chef 12.6.0 → 12.7.2

data/lib/chef/chef_fs/file_system.rb

@@ -1,6 +1,6 @@
 #
-# Author:: John Keiser (<jkeiser@opscode.com>)
-# Copyright:: Copyright (c) 2012 Opscode, Inc.
+# Author:: John Keiser (<jkeiser@chef.io>)
+# Copyright:: Copyright 2012-2016, Chef Software Inc.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -16,11 +16,11 @@
 # limitations under the License.
 #
 
-require 'chef/chef_fs/path_utils'
-require 'chef/chef_fs/file_system/default_environment_cannot_be_modified_error'
-require 'chef/chef_fs/file_system/operation_failed_error'
-require 'chef/chef_fs/file_system/operation_not_allowed_error'
-require 'chef/chef_fs/parallelizer'
+require "chef/chef_fs/path_utils"
+require "chef/chef_fs/file_system/default_environment_cannot_be_modified_error"
+require "chef/chef_fs/file_system/operation_failed_error"
+require "chef/chef_fs/file_system/operation_not_allowed_error"
+require "chef/chef_fs/parallelizer"
 
 class Chef
   module ChefFS
@@ -95,9 +95,9 @@ class Chef
       #
       def self.resolve_path(entry, path)
         return entry if path.length == 0
-        return resolve_path(entry.root, path) if path[0,1] == "/" && entry.root != entry
-        if path[0,1] == "/"
-          path = path[1,path.length-1]
+        return resolve_path(entry.root, path) if path[0, 1] == "/" && entry.root != entry
+        if path[0, 1] == "/"
+          path = path[1, path.length - 1]
         end
 
         result = entry

data/lib/chef/chef_fs/file_system/already_exists_error.rb

@@ -1,6 +1,6 @@
 #
-# Author:: John Keiser (<jkeiser@opscode.com>)
-# Copyright:: Copyright (c) 2012 Opscode, Inc.
+# Author:: John Keiser (<jkeiser@chef.io>)
+# Copyright:: Copyright 2012-2016, Chef Software Inc.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -16,15 +16,12 @@
 # limitations under the License.
 #
 
-require 'chef/chef_fs/file_system/operation_failed_error'
+require "chef/chef_fs/file_system/operation_failed_error"
 
 class Chef
   module ChefFS
     module FileSystem
       class AlreadyExistsError < OperationFailedError
-        def initialize(operation, entry, cause = nil)
-          super(operation, entry, cause)
-        end
       end
     end
   end

data/lib/chef/chef_fs/file_system/base_fs_dir.rb

@@ -1,6 +1,6 @@
 #
-# Author:: John Keiser (<jkeiser@opscode.com>)
-# Copyright:: Copyright (c) 2012 Opscode, Inc.
+# Author:: John Keiser (<jkeiser@chef.io>)
+# Copyright:: Copyright 2012-2016, Chef Software Inc.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -16,8 +16,8 @@
 # limitations under the License.
 #
 
-require 'chef/chef_fs/file_system/base_fs_object'
-require 'chef/chef_fs/file_system/nonexistent_fs_object'
+require "chef/chef_fs/file_system/base_fs_object"
+require "chef/chef_fs/file_system/nonexistent_fs_object"
 
 class Chef
   module ChefFS

data/lib/chef/chef_fs/file_system/base_fs_object.rb

@@ -1,6 +1,6 @@
 #
-# Author:: John Keiser (<jkeiser@opscode.com>)
-# Copyright:: Copyright (c) 2012 Opscode, Inc.
+# Author:: John Keiser (<jkeiser@chef.io>)
+# Copyright:: Copyright 2012-2016, Chef Software Inc.
 # License:: Apache License, Version 2.0
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
@@ -16,8 +16,8 @@
 # limitations under the License.
 #
 
-require 'chef/chef_fs/path_utils'
-require 'chef/chef_fs/file_system/operation_not_allowed_error'
+require "chef/chef_fs/path_utils"
+require "chef/chef_fs/file_system/operation_not_allowed_error"
 
 class Chef
   module ChefFS
@@ -29,10 +29,10 @@ class Chef
           if parent
             @path = Chef::ChefFS::PathUtils::join(parent.path, name)
           else
-            if name != ''
+            if name != ""
               raise ArgumentError, "Name of root object must be empty string: was '#{name}' instead"
             end
-            @path = '/'
+            @path = "/"
           end
         end
 
@@ -146,7 +146,7 @@ class Chef
         def path_for_printing
           if parent
             parent_path = parent.path_for_printing
-            if parent_path == '.'
+            if parent_path == "."
               name
             else
               Chef::ChefFS::PathUtils::join(parent.path_for_printing, name)
@@ -180,4 +180,4 @@ class Chef
   end
 end
 
