8
|
+
CHEF_SERVER_VERSION="0.8.2"
|
9
|
+
AUTHOR = "Opscode"
|
10
|
+
EMAIL = "chef@opscode.com"
|
11
|
+
HOMEPAGE = "http://wiki.opscode.com/display/chef"
|
12
|
+
SUMMARY = "A systems integration framework, built to bring the benefits of configuration management to your entire infrastructure."
|
13
|
+
|
14
|
+
spec = Gem::Specification.new do |s|
|
15
|
+
s.name = GEM_NAME
|
16
|
+
s.version = CHEF_SERVER_VERSION
|
17
|
+
s.platform = Gem::Platform::RUBY
|
18
|
+
s.has_rdoc = true
|
19
|
+
s.extra_rdoc_files = ["README.rdoc", "LICENSE" ]
|
20
|
+
s.summary = SUMMARY
|
21
|
+
s.description = s.summary
|
22
|
+
s.author = AUTHOR
|
23
|
+
s.email = EMAIL
|
24
|
+
s.homepage = HOMEPAGE
|
25
|
+
|
26
|
+
["merb-slices",
|
27
|
+
"merb-core",
|
28
|
+
"merb-assets",
|
29
|
+
"merb-helpers",
|
30
|
+
"thin",
|
31
|
+
"json",
|
32
|
+
"uuidtools"
|
33
|
+
].each { |g| s.add_dependency g}
|
34
|
+
|
35
|
+
s.require_path = 'lib'
|
36
|
+
s.files = %w(LICENSE README.rdoc Rakefile) + Dir.glob("{config,lib,spec,app,public,stubs}/**/*")
|
37
|
+
end
|
38
|
+
|
39
|
+
Rake::GemPackageTask.new(spec) do |pkg|
|
40
|
+
pkg.gem_spec = spec
|
41
|
+
end
|
42
|
+
|
43
|
+
desc "Install the gem"
|
44
|
+
task :install => :package do
|
45
|
+
sh %{gem install pkg/#{GEM_NAME}-#{CHEF_SERVER_VERSION} --no-rdoc --no-ri}
|
46
|
+
end
|
47
|
+
|
48
|
+
desc "Uninstall the gem"
|
49
|
+
task :uninstall do
|
50
|
+
sh %{gem uninstall #{GEM_NAME} -x -v #{CHEF_SERVER_VERSION} }
|
51
|
+
end
|
52
|
+
|
53
|
+
desc "Create a gemspec file"
|
54
|
+
task :gemspec do
|
55
|
+
File.open("#{GEM_NAME}.gemspec", "w") do |file|
|
56
|
+
file.puts spec.to_ruby
|
57
|
+
end
|
58
|
+
end
|
59
|
+
|
@@ -0,0 +1,289 @@
|
|
1
|
+
#
|
2
|
+
# Author:: Adam Jacob (<adam@opscode.com>)
|
3
|
+
# Author:: Christopher Brown (<cb@opscode.com>)
|
4
|
+
# Copyright:: Copyright (c) 2008 Opscode, Inc.
|
5
|
+
# License:: Apache License, Version 2.0
|
6
|
+
#
|
7
|
+
# Licensed under the Apache License, Version 2.0 (the "License");
|
8
|
+
# you may not use this file except in compliance with the License.
|
9
|
+
# You may obtain a copy of the License at
|
10
|
+
#
|
11
|
+
# http://www.apache.org/licenses/LICENSE-2.0
|
12
|
+
#
|
13
|
+
# Unless required by applicable law or agreed to in writing, software
|
14
|
+
# distributed under the License is distributed on an "AS IS" BASIS,
|
15
|
+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
16
|
+
# See the License for the specific language governing permissions and
|
17
|
+
# limitations under the License.
|
18
|
+
#
|
19
|
+
|
20
|
+
require "chef" / "mixin" / "checksum"
|
21
|
+
require "chef" / "cookbook_loader"
|
22
|
+
require "mixlib/authentication/signatureverification"
