chef 14.2.0 → 14.3.37

data/lib/chef/resource/hostname.rb

@@ -1,3 +1,19 @@
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require "chef/resource"
+
 class Chef
   class Resource
     # Sets the hostname and updates /etc/hosts on *nix systems
@@ -11,23 +27,23 @@ class Chef
       introduced "14.0"
 
       property :hostname, String,
-               description: "The hostname if different than the resource's name",
+               description: "The hostname if different than the resource's name.",
                name_property: true
 
       property :compile_time, [ TrueClass, FalseClass ],
-               description: "Should the resource run at compile time or not.",
+               description: "Whether the resource runs at compile time or not.",
                default: true
 
       property :ipaddress, String,
-               description: "The ip address to use when configuring the hosts file",
+               description: "The ip address to use when configuring the hosts file.",
                default: lazy { node["ipaddress"] }
 
       property :aliases, [ Array, nil ],
-               description: "An array of hostname aliases to use when configuring the hosts file",
+               description: "An array of hostname aliases to use when configuring the hosts file.",
                default: nil
 
       property :windows_reboot, [ TrueClass, FalseClass ],
-               description: "Should Windows nodes be rebooted upon changing the name so it can take effect",
+               description: "Whether Windows nodes will be rebooted upon changing the name so changes can take effect.",
                default: true
 
       action_class do
@@ -64,7 +80,7 @@ class Chef
       end
 
       action :set do
-        description "Sets the node's hostname"
+        description "Sets the node's hostname."
 
         if node["platform_family"] != "windows"
           ohai "reload hostname" do
@@ -116,7 +132,7 @@ class Chef
               # this must come before other methods like /etc/hostname and /etc/sysconfig/network
               declare_resource(:execute, "hostnamectl set-hostname #{new_resource.hostname}") do
                 notifies :reload, "ohai[reload hostname]"
-                not_if { shell_out!("hostnamectl status", { :returns => [0, 1] }).stdout =~ /Static hostname:\s*#{new_resource.hostname}\s*$/ }
+                not_if { shell_out!("hostnamectl status", { returns: [0, 1] }).stdout =~ /Static hostname:\s*#{new_resource.hostname}\s*$/ }
               end
             when ::File.exist?("/etc/hostname")
               # debian family uses /etc/hostname

data/lib/chef/resource/http_request.rb

@@ -32,8 +32,11 @@ class Chef
       default_action :get
       allowed_actions :get, :patch, :put, :post, :delete, :head, :options
 
-      property :url, String, identity: true
-      property :headers, Hash, default: lazy { Hash.new }
+      property :url, String, identity: true,
+               description: "The URL to which an HTTP request is sent."
+
+      property :headers, Hash, default: lazy { Hash.new },
+               description: "A Hash of custom headers."
 
       def initialize(name, run_context = nil)
         super
@@ -45,7 +48,7 @@ class Chef
         set_or_return(
           :message,
           args,
-          :kind_of => Object
+          kind_of: Object
         )
       end
 

data/lib/chef/resource/ifconfig.rb

@@ -35,23 +35,63 @@ class Chef
       default_action :add
       allowed_actions :add, :delete, :enable, :disable
 
-      property :target, String, name_property: true
-      property :hwaddr, String
-      property :mask, String
-      property :family, String, default: "inet"
-      property :inet_addr, String
-      property :bcast, String
-      property :mtu, String
-      property :metric, String
-      property :device, String, identity: true
-      property :onboot, String
-      property :network, String
-      property :bootproto, String
-      property :onparent, String
-      property :ethtool_opts, String
-      property :bonding_opts, String
-      property :master, String
-      property :slave, String
+      property :target, String,
+               name_property: true,
+               description: "The IP address that is to be assigned to the network interface. If not specified we'll use the resource's name."
+
+      property :hwaddr, String,
+               description: "The hardware address for the network interface."
+
+      property :mask, String,
+               description: "The decimal representation of the network mask. For example: 255.255.255.0."
+
+      property :family, String,
+               default: "inet", introduced: "14.0",
+               description: "Networking family option for Debian-based systems. For example: inet or inet6."
+
+      property :inet_addr, String,
+               description: "The Internet host address for the network interface."
+
+      property :bcast, String,
+               description: "The broadcast address for a network interface. On some platforms this property is not set using ifconfig, but instead is added to the startup configuration file for the network interface."
+
+      property :mtu, String,
+               description: "The maximum transmission unit (MTU) for the network interface."
+
+      property :metric, String,
+               description: "The routing metric for the interface."
+
+      property :device, String,
+               identity: true,
+               description: "The network interface to be configured."
+
+      property :onboot, String,
+               description: "Bring up the network interface on boot."
+
+      property :network, String,
+               description: "The address for the network interface."
+
+      property :bootproto, String,
+               description: "The boot protocol used by a network interface."
+
+      property :onparent, String,
+               description: "Bring up the network interface when its parent interface is brought up."
+
+      property :ethtool_opts, String,
+               introduced: "13.4",
+               description: "Options to be passed to ethtool(8). For example: -A eth0 autoneg off rx off tx off."
+
+      property :bonding_opts, String,
+               introduced: "13.4",
+               description: "Bonding options to pass via BONDING_OPTS on RHEL and CentOS. For example: mode=active-backup miimon=100."
+
+      property :master, String,
+               introduced: "13.4",
+               description: "Specifies the channel bonding interface to which the Ethernet interface is linked."
+
+      property :slave, String,
+               introduced: "13.4",
+               description: "When set to yes, this device is controlled by the channel bonding interface that is specified via the master property."
     end
   end
 end

