chef 16.2.44 → 16.4.35

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (385) hide show
  1. checksums.yaml +4 -4
  2. data/Gemfile +4 -4
  3. data/Rakefile +3 -16
  4. data/chef-universal-mingw32.gemspec +2 -3
  5. data/chef.gemspec +4 -3
  6. data/lib/chef/action_collection.rb +4 -0
  7. data/lib/chef/api_client/registration.rb +8 -8
  8. data/lib/chef/application.rb +18 -1
  9. data/lib/chef/application/apply.rb +6 -5
  10. data/lib/chef/application/base.rb +2 -0
  11. data/lib/chef/application/client.rb +3 -0
  12. data/lib/chef/application/windows_service.rb +27 -27
  13. data/lib/chef/{whitelist.rb → attribute_allowlist.rb} +11 -11
  14. data/lib/chef/{blacklist.rb → attribute_blocklist.rb} +9 -9
  15. data/lib/chef/chef_class.rb +0 -1
  16. data/lib/chef/chef_fs/chef_fs_data_store.rb +54 -54
  17. data/lib/chef/chef_fs/data_handler/organization_data_handler.rb +1 -2
  18. data/lib/chef/chef_fs/file_system/chef_server/acl_entry.rb +10 -10
  19. data/lib/chef/chef_fs/file_system/chef_server/cookbook_file.rb +2 -2
  20. data/lib/chef/chef_fs/file_system/chef_server/cookbooks_dir.rb +1 -5
  21. data/lib/chef/chef_fs/file_system/chef_server/organization_invites_entry.rb +8 -8
  22. data/lib/chef/chef_fs/file_system/chef_server/organization_members_entry.rb +8 -8
  23. data/lib/chef/chef_fs/file_system/repository/base_file.rb +1 -0
  24. data/lib/chef/chef_fs/file_system/repository/chef_repository_file_system_cookbook_dir.rb +2 -2
  25. data/lib/chef/chef_fs/file_system/repository/chef_repository_file_system_cookbook_entry.rb +1 -1
  26. data/lib/chef/chef_fs/file_system/repository/chef_repository_file_system_root_dir.rb +18 -18
  27. data/lib/chef/chef_fs/file_system/repository/directory.rb +1 -1
  28. data/lib/chef/chef_fs/file_system/repository/file_system_entry.rb +1 -1
  29. data/lib/chef/chef_fs/parallelizer/parallel_enumerable.rb +1 -1
  30. data/lib/chef/client.rb +14 -14
  31. data/lib/chef/cookbook/remote_file_vendor.rb +1 -3
  32. data/lib/chef/cookbook/syntax_check.rb +1 -2
  33. data/lib/chef/cookbook_loader.rb +15 -29
  34. data/lib/chef/data_bag.rb +1 -2
  35. data/lib/chef/data_collector/run_end_message.rb +11 -1
  36. data/lib/chef/deprecated.rb +8 -0
  37. data/lib/chef/digester.rb +3 -2
  38. data/lib/chef/dsl/platform_introspection.rb +9 -7
  39. data/lib/chef/encrypted_data_bag_item/decryptor.rb +1 -1
  40. data/lib/chef/environment.rb +3 -4
  41. data/lib/chef/exceptions.rb +4 -1
  42. data/lib/chef/file_access_control/windows.rb +2 -2
  43. data/lib/chef/file_content_management/deploy/mv_unix.rb +1 -1
  44. data/lib/chef/file_content_management/tempfile.rb +9 -9
  45. data/lib/chef/handler.rb +2 -0
  46. data/lib/chef/http.rb +12 -12
  47. data/lib/chef/http/authenticator.rb +3 -1
  48. data/lib/chef/json_compat.rb +1 -1
  49. data/lib/chef/knife.rb +4 -4
  50. data/lib/chef/knife/bootstrap.rb +18 -15
  51. data/lib/chef/knife/bootstrap/train_connector.rb +1 -0
  52. data/lib/chef/knife/config_get.rb +1 -0
  53. data/lib/chef/knife/config_list_profiles.rb +4 -1
  54. data/lib/chef/knife/config_use_profile.rb +15 -5
  55. data/lib/chef/knife/configure.rb +1 -1
  56. data/lib/chef/knife/cookbook_download.rb +1 -1
  57. data/lib/chef/knife/cookbook_metadata.rb +1 -1
  58. data/lib/chef/knife/cookbook_upload.rb +29 -37
  59. data/lib/chef/knife/core/bootstrap_context.rb +1 -1
  60. data/lib/chef/knife/core/gem_glob_loader.rb +1 -1
  61. data/lib/chef/knife/core/generic_presenter.rb +1 -1
  62. data/lib/chef/knife/core/hashed_command_loader.rb +3 -2
  63. data/lib/chef/knife/core/subcommand_loader.rb +20 -1
  64. data/lib/chef/knife/core/ui.rb +8 -2
  65. data/lib/chef/knife/core/windows_bootstrap_context.rb +33 -26
  66. data/lib/chef/knife/delete.rb +15 -15
  67. data/lib/chef/knife/exec.rb +2 -2
  68. data/lib/chef/knife/rehash.rb +3 -21
  69. data/lib/chef/knife/ssh.rb +11 -7
  70. data/lib/chef/knife/xargs.rb +19 -19
  71. data/lib/chef/knife/yaml_convert.rb +1 -1
  72. data/lib/chef/log.rb +7 -2
  73. data/lib/chef/mixin/checksum.rb +0 -1
  74. data/{spec/functional/resource/base.rb → lib/chef/mixin/chef_utils_wiring.rb} +24 -12
  75. data/lib/chef/mixin/deep_merge.rb +35 -6
  76. data/{spec/unit/log_spec.rb → lib/chef/mixin/default_paths.rb} +13 -5
  77. data/lib/chef/mixin/openssl_helper.rb +30 -6
  78. data/lib/chef/mixin/path_sanity.rb +5 -4
  79. data/lib/chef/mixin/shell_out.rb +4 -188
  80. data/lib/chef/mixin/template.rb +1 -0
  81. data/lib/chef/mixin/which.rb +6 -3
  82. data/lib/chef/mixins.rb +1 -0
  83. data/lib/chef/monkey_patches/webrick-utils.rb +10 -10
  84. data/lib/chef/node.rb +36 -12
  85. data/lib/chef/node/attribute.rb +2 -4
  86. data/lib/chef/node_map.rb +21 -18
  87. data/lib/chef/platform/service_helpers.rb +31 -28
  88. data/lib/chef/property.rb +1 -1
  89. data/lib/chef/provider/cron/unix.rb +0 -2
  90. data/lib/chef/provider/git.rb +17 -9
  91. data/lib/chef/provider/group.rb +0 -2
  92. data/lib/chef/provider/group/suse.rb +5 -5
  93. data/lib/chef/provider/ifconfig.rb +1 -4
  94. data/lib/chef/provider/mount.rb +0 -2
  95. data/lib/chef/provider/mount/solaris.rb +0 -1
  96. data/lib/chef/provider/package.rb +0 -2
  97. data/lib/chef/provider/package/rubygems.rb +1 -1
  98. data/lib/chef/provider/package/snap.rb +3 -4
  99. data/lib/chef/provider/package/windows.rb +9 -4
  100. data/lib/chef/provider/package/windows/registry_uninstall_entry.rb +9 -9
  101. data/lib/chef/provider/package/zypper.rb +0 -1
  102. data/lib/chef/provider/powershell_script.rb +21 -5
  103. data/lib/chef/provider/route.rb +1 -1
  104. data/lib/chef/provider/service.rb +2 -2