|
23
|
+
|
24
|
+
class ChefServerApi::Application < Merb::Controller
|
25
|
+
|
26
|
+
include Chef::Mixin::Checksum
|
27
|
+
|
28
|
+
controller_for_slice
|
29
|
+
|
30
|
+
# Generate the absolute url for a slice - takes the slice's :path_prefix into account.
|
31
|
+
#
|
32
|
+
# @param slice_name<Symbol>
|
33
|
+
# The name of the slice - in identifier_sym format (underscored).
|
34
|
+
# @param *args<Array[Symbol,Hash]>
|
35
|
+
# There are several possibilities regarding arguments:
|
36
|
+
# - when passing a Hash only, the :default route of the current
|
37
|
+
# slice will be used
|
38
|
+
# - when a Symbol is passed, it's used as the route name
|
39
|
+
# - a Hash with additional params can optionally be passed
|
40
|
+
#
|
41
|
+
# @return <String> A uri based on the requested slice.
|
42
|
+
#
|
43
|
+
# @example absolute_slice_url(:awesome, :format => 'html')
|
44
|
+
# @example absolute_slice_url(:forum, :posts, :format => 'xml')
|
45
|
+
def absolute_slice_url(slice_name, *args)
|
46
|
+
options = {}
|
47
|
+
if args.length == 1 && args[0].respond_to?(:keys)
|
48
|
+
options = args[0]
|
49
|
+
else
|
50
|
+
options = extract_options_from_args!(args) || {}
|
51
|
+
end
|
52
|
+
protocol = options.delete(:protocol) || request.protocol
|
53
|
+
host = options.delete(:host) || request.host
|
54
|
+
protocol + "://" + host + slice_url(slice_name, *args)
|
55
|
+
end
|
56
|
+
|
57
|
+
def authenticate_every
|
58
|
+
authenticator = Mixlib::Authentication::SignatureVerification.new
|
59
|
+
|
60
|
+
auth = begin
|
61
|
+
headers = request.env.inject({ }) { |memo, kv| memo[$2.downcase.gsub(/\-/,"_").to_sym] = kv[1] if kv[0] =~ /^(HTTP_)(.*)/; memo }
|
62
|
+
Chef::Log.debug("Headers in authenticate_every: #{headers.inspect}")
|
63
|
+
username = headers[:x_ops_userid].chomp
|
64
|
+
Chef::Log.info("Authenticating client #{username}")
|
65
|
+
user = Chef::ApiClient.cdb_load(username)
|
66
|
+
Chef::Log.debug("Found API Client: #{user.inspect}")
|
67
|
+
user_key = OpenSSL::PKey::RSA.new(user.public_key)
|
68
|
+
Chef::Log.debug "Authenticating:\n #{user.inspect}\n"
|
69
|
+
# Store this for later..
|
70
|
+
@auth_user = user
|
71
|
+
authenticator.authenticate_user_request(request, user_key)
|
72
|
+
rescue StandardError => se
|
73
|
+
Chef::Log.debug "Authentication failed: #{se}, #{se.backtrace.join("\n")}"
|
74
|
+
nil
|
75
|
+
end
|
76
|
+
|
77
|
+
raise Unauthorized, "Failed to authenticate!" unless auth
|
78
|
+
|
79
|
+
auth
|
80
|
+
end
|
81
|
+
|
82
|
+
def is_admin
|
83
|
+
if @auth_user.admin
|
84
|
+
true
|
85
|
+
else
|
86
|
+
raise Unauthorized, "You are not allowed to take this action."
|
87
|
+
end
|
88
|
+
end
|
89
|
+
|
90
|
+
def is_correct_node
|
91
|
+
if @auth_user.admin || @auth_user.name == params[:id]
|
92
|
+
true
|
93
|
+
else
|
94
|
+
raise Unauthorized, "You are not the correct node (auth_user name: #{@auth_user.name}, params[:id]: #{params[:id]}), or are not an API administrator (admin: #{@auth_user.admin})."
|
95
|
+
end
|
96
|
+
end
|
97
|
+
|
98
|
+
# Store the URI of the current request in the session.
|
99
|
+
#
|
100
|
+
# We can return to this location by calling #redirect_back_or_default.
|
101
|
+
def store_location
|
102
|
+
session[:return_to] = request.uri
|
103
|
+
end
|
104
|
+
|
105
|
+
# Redirect to the URI stored by the most recent store_location call or
|
106
|
+
# to the passed default.
|
107
|
+
def redirect_back_or_default(default)
|
108
|
+
loc = session[:return_to] || default
|
109
|
+
session[:return_to] = nil
|
110
|
+
redirect loc
|
111
|
+
end
|
112
|
+
|
113
|
+
def access_denied
|
114
|
+
case content_type
|
115
|
+
when :html
|
116
|
+
store_location
|
117
|
+
redirect slice_url(:openid_consumer), :message => { :error => "You don't have access to that, please login."}
|
118
|
+
else
|
119
|
+
raise Unauthorized, "You must authenticate first!"