-require 'chef/chef_fs/file_system/nonexistent_fs_object'
+require "chef/chef_fs/file_system/nonexistent_fs_object"

data/lib/chef/chef_fs/file_system/chef_server/acl_dir.rb

@@ -0,0 +1,65 @@
+#
+# Author:: John Keiser (<jkeiser@chef.io>)
+# Copyright:: Copyright 2013-2016, Chef Software Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require "chef/chef_fs/file_system/base_fs_dir"
+require "chef/chef_fs/file_system/chef_server/acl_entry"
+require "chef/chef_fs/file_system/operation_not_allowed_error"
+
+class Chef
+  module ChefFS
+    module FileSystem
+      module ChefServer
+        class AclDir < BaseFSDir
+          def api_path
+            parent.parent.child(name).api_path
+          end
+
+          def make_child_entry(name, exists = nil)
+            result = @children.select { |child| child.name == name }.first if @children
+            result || AclEntry.new(name, self, exists)
+          end
+
+          def can_have_child?(name, is_dir)
+            name =~ /\.json$/ && !is_dir
+          end
+
+          def children
+            if @children.nil?
+              # Grab the ACTUAL children (/nodes, /containers, etc.) and get their names
+              names = parent.parent.child(name).children.map { |child| child.dir? ? "#{child.name}.json" : child.name }
+              @children = names.map { |name| make_child_entry(name, true) }
+            end
+            @children
+          end
+
+          def create_child(name, file_contents)
+            raise OperationNotAllowedError.new(:create_child, self, nil, "ACLs can only be updated, and can only be created when the corresponding object is created.")
+          end
+
+          def data_handler
+            parent.data_handler
+          end
+
+          def rest
+            parent.rest
+          end
+        end
+      end
+    end
+  end
+end

data/lib/chef/chef_fs/file_system/chef_server/acl_entry.rb

@@ -0,0 +1,60 @@
+#
+# Author:: John Keiser (<jkeiser@chef.io>)
+# Copyright:: Copyright 2013-2016, Chef Software Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require "chef/chef_fs/file_system/chef_server/rest_list_entry"
+require "chef/chef_fs/file_system/not_found_error"
+require "chef/chef_fs/file_system/operation_not_allowed_error"
+require "chef/chef_fs/file_system/operation_failed_error"
+
+class Chef
+  module ChefFS
+    module FileSystem
+      module ChefServer
+        class AclEntry < RestListEntry
+          PERMISSIONS = %w{create read update delete grant}
+
+          def api_path
+            "#{super}/_acl"
+          end
+
+          def delete(recurse)
+            raise Chef::ChefFS::FileSystem::OperationNotAllowedError.new(:delete, self, nil, "ACLs cannot be deleted")
+          end
+
+          def write(file_contents)
+            # ACL writes are fun.
+            acls = data_handler.normalize(Chef::JSONCompat.parse(file_contents), self)
+            PERMISSIONS.each do |permission|
+              begin
+                rest.put("#{api_path}/#{permission}", { permission => acls[permission] })
+              rescue Timeout::Error => e
+                raise Chef::ChefFS::FileSystem::OperationFailedError.new(:write, self, e, "Timeout writing: #{e}")
+              rescue Net::HTTPServerException => e
+                if e.response.code == "404"
+                  raise Chef::ChefFS::FileSystem::NotFoundError.new(self, e)
+                else
+                  raise Chef::ChefFS::FileSystem::OperationFailedError.new(:write, self, e, "HTTP error writing: #{e}")
+                end
+              end
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/chef/chef_fs/file_system/chef_server/acls_dir.rb

