chef 16.2.73-universal-mingw32 → 16.4.41-universal-mingw32
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/Gemfile +4 -4
- data/Rakefile +1 -1
- data/chef-universal-mingw32.gemspec +2 -3
- data/chef.gemspec +2 -1
- data/lib/chef/action_collection.rb +4 -0
- data/lib/chef/api_client/registration.rb +2 -2
- data/lib/chef/application.rb +13 -1
- data/lib/chef/application/apply.rb +5 -5
- data/lib/chef/application/windows_service.rb +27 -27
- data/lib/chef/{whitelist.rb → attribute_allowlist.rb} +11 -11
- data/lib/chef/{blacklist.rb → attribute_blocklist.rb} +9 -9
- data/lib/chef/chef_class.rb +0 -1
- data/lib/chef/chef_fs/chef_fs_data_store.rb +54 -54
- data/lib/chef/chef_fs/data_handler/organization_data_handler.rb +1 -2
- data/lib/chef/chef_fs/file_system/chef_server/acl_entry.rb +10 -10
- data/lib/chef/chef_fs/file_system/chef_server/cookbooks_dir.rb +1 -5
- data/lib/chef/chef_fs/file_system/chef_server/organization_invites_entry.rb +8 -8
- data/lib/chef/chef_fs/file_system/chef_server/organization_members_entry.rb +8 -8
- data/lib/chef/chef_fs/file_system/repository/base_file.rb +1 -0
- data/lib/chef/chef_fs/file_system/repository/chef_repository_file_system_cookbook_dir.rb +2 -2
- data/lib/chef/chef_fs/file_system/repository/chef_repository_file_system_cookbook_entry.rb +1 -1
- data/lib/chef/chef_fs/file_system/repository/chef_repository_file_system_root_dir.rb +18 -18
- data/lib/chef/chef_fs/file_system/repository/directory.rb +1 -1
- data/lib/chef/chef_fs/file_system/repository/file_system_entry.rb +1 -1
- data/lib/chef/chef_fs/parallelizer/parallel_enumerable.rb +1 -1
- data/lib/chef/client.rb +14 -14
- data/lib/chef/cookbook/remote_file_vendor.rb +1 -3
- data/lib/chef/cookbook/syntax_check.rb +1 -2
- data/lib/chef/cookbook_loader.rb +15 -29
- data/lib/chef/data_bag.rb +1 -2
- data/lib/chef/data_collector/run_end_message.rb +11 -1
- data/lib/chef/deprecated.rb +8 -0
- data/lib/chef/dsl/platform_introspection.rb +9 -7
- data/lib/chef/encrypted_data_bag_item/decryptor.rb +1 -1
- data/lib/chef/environment.rb +3 -4
- data/lib/chef/exceptions.rb +4 -1
- data/lib/chef/file_content_management/tempfile.rb +9 -9
- data/lib/chef/handler.rb +2 -0
- data/lib/chef/http.rb +11 -11
- data/lib/chef/http/authenticator.rb +3 -1
- data/lib/chef/json_compat.rb +1 -1
- data/lib/chef/knife.rb +4 -4
- data/lib/chef/knife/bootstrap.rb +6 -12
- data/lib/chef/knife/bootstrap/train_connector.rb +1 -0
- data/lib/chef/knife/config_get.rb +1 -0
- data/lib/chef/knife/config_list_profiles.rb +4 -1
- data/lib/chef/knife/configure.rb +3 -1
- data/lib/chef/knife/cookbook_download.rb +1 -1
- data/lib/chef/knife/cookbook_metadata.rb +1 -1
- data/lib/chef/knife/cookbook_upload.rb +28 -33
- data/lib/chef/knife/core/gem_glob_loader.rb +1 -1
- data/lib/chef/knife/core/generic_presenter.rb +1 -1
- data/lib/chef/knife/core/hashed_command_loader.rb +3 -2
- data/lib/chef/knife/core/subcommand_loader.rb +20 -1
- data/lib/chef/knife/core/ui.rb +8 -2