  105. data/lib/chef/provider/service/arch.rb +1 -1
  106. data/lib/chef/provider/service/debian.rb +1 -1
  107. data/lib/chef/provider/service/gentoo.rb +2 -2
  108. data/lib/chef/provider/service/macosx.rb +2 -2
  109. data/lib/chef/provider/service/openbsd.rb +1 -4
  110. data/lib/chef/provider/service/redhat.rb +2 -2
  111. data/lib/chef/provider/service/upstart.rb +1 -1
  112. data/lib/chef/provider/service/windows.rb +10 -10
  113. data/lib/chef/provider/systemd_unit.rb +0 -2
  114. data/lib/chef/provider/template/content.rb +1 -0
  115. data/lib/chef/provider/user/dscl.rb +2 -2
  116. data/lib/chef/provider/user/mac.rb +9 -9
  117. data/lib/chef/provider/windows_task.rb +0 -3
  118. data/lib/chef/provider/yum_repository.rb +1 -1
  119. data/lib/chef/provider/zypper_repository.rb +1 -2
  120. data/lib/chef/providers.rb +0 -1
  121. data/lib/chef/recipe.rb +1 -1
  122. data/lib/chef/resource.rb +9 -11
  123. data/lib/chef/resource/alternatives.rb +1 -1
  124. data/lib/chef/resource/apt_repository.rb +1 -10
  125. data/lib/chef/resource/build_essential.rb +2 -2
  126. data/lib/chef/resource/chef_client_scheduled_task.rb +1 -1
  127. data/lib/chef/resource/chef_client_systemd_timer.rb +2 -2
  128. data/lib/chef/resource/chef_gem.rb +57 -21
  129. data/lib/chef/resource/chef_vault_secret.rb +13 -13
  130. data/lib/chef/resource/chocolatey_feature.rb +1 -2
  131. data/lib/chef/resource/cron/cron_d.rb +1 -1
  132. data/lib/chef/resource/cron_access.rb +2 -2
  133. data/lib/chef/resource/dmg_package.rb +2 -2
  134. data/lib/chef/resource/execute.rb +4 -5
  135. data/lib/chef/resource/gem_package.rb +35 -2
  136. data/lib/chef/resource/homebrew_update.rb +2 -2
  137. data/lib/chef/resource/hostname.rb +18 -18
  138. data/lib/chef/resource/launchd.rb +1 -1
  139. data/lib/chef/resource/lwrp_base.rb +1 -0
  140. data/lib/chef/resource/macos_userdefaults.rb +176 -61
  141. data/lib/chef/resource/openssl_dhparam.rb +2 -0
  142. data/lib/chef/resource/openssl_ec_private_key.rb +2 -0
  143. data/lib/chef/resource/openssl_ec_public_key.rb +2 -0
  144. data/lib/chef/resource/openssl_rsa_private_key.rb +2 -0
  145. data/lib/chef/resource/openssl_rsa_public_key.rb +2 -0
  146. data/lib/chef/resource/openssl_x509_certificate.rb +35 -35
  147. data/lib/chef/resource/openssl_x509_crl.rb +3 -2
  148. data/lib/chef/resource/openssl_x509_request.rb +23 -20
  149. data/lib/chef/resource/osx_profile.rb +227 -5
  150. data/lib/chef/resource/powershell_package_source.rb +1 -1
  151. data/lib/chef/resource/powershell_script.rb +24 -30
  152. data/lib/chef/resource/service.rb +2 -2
  153. data/lib/chef/resource/ssh_known_hosts_entry.rb +16 -1
  154. data/lib/chef/resource/sudo.rb +31 -4
  155. data/lib/chef/resource/swap_file.rb +17 -0
  156. data/lib/chef/resource/sysctl.rb +5 -5
  157. data/lib/chef/resource/timezone.rb +15 -0
  158. data/lib/chef/resource/user_ulimit.rb +1 -1
  159. data/lib/chef/resource/windows_ad_join.rb +2 -0
  160. data/lib/chef/resource/windows_audit_policy.rb +3 -0
  161. data/lib/chef/resource/windows_auto_run.rb +2 -0
  162. data/lib/chef/resource/windows_certificate.rb +2 -0
  163. data/lib/chef/resource/windows_dfs_folder.rb +2 -0
  164. data/lib/chef/resource/windows_dfs_namespace.rb +2 -0
  165. data/lib/chef/resource/windows_dfs_server.rb +2 -0
  166. data/lib/chef/resource/windows_dns_record.rb +25 -5
  167. data/lib/chef/resource/windows_dns_zone.rb +12 -7
  168. data/lib/chef/resource/windows_feature.rb +2 -0
  169. data/lib/chef/resource/windows_feature_dism.rb +10 -0
  170. data/lib/chef/resource/windows_feature_powershell.rb +14 -2
  171. data/lib/chef/resource/windows_firewall_profile.rb +199 -0
  172. data/lib/chef/resource/windows_firewall_rule.rb +5 -3
  173. data/lib/chef/resource/windows_font.rb +3 -1
  174. data/lib/chef/resource/windows_pagefile.rb +4 -0
  175. data/lib/chef/resource/windows_printer.rb +17 -18
  176. data/lib/chef/resource/windows_printer_port.rb +14 -13
  177. data/lib/chef/resource/windows_security_policy.rb +52 -21
  178. data/lib/chef/resource/windows_share.rb +5 -3
  179. data/lib/chef/resource/windows_shortcut.rb +2 -0
  180. data/lib/chef/resource/windows_uac.rb +2 -0
  181. data/lib/chef/resource/windows_user_privilege.rb +27 -2
  182. data/lib/chef/resource/windows_workgroup.rb +2 -3
  183. data/lib/chef/resource_collection/stepable_iterator.rb +1 -2
  184. data/lib/chef/resource_inspector.rb +7 -1
  185. data/lib/chef/resources.rb +1 -0
  186. data/lib/chef/role.rb +3 -4
  187. data/lib/chef/run_context/cookbook_compiler.rb +20 -20
  188. data/lib/chef/run_status.rb +2 -6
  189. data/lib/chef/server_api_versions.rb +4 -0
  190. data/lib/chef/shell.rb +1 -1
  191. data/lib/chef/shell/shell_session.rb +2 -0
  192. data/lib/chef/util/backup.rb +1 -1
  193. data/lib/chef/util/diff.rb +11 -12
  194. data/lib/chef/util/powershell/cmdlet.rb +1 -1
  195. data/lib/chef/version.rb +2 -2
  196. data/lib/chef/win32/file.rb +2 -2
  197. data/lib/chef/win32/file/version_info.rb +5 -5
  198. data/lib/chef/win32/registry.rb +1 -2
  199. data/spec/data/ssl/chef-rspec.cert +15 -15
  200. data/spec/functional/knife/configure_spec.rb +1 -1
  201. data/spec/functional/knife/ssh_spec.rb +5 -16
  202. data/spec/functional/resource/aix_service_spec.rb +9 -2
  203. data/spec/functional/resource/aixinit_service_spec.rb +8 -9
  204. data/spec/functional/resource/apt_package_spec.rb +0 -1
  205. data/spec/functional/resource/bash_spec.rb +3 -2
  206. data/spec/functional/resource/bff_spec.rb +3 -3
  207. data/spec/functional/resource/chocolatey_package_spec.rb +4 -0