|
120
|
+
end
|
121
|
+
end
|
122
|
+
|
123
|
+
# Load a cookbook and return a hash with a list of all the files of a
|
124
|
+
# given segment (attributes, recipes, definitions, libraries)
|
125
|
+
#
|
126
|
+
# === Parameters
|
127
|
+
# cookbook_id<String>:: The cookbook to load
|
128
|
+
# segment<Symbol>:: :attributes, :recipes, :definitions, :libraries
|
129
|
+
#
|
130
|
+
# === Returns
|
131
|
+
# <Hash>:: A hash consisting of the short name of the file in :name, and the full path
|
132
|
+
# to the file in :file.
|
133
|
+
def load_cookbook_segment(cookbook, segment)
|
134
|
+
files_list = segment_files(segment, cookbook)
|
135
|
+
|
136
|
+
files = Hash.new
|
137
|
+
files_list.each do |f|
|
138
|
+
full = File.expand_path(f)
|
139
|
+
name = File.basename(full)
|
140
|
+
files[name] = {
|
141
|
+
:name => name,
|
142
|
+
:file => full,
|
143
|
+
}
|
144
|
+
end
|
145
|
+
files
|
146
|
+
end
|
147
|
+
|
148
|
+
def segment_files(segment, cookbook)
|
149
|
+
files_list = nil
|
150
|
+
case segment
|
151
|
+
when :attributes
|
152
|
+
files_list = cookbook.attribute_files
|
153
|
+
when :recipes
|
154
|
+
files_list = cookbook.recipe_files
|
155
|
+
when :definitions
|
156
|
+
files_list = cookbook.definition_files
|
157
|
+
when :libraries
|
158
|
+
files_list = cookbook.lib_files
|
159
|
+
when :providers
|
160
|
+
files_list = cookbook.provider_files
|
161
|
+
when :resources
|
162
|
+
files_list = cookbook.resource_files
|
163
|
+
when :files
|
164
|
+
files_list = cookbook.remote_files
|
165
|
+
when :templates
|
166
|
+
files_list = cookbook.template_files
|
167
|
+
else
|
168
|
+
raise ArgumentError, "segment must be one of :attributes, :recipes, :definitions, :remote_files, :template_files, :resources, :providers or :libraries"
|
169
|
+
end
|
170
|
+
Chef::Log.error(files_list.inspect)
|
171
|
+
files_list
|
172
|
+
end
|
173
|
+
|
174
|
+
def specific_cookbooks(node_name, cl)
|
175
|
+
valid_cookbooks = Hash.new
|
176
|
+
begin
|
177
|
+
node = Chef::Node.cdb_load(node_name)
|
178
|
+
recipes, default_attrs, override_attrs = node.run_list.expand('couchdb')
|
179
|
+
rescue Net::HTTPServerException
|
180
|
+
recipes = []
|
181
|
+
end
|
182
|
+
recipes.each do |recipe|
|
183
|
+
valid_cookbooks = expand_cookbook_deps(valid_cookbooks, cl, recipe)
|
184
|
+
end
|
185
|
+
valid_cookbooks
|
186
|
+
end
|
187
|
+
|
188
|
+
def expand_cookbook_deps(valid_cookbooks, cl, recipe)
|
189
|
+
cookbook = recipe
|
190
|
+
if recipe =~ /^(.+)::/
|
191
|
+
cookbook = $1
|
192
|
+
end
|
193
|
+
Chef::Log.debug("Node requires #{cookbook}")
|
194
|
+
valid_cookbooks[cookbook] = true
|
195
|
+
cl.metadata[cookbook.to_sym].dependencies.each do |dep, versions|
|
196
|
+
expand_cookbook_deps(valid_cookbooks, cl, dep) unless valid_cookbooks[dep]
|
197
|
+
end
|
198
|
+
valid_cookbooks
|
199
|
+
end
|
200
|
+
|
201
|
+
def load_cookbook_files(cookbook)
|
202
|
+
response = {
|
203
|
+
:recipes => Array.new,
|
204
|
+
:definitions => Array.new,
|
205
|
+
:libraries => Array.new,
|
206
|
+
:attributes => Array.new,
|
207
|
+
:files => Array.new,
|
208
|
+
:templates => Array.new,
|
209
|
+
:resources => Array.new,
|
210
|
+
:providers => Array.new
|
211
|
+
}
|
212
|
+
[ :resources, :providers, :recipes, :definitions, :libraries, :attributes, :files, :templates ].each do |segment|
|
213
|
+
segment_files(segment, cookbook).each do |sf|
|
214
|
+
next if File.directory?(sf)
|
215
|
+
file_name = nil
|
216
|
+
file_url = nil
|
217
|
+
file_specificity = nil
|
218
|
+
|
219
|
+
if segment == :templates || segment == :files
|
220
|
+
mo = sf.match("cookbooks/#{cookbook.name}/#{segment}/(.+?)/(.+)")
|
221
|
+
unless mo
|
222
|
+
Chef::Log.debug("Skipping file #{sf}, as it doesn't have a proper segment.")