- data/lib/chef/knife/core/windows_bootstrap_context.rb +32 -25
- data/lib/chef/knife/delete.rb +15 -15
- data/lib/chef/knife/exec.rb +2 -2
- data/lib/chef/knife/rehash.rb +3 -21
- data/lib/chef/knife/ssh.rb +11 -7
- data/lib/chef/knife/xargs.rb +19 -19
- data/lib/chef/knife/yaml_convert.rb +1 -1
- data/lib/chef/log.rb +7 -2
- data/lib/chef/mixin/checksum.rb +0 -1
- data/lib/chef/mixin/chef_utils_wiring.rb +40 -0
- data/lib/chef/mixin/deep_merge.rb +35 -6
- data/{spec/unit/log_spec.rb → lib/chef/mixin/default_paths.rb} +13 -5
- data/lib/chef/mixin/openssl_helper.rb +30 -6
- data/lib/chef/mixin/path_sanity.rb +5 -4
- data/lib/chef/mixin/shell_out.rb +4 -188
- data/lib/chef/mixin/template.rb +1 -0
- data/lib/chef/mixin/which.rb +6 -3
- data/lib/chef/mixins.rb +1 -0
- data/lib/chef/monkey_patches/webrick-utils.rb +10 -10
- data/lib/chef/node.rb +36 -12
- data/lib/chef/node/attribute.rb +2 -4
- data/lib/chef/node_map.rb +21 -18
- data/lib/chef/platform/service_helpers.rb +31 -28
- data/lib/chef/property.rb +1 -1
- data/lib/chef/provider/cron/unix.rb +0 -2
- data/lib/chef/provider/git.rb +17 -9
- data/lib/chef/provider/group.rb +0 -2
- data/lib/chef/provider/group/suse.rb +5 -5
- data/lib/chef/provider/ifconfig.rb +1 -4
- data/lib/chef/provider/mount.rb +0 -2
- data/lib/chef/provider/mount/solaris.rb +0 -1
- data/lib/chef/provider/package.rb +0 -2
- data/lib/chef/provider/package/rubygems.rb +1 -1
- data/lib/chef/provider/package/snap.rb +3 -4
- data/lib/chef/provider/package/windows.rb +9 -4
- data/lib/chef/provider/package/windows/registry_uninstall_entry.rb +9 -9
- data/lib/chef/provider/package/zypper.rb +0 -1
- data/lib/chef/provider/powershell_script.rb +21 -5
- data/lib/chef/provider/route.rb +1 -1
- data/lib/chef/provider/service.rb +2 -2
- data/lib/chef/provider/service/arch.rb +1 -1
- data/lib/chef/provider/service/debian.rb +1 -1
- data/lib/chef/provider/service/gentoo.rb +2 -2
- data/lib/chef/provider/service/macosx.rb +2 -2
- data/lib/chef/provider/service/openbsd.rb +1 -4
- data/lib/chef/provider/service/redhat.rb +2 -2
- data/lib/chef/provider/service/upstart.rb +1 -1
- data/lib/chef/provider/service/windows.rb +10 -10
- data/lib/chef/provider/systemd_unit.rb +0 -2
- data/lib/chef/provider/template/content.rb +1 -0
- data/lib/chef/provider/user/dscl.rb +2 -2
- data/lib/chef/provider/user/mac.rb +9 -9
- data/lib/chef/provider/windows_task.rb +0 -3
- data/lib/chef/provider/yum_repository.rb +1 -1
- data/lib/chef/provider/zypper_repository.rb +1 -2
- data/lib/chef/providers.rb +0 -1
- data/lib/chef/recipe.rb +1 -1
- data/lib/chef/resource.rb +8 -10
- data/lib/chef/resource/apt_repository.rb +1 -10
- data/lib/chef/resource/build_essential.rb +2 -2
- data/lib/chef/resource/chef_client_scheduled_task.rb +1 -1
- data/lib/chef/resource/chef_client_systemd_timer.rb +2 -2
- data/lib/chef/resource/chef_vault_secret.rb +13 -13
- data/lib/chef/resource/chocolatey_feature.rb +1 -2
- data/lib/chef/resource/cron/cron_d.rb +1 -1
