chef 15.0.300-universal-mingw32 → 15.1.36-universal-mingw32

data/lib/chef/resource/windows_uac.rb

@@ -1,94 +1,94 @@
-#
-# Author:: Tim Smith (<tsmith@chef.io>)
-# Copyright:: 2019, Chef Software, Inc.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-
-require_relative "../resource"
-
-class Chef
-  class Resource
-    class WindowsUac < Chef::Resource
-      resource_name :windows_uac
-      provides :windows_uac
-
-      description 'The windows_uac resource configures UAC on Windows hosts by setting registry keys at \'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\''
-      introduced "15.0"
-
-      # https://docs.microsoft.com/en-us/windows/security/identity-protection/user-account-control/user-account-control-group-policy-and-registry-key-settings#user-account-control-virtualize-file-and-registry-write-failures-to-per-user-locations
-      property :enable_uac, [TrueClass, FalseClass],
-               description: 'Enable or disable UAC Admin Approval Mode. If this is changed a system restart is required. Sets HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA.',
-               default: true # EnableLUA
-
-      property :require_signed_binaries, [TrueClass, FalseClass],
-               description: 'Only elevate executables that are signed and validated. Sets HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA\ValidateAdminCodeSignatures.',
-               default: false
-
-      property :prompt_on_secure_desktop, [TrueClass, FalseClass],
-               description: 'Switch to the secure desktop when prompting for elevation. Sets HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA\PromptOnSecureDesktop.',
-               default: true
-
-      property :detect_installers, [TrueClass, FalseClass],
-               description: 'Detect application installations and prompt for elevation. Sets HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA\EnableInstallerDetection.'
-
-      property :consent_behavior_admins, Symbol,
-               description: 'Behavior of the elevation prompt for administrators in Admin Approval Mode. Sets HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA\ConsentPromptBehaviorAdmin.',
-               equal_to: [:no_prompt, :secure_prompt_for_creds, :secure_prompt_for_consent, :prompt_for_creds, :prompt_for_consent, :prompt_for_consent_non_windows_binaries],
-               default: :prompt_for_consent_non_windows_binaries
-
-      property :consent_behavior_users, Symbol,
-               description: 'Behavior of the elevation prompt for standard users. Sets HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA\ConsentPromptBehaviorUser.',
-               equal_to: [:auto_deny, :secure_prompt_for_creds, :prompt_for_creds],
-               default: :prompt_for_creds
-
-      action :configure do
-        description 'Configures UAC by setting registry keys at \'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\''
-
-        registry_key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System' do
-          values [{ name: "EnableLUA", type: :dword, data: bool_to_reg(new_resource.enable_uac) },
-                  { name: "ValidateAdminCodeSignatures", type: :dword, data: bool_to_reg(new_resource.require_signed_binaries) },
-                  { name: "PromptOnSecureDesktop", type: :dword, data: bool_to_reg(new_resource.prompt_on_secure_desktop) },
-                  { name: "ConsentPromptBehaviorAdmin", type: :dword, data: consent_behavior_admins_symbol_to_reg(new_resource.consent_behavior_admins) },
-                  { name: "ConsentPromptBehaviorUser", type: :dword, data: consent_behavior_users_symbol_to_reg(new_resource.consent_behavior_users) },
-                  { name: "EnableInstallerDetection", type: :dword, data: bool_to_reg(new_resource.detect_installers) },
-               ]
-          action :create
-        end
-      end
-
-      action_class do
-        # converts a Ruby true/false to a 1 or 0
-        #
-        # @return [Integer] 1:true, 0: false
-        def bool_to_reg(bool)
-          bool ? 1 : 0
-        end
-
-        # converts the symbols we use in the consent_behavior_admins property into numbers 0-5 based on their array index