data/lib/chef/resource/ips_package.rb

@@ -30,7 +30,9 @@ class Chef
 
       allowed_actions :install, :remove, :upgrade
 
-      property :accept_license, [TrueClass, FalseClass], default: false, desired_state: false
+      property :accept_license, [TrueClass, FalseClass],
+               default: false, desired_state: false,
+               description: "Accept an end-user license agreement, automatically."
     end
   end
 end

data/lib/chef/resource/kernel_module.rb

@@ -0,0 +1,129 @@
+#
+# Resource:: kernel_module
+#
+# The MIT License (MIT)
+#
+# Copyright 2016-2018, Shopify Inc.
+# Copyright 2018, Chef Software, Inc.
+
+require "chef/resource"
+
+class Chef
+  class Resource
+    class KernelModule < Chef::Resource
+      preview_resource true
+      resource_name :kernel_module
+
+      description "Use the kernel_module resource to manage kernel modules on Linux systems. This resource can load, unload, blacklist, install, and uninstall modules."
+      introduced "14.3"
+
+      property :modname, String,
+               description: "The name of the kernel module.",
+               name_property: true, identity: true
+
+      property :load_dir, String,
+               description: "The directory to load modules from.",
+               default: "/etc/modules-load.d"
+
+      property :unload_dir, String,
+               description: "The modprobe.d directory.",
+               default: "/etc/modprobe.d"
+
+      action :install do
+        description "Load kernel module, and ensure it loads on reboot."
+
+        # load the module first before installing
+        new_resource.run_action(:load)
+
+        directory new_resource.load_dir do
+          recursive true
+        end
+
+        file "#{new_resource.load_dir}/#{new_resource.modname}.conf" do
+          content "#{new_resource.modname}\n"
+          notifies :run, "execute[update initramfs]"
+        end
+
+        execute "update initramfs" do
+          command initramfs_command
+          action :nothing
+        end
+      end
+
+      action :uninstall do
+        description "Unload a kernel module and remove module config, so it doesn't load on reboot."
+
+        file "#{new_resource.load_dir}/#{new_resource.modname}.conf" do
+          action :delete
+          notifies :run, "execute[update initramfs]"
+        end
+
+        file "#{new_resource.unload_dir}/blacklist_#{new_resource.modname}.conf" do
+          action :delete
+          notifies :run, "execute[update initramfs]"
+        end
+
+        execute "update initramfs" do
+          command initramfs_command
+          action :nothing
+        end
+
+        new_resource.run_action(:unload)
+      end
+
+      action :blacklist do
+        description "Blacklist a kernel module."
+
+        file "#{new_resource.unload_dir}/blacklist_#{new_resource.modname}.conf" do
+          content "blacklist #{new_resource.modname}"
+          notifies :run, "execute[update initramfs]"
+        end
+
+        execute "update initramfs" do
+          command initramfs_command
+          action :nothing
+        end
+
+        new_resource.run_action(:unload)
+      end
+
+      action :load do
+        description "Load a kernel module."
+
+        unless module_loaded?
+          converge_by("load kernel module #{new_resource.modname}") do
+            shell_out!("modprobe #{new_resource.modname}")
+          end
+        end
+      end
+
+      action :unload do
+        description "Unload kernel module."
+
+        if module_loaded?
+          converge_by("unload kernel module #{new_resource.modname}") do
+            shell_out!("modprobe -r #{new_resource.modname}")
+          end
+        end
+      end
+
+      action_class do
+        # determine the correct command to regen the initramfs based on platform
+        # @return [String]
+        def initramfs_command
+          if platform_family?("debian")
+            "update-initramfs -u"
+          else
+            "dracut -f"
+          end
+        end
+
+        # see if the module is listed in /proc/modules or not
+        # @return [Boolean]
+        def module_loaded?
+          /^#{new_resource.modname}/.match?(::File.read("/proc/modules"))
+        end
+      end
+    end
+  end
+end

data/lib/chef/resource/launchd.rb

@@ -30,16 +30,39 @@ class Chef
       default_action :create
       allowed_actions :create, :create_if_missing, :delete, :enable, :disable, :restart
 