- data/lib/chef/resource/cron_access.rb +2 -2
- data/lib/chef/resource/execute.rb +4 -5
- data/lib/chef/resource/homebrew_update.rb +2 -2
- data/lib/chef/resource/hostname.rb +18 -18
- data/lib/chef/resource/lwrp_base.rb +1 -0
- data/lib/chef/resource/macos_userdefaults.rb +176 -61
- data/lib/chef/resource/openssl_dhparam.rb +2 -0
- data/lib/chef/resource/openssl_ec_private_key.rb +2 -0
- data/lib/chef/resource/openssl_ec_public_key.rb +2 -0
- data/lib/chef/resource/openssl_rsa_private_key.rb +2 -0
- data/lib/chef/resource/openssl_rsa_public_key.rb +2 -0
- data/lib/chef/resource/openssl_x509_certificate.rb +35 -35
- data/lib/chef/resource/openssl_x509_crl.rb +3 -2
- data/lib/chef/resource/openssl_x509_request.rb +23 -20
- data/lib/chef/resource/osx_profile.rb +227 -5
- data/lib/chef/resource/powershell_package_source.rb +1 -1
- data/lib/chef/resource/powershell_script.rb +24 -30
- data/lib/chef/resource/service.rb +2 -2
- data/lib/chef/resource/ssh_known_hosts_entry.rb +1 -1
- data/lib/chef/resource/sudo.rb +2 -2
- data/lib/chef/resource/sysctl.rb +5 -5
- data/lib/chef/resource/timezone.rb +112 -73
- data/lib/chef/resource/user_ulimit.rb +1 -1
- data/lib/chef/resource/windows_ad_join.rb +2 -0
- data/lib/chef/resource/windows_audit_policy.rb +3 -0
- data/lib/chef/resource/windows_auto_run.rb +2 -0
- data/lib/chef/resource/windows_certificate.rb +2 -0
- data/lib/chef/resource/windows_dfs_folder.rb +2 -0
- data/lib/chef/resource/windows_dfs_namespace.rb +2 -0
- data/lib/chef/resource/windows_dfs_server.rb +2 -0
- data/lib/chef/resource/windows_dns_record.rb +25 -5
- data/lib/chef/resource/windows_dns_zone.rb +12 -7
- data/lib/chef/resource/windows_feature.rb +2 -0
- data/lib/chef/resource/windows_feature_dism.rb +10 -0
- data/lib/chef/resource/windows_feature_powershell.rb +14 -2
- data/lib/chef/resource/windows_firewall_profile.rb +199 -0
- data/lib/chef/resource/windows_firewall_rule.rb +5 -3
- data/lib/chef/resource/windows_font.rb +3 -1
- data/lib/chef/resource/windows_pagefile.rb +4 -0
- data/lib/chef/resource/windows_printer.rb +17 -18
- data/lib/chef/resource/windows_printer_port.rb +14 -13
- data/lib/chef/resource/windows_security_policy.rb +51 -20
- data/lib/chef/resource/windows_share.rb +5 -3
- data/lib/chef/resource/windows_shortcut.rb +2 -0
- data/lib/chef/resource/windows_uac.rb +2 -0
- data/lib/chef/resource/windows_user_privilege.rb +2 -0
- data/lib/chef/resource/windows_workgroup.rb +2 -3
- data/lib/chef/resource_collection/stepable_iterator.rb +1 -2
- data/lib/chef/resource_inspector.rb +7 -1
- data/lib/chef/resources.rb +1 -0
- data/lib/chef/role.rb +3 -4
- data/lib/chef/run_context/cookbook_compiler.rb +20 -20
- data/lib/chef/run_status.rb +2 -6
- data/lib/chef/server_api_versions.rb +4 -0
- data/lib/chef/shell.rb +1 -1
- data/lib/chef/shell/shell_session.rb +2 -0
- data/lib/chef/util/backup.rb +1 -1
- data/lib/chef/util/diff.rb +11 -12
- data/lib/chef/util/powershell/cmdlet.rb +1 -1
- data/lib/chef/version.rb +2 -2