-        #
-        # @return [Integer]
-        def consent_behavior_admins_symbol_to_reg(sym)
-          [:no_prompt, :secure_prompt_for_creds, :secure_prompt_for_consent, :prompt_for_creds, :prompt_for_consent, :prompt_for_consent_non_windows_binaries].index(sym)
-        end
-
-        # converts the symbols we use in the consent_behavior_users property into numbers 0-2 based on their array index
-        #
-        # @return [Integer]
-        def consent_behavior_users_symbol_to_reg(sym)
-          [:auto_deny, :secure_prompt_for_creds, :prompt_for_creds].index(sym)
-        end
-      end
-    end
-  end
-end
+#
+# Author:: Tim Smith (<tsmith@chef.io>)
+# Copyright:: 2019, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require_relative "../resource"
+
+class Chef
+  class Resource
+    class WindowsUac < Chef::Resource
+      resource_name :windows_uac
+      provides :windows_uac
+
+      description 'The windows_uac resource configures UAC on Windows hosts by setting registry keys at \'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\''
+      introduced "15.0"
+
+      # https://docs.microsoft.com/en-us/windows/security/identity-protection/user-account-control/user-account-control-group-policy-and-registry-key-settings#user-account-control-virtualize-file-and-registry-write-failures-to-per-user-locations
+      property :enable_uac, [TrueClass, FalseClass],
+               description: 'Enable or disable UAC Admin Approval Mode. If this is changed a system restart is required. Sets HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA.',
+               default: true # EnableLUA
+
+      property :require_signed_binaries, [TrueClass, FalseClass],
+               description: 'Only elevate executables that are signed and validated. Sets HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA\ValidateAdminCodeSignatures.',
+               default: false
+
+      property :prompt_on_secure_desktop, [TrueClass, FalseClass],
+               description: 'Switch to the secure desktop when prompting for elevation. Sets HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA\PromptOnSecureDesktop.',
+               default: true
+
+      property :detect_installers, [TrueClass, FalseClass],
+               description: 'Detect application installations and prompt for elevation. Sets HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA\EnableInstallerDetection.'
+
+      property :consent_behavior_admins, Symbol,
+               description: 'Behavior of the elevation prompt for administrators in Admin Approval Mode. Sets HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA\ConsentPromptBehaviorAdmin.',
+               equal_to: [:no_prompt, :secure_prompt_for_creds, :secure_prompt_for_consent, :prompt_for_creds, :prompt_for_consent, :prompt_for_consent_non_windows_binaries],
+               default: :prompt_for_consent_non_windows_binaries
+
+      property :consent_behavior_users, Symbol,
+               description: 'Behavior of the elevation prompt for standard users. Sets HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA\ConsentPromptBehaviorUser.',
+               equal_to: [:auto_deny, :secure_prompt_for_creds, :prompt_for_creds],
+               default: :prompt_for_creds
+
+      action :configure do
+        description 'Configures UAC by setting registry keys at \'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\''
+
+        registry_key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System' do
+          values [{ name: "EnableLUA", type: :dword, data: bool_to_reg(new_resource.enable_uac) },
+                  { name: "ValidateAdminCodeSignatures", type: :dword, data: bool_to_reg(new_resource.require_signed_binaries) },
+                  { name: "PromptOnSecureDesktop", type: :dword, data: bool_to_reg(new_resource.prompt_on_secure_desktop) },
+                  { name: "ConsentPromptBehaviorAdmin", type: :dword, data: consent_behavior_admins_symbol_to_reg(new_resource.consent_behavior_admins) },
+                  { name: "ConsentPromptBehaviorUser", type: :dword, data: consent_behavior_users_symbol_to_reg(new_resource.consent_behavior_users) },