-      property :label, String, identity: true, name_property: true
-      property :backup, [Integer, FalseClass], desired_state: false
-      property :cookbook, String, desired_state: false
-      property :group, [String, Integer]
-      property :plist_hash, Hash
-      property :mode, [String, Integer]
-      property :owner, [String, Integer]
-      property :path, String
-      property :source, String
-      property :session_type, String
+      property :label, String,
+               identity: true, name_property: true,
+               description: "The unique identifier for the job."
+
+      property :backup, [Integer, FalseClass],
+               desired_state: false,
+               description: "The number of backups to be kept in /var/chef/backup. Set to false to prevent backups from being kept."
+
+      property :cookbook, String,
+               desired_state: false,
+               description: "The name of the cookbook in which the source files are located."
+
+      property :group, [String, Integer],
+               description: "When launchd is run as the root user, the group to run the job as. If the username property is specified and this property is not, this value is set to the default group for the user."
+
+      property :plist_hash, Hash,
+               introduced: "12.19",
+               description: "A Hash of key value pairs used to create the launchd property list."
+
+      property :mode, [String, Integer],
+               description: "A quoted 3-5 character string that defines the octal mode. For example: '755', '0755', or 00755."
+
+      property :owner, [String, Integer],
+               description: "A string or ID that identifies the group owner by user name, including fully qualified user names such as domain_user or user@domain. If this value is not specified, existing owners remain unchanged and new owner assignments use the current user (when necessary)."
+
+      property :path, String,
+               description: "The path to the directory. Using a fully qualified path is recommended, but is not always required."
+
+      property :source, String,
+               description: "The path to the launchd property list."
+
+      property :session_type, String,
+               description: "The type of launchd plist to be created. Possible values: system (default) or user."
 
       # StartCalendarInterval has some gotchas so we coerce it to help sanity
       # check.  According to `man 5 launchd.plist`:
@@ -50,96 +73,180 @@ class Chef
       # this means that an entry like:
       #   { "Hour"=>0, "Weekday"=>"6-7"}
       # will not just run on midnight of Sat and Sun, rather it will run _every_ midnight.
-      property :start_calendar_interval, [Hash, Array], coerce: proc { |type|
-        # Coerce into an array of hashes to make validation easier
-        array = if type.is_a?(Array)
-                  type
-                else
-                  [type]
-                end
-
-        # Check to make sure that our array only has hashes
-        unless array.all? { |obj| obj.is_a?(Hash) }
-          error_msg = "start_calendar_interval must be a single hash or an array of hashes!"
-          raise Chef::Exceptions::ValidationFailed, error_msg
-        end
-
-        # Make sure the hashes don't have any incorrect keys/values
-        array.each do |entry|
-          allowed_keys = %w{Minute Hour Day Weekday Month}
-          unless entry.keys.all? { |key| allowed_keys.include?(key) }
-            failed_keys = entry.keys.reject { |k| allowed_keys.include?(k) }.join(", ")
-            error_msg = "The following key(s): #{failed_keys} are invalid for start_calendar_interval, must be one of: #{allowed_keys.join(", ")}"
-            raise Chef::Exceptions::ValidationFailed, error_msg
-          end
-
-          unless entry.values.all? { |val| val.is_a?(Integer) }
-            failed_values = entry.values.reject { |val| val.is_a?(Integer) }.join(", ")
-            error_msg = "Invalid value(s) (#{failed_values}) for start_calendar_interval item.  Values must be integers!"
-            raise Chef::Exceptions::ValidationFailed, error_msg
-          end
-        end
-
-        # Don't return array if we only have one entry
-        if array.size == 1
-          array.first
-        else
-          array
-        end
-      }
-
-      property :type, String, default: "daemon", coerce: proc { |type|
-        type = type ? type.downcase : "daemon"
-        types = %w{daemon agent}
-
-        unless types.include?(type)
-          error_msg = "type must be daemon or agent"
-          raise Chef::Exceptions::ValidationFailed, error_msg
-        end
-        type
-      }
+      property :start_calendar_interval, [Hash, Array],
+               description: "A Hash (similar to crontab) that defines the calendar frequency at which a job is started or an Array.",
+               coerce: proc { |type|
+                         # Coerce into an array of hashes to make validation easier
+                         array = if type.is_a?(Array)
+                                   type
+                                 else
+                                   [type]
+                                 end
+
+                         # Check to make sure that our array only has hashes
+                         unless array.all? { |obj| obj.is_a?(Hash) }
+                           error_msg = "start_calendar_interval must be a single hash or an array of hashes!"
+                           raise Chef::Exceptions::ValidationFailed, error_msg
+                         end
+
+                         # Make sure the hashes don't have any incorrect keys/values
+                         array.each do |entry|
+                           allowed_keys = %w{Minute Hour Day Weekday Month}
+                           unless entry.keys.all? { |key| allowed_keys.include?(key) }
+                             failed_keys = entry.keys.reject { |k| allowed_keys.include?(k) }.join(", ")
+                             error_msg = "The following key(s): #{failed_keys} are invalid for start_calendar_interval, must be one of: #{allowed_keys.join(", ")}"
+                             raise Chef::Exceptions::ValidationFailed, error_msg
+                           end
+
+                           unless entry.values.all? { |val| val.is_a?(Integer) }
+                             failed_values = entry.values.reject { |val| val.is_a?(Integer) }.join(", ")
+                             error_msg = "Invalid value(s) (#{failed_values}) for start_calendar_interval item.  Values must be integers!"
+                             raise Chef::Exceptions::ValidationFailed, error_msg
+                           end
+                         end
+
+                         # Don't return array if we only have one entry
+                         if array.size == 1
+                           array.first
+                         else
+                           array
+                         end
+                       }
+
+      property :type, String,
+               description: "The type of resource. Possible values: daemon (default), agent.",
+               default: "daemon", coerce: proc { |type|
+                                            type = type ? type.downcase : "daemon"
+                                            types = %w{daemon agent}
+
+                                            unless types.include?(type)
+                                              error_msg = "type must be daemon or agent"
+                                              raise Chef::Exceptions::ValidationFailed, error_msg
+                                            end
+                                            type
+                                          }
 