- data/lib/chef/win32/file.rb +2 -2
- data/lib/chef/win32/file/version_info.rb +5 -5
- data/lib/chef/win32/registry.rb +1 -2
- data/spec/data/ssl/chef-rspec.cert +15 -15
- data/spec/functional/knife/ssh_spec.rb +5 -16
- data/spec/functional/resource/aix_service_spec.rb +0 -2
- data/spec/functional/resource/aixinit_service_spec.rb +7 -8
- data/spec/functional/resource/apt_package_spec.rb +0 -1
- data/spec/functional/resource/bff_spec.rb +2 -2
- data/spec/functional/resource/cookbook_file_spec.rb +1 -1
- data/spec/functional/resource/cron_spec.rb +0 -1
- data/spec/functional/resource/dsc_resource_spec.rb +1 -1
- data/spec/functional/resource/dsc_script_spec.rb +0 -1
- data/spec/functional/resource/git_spec.rb +23 -1
- data/spec/functional/resource/group_spec.rb +12 -8
- data/spec/functional/resource/insserv_spec.rb +4 -5
- data/spec/functional/resource/link_spec.rb +20 -20
- data/spec/functional/resource/powershell_script_spec.rb +4 -4
- data/spec/functional/resource/remote_file_spec.rb +1 -7
- data/spec/functional/resource/rpm_spec.rb +2 -2
- data/spec/functional/resource/windows_certificate_spec.rb +3 -3
- data/spec/functional/resource/windows_font_spec.rb +49 -0
- data/spec/functional/resource/windows_security_policy_spec.rb +0 -3
- data/spec/functional/resource/windows_user_privilege_spec.rb +1 -1
- data/spec/functional/run_lock_spec.rb +26 -25
- data/spec/functional/shell_spec.rb +5 -5
- data/spec/functional/util/powershell/cmdlet_spec.rb +1 -1
- data/spec/functional/version_spec.rb +1 -1
- data/spec/functional/win32/registry_spec.rb +8 -8
- data/spec/functional/win32/service_manager_spec.rb +1 -1
- data/spec/integration/knife/common_options_spec.rb +12 -12
- data/spec/integration/knife/config_get_profile_spec.rb +69 -68
- data/spec/integration/knife/config_get_spec.rb +126 -125
- data/spec/integration/knife/config_list_profiles_spec.rb +181 -152
- data/spec/integration/knife/config_use_profile_spec.rb +110 -109
- data/spec/integration/knife/cookbook_upload_spec.rb +27 -0
- data/spec/integration/knife/diff_spec.rb +3 -1
- data/spec/integration/knife/download_spec.rb +3 -1
- data/spec/integration/knife/serve_spec.rb +5 -5
- data/spec/integration/knife/upload_spec.rb +3 -1
- data/spec/integration/recipes/accumulator_spec.rb +1 -1
- data/spec/integration/recipes/lwrp_inline_resources_spec.rb +2 -2
- data/spec/integration/recipes/lwrp_spec.rb +1 -1
- data/spec/integration/recipes/notifies_spec.rb +1 -1
- data/spec/integration/recipes/notifying_block_spec.rb +1 -1
- data/spec/integration/recipes/recipe_dsl_spec.rb +1 -1
- data/spec/integration/recipes/resource_converge_if_changed_spec.rb +2 -0
- data/spec/integration/recipes/resource_load_spec.rb +2 -0
- data/spec/integration/recipes/unified_mode_spec.rb +1 -1
- data/spec/integration/recipes/use_partial_spec.rb +1 -1
- data/spec/scripts/ssl-serve.rb +1 -1
- data/spec/spec_helper.rb +16 -10
- data/spec/support/chef_helpers.rb +1 -20
- data/spec/support/platform_helpers.rb +9 -11