  208. data/spec/functional/resource/cookbook_file_spec.rb +1 -1
  209. data/spec/functional/resource/cron_spec.rb +10 -2
  210. data/spec/functional/resource/dnf_package_spec.rb +4 -1
  211. data/spec/functional/resource/dsc_resource_spec.rb +1 -1
  212. data/spec/functional/resource/dsc_script_spec.rb +0 -1
  213. data/spec/functional/resource/execute_spec.rb +1 -1
  214. data/spec/functional/resource/git_spec.rb +23 -1
  215. data/spec/functional/resource/group_spec.rb +21 -9
  216. data/spec/functional/resource/ifconfig_spec.rb +9 -1
  217. data/spec/functional/resource/insserv_spec.rb +7 -7
  218. data/spec/functional/resource/link_spec.rb +22 -25
  219. data/spec/functional/resource/mount_spec.rb +9 -1
  220. data/spec/functional/resource/msu_package_spec.rb +9 -3
  221. data/spec/functional/resource/powershell_script_spec.rb +8 -8
  222. data/spec/functional/resource/remote_file_spec.rb +7 -13
  223. data/spec/functional/resource/rpm_spec.rb +3 -3
  224. data/spec/functional/resource/timezone_spec.rb +2 -0
  225. data/spec/functional/resource/windows_certificate_spec.rb +3 -3
  226. data/spec/functional/resource/windows_font_spec.rb +49 -0
  227. data/spec/functional/resource/windows_package_spec.rb +0 -1
  228. data/spec/functional/resource/windows_path_spec.rb +4 -0
  229. data/spec/functional/resource/windows_security_policy_spec.rb +0 -4
  230. data/spec/functional/resource/windows_service_spec.rb +4 -0
  231. data/spec/functional/resource/windows_task_spec.rb +4 -3
  232. data/spec/functional/resource/windows_user_privilege_spec.rb +1 -2
  233. data/spec/functional/resource/yum_package_spec.rb +4 -1
  234. data/spec/functional/resource/zypper_package_spec.rb +4 -1
  235. data/spec/functional/run_lock_spec.rb +26 -25
  236. data/spec/functional/shell_spec.rb +5 -6
  237. data/spec/functional/util/powershell/cmdlet_spec.rb +1 -1
  238. data/spec/functional/version_spec.rb +1 -1
  239. data/spec/functional/win32/crypto_spec.rb +1 -1
  240. data/spec/functional/win32/registry_spec.rb +8 -8
  241. data/spec/functional/win32/service_manager_spec.rb +1 -1
  242. data/spec/integration/knife/common_options_spec.rb +12 -12
  243. data/spec/integration/knife/config_get_profile_spec.rb +69 -68
  244. data/spec/integration/knife/config_get_spec.rb +126 -125
  245. data/spec/integration/knife/config_list_profiles_spec.rb +181 -152
  246. data/spec/integration/knife/config_use_profile_spec.rb +115 -61
  247. data/spec/integration/knife/cookbook_upload_spec.rb +28 -1
  248. data/spec/integration/knife/data_bag_from_file_spec.rb +1 -1
  249. data/spec/integration/knife/diff_spec.rb +3 -1
  250. data/spec/integration/knife/download_spec.rb +3 -1
  251. data/spec/integration/knife/environment_from_file_spec.rb +1 -1
  252. data/spec/integration/knife/node_from_file_spec.rb +1 -1
  253. data/spec/integration/knife/role_from_file_spec.rb +1 -1
  254. data/spec/integration/knife/serve_spec.rb +5 -5
  255. data/spec/integration/knife/upload_spec.rb +3 -1
  256. data/spec/integration/recipes/accumulator_spec.rb +1 -1
  257. data/spec/integration/recipes/lwrp_inline_resources_spec.rb +2 -2
  258. data/spec/integration/recipes/lwrp_spec.rb +1 -1
  259. data/spec/integration/recipes/notifies_spec.rb +1 -1
  260. data/spec/integration/recipes/notifying_block_spec.rb +1 -1
  261. data/spec/integration/recipes/recipe_dsl_spec.rb +5 -1
  262. data/spec/integration/recipes/resource_converge_if_changed_spec.rb +2 -0
  263. data/spec/integration/recipes/resource_load_spec.rb +4 -2
  264. data/spec/integration/recipes/unified_mode_spec.rb +1 -1
  265. data/spec/integration/recipes/use_partial_spec.rb +1 -1
  266. data/spec/scripts/ssl-serve.rb +1 -1
  267. data/spec/spec_helper.rb +16 -10
  268. data/spec/support/chef_helpers.rb +1 -20
  269. data/spec/support/platform_helpers.rb +9 -11
  270. data/spec/support/platforms/win32/spec_service.rb +1 -1
  271. data/spec/support/shared/functional/directory_resource.rb +1 -1
  272. data/spec/support/shared/functional/execute_resource.rb +1 -1
  273. data/spec/support/shared/functional/file_resource.rb +20 -21
  274. data/spec/support/shared/functional/securable_resource.rb +1 -2
  275. data/spec/support/shared/functional/securable_resource_with_reporting.rb +0 -1
  276. data/spec/support/shared/functional/win32_service.rb +1 -1
  277. data/spec/support/shared/functional/windows_script.rb +5 -5
  278. data/spec/support/shared/integration/integration_helper.rb +22 -52
  279. data/spec/support/shared/integration/knife_support.rb +2 -9
  280. data/spec/support/shared/unit/application_dot_d.rb +0 -1
  281. data/spec/support/shared/unit/provider/file.rb +12 -8
  282. data/spec/support/shared/unit/script_resource.rb +6 -20
  283. data/spec/support/shared/unit/windows_script_resource.rb +15 -28
  284. data/spec/unit/application/solo_spec.rb +4 -2
  285. data/spec/unit/application_spec.rb +4 -2
  286. data/spec/unit/chef_fs/config_spec.rb +2 -2
  287. data/spec/unit/chef_fs/diff_spec.rb +8 -8
  288. data/spec/unit/chef_fs/file_system/operation_failed_error_spec.rb +2 -4
  289. data/spec/unit/chef_fs/{parallelizer.rb → parallelizer_spec.rb} +1 -1
  290. data/spec/unit/client_spec.rb +4 -1
  291. data/spec/unit/cookbook/gem_installer_spec.rb +2 -1
  292. data/spec/unit/cookbook/synchronizer_spec.rb +26 -24
  293. data/spec/unit/data_bag_spec.rb +6 -3
  294. data/spec/unit/data_collector_spec.rb +23 -1
  295. data/spec/unit/decorator_spec.rb +23 -23
  296. data/spec/unit/dsl/platform_introspection_spec.rb +1 -0
  297. data/spec/unit/environment_spec.rb +12 -8
  298. data/spec/unit/event_dispatch/dispatcher_spec.rb +3 -0