+                  { name: "EnableInstallerDetection", type: :dword, data: bool_to_reg(new_resource.detect_installers) },
+               ]
+          action :create
+        end
+      end
+
+      action_class do
+        # converts a Ruby true/false to a 1 or 0
+        #
+        # @return [Integer] 1:true, 0: false
+        def bool_to_reg(bool)
+          bool ? 1 : 0
+        end
+
+        # converts the symbols we use in the consent_behavior_admins property into numbers 0-5 based on their array index
+        #
+        # @return [Integer]
+        def consent_behavior_admins_symbol_to_reg(sym)
+          [:no_prompt, :secure_prompt_for_creds, :secure_prompt_for_consent, :prompt_for_creds, :prompt_for_consent, :prompt_for_consent_non_windows_binaries].index(sym)
+        end
+
+        # converts the symbols we use in the consent_behavior_users property into numbers 0-2 based on their array index
+        #
+        # @return [Integer]
+        def consent_behavior_users_symbol_to_reg(sym)
+          [:auto_deny, :secure_prompt_for_creds, :prompt_for_creds].index(sym)
+        end
+      end
+    end
+  end
+end

data/lib/chef/resource/windows_workgroup.rb

@@ -1,112 +1,113 @@
-#
-# Author:: Derek Groh (<derekgroh@github.io>)
-# Copyright:: 2018, Derek Groh
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-
-require_relative "../resource"
-require_relative "../mixin/powershell_out"
-
-class Chef
-  class Resource
-    class WindowsWorkgroup < Chef::Resource
-      resource_name :windows_workgroup
-      provides :windows_workgroup
-
-      include Chef::Mixin::PowershellOut
-
-      description "Use the windows_workgroup resource to join or change the workgroup of a Windows host."
-      introduced "14.5"
-
-      property :workgroup_name, String,
-               description: "An optional property to set the workgroup name if it differs from the resource block's name.",
-               validation_message: "The 'workgroup_name' property must not contain spaces.",
-               regex: /^\S*$/, # no spaces
-               name_property: true
-
-      property :user, String,
-               description: "The local administrator user to use to change the workgroup. Required if using the password property.",
-               desired_state: false
-
-      property :password, String,
-               description: "The password for the local administrator user. Required if using the user property.",
-               desired_state: false
-
-      property :reboot, Symbol,
-               equal_to: [:never, :request_reboot, :reboot_now],
-               validation_message: "The reboot property accepts :immediate (reboot as soon as the resource completes), :delayed (reboot once the Chef run completes), and :never (Don't reboot)",
-               description: "Controls the system reboot behavior post workgroup joining. Reboot immediately, after the Chef run completes, or never. Note that a reboot is necessary for changes to take effect.",
-               coerce: proc { |x| clarify_reboot(x) },
-               default: :immediate, desired_state: false
-
-      # This resource historically took `:immediate` and `:delayed` as arguments to the reboot property but then
-      # tried to shove that straight to the `reboot` resource which objected strenuously. We need to convert these
-      # legacy actions into actual reboot actions
-      #
-      # @return [Symbol] chef reboot resource action
-      def clarify_reboot(reboot_action)
-        case reboot_action
-        when :immediate
-          :reboot_now
-        when :delayed
-          :request_reboot
-        else
-          reboot_action
-        end
-      end
-
-      # define this again so we can default it to true. Otherwise failures print the password
-      property :sensitive, [TrueClass, FalseClass],
-               default: true, desired_state: false
-
-      action :join do
-        description "Update the workgroup."
-
-        unless workgroup_member?
-          converge_by("join workstation workgroup #{new_resource.workgroup_name}") do
-            ps_run = powershell_out(join_command)
-            raise "Failed to join the workgroup #{new_resource.workgroup_name}: #{ps_run.stderr}}" if ps_run.error?