       # Apple LaunchD Keys
-      property :abandon_process_group, [ TrueClass, FalseClass ]
-      property :debug, [ TrueClass, FalseClass ]
-      property :disabled, [ TrueClass, FalseClass ], default: false
-      property :enable_globbing, [ TrueClass, FalseClass ]
-      property :enable_transactions, [ TrueClass, FalseClass ]
-      property :environment_variables, Hash
-      property :exit_timeout, Integer
-      property :hard_resource_limits, Hash
-      property :inetd_compatibility, Hash
-      property :init_groups, [ TrueClass, FalseClass ]
-      property :keep_alive, [ TrueClass, FalseClass, Hash ]
-      property :launch_only_once, [ TrueClass, FalseClass ]
-      property :ld_group, String
-      property :limit_load_from_hosts, Array
-      property :limit_load_to_hosts, Array
-      property :limit_load_to_session_type, [ Array, String ]
-      property :low_priority_io, [ TrueClass, FalseClass ]
-      property :mach_services, Hash
-      property :nice, Integer
-      property :on_demand, [ TrueClass, FalseClass ]
-      property :process_type, String
-      property :program, String
-      property :program_arguments, Array
-      property :queue_directories, Array
-      property :root_directory, String
-      property :run_at_load, [ TrueClass, FalseClass ]
-      property :sockets, Hash
-      property :soft_resource_limits, Array
-      property :standard_error_path, String
-      property :standard_in_path, String
-      property :standard_out_path, String
-      property :start_interval, Integer
-      property :start_on_mount, [ TrueClass, FalseClass ]
-      property :throttle_interval, Integer
-      property :time_out, Integer
-      property :umask, Integer
-      property :username, String
-      property :wait_for_debugger, [ TrueClass, FalseClass ]
-      property :watch_paths, Array
-      property :working_directory, String
+      property :abandon_process_group, [ TrueClass, FalseClass ],
+               description: "If a job dies, all remaining processes with the same process ID may be kept running. Set to true to kill all remaining processes."
+
+      property :debug, [ TrueClass, FalseClass ],
+               description: "Sets the log mask to LOG_DEBUG for this job."
+
+      property :disabled, [ TrueClass, FalseClass ], default: false,
+               description: "Hints to launchctl to not submit this job to launchd."
+
+      property :enable_globbing, [ TrueClass, FalseClass ],
+               description: "Update program arguments before invocation."
+
+      property :enable_transactions, [ TrueClass, FalseClass ],
+               description: "Track in-progress transactions; if none, then send the SIGKILL signal."
+
+      property :environment_variables, Hash,
+               description: "Additional environment variables to set before running a job."
+
+      property :exit_timeout, Integer,
+               description: "The amount of time (in seconds) launchd waits before sending a SIGKILL signal."
+
+      property :hard_resource_limits, Hash,
+               description: "A Hash of resource limits to be imposed on a job."
+
+      property :inetd_compatibility, Hash,
+               description: "Specifies if a daemon expects to be run as if it were launched from inetd. Set to wait => true to pass standard input, output, and error file descriptors. Set to wait => false to call the accept system call on behalf of the job, and then pass standard input, output, and error file descriptors."
+
+      property :init_groups, [ TrueClass, FalseClass ],
+               description: "Specify if initgroups is called before running a job."
+
+      property :keep_alive, [ TrueClass, FalseClass, Hash ],
+               introduced: "12.14",
+               description: "Keep a job running continuously (true) or allow demand and conditions on the node to determine if the job keeps running (false)."
+
+      property :launch_only_once, [ TrueClass, FalseClass ],
+               description: "Specify if a job can be run only one time. Set this value to true if a job cannot be restarted without a full machine reboot."
+
+      property :ld_group, String,
+               description: "The group name."
+