- data/spec/support/platforms/win32/spec_service.rb +1 -1
- data/spec/support/shared/functional/directory_resource.rb +1 -1
- data/spec/support/shared/functional/execute_resource.rb +1 -1
- data/spec/support/shared/functional/file_resource.rb +20 -21
- data/spec/support/shared/functional/win32_service.rb +1 -1
- data/spec/support/shared/functional/windows_script.rb +3 -3
- data/spec/support/shared/integration/integration_helper.rb +22 -52
- data/spec/support/shared/integration/knife_support.rb +2 -9
- data/spec/support/shared/unit/application_dot_d.rb +0 -1
- data/spec/support/shared/unit/script_resource.rb +6 -20
- data/spec/support/shared/unit/windows_script_resource.rb +15 -28
- data/spec/unit/application_spec.rb +4 -2
- data/spec/unit/chef_fs/file_system/operation_failed_error_spec.rb +2 -4
- data/spec/unit/chef_fs/{parallelizer.rb → parallelizer_spec.rb} +1 -1
- data/spec/unit/cookbook/gem_installer_spec.rb +2 -1
- data/spec/unit/data_collector_spec.rb +29 -1
- data/spec/unit/dsl/platform_introspection_spec.rb +1 -0
- data/spec/unit/environment_spec.rb +7 -7
- data/spec/unit/event_dispatch/dispatcher_spec.rb +3 -0
- data/spec/unit/http/api_versions_spec.rb +19 -1
- data/spec/unit/json_compat_spec.rb +1 -1
- data/spec/unit/knife/bootstrap_spec.rb +16 -20
- data/spec/unit/knife/cookbook_download_spec.rb +4 -4
- data/spec/unit/knife/cookbook_metadata_from_file_spec.rb +1 -1
- data/spec/unit/knife/cookbook_upload_spec.rb +7 -10
- data/spec/unit/knife/core/hashed_command_loader_spec.rb +3 -3
- data/spec/unit/knife/core/windows_bootstrap_context_spec.rb +21 -12
- data/spec/unit/knife/supermarket_share_spec.rb +1 -1
- data/spec/unit/log/syslog_spec.rb +6 -10
- data/spec/unit/log/winevt_spec.rb +21 -13
- data/spec/unit/lwrp_spec.rb +4 -4
- data/spec/unit/mixin/{path_sanity_spec.rb → default_paths_spec.rb} +14 -14
- data/spec/unit/mixin/powershell_exec_spec.rb +1 -1
- data/spec/unit/mixin/securable_spec.rb +0 -1
- data/spec/unit/mixin/shell_out_spec.rb +25 -26
- data/spec/unit/mixin/template_spec.rb +30 -30
- data/spec/unit/mixin/which.rb +8 -0
- data/spec/unit/mixin/windows_architecture_helper_spec.rb +4 -4
- data/spec/unit/node/immutable_collections_spec.rb +6 -2
- data/spec/unit/node_spec.rb +103 -16
- data/spec/unit/property_spec.rb +5 -5
- data/spec/unit/provider/execute_spec.rb +0 -7
- data/spec/unit/provider/ifconfig_spec.rb +0 -1
- data/spec/unit/provider/package/dnf/python_helper_spec.rb +1 -1
- data/spec/unit/provider/package/rubygems_spec.rb +5 -10
- data/spec/unit/provider/package/smartos_spec.rb +1 -1
- data/spec/unit/provider/package/windows_spec.rb +30 -53
- data/spec/unit/provider/powershell_script_spec.rb +11 -4
- data/spec/unit/provider/remote_directory_spec.rb +9 -9
- data/spec/unit/provider/service/arch_service_spec.rb +3 -2
- data/spec/unit/provider/service/debian_service_spec.rb +1 -1
- data/spec/unit/provider/service/gentoo_service_spec.rb +7 -7
- data/spec/unit/provider/service/macosx_spec.rb +3 -3