  299. data/spec/unit/guard_interpreter_spec.rb +1 -1
  300. data/spec/unit/http/api_versions_spec.rb +20 -2
  301. data/spec/unit/json_compat_spec.rb +1 -1
  302. data/spec/unit/knife/bootstrap_spec.rb +17 -20
  303. data/spec/unit/knife/cookbook_download_spec.rb +6 -6
  304. data/spec/unit/knife/cookbook_metadata_from_file_spec.rb +1 -1
  305. data/spec/unit/knife/cookbook_show_spec.rb +6 -7
  306. data/spec/unit/knife/cookbook_upload_spec.rb +7 -10
  307. data/spec/unit/knife/core/hashed_command_loader_spec.rb +3 -3
  308. data/spec/unit/knife/core/windows_bootstrap_context_spec.rb +21 -12
  309. data/spec/unit/knife/data_bag_edit_spec.rb +1 -1
  310. data/spec/unit/knife/supermarket_share_spec.rb +1 -1
  311. data/spec/unit/log/syslog_spec.rb +6 -10
  312. data/spec/unit/log/winevt_spec.rb +21 -13
  313. data/spec/unit/lwrp_spec.rb +9 -6
  314. data/spec/unit/mixin/{path_sanity_spec.rb → default_paths_spec.rb} +14 -14
  315. data/spec/unit/mixin/powershell_exec_spec.rb +1 -1
  316. data/spec/unit/mixin/powershell_out_spec.rb +2 -4
  317. data/spec/unit/mixin/powershell_type_coercions_spec.rb +1 -1
  318. data/spec/unit/mixin/securable_spec.rb +0 -1
  319. data/spec/unit/mixin/shell_out_spec.rb +25 -26
  320. data/spec/unit/mixin/subclass_directive_spec.rb +2 -2
  321. data/spec/unit/mixin/template_spec.rb +30 -30
  322. data/spec/unit/mixin/unformatter_spec.rb +2 -2
  323. data/spec/unit/mixin/uris_spec.rb +1 -1
  324. data/spec/unit/mixin/which.rb +8 -0
  325. data/spec/unit/mixin/windows_architecture_helper_spec.rb +4 -4
  326. data/spec/unit/node/immutable_collections_spec.rb +6 -2
  327. data/spec/unit/node_spec.rb +103 -16
  328. data/spec/unit/property_spec.rb +5 -5
  329. data/spec/unit/provider/batch_spec.rb +1 -1
  330. data/spec/unit/provider/cron/unix_spec.rb +1 -1
  331. data/spec/unit/provider/dsc_resource_spec.rb +22 -38
  332. data/spec/unit/provider/dsc_script_spec.rb +10 -10
  333. data/spec/unit/provider/execute_spec.rb +1 -8
  334. data/spec/unit/provider/git_spec.rb +3 -3
  335. data/spec/unit/provider/ifconfig_spec.rb +0 -1
  336. data/spec/unit/provider/mdadm_spec.rb +1 -3
  337. data/spec/unit/provider/package/dnf/python_helper_spec.rb +1 -1
  338. data/spec/unit/provider/package/openbsd_spec.rb +1 -1
  339. data/spec/unit/provider/package/pacman_spec.rb +17 -20
  340. data/spec/unit/provider/package/rubygems_spec.rb +5 -10
  341. data/spec/unit/provider/package/smartos_spec.rb +1 -1
  342. data/spec/unit/provider/package/windows/registry_uninstall_entry_spec.rb +3 -3
  343. data/spec/unit/provider/package/windows_spec.rb +30 -53
  344. data/spec/unit/provider/powershell_script_spec.rb +11 -4
  345. data/spec/unit/provider/remote_directory_spec.rb +9 -9
  346. data/spec/unit/provider/service/arch_service_spec.rb +3 -2
  347. data/spec/unit/provider/service/debian_service_spec.rb +1 -1
  348. data/spec/unit/provider/service/gentoo_service_spec.rb +7 -7
  349. data/spec/unit/provider/service/macosx_spec.rb +3 -3
  350. data/spec/unit/provider/service/redhat_spec.rb +3 -3
  351. data/spec/unit/provider/service/upstart_service_spec.rb +3 -3
  352. data/spec/unit/provider/service/windows_spec.rb +2 -6
  353. data/spec/unit/provider/systemd_unit_spec.rb +28 -24
  354. data/spec/unit/provider/user/dscl_spec.rb +2 -2
  355. data/spec/unit/provider/windows_env_spec.rb +5 -4
  356. data/spec/unit/provider_resolver_spec.rb +6 -6
  357. data/spec/unit/provider_spec.rb +1 -0
  358. data/spec/unit/resource/batch_spec.rb +6 -6
  359. data/spec/unit/resource/chef_client_cron_spec.rb +23 -7
  360. data/spec/unit/resource/chef_client_systemd_timer_spec.rb +7 -4
  361. data/spec/unit/resource/execute_spec.rb +123 -118
  362. data/spec/unit/resource/file/verification_spec.rb +2 -1
  363. data/spec/unit/resource/macos_user_defaults_spec.rb +103 -2
  364. data/spec/unit/resource/osx_profile_spec.rb +233 -0
  365. data/spec/unit/resource/powershell_script_spec.rb +11 -29
  366. data/spec/unit/resource/script_spec.rb +6 -1
  367. data/spec/unit/resource/windows_feature_powershell_spec.rb +30 -4
  368. data/spec/unit/resource/windows_firewall_profile_spec.rb +77 -0
  369. data/spec/unit/resource/windows_package_spec.rb +1 -0
  370. data/spec/unit/resource_reporter_spec.rb +1 -1
  371. data/spec/unit/resource_spec.rb +25 -8
  372. data/spec/unit/role_spec.rb +30 -28
  373. data/spec/unit/run_context/cookbook_compiler_spec.rb +1 -1
  374. data/spec/unit/run_lock_spec.rb +1 -1
  375. data/spec/unit/scan_access_control_spec.rb +1 -1
  376. data/spec/unit/server_api_spec.rb +43 -16
  377. data/spec/unit/util/backup_spec.rb +1 -1
  378. data/spec/unit/util/diff_spec.rb +1 -15
  379. data/spec/unit/util/powershell/ps_credential_spec.rb +2 -2
  380. data/spec/unit/util/selinux_spec.rb +2 -1
  381. data/spec/unit/win32/security_spec.rb +4 -3
  382. data/tasks/rspec.rb +1 -1
  383. metadata +45 -24
  384. data/lib/chef/provider/osx_profile.rb +0 -255
  385. data/spec/unit/provider/osx_profile_spec.rb +0 -255
@@ -563,11 +563,10 @@ class Chef
563
563
  # @param path [Array] Array of args to method chain to descend into the node object
564
564
  # @return [attr] Deep Merged values (may be VividMash, Hash, Array, etc) from the node object
565
565
  def merge_defaults(path)
566
- ret = DEFAULT_COMPONENTS.inject(NIL) do |merged, component_ivar|
566
+ DEFAULT_COMPONENTS.inject(NIL) do |merged, component_ivar|
567
567
  component_value = apply_path(instance_variable_get(component_ivar), path)
568
568
  deep_merge!(merged, component_value)
569
569
  end
570
- ret
571
570
  end
572
571
 