-
-            unless new_resource.reboot == :never
-              reboot "Reboot to join workgroup #{new_resource.workgroup_name}" do
-                action new_resource.reboot
-                reason "Reboot to join workgroup #{new_resource.workgroup_name}"
-              end
-            end
-          end
-        end
-      end
-
-      action_class do
-        # return [String] the appropriate PS command to joint the workgroup
-        def join_command
-          cmd = ""
-          cmd << "$pswd = ConvertTo-SecureString \'#{new_resource.password}\' -AsPlainText -Force;" if new_resource.password
-          cmd << "$credential = New-Object System.Management.Automation.PSCredential (\"#{new_resource.user}\",$pswd);" if new_resource.password
-          cmd << "Add-Computer -WorkgroupName #{new_resource.workgroup_name}"
-          cmd << " -Credential $credential" if new_resource.password
-          cmd << " -Force"
-          cmd
-        end
-
-        # @return [Boolean] is the node a member of the workgroup specified in the resource
-        def workgroup_member?
-          node_workgroup = powershell_out!("(Get-WmiObject -Class Win32_ComputerSystem).Workgroup")
-          raise "Failed to determine if system already a member of workgroup #{new_resource.workgroup_name}" if node_workgroup.error?
-          node_workgroup.stdout.downcase.strip == new_resource.workgroup_name.downcase
-        end
-      end
-    end
-  end
-end
+#
+# Author:: Derek Groh (<derekgroh@github.io>)
+# Copyright:: 2018, Derek Groh
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require_relative "../resource"
+require_relative "../mixin/powershell_out"
+require_relative "../dist"
+
+class Chef
+  class Resource
+    class WindowsWorkgroup < Chef::Resource
+      resource_name :windows_workgroup
+      provides :windows_workgroup
+
+      include Chef::Mixin::PowershellOut
+
+      description "Use the windows_workgroup resource to join or change the workgroup of a Windows host."
+      introduced "14.5"
+
+      property :workgroup_name, String,
+               description: "An optional property to set the workgroup name if it differs from the resource block's name.",
+               validation_message: "The 'workgroup_name' property must not contain spaces.",
+               regex: /^\S*$/, # no spaces
+               name_property: true
+
+      property :user, String,
+               description: "The local administrator user to use to change the workgroup. Required if using the password property.",
+               desired_state: false
+
+      property :password, String,
+               description: "The password for the local administrator user. Required if using the user property.",
+               desired_state: false
+
+      property :reboot, Symbol,
+               equal_to: [:never, :request_reboot, :reboot_now],
+               validation_message: "The reboot property accepts :immediate (reboot as soon as the resource completes), :delayed (reboot once the #{Chef::Dist::PRODUCT} run completes), and :never (Don't reboot)",
+               description: "Controls the system reboot behavior post workgroup joining. Reboot immediately, after the #{Chef::Dist::PRODUCT} run completes, or never. Note that a reboot is necessary for changes to take effect.",
+               coerce: proc { |x| clarify_reboot(x) },
+               default: :immediate, desired_state: false
+
+      # This resource historically took `:immediate` and `:delayed` as arguments to the reboot property but then
+      # tried to shove that straight to the `reboot` resource which objected strenuously. We need to convert these
+      # legacy actions into actual reboot actions
+      #
+      # @return [Symbol] chef reboot resource action
+      def clarify_reboot(reboot_action)
+        case reboot_action
+        when :immediate
+          :reboot_now
+        when :delayed
+          :request_reboot
+        else
+          reboot_action
+        end
+      end
+
+      # define this again so we can default it to true. Otherwise failures print the password
+      property :sensitive, [TrueClass, FalseClass],
+               default: true, desired_state: false
+
+      action :join do
+        description "Update the workgroup."
+
+        unless workgroup_member?
+          converge_by("join workstation workgroup #{new_resource.workgroup_name}") do
+            ps_run = powershell_out(join_command)
+            raise "Failed to join the workgroup #{new_resource.workgroup_name}: #{ps_run.stderr}}" if ps_run.error?