+      property :limit_load_from_hosts, Array,
+               description: "An array of hosts to which this configuration file does not apply, i.e. 'apply this configuration file to all hosts not specified in this array'."
+
+      property :limit_load_to_hosts, Array,
+               description: "An array of hosts to which this configuration file applies."
+
+      property :limit_load_to_session_type, [ Array, String ],
+               description: "The session type(s) to which this configuration file applies."
+
+      property :low_priority_io, [ TrueClass, FalseClass ],
+               description: "Specify if the kernel on the node should consider this daemon to be low priority during file system I/O."
+
+      property :mach_services, Hash,
+               description: "Specify services to be registered with the bootstrap subsystem."
+
+      property :nice, Integer,
+               description: "The program scheduling priority value in the range -20 to 20."
+
+      property :on_demand, [ TrueClass, FalseClass ],
+               description: "Keep a job alive. Only applies to macOS version 10.4 (and earlier); use keep_alive instead for newer versions."
+
+      property :process_type, String,
+               description: "The intended purpose of the job: Adaptive, Background, Interactive, or Standard."
+
+      property :program, String,
+               description: "The first argument of execvp, typically the file name associated with the file to be executed. This value must be specified if program_arguments is not specified, and vice-versa."
+
+      property :program_arguments, Array,
+               description: "The second argument of execvp. If program is not specified, this property must be specified and will be handled as if it were the first argument."
+
+      property :queue_directories, Array,
+               description: "An array of non-empty directories which, if any are modified, will cause a job to be started."
+
+      property :root_directory, String,
+               description: "chroot to this directory, and then run the job."
+
+      property :run_at_load, [ TrueClass, FalseClass ],
+               description: "Launch a job once (at the time it is loaded)."
+
+      property :sockets, Hash,
+               description: "A Hash of on-demand sockets that notify launchd when a job should be run."
+
+      property :soft_resource_limits, Array,
+               description: "A Hash of resource limits to be imposed on a job."
+
+      property :standard_error_path, String,
+               description: "The file to which standard error (stderr) is sent."
+
+      property :standard_in_path, String,
+               description: "The file to which standard input (stdin) is sent."
+
+      property :standard_out_path, String,
+               description: "The file to which standard output (stdout) is sent."
+
+      property :start_interval, Integer,
+               description: "The frequency (in seconds) at which a job is started."
+
+      property :start_on_mount, [ TrueClass, FalseClass ],
+               description: "Start a job every time a file system is mounted."
+
+      property :throttle_interval, Integer,
+               description: "The frequency (in seconds) at which jobs are allowed to spawn."
+
+      property :time_out, Integer,
+               description: "The amount of time (in seconds) a job may be idle before it times out. If no value is specified, the default timeout value for launchd will be used."
+
+      property :umask, Integer,
+               description: "A decimal value to pass to umask before running a job."
+
+      property :username, String,
+               description: "When launchd is run as the root user, the user to run the job as."
+
+      property :wait_for_debugger, [ TrueClass, FalseClass ],
+               description: "Specify if launchd has a job wait for a debugger to attach before executing code."
+
+      property :watch_paths, Array,
+               description: "An array of paths which, if any are modified, will cause a job to be started."
+
+      property :working_directory, String,
+               description: "Chdir to this directory, and then run the job."
     end
   end
 end