573
572
  # Deep merge the override attribute levels with array merging.
@@ -577,11 +576,10 @@ class Chef
577
576
  # @param path [Array] Array of args to method chain to descend into the node object
578
577
  # @return [attr] Deep Merged values (may be VividMash, Hash, Array, etc) from the node object
579
578
  def merge_overrides(path)
580
- ret = OVERRIDE_COMPONENTS.inject(NIL) do |merged, component_ivar|
579
+ OVERRIDE_COMPONENTS.inject(NIL) do |merged, component_ivar|
581
580
  component_value = apply_path(instance_variable_get(component_ivar), path)
582
581
  deep_merge!(merged, component_value)
583
582
  end
584
- ret
585
583
  end
586
584
 
587
585
  # needed for __path__
@@ -35,10 +35,13 @@
35
35
  #
36
36
  # XXX: confusingly, in the *_priority_map the :klass may be an array of Strings of class names
37
37
  #
38
+
39
+ require_relative "dist"
40
+
38
41
  class Chef
39
42
  class NodeMap
40
43
  COLLISION_WARNING = <<~EOH.gsub(/\s+/, " ").strip
41
- %{type_caps} %{key} from the client is overriding the %{type} from a cookbook. Please upgrade your cookbook
44
+ %{type_caps} %{key} built into %{client_name} is being overridden by the %{type} from a cookbook. Please upgrade your cookbook
42
45
  or remove the cookbook from your run_list.
43
46
  EOH
44
47
 
@@ -83,7 +86,7 @@ class Chef
83
86
  else
84
87
  klass.superclass.to_s
85
88
  end
86
- Chef::Log.warn( COLLISION_WARNING % { type: type_of_thing, key: key, type_caps: type_of_thing.capitalize } )
89
+ Chef::Log.warn( COLLISION_WARNING % { type: type_of_thing, key: key, type_caps: type_of_thing.capitalize, client_name: Chef::Dist::PRODUCT } )
87
90
  end
88
91
 