@@ -0,0 +1,75 @@
+#
+# Author:: John Keiser (<jkeiser@chef.io>)
+# Copyright:: Copyright 2013-2016, Chef Software Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require "chef/chef_fs/file_system/base_fs_dir"
+require "chef/chef_fs/file_system/chef_server/acl_dir"
+require "chef/chef_fs/file_system/chef_server/cookbooks_acl_dir"
+require "chef/chef_fs/file_system/chef_server/policies_acl_dir"
+require "chef/chef_fs/file_system/chef_server/acl_entry"
+require "chef/chef_fs/data_handler/acl_data_handler"
+
+class Chef
+  module ChefFS
+    module FileSystem
+      module ChefServer
+        class AclsDir < BaseFSDir
+          ENTITY_TYPES = %w{clients containers cookbook_artifacts cookbooks data_bags environments groups nodes policies policy_groups roles} # we don't read sandboxes, so we don't read their acls
+
+          def data_handler
+            @data_handler ||= Chef::ChefFS::DataHandler::AclDataHandler.new
+          end
+
+          def api_path
+            parent.api_path
+          end
+
+          def make_child_entry(name)
+            children.select { |child| child.name == name }.first
+          end
+
+          def can_have_child?(name, is_dir)
+            is_dir ? ENTITY_TYPES.include?(name) : name == "organization.json"
+          end
+
+          def children
+            if @children.nil?
+              @children = ENTITY_TYPES.map do |entity_type|
+                # All three of these can be versioned (NAME-VERSION), but only have
+                # one ACL that covers them all (NAME.json).
+                case entity_type
+                when "cookbooks", "cookbook_artifacts"
+                  CookbooksAclDir.new(entity_type, self)
+                when "policies"
+                  PoliciesAclDir.new(entity_type, self)
+                else
+                  AclDir.new(entity_type, self)
+                end
+              end
+              @children << AclEntry.new("organization.json", self, true) # the org acl is retrieved as GET /organizations/ORGNAME/ANYTHINGATALL/_acl
+            end
+            @children
+          end
+
+          def rest
+            parent.rest
+          end
+        end
+      end
+    end
+  end
+end