+
+            unless new_resource.reboot == :never
+              reboot "Reboot to join workgroup #{new_resource.workgroup_name}" do
+                action new_resource.reboot
+                reason "Reboot to join workgroup #{new_resource.workgroup_name}"
+              end
+            end
+          end
+        end
+      end
+
+      action_class do
+        # return [String] the appropriate PS command to joint the workgroup
+        def join_command
+          cmd = ""
+          cmd << "$pswd = ConvertTo-SecureString \'#{new_resource.password}\' -AsPlainText -Force;" if new_resource.password
+          cmd << "$credential = New-Object System.Management.Automation.PSCredential (\"#{new_resource.user}\",$pswd);" if new_resource.password
+          cmd << "Add-Computer -WorkgroupName #{new_resource.workgroup_name}"
+          cmd << " -Credential $credential" if new_resource.password
+          cmd << " -Force"
+          cmd
+        end
+
+        # @return [Boolean] is the node a member of the workgroup specified in the resource
+        def workgroup_member?
+          node_workgroup = powershell_out!("(Get-WmiObject -Class Win32_ComputerSystem).Workgroup")
+          raise "Failed to determine if system already a member of workgroup #{new_resource.workgroup_name}" if node_workgroup.error?
+          node_workgroup.stdout.downcase.strip == new_resource.workgroup_name.downcase
+        end
+      end
+    end
+  end
+end

data/lib/chef/resource/yum_package.rb

@@ -1,79 +1,79 @@
-#
-# Author:: AJ Christensen (<aj@chef.io>)
-# Copyright:: Copyright 2008-2018, Chef Software Inc.
-# License:: Apache License, Version 2.0
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-#
-
-require_relative "package"
-require_relative "../dist"
-
-class Chef
-  class Resource
-    class YumPackage < Chef::Resource::Package
-      resource_name :yum_package
-      provides :package, platform_family: %w{rhel fedora amazon}
-
-      description "Use the yum_package resource to install, upgrade, and remove packages with Yum"\
-                  " for the Red Hat and CentOS platforms. The yum_package resource is able to resolve"\
-                  " provides data for packages much like Yum can do when it is run from the command line."\
-                  " This allows a variety of options for installing packages, like minimum versions,"\
-                  " virtual provides, and library names."
-
-      # XXX: the coercions here are due to the provider promiscuously updating the properties on the
-      # new_resource which causes immutable modification exceptions when passed an immutable node array.
-      #
-      # <lecture>
-      # THIS is why updating the new_resource in a provider is so terrible, and is equivalent to methods scribbling over
-      # its own arguments as unintended side-effects (and why functional languages that don't allow modifcations
-      # of variables eliminate entire classes of bugs).
-      # </lecture>
-      property :package_name, [ String, Array ],
-               description: "One of the following: the name of a package, the name of a package and its architecture, the name of a dependency.",
-               identity: true, coerce: proc { |x| x.is_a?(Array) ? x.to_a : x }
-
-      property :version, [ String, Array ],
-               description: "The version of a package to be installed or upgraded. This property is ignored when using the ':upgrade' action.",
-               coerce: proc { |x| x.is_a?(Array) ? x.to_a : x }
-
-      property :arch, [ String, Array ],
-               description: "The architecture of the package to be installed or upgraded. This value can also be passed as part of the package name.",
-               coerce: proc { |x| x.is_a?(Array) ? x.to_a : x }
-
-      property :flush_cache, Hash,
-               description: "Flush the in-memory cache before or after a Yum operation that installs, upgrades, or removes a package. Accepts a Hash in the form: { :before => true/false, :after => true/false } or an Array in the form [ :before, :after ].\nYum automatically synchronizes remote metadata to a local cache. The #{Chef::Dist::CLIENT} creates a copy of the local cache, and then stores it in-memory during the #{Chef::Dist::CLIENT} run. The in-memory cache allows packages to be installed during the #{Chef::Dist::CLIENT} run without the need to continue synchronizing the remote metadata to the local cache while the #{Chef::Dist::CLIENT} run is in-progress.",
-               default: { before: false, after: false },
-               coerce: proc { |v|