89
92
  # The map is sorted in order of preference already; we just need to find
@@ -209,7 +212,7 @@ class Chef
209
212
  # - no negative matches (!value)
210
213
  # - at least one positive match (value or :all), or no positive filters
211
214
  #
212
- def matches_black_white_list?(node, filters, attribute)
215
+ def matches_block_allow_list?(node, filters, attribute)
213
216
  # It's super common for the filter to be nil. Catch that so we don't
214
217
  # spend any time here.
215
218
  return true unless filters[attribute]
@@ -217,21 +220,21 @@ class Chef
217
220
  filter_values = Array(filters[attribute])
218
221
  value = node[attribute]
219
222
 
220
- # Split the blacklist and whitelist
221
- blacklist, whitelist = filter_values.partition { |v| v.is_a?(String) && v.start_with?("!") }
223
+ # Split the blocklist and allowlist
224
+ blocklist, allowlist = filter_values.partition { |v| v.is_a?(String) && v.start_with?("!") }
222
225
 
223
226
  if attribute == :platform_family
224
- # If any blacklist value matches, we don't match
225
- return false if blacklist.any? { |v| v[1..-1] == value || platform_family_query_helper?(node, v[1..-1]) }
227
+ # If any blocklist value matches, we don't match
228
+ return false if blocklist.any? { |v| v[1..-1] == value || platform_family_query_helper?(node, v[1..-1]) }
226
229
 
227
- # If the whitelist is empty, or anything matches, we match.
228
- whitelist.empty? || whitelist.any? { |v| v == :all || v == value || platform_family_query_helper?(node, v) }
230
+ # If the allowlist is empty, or anything matches, we match.
231
+ allowlist.empty? || allowlist.any? { |v| v == :all || v == value || platform_family_query_helper?(node, v) }
229
232
  else
230
- # If any blacklist value matches, we don't match
231
- return false if blacklist.any? { |v| v[1..-1] == value }
233
+ # If any blocklist value matches, we don't match
234
+ return false if blocklist.any? { |v| v[1..-1] == value }
232
235
 
233
- # If the whitelist is empty, or anything matches, we match.
234
- whitelist.empty? || whitelist.any? { |v| v == :all || v == value }
236
+ # If the allowlist is empty, or anything matches, we match.
237
+ allowlist.empty? || allowlist.any? { |v| v == :all || v == value }
235
238
  end
236
239
  end
237
240
 
@@ -260,9 +263,9 @@ class Chef
260
263
  end
261
264
 
262
265
  def filters_match?(node, filters)
263
- matches_black_white_list?(node, filters, :os) &&
264
- matches_black_white_list?(node, filters, :platform_family) &&
265
- matches_black_white_list?(node, filters, :platform) &&
266
+ matches_block_allow_list?(node, filters, :os) &&
267
+ matches_block_allow_list?(node, filters, :platform_family) &&
268
+ matches_block_allow_list?(node, filters, :platform) &&
266
269
  matches_version_list?(node, filters, :platform_version) &&
267
270
  matches_target_mode?(filters)
268
271
  end
@@ -311,8 +314,8 @@ class Chef
311
314
  return -1 if !b && a
312
315
  return 0 if !a && !b
313
316
 
314
- # Check for blacklists ('!windows'). Those always come *after* positive
315
- # whitelists.
317
+ # Check for blocklists ('!windows'). Those always come *after* positive
318
+ # allowlists.
316
319
  a_negated = Array(a).any? { |f| f.is_a?(String) && f.start_with?("!") }
317
320
  b_negated = Array(b).any? { |f| f.is_a?(String) && f.start_with?("!") }
318
321
  return 1 if a_negated && !b_negated
@@ -17,38 +17,41 @@
17
17
  #
18
18
 
19
19
  require_relative "../chef_class"
20
- require "chef-utils" if defined?(ChefUtils::CANARY)
20
+ require "chef-utils" unless defined?(ChefUtils::CANARY)
21
+ require_relative "../mixin/chef_utils_wiring" unless defined?(Chef::Mixin::ChefUtilsWiring)
21
22
 
22
23
  class Chef
23
24
  class Platform
24
- # @deprecated, use ChefUtils::DSL::Service instead (via the ChefUtils Universal DSL)
25
- class ServiceHelpers
26
- class << self
27
- def service_resource_providers
28
- providers = []
29
-
30
- providers << :debian if ChefUtils::DSL::Service.debianrcd?
31
- providers << :invokercd if ChefUtils::DSL::Service.invokercd?
32
- providers << :upstart if ChefUtils::DSL::Service.upstart?
33
- providers << :insserv if ChefUtils::DSL::Service.insserv?
34
- providers << :systemd if ChefUtils.systemd?
35
- providers << :redhat if ChefUtils::DSL::Service.redhatrcd?
36
-
37
- providers
38
- end
39
-
40
- def config_for_service(service_name)
41
- configs = []
42
-
43
- configs << :initd if ChefUtils::DSL::Service.service_script_exist?(:initd, service_name)
44
- configs << :upstart if ChefUtils::DSL::Service.service_script_exist?(:upstart, service_name)
45
- configs << :xinetd if ChefUtils::DSL::Service.service_script_exist?(:xinetd, service_name)
46
- configs << :systemd if ChefUtils::DSL::Service.service_script_exist?(:systemd, service_name)
47
- configs << :etc_rcd if ChefUtils::DSL::Service.service_script_exist?(:etc_rcd, service_name)
48
-
49
- configs
50
- end
25
+ module ServiceHelpers
26
+ include ChefUtils::DSL::Service
27
+ include Chef::Mixin::ChefUtilsWiring
28
+
29
+ def service_resource_providers
30
+ providers = []
31
+
32
+ providers << :debian if debianrcd?
33
+ providers << :invokercd if invokercd?
34
+ providers << :upstart if upstart?
35
+ providers << :insserv if insserv?
36
+ providers << :systemd if systemd?
37
+ providers << :redhat if redhatrcd?
38
+
39
+ providers
40
+ end
41
+
42
+ def config_for_service(service_name)
43
+ configs = []
44
+
45
+ configs << :initd if service_script_exist?(:initd, service_name)
46
+ configs << :upstart if service_script_exist?(:upstart, service_name)
47
+ configs << :xinetd if service_script_exist?(:xinetd, service_name)
48
+ configs << :systemd if service_script_exist?(:systemd, service_name)
49
+ configs << :etc_rcd if service_script_exist?(:etc_rcd, service_name)
50
+
51
+ configs
51
52
  end
53
+
54
+ extend self
52
55
  end
53
56
  end
54
57
  end
@@ -706,7 +706,7 @@ class Chef
706
706
  # As of this writing, `name` is the only Chef::Resource property created with the
707
707
  # `property` definition, but this will allow for future properties to be extended
708
708
  # as needed.
709
- !Chef::Resource.properties.keys.include?(name)
709
+ !Chef::Resource.properties.key?(name)
710
710
  end
711
711
 