- data/spec/unit/provider/service/redhat_spec.rb +3 -3
- data/spec/unit/provider/service/upstart_service_spec.rb +3 -3
- data/spec/unit/provider/service/windows_spec.rb +2 -6
- data/spec/unit/provider/systemd_unit_spec.rb +28 -24
- data/spec/unit/provider_resolver_spec.rb +6 -6
- data/spec/unit/provider_spec.rb +1 -0
- data/spec/unit/resource/batch_spec.rb +6 -6
- data/spec/unit/resource/execute_spec.rb +123 -118
- data/spec/unit/resource/macos_user_defaults_spec.rb +103 -2
- data/spec/unit/resource/osx_profile_spec.rb +233 -0
- data/spec/unit/resource/powershell_script_spec.rb +11 -29
- data/spec/unit/resource/script_spec.rb +6 -1
- data/spec/unit/resource/timezone_spec.rb +63 -0
- data/spec/unit/resource/windows_feature_powershell_spec.rb +30 -4
- data/spec/unit/resource/windows_firewall_profile_spec.rb +77 -0
- data/spec/unit/resource/windows_package_spec.rb +1 -0
- data/spec/unit/resource_reporter_spec.rb +1 -1
- data/spec/unit/role_spec.rb +11 -11
- data/spec/unit/run_context/cookbook_compiler_spec.rb +1 -1
- data/spec/unit/run_lock_spec.rb +1 -1
- data/spec/unit/scan_access_control_spec.rb +1 -1
- data/spec/unit/server_api_spec.rb +43 -16
- data/spec/unit/util/diff_spec.rb +1 -15
- data/spec/unit/win32/security_spec.rb +4 -3
- data/tasks/rspec.rb +1 -1
- metadata +39 -31
- data/lib/chef/provider/osx_profile.rb +0 -255
- data/spec/unit/provider/osx_profile_spec.rb +0 -255
@@ -19,16 +19,33 @@
|
|
19
19
|
|
20
20
|
class Chef
|
21
21
|
module Mixin
|
22
|
-
# == Chef::Mixin::DeepMerge
|
23
22
|
# Implements a deep merging algorithm for nested data structures.
|
24
|
-
#
|
25
|
-
#
|
26
|
-
#
|
27
|
-
#
|
23
|
+
#
|
24
|
+
# This code was originally imported from deep_merge by Steve Midgley.
|
25
|
+
# deep_merge is available under the MIT license from
|
26
|
+
# http://trac.misuse.org/science/wiki/DeepMerge
|
27
|
+
#
|
28
|
+
# Note that this is not considered a public interface. It is technically
|
29
|
+
# public and has been used and we cannot break the API, but continued
|
30
|
+
# external use is discouraged. We are unlikely to change the shape of
|
31
|
+
# the API and break anyone, but this code does not serve the purposes of
|
32
|
+
# cookbook authors and customers. It is intended only for the purposes
|
33
|
+
# of the internal use in the chef-client codebase. We do not accept
|
34
|
+
# pull requests to extend the functionality of this algorithm. Users
|
35
|
+
# who find this does nearly what they want, should copy and paste the
|
36
|
+
# algorithm and tune to their needs. We will not maintain any additional
|
37
|
+
# use cases.
|
38
|
+
#
|
39
|
+
# "It is what it is, and if it isn't what you want, you need to build
|
40
|
+
# that yourself"
|
41
|
+
#
|
42
|
+
# @api private
|
43
|
+
#
|
28
44
|
module DeepMerge
|
29
45
|
|
30
46
|
extend self
|
31
47
|
|
48
|
+
# @api private
|
32
49
|
def merge(first, second)
|
33
50
|
first = Mash.new(first) unless first.is_a?(Mash)
|
34
51
|
second = Mash.new(second) unless second.is_a?(Mash)