-                 if v.is_a?(Hash)
-                   v
-                 elsif v.is_a?(Array)
-                   v.each_with_object({}) { |arg, obj| obj[arg] = true }
-                 elsif v.is_a?(TrueClass) || v.is_a?(FalseClass)
-                   { before: v, after: v }
-                 elsif v == :before
-                   { before: true, after: false }
-                 elsif v == :after
-                   { after: true, before: false }
-                 end
-               }
-
-      property :allow_downgrade, [ true, false ],
-               description: "Downgrade a package to satisfy requested version requirements.",
-               default: true,
-               desired_state: false
-
-      property :yum_binary, String
-    end
-  end
-end
+#
+# Author:: AJ Christensen (<aj@chef.io>)
+# Copyright:: Copyright 2008-2018, Chef Software Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require_relative "package"
+require_relative "../dist"
+
+class Chef
+  class Resource
+    class YumPackage < Chef::Resource::Package
+      resource_name :yum_package
+      provides :package, platform_family: %w{rhel fedora amazon}
+
+      description "Use the yum_package resource to install, upgrade, and remove packages with Yum"\
+                  " for the Red Hat and CentOS platforms. The yum_package resource is able to resolve"\
+                  " provides data for packages much like Yum can do when it is run from the command line."\
+                  " This allows a variety of options for installing packages, like minimum versions,"\
+                  " virtual provides, and library names."
+
+      # XXX: the coercions here are due to the provider promiscuously updating the properties on the
+      # new_resource which causes immutable modification exceptions when passed an immutable node array.
+      #
+      # <lecture>
+      # THIS is why updating the new_resource in a provider is so terrible, and is equivalent to methods scribbling over
+      # its own arguments as unintended side-effects (and why functional languages that don't allow modifcations
+      # of variables eliminate entire classes of bugs).
+      # </lecture>
+      property :package_name, [ String, Array ],
+               description: "One of the following: the name of a package, the name of a package and its architecture, the name of a dependency.",
+               identity: true, coerce: proc { |x| x.is_a?(Array) ? x.to_a : x }
+
+      property :version, [ String, Array ],
+               description: "The version of a package to be installed or upgraded. This property is ignored when using the ':upgrade' action.",
+               coerce: proc { |x| x.is_a?(Array) ? x.to_a : x }
+
+      property :arch, [ String, Array ],
+               description: "The architecture of the package to be installed or upgraded. This value can also be passed as part of the package name.",
+               coerce: proc { |x| x.is_a?(Array) ? x.to_a : x }
+
+      property :flush_cache, Hash,
+               description: "Flush the in-memory cache before or after a Yum operation that installs, upgrades, or removes a package. Accepts a Hash in the form: { :before => true/false, :after => true/false } or an Array in the form [ :before, :after ].\nYum automatically synchronizes remote metadata to a local cache. The #{Chef::Dist::CLIENT} creates a copy of the local cache, and then stores it in-memory during the #{Chef::Dist::CLIENT} run. The in-memory cache allows packages to be installed during the #{Chef::Dist::CLIENT} run without the need to continue synchronizing the remote metadata to the local cache while the #{Chef::Dist::CLIENT} run is in-progress.",
+               default: { before: false, after: false },
+               coerce: proc { |v|
+                 if v.is_a?(Hash)
+                   v
+                 elsif v.is_a?(Array)
+                   v.each_with_object({}) { |arg, obj| obj[arg] = true }
+                 elsif v.is_a?(TrueClass) || v.is_a?(FalseClass)
+                   { before: v, after: v }
+                 elsif v == :before
+                   { before: true, after: false }
+                 elsif v == :after
+                   { after: true, before: false }
+                 end
+               }
+
+      property :allow_downgrade, [ true, false ],
+               description: "Downgrade a package to satisfy requested version requirements.",
+               default: true,
+               desired_state: false
+
+      property :yum_binary, String
+    end
+  end
+end