712
712
  def exec_in_resource(resource, proc, *args)
@@ -26,8 +26,6 @@ class Chef
26
26
  class Provider
27
27
  class Cron
28
28
  class Unix < Chef::Provider::Cron
29
- include Chef::Mixin::ShellOut
30
-
31
29
  provides :cron, os: "solaris2"
32
30
 
33
31
  private
@@ -44,11 +44,11 @@ class Chef
44
44
  unless new_resource.user.nil?
45
45
  requirements.assert(:all_actions) do |a|
46
46
  a.assertion do
47
- begin
48
- get_homedir(new_resource.user)
49
- rescue ArgumentError
50
- false
51
- end
47
+
48
+ get_homedir(new_resource.user)
49
+ rescue ArgumentError
50
+ false
51
+
52
52
  end
53
53
  a.whyrun("User #{new_resource.user} does not exist, this run will fail unless it has been previously created. Assuming it would have been created.")
54
54
  a.failure_message(Chef::Exceptions::User, "#{new_resource.user} required by resource #{new_resource.name} does not exist")
@@ -154,6 +154,11 @@ class Chef
154
154
  sha_hash?(result) ? result : nil
155
155
  end
156
156
 
157
+ def already_on_target_branch?
158
+ current_branch = git("rev-parse", "--abbrev-ref", "HEAD", cwd: cwd, returns: [0, 128]).stdout.strip
159
+ current_branch == (new_resource.checkout_branch || new_resource.revision)
160
+ end
161
+
157
162
  def add_remotes
158
163
  if new_resource.additional_remotes.length > 0
159
164
  new_resource.additional_remotes.each_pair do |remote_name, remote_url|
@@ -193,6 +198,9 @@ class Chef
193
198
  # detached head
194
199
  git("checkout", target_revision, cwd: cwd)
195
200
  logger.info "#{new_resource} checked out reference: #{target_revision}"
201
+ elsif already_on_target_branch?
202
+ # we are already on the proper branch
203
+ git("reset", "--hard", target_revision, cwd: cwd)
196
204
  else
197
205
  # need a branch with a tracking branch
198
206
  git("branch", "-f", new_resource.revision, target_revision, cwd: cwd)
@@ -222,13 +230,13 @@ class Chef
222
230
  logger.trace "Fetching updates from #{new_resource.remote} and resetting to revision #{target_revision}"
223
231
  git("fetch", "--prune", new_resource.remote, cwd: cwd)
224
232
  git("fetch", new_resource.remote, "--tags", cwd: cwd)
225
- if new_resource.checkout_branch
233
+ if sha_hash?(new_resource.revision) || is_tag? || already_on_target_branch?
234
+ # detached head or if we are already on the proper branch
235
+ git("reset", "--hard", target_revision, cwd: cwd)
236
+ elsif new_resource.checkout_branch
226
237
  # check out to a local branch
227
238
  git("branch", "-f", new_resource.checkout_branch, target_revision, cwd: cwd)
228
239
  git("checkout", new_resource.checkout_branch, cwd: cwd)
229
- elsif sha_hash?(new_resource.revision) || is_tag?
230
- # detached head
231
- git("reset", "--hard", target_revision, cwd: cwd)
232
240
  else
233
241
  # need a branch with a tracking branch
234
242
  git("branch", "-f", new_resource.revision, target_revision, cwd: cwd)
@@ -17,13 +17,11 @@
17
17
  #
18
18
 
19
19
  require_relative "../provider"
20
- require_relative "../mixin/shell_out"
21
20
  require "etc" unless defined?(Etc)
22
21
 
23
22
  class Chef
24
23
  class Provider
25
24
  class Group < Chef::Provider
26
- include Chef::Mixin::ShellOut
27
25
  attr_accessor :group_exists
28
26
  attr_accessor :change_desc
29
27
 
@@ -39,11 +39,11 @@ class Chef
39
39
 
40
40
  requirements.assert(:create, :manage, :modify) do |a|
41
41
  a.assertion do
42
- begin
43
- to_add(new_resource.members).all? { |member| Etc.getpwnam(member) }
44
- rescue
45
- false
46
- end
42
+
43
+ to_add(new_resource.members).all? { |member| Etc.getpwnam(member) }
44
+ rescue
45
+ false
46
+
47
47
  end
48
48
  a.failure_message Chef::Exceptions::Group, "Could not add users #{to_add(new_resource.members).join(", ")} to #{new_resource.group_name}: one of these users does not exist"
49
49
  a.whyrun "Could not find one of these users: #{to_add(new_resource.members).join(", ")}. Assuming it will be created by a prior step"
@@ -17,11 +17,10 @@
17
17
  #
18
18
 
19
19
  require_relative "../log"
20
- require_relative "../mixin/shell_out"
21
20
  require_relative "../provider"
22
21
  require_relative "../resource/file"
23
22
  require_relative "../exceptions"
24
- require "erb"
23
+ require "erb" unless defined?(Erb)
25
24
 
26
25
  class Chef
27
26
  class Provider
@@ -34,8 +33,6 @@ class Chef
34
33
  class Ifconfig < Chef::Provider
35
34
  provides :ifconfig
36
35
 
37
- include Chef::Mixin::ShellOut
38
-
39
36
  attr_accessor :config_template
40
37
  attr_accessor :config_path
41
38
 
@@ -18,13 +18,11 @@
18
18
  #
19
19
 
20
20
  require_relative "../log"
21
- require_relative "../mixin/shell_out"
22
21
  require_relative "../provider"
23
22
 
24
23
  class Chef
25
24
  class Provider
26
25
  class Mount < Chef::Provider
27
- include Chef::Mixin::ShellOut
28
26
 