|
223
|
+
next
|
224
|
+
end
|
225
|
+
specificity = mo[1]
|
226
|
+
file_name = mo[2]
|
227
|
+
url_options = { :cookbook_id => cookbook.name.to_s, :segment => segment, :id => file_name }
|
228
|
+
|
229
|
+
case specificity
|
230
|
+
when "default"
|
231
|
+
when /^host-(.+)$/
|
232
|
+
url_options[:fqdn] = $1
|
233
|
+
when /^(.+)-(.+)$/
|
234
|
+
url_options[:platform] = $1
|
235
|
+
url_options[:version] = $2
|
236
|
+
when /^(.+)$/
|
237
|
+
url_options[:platform] = $1
|
238
|
+
end
|
239
|
+
|
240
|
+
file_specificity = specificity
|
241
|
+
file_url = absolute_slice_url(:cookbook_segment, url_options)
|
242
|
+
else
|
243
|
+
mo = sf.match("cookbooks/#{cookbook.name}/#{segment}/(.+)")
|
244
|
+
file_name = mo[1]
|
245
|
+
url_options = { :cookbook_id => cookbook.name.to_s, :segment => segment, :id => file_name }
|
246
|
+
file_url = absolute_slice_url(:cookbook_segment, url_options)
|
247
|
+
end
|
248
|
+
rs = {
|
249
|
+
:name => file_name,
|
250
|
+
:uri => file_url,
|
251
|
+
:checksum => checksum(sf)
|
252
|
+
}
|
253
|
+
rs[:specificity] = file_specificity if file_specificity
|
254
|
+
response[segment] << rs
|
255
|
+
end
|
256
|
+
end
|
257
|
+
response
|
258
|
+
end
|
259
|
+
|
260
|
+
def load_all_files(node_name=nil)
|
261
|
+
cl = Chef::CookbookLoader.new
|
262
|
+
valid_cookbooks = node_name ? specific_cookbooks(node_name, cl) : {}
|
263
|
+
cookbook_list = Hash.new
|
264
|
+
cl.each do |cookbook|
|
265
|
+
if node_name
|
266
|
+
next unless valid_cookbooks[cookbook.name.to_s]
|
267
|
+
end
|
268
|
+
cookbook_list[cookbook.name.to_s] = load_cookbook_files(cookbook)
|
269
|
+
end
|
270
|
+
cookbook_list
|
271
|
+
end
|
272
|
+
|
273
|
+
def get_available_recipes
|
274
|
+
cl = Chef::CookbookLoader.new
|
275
|
+
available_recipes = cl.sort{ |a,b| a.name.to_s <=> b.name.to_s }.inject([]) do |result, element|
|
276
|
+
element.recipes.sort.each do |r|
|
277
|
+
if r =~ /^(.+)::default$/
|
278
|
+
result << $1
|
279
|
+
else
|
280
|
+
result << r
|
281
|
+
end
|
282
|
+
end
|
283
|
+
result
|
284
|
+
end
|
285
|
+
available_recipes
|
286
|
+
end
|
287
|
+
|
288
|
+
end
|
289
|
+
|