|
@@ -38,20 +55,25 @@ class Chef
|
|
38
55
|
|
39
56
|
class InvalidParameter < StandardError; end
|
40
57
|
|
41
|
-
# Deep Merge core documentation.
|
42
58
|
# deep_merge! method permits merging of arbitrary child elements. The two top level
|
43
59
|
# elements must be hashes. These hashes can contain unlimited (to stack limit) levels
|
44
60
|
# of child elements. These child elements to not have to be of the same types.
|
45
61
|
# Where child elements are of the same type, deep_merge will attempt to merge them together.
|
46
62
|
# Where child elements are not of the same type, deep_merge will skip or optionally overwrite
|
47
63
|
# the destination element with the contents of the source element at that level.
|
64
|
+
#
|
48
65
|
# So if you have two hashes like this:
|
66
|
+
#
|
49
67
|
# source = {:x => [1,2,3], :y => 2}
|
50
68
|
# dest = {:x => [4,5,'6'], :y => [7,8,9]}
|
51
69
|
# dest.deep_merge!(source)
|
52
70
|
# Results: {:x => [1,2,3,4,5,'6'], :y => 2}
|
71
|
+
#
|
53
72
|
# By default, "deep_merge!" will overwrite any unmergeables and merge everything else.
|
54
73
|
# To avoid this, use "deep_merge" (no bang/exclamation mark)
|
74
|
+
#
|
75
|
+
# @api private
|
76
|
+
#
|
55
77
|
def deep_merge!(source, dest)
|
56
78
|
# if dest doesn't exist, then simply copy source to it
|
57
79
|
if dest.nil?
|
@@ -87,10 +109,12 @@ class Chef
|
|
87
109
|
dest
|
88
110
|
end # deep_merge!
|
89
111
|
|
112
|
+
# @api private
|
90
113
|
def hash_only_merge(merge_onto, merge_with)
|
91
114
|
hash_only_merge!(safe_dup(merge_onto), safe_dup(merge_with))
|
92
115
|
end
|
93
116
|
|
117
|
+
# @api private
|
94
118
|
def safe_dup(thing)
|
95
119
|
thing.dup
|
96
120
|
rescue TypeError
|
@@ -101,6 +125,9 @@ class Chef
|
|
101
125
|
# `merge_onto` is the object that will "lose" in case of conflict.
|
102
126
|
# `merge_with` is the object whose values will replace `merge_onto`s
|
103
127
|
# values when there is a conflict.
|
128
|
+
#
|
129
|
+
# @api private
|
130
|
+
#
|
104
131
|
def hash_only_merge!(merge_onto, merge_with)
|
105
132
|
# If there are two Hashes, recursively merge.
|
106
133
|
if merge_onto.is_a?(Hash) && merge_with.is_a?(Hash)
|
@@ -131,6 +158,8 @@ class Chef
|
|
131
158
|
end
|
132
159
|
end
|
133
160
|
|
161
|
+
# @api private
|
162
|
+
#
|
134
163
|
def deep_merge(source, dest)
|
135
164
|
deep_merge!(safe_dup(source), safe_dup(dest))
|
136
165
|
end
|
@@ -1,5 +1,4 @@
|
|
1
1
|
#
|
2
|
-
# Author:: Adam Jacob (<adam@chef.io>)
|
3
2
|
# Copyright:: Copyright (c) Chef Software Inc.
|
4
3
|
# License:: Apache License, Version 2.0
|
5
4
|
#
|
@@ -16,9 +15,18 @@
|
|
16
15
|
# limitations under the License.
|
17
16
|
#
|
18
17
|
|
19
|
-
require "
|
20
|
-
require "logger"
|
21
|
-
require "spec_helper"
|
18
|
+
require "chef-utils/dsl/default_paths" unless defined?(ChefUtils::DSL::DefaultPaths)
|
22
19
|
|
23
|
-
|
20
|
+
class Chef
|
21
|
+
module Mixin
|
22
|
+
module DefaultPaths
|
23
|
+
include ChefUtils::DSL::DefaultPaths
|
24
|
+
|
25
|
+
def enforce_default_paths(env = ENV)
|
26
|
+
if Chef::Config[:enforce_default_paths] || Chef::Config[:enforce_path_sanity]
|
27
|
+
env["PATH"] = default_paths(env)
|
28
|
+
end
|
29
|
+
end