29
27
  attr_accessor :unmount_retries
30
28
 
@@ -1,4 +1,3 @@
1
- # Encoding: utf-8
2
1
  # Author:: Hugo Fichter
3
2
  # Author:: Lamont Granquist (<lamont@chef.io>)
4
3
  # Author:: Joshua Timberman (<joshua@chef.io>)
@@ -16,7 +16,6 @@
16
16
  # limitations under the License.
17
17
  #
18
18
 
19
- require_relative "../mixin/shell_out"
20
19
  require_relative "../mixin/subclass_directive"
21
20
  require_relative "../log"
22
21
  require_relative "../file_cache"
@@ -27,7 +26,6 @@ require "shellwords" unless defined?(Shellwords)
27
26
  class Chef
28
27
  class Provider
29
28
  class Package < Chef::Provider
30
- include Chef::Mixin::ShellOut
31
29
  extend Chef::Mixin::SubclassDirective
32
30
 
33
31
  # subclasses declare this if they want all their arguments as arrays of packages and names
@@ -188,7 +188,7 @@ class Chef
188
188
  # Use the API that 'gem install' calls which does not pull down the rubygems universe
189
189
  begin
190
190
  rs = dependency_installer.resolve_dependencies gem_dependency.name, gem_dependency.requirement
191
- rs.specs.select { |s| s.name == gem_dependency.name }.first
191
+ rs.specs.find { |s| s.name == gem_dependency.name }
192
192
  rescue Gem::UnsatisfiableDependencyError
193
193
  nil
194
194
  end
@@ -20,7 +20,7 @@ require_relative "../package"
20
20
  require_relative "../../resource/snap_package"
21
21
  require_relative "../../mixin/shell_out"
22
22
  require "socket" unless defined?(Socket)
23
- require "json"
23
+ require "json" unless defined?(JSON)
24
24
 
25
25
  class Chef
26
26
  class Provider
@@ -137,7 +137,7 @@ class Chef
137
137
 
138
138
  # while it is expected to allow clients to connect using https over
139
139
  # a tcp socket, at this point only a unix socket is supported. the
140
- # socket is /run/snapd.socket note - unix socket is not defined on
140
+ # socket is /run/snapd.socket note - UNIXSocket is not defined on
141
141
  # windows systems
142
142
  if defined?(::UNIXSocket)
143
143
  UNIXSocket.open("/run/snapd.socket") do |socket|
@@ -304,7 +304,7 @@ class Chef
304
304
  SNAP_OPTION
305
305
  end
306
306
 
307
- multipart_form_data = <<~SNAP_S
307
+ <<~SNAP_S
308
308
  Host:
309
309
  Content-Type: multipart/form-data; boundary=#{snap_name}
310
310
  Content-Length: #{content_length}
@@ -320,7 +320,6 @@ class Chef
320
320
  <#{content_length} bytes of snap file data>
321
321
  --#{snap_name}
322
322
  SNAP_S
323
- multipart_form_data
324
323
  end
325
324
 
326
325
  # Constructs json to post for snap changes
@@ -242,22 +242,27 @@ class Chef
242
242
  end
243
243
 
244
244
  def download_source_file
245
+ source_resource.run_action(:create)
246
+ logger.trace("#{new_resource} fetched source file to #{default_download_cache_path}")
247
+ end
248
+
249
+ def source_resource
245
250
  # It seems correct that this is a build_resource rather than declare_resource/DSL use since updating should not trigger a notification
246
251
  # unless the downloaded file is actually installed. The case where the remote_file downloads the package but the package is already
247
252
  # installed on the target should not trigger a notification since the running state did not change.
248
- build_resource(:remote_file, default_download_cache_path) do
253
+ @source_resource ||= build_resource(:remote_file, default_download_cache_path) do
249
254
  source(new_resource.source)
250
255
  cookbook_name = new_resource.cookbook_name
251
256
  checksum(new_resource.checksum)
252
257
  backup(false)
253
258
 
259
+ # since the source_resource can mutate here, we save off the @source_resource so we can inspect the actual state later
254
260
  if new_resource.remote_file_attributes
255
261
  new_resource.remote_file_attributes.each do |(k, v)|
256
262
  send(k.to_sym, v)
257
263
  end
258
264
  end
259
- end.run_action(:create)
260
- logger.trace("#{new_resource} fetched source file to #{default_download_cache_path}")
265
+ end
261
266
  end
262
267
 
263
268
  def default_download_cache_path
@@ -271,7 +276,7 @@ class Chef
271
276
  if new_resource.source.nil?
272
277
  nil
273
278
  elsif uri_scheme?(new_resource.source)
274
- default_download_cache_path
279
+ source_resource.path
275
280
  else
276
281
  new_source = Chef::Util::PathHelper.cleanpath(new_resource.source)
277
282
  ::File.exist?(new_source) ? new_source : nil
@@ -37,16 +37,16 @@ class Chef
37
37
  begin
38
38
  ::Win32::Registry.open(hkey[0], UNINSTALL_SUBKEY, desired) do |reg|
39
39
  reg.each_key do |key, _wtime|
40
- begin
41
- entry = reg.open(key, desired)
42
- display_name = read_registry_property(entry, "DisplayName")
43
- if display_name.to_s.rstrip == package_name
44
- quiet_uninstall_string = RegistryUninstallEntry.read_registry_property(entry, "QuietUninstallString")
45
- entries.push(quiet_uninstall_string_key?(quiet_uninstall_string, hkey, key, entry))
46
- end
47
- rescue ::Win32::Registry::Error => ex
48
- logger.trace("Registry error opening key '#{key}' on node #{desired}: #{ex}")
40
+
41
+ entry = reg.open(key, desired)
42
+ display_name = read_registry_property(entry, "DisplayName")
43
+ if display_name.to_s.rstrip == package_name
44
+ quiet_uninstall_string = RegistryUninstallEntry.read_registry_property(entry, "QuietUninstallString")
45
+ entries.push(quiet_uninstall_string_key?(quiet_uninstall_string, hkey, key, entry))
49
46
  end
47
+ rescue ::Win32::Registry::Error => ex
48
+ logger.trace("Registry error opening key '#{key}' on node #{desired}: #{ex}")
49
+
50
50
  end
51
51
  end
52
52
  rescue ::Win32::Registry::Error => ex