data/lib/chef/chef_fs/file_system/chef_server/chef_server_root_dir.rb

@@ -0,0 +1,196 @@
+#
+# Author:: John Keiser (<jkeiser@chef.io>)
+# Copyright:: Copyright 2012-2016, Chef Software Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require "chef/server_api"
+require "chef/chef_fs/file_system/chef_server/acls_dir"
+require "chef/chef_fs/file_system/base_fs_dir"
+require "chef/chef_fs/file_system/chef_server/rest_list_dir"
+require "chef/chef_fs/file_system/chef_server/cookbooks_dir"
+require "chef/chef_fs/file_system/chef_server/cookbook_artifacts_dir"
+require "chef/chef_fs/file_system/chef_server/versioned_cookbooks_dir"
+require "chef/chef_fs/file_system/chef_server/data_bags_dir"
+require "chef/chef_fs/file_system/chef_server/nodes_dir"
+require "chef/chef_fs/file_system/chef_server/org_entry"
+require "chef/chef_fs/file_system/chef_server/organization_invites_entry"
+require "chef/chef_fs/file_system/chef_server/organization_members_entry"
+require "chef/chef_fs/file_system/chef_server/policies_dir"
+require "chef/chef_fs/file_system/chef_server/policy_groups_dir"
+require "chef/chef_fs/file_system/chef_server/environments_dir"
+require "chef/chef_fs/data_handler/acl_data_handler"
+require "chef/chef_fs/data_handler/client_data_handler"
+require "chef/chef_fs/data_handler/environment_data_handler"
+require "chef/chef_fs/data_handler/node_data_handler"
+require "chef/chef_fs/data_handler/role_data_handler"
+require "chef/chef_fs/data_handler/user_data_handler"
+require "chef/chef_fs/data_handler/group_data_handler"
+require "chef/chef_fs/data_handler/container_data_handler"
+require "chef/chef_fs/data_handler/policy_group_data_handler"
+
+class Chef
+  module ChefFS
+    module FileSystem
+      module ChefServer
+        #
+        # Represents the root of a Chef server (or organization), under which
+        # nodes, roles, cookbooks, etc. can be found.
+        #
+        class ChefServerRootDir < BaseFSDir
+          #
+          # Create a new Chef server root.
+          #
+          # == Parameters
+          #
+          # [root_name]
+          #   A friendly name for the root, for printing--like "remote" or "chef_central".
+          # [chef_config]
+          #   A hash with options that look suspiciously like Chef::Config, including the
+          #   following keys:
+          #   :chef_server_url:: The URL to the Chef server or top of the organization
+          #   :node_name:: The username to authenticate to the Chef server with
+          #   :client_key:: The private key for the user for authentication
+          #   :environment:: The environment in which you are presently working
+          #   :repo_mode::
+          #     The repository mode, :hosted_everything, :everything or :static.
+          #     This determines the set of subdirectories the Chef server will
+          #     offer up.
+          #   :versioned_cookbooks:: whether or not to include versions in cookbook names
+          # [options]
+          #   Other options:
+          #   :cookbook_version:: when cookbooks are retrieved, grab this version for them.
+          #   :freeze:: freeze cookbooks on upload
+          #
+          def initialize(root_name, chef_config, options = {})
+            super("", nil)
+            @chef_server_url = chef_config[:chef_server_url]
+            @chef_username = chef_config[:node_name]
+            @chef_private_key = chef_config[:client_key]
+            @environment = chef_config[:environment]
+            @repo_mode = chef_config[:repo_mode]
+            @versioned_cookbooks = chef_config[:versioned_cookbooks]
+            @root_name = root_name
+            @cookbook_version = options[:cookbook_version] # Used in knife diff and download for server cookbook version
+          end
+
+          attr_reader :chef_server_url
+          attr_reader :chef_username
+          attr_reader :chef_private_key
+          attr_reader :environment
+          attr_reader :repo_mode
+          attr_reader :cookbook_version
+          attr_reader :versioned_cookbooks
+
+          def fs_description
+            "Chef server at #{chef_server_url} (user #{chef_username}), repo_mode = #{repo_mode}"
+          end
+
+          def rest
+            Chef::ServerAPI.new(chef_server_url, :client_name => chef_username, :signing_key_filename => chef_private_key, :raw_output => true, :api_version => "0")
+          end
+
+          def get_json(path)
+            Chef::ServerAPI.new(chef_server_url, :client_name => chef_username, :signing_key_filename => chef_private_key, :api_version => "0").get(path)
+          end
+
+          def chef_rest
+            Chef::ServerAPI.new(chef_server_url, :client_name => chef_username, :signing_key_filename => chef_private_key)
+          end
+
+          def api_path
+            ""
+          end
+
+          def path_for_printing
+            "#{@root_name}/"
+          end
+
+          def can_have_child?(name, is_dir)
+            result = children.select { |child| child.name == name }.first
+            result && !!result.dir? == !!is_dir
+          end
+
+          def org
+            @org ||= begin
+              path = Pathname.new(URI.parse(chef_server_url).path).cleanpath
+              if File.dirname(path) == "/organizations"
+                File.basename(path)
+              else
+                # In Chef 12, everything is in an org.
+                "chef"
+              end
+            end
+          end
+
+          def make_child_entry(name)
+            children.select { |child| child.name == name }.first
+          end
+
+          def children
+            @children ||= begin
+              result = [
+                # /cookbooks
+                versioned_cookbooks ? VersionedCookbooksDir.new("cookbooks", self) : CookbooksDir.new("cookbooks", self),
+                # /data_bags
+                DataBagsDir.new("data_bags", self, "data"),
+                # /environments
+                EnvironmentsDir.new("environments", self, nil, Chef::ChefFS::DataHandler::EnvironmentDataHandler.new),
+                # /roles
+                RestListDir.new("roles", self, nil, Chef::ChefFS::DataHandler::RoleDataHandler.new),
+              ]
+              if repo_mode == "hosted_everything"
+                result += [
+                  # /acls
+                  AclsDir.new("acls", self),
+                  # /clients
+                  RestListDir.new("clients", self, nil, Chef::ChefFS::DataHandler::ClientDataHandler.new),
+                  # /containers
+                  RestListDir.new("containers", self, nil, Chef::ChefFS::DataHandler::ContainerDataHandler.new),
+                  # /cookbook_artifacts
+                  CookbookArtifactsDir.new("cookbook_artifacts", self),
+                  # /groups
+                  RestListDir.new("groups", self, nil, Chef::ChefFS::DataHandler::GroupDataHandler.new),
+                  # /nodes
+                  NodesDir.new("nodes", self, nil, Chef::ChefFS::DataHandler::NodeDataHandler.new),
+                  # /org.json
+                  OrgEntry.new("org.json", self),
+                  # /members.json
+                  OrganizationMembersEntry.new("members.json", self),
+                  # /invitations.json
+                  OrganizationInvitesEntry.new("invitations.json", self),
+                  # /policies
+                  PoliciesDir.new("policies", self, nil, Chef::ChefFS::DataHandler::PolicyDataHandler.new),
+                  # /policy_groups
+                  PolicyGroupsDir.new("policy_groups", self, nil, Chef::ChefFS::DataHandler::PolicyGroupDataHandler.new),
+                ]
+              elsif repo_mode != "static"
+                result += [
+                  # /clients
+                  RestListDir.new("clients", self, nil, Chef::ChefFS::DataHandler::ClientDataHandler.new),
+                  # /nodes
+                  NodesDir.new("nodes", self, nil, Chef::ChefFS::DataHandler::NodeDataHandler.new),
+                  # /users
+                  RestListDir.new("users", self, nil, Chef::ChefFS::DataHandler::UserDataHandler.new),
+                ]
+              end
+              result.sort_by { |child| child.name }
+            end
+          end
+        end
+      end
+    end
+  end
+end