|
30
|
+
end
|
31
|
+
end
|
24
32
|
end
|
@@ -282,7 +282,9 @@ class Chef
|
|
282
282
|
ef.issuer_certificate = info["issuer"]
|
283
283
|
end
|
284
284
|
ef.subject_certificate = cert
|
285
|
-
|
285
|
+
if openssl_config = __openssl_config
|
286
|
+
ef.config = openssl_config
|
287
|
+
end
|
286
288
|
|
287
289
|
cert.extensions = extension
|
288
290
|
cert.add_extension ef.create_extension("subjectKeyIdentifier", "hash")
|
@@ -313,7 +315,9 @@ class Chef
|
|
313
315
|
crl.last_update = Time.now
|
314
316
|
crl.next_update = Time.now + 3600 * 24 * info["validity"]
|
315
317
|
|
316
|
-
|
318
|
+
if openssl_config = __openssl_config
|
319
|
+
ef.config = openssl_config
|
320
|
+
end
|
317
321
|
ef.issuer_certificate = info["issuer"]
|
318
322
|
|
319
323
|
crl.add_extension ::OpenSSL::X509::Extension.new("crlNumber", ::OpenSSL::ASN1::Integer(1))
|
@@ -369,8 +373,7 @@ class Chef
|
|
369
373
|
revoked.add_extension(ext)
|
370
374
|
crl.add_revoked(revoked)
|
371
375
|
|
372
|
-
|
373
|
-
crl
|
376
|
+
renew_x509_crl(crl, ca_private_key, info)
|
374
377
|
end
|
375
378
|
|
376
379
|
# renew a X509 crl given
|
@@ -391,7 +394,9 @@ class Chef
|
|
391
394
|
crl.next_update = crl.last_update + 3600 * 24 * info["validity"]
|
392
395
|
|
393
396
|
ef = ::OpenSSL::X509::ExtensionFactory.new
|
394
|
-
|
397
|
+
if openssl_config = __openssl_config
|
398
|
+
ef.config = openssl_config
|
399
|
+
end
|
395
400
|
ef.issuer_certificate = info["issuer"]
|
396
401
|
|
397
402
|
crl.extensions = [ ::OpenSSL::X509::Extension.new("crlNumber",
|
@@ -407,7 +412,7 @@ class Chef
|
|
407
412
|
# @param [string] cert_file path of the cert file or cert content
|
408
413
|
# @param [integer] renew_before_expiry number of days before expiration
|
409
414
|
# @return [true, false]
|
410
|
-
def
|
415
|
+
def cert_need_renewal?(cert_file, renew_before_expiry)
|
411
416
|
resp = true
|
412
417
|
cert_content = ::File.exist?(cert_file) ? File.read(cert_file) : cert_file
|
413
418
|
begin
|
@@ -422,6 +427,25 @@ class Chef
|
|
422
427
|
|
423
428
|
resp
|
424
429
|
end
|
430
|
+
|
431
|
+
alias_method :cert_need_renewall?, :cert_need_renewal?
|
432
|
+
|
433
|
+
private
|
434
|
+
|
435
|
+
def __openssl_config
|
436
|
+
path = if File.exist?(::OpenSSL::Config::DEFAULT_CONFIG_FILE)
|
437
|
+
OpenSSL::Config::DEFAULT_CONFIG_FILE
|
438
|
+
else
|
439
|
+
Dir[File.join(RbConfig::CONFIG["prefix"], "**", "openssl.cnf")].first
|
440
|
+
end
|
441
|
+
|
442
|
+
if File.exist?(path)
|
443
|
+
::OpenSSL::Config.load(path)
|
444
|
+
else
|
445
|
+
Chef::Log.warn("Couldn't find OpenSSL config file")
|
446
|
+
nil
|
447
|
+
end
|
448
|
+
end
|
425
449
|
end
|
426
450
|
end
|
427
451
|
end
|
@@ -16,14 +16,15 @@
|
|
16
16
|
# limitations under the License.
|
17
17
|
#
|
18
18
|
|
19
|
+
require_relative "default_paths"
|
20
|
+
|
19
21
|
class Chef
|
20
22
|
module Mixin
|
21
|
-
# @ deprecated
|
22
23
|
module PathSanity
|
24
|
+
include Chef::Mixin::DefaultPaths
|
25
|
+
|
23
26
|
def enforce_path_sanity(env = ENV)
|
24
|
-
|
25
|
-
env["PATH"] = ChefUtils::DSL::PathSanity.sanitized_path(env)
|
26
|
-
end
|
27
|
+
enforce_default_paths(env)
|
27
28
|
end
|
28
29
|
end
|
29
30
|
end
|
data/lib/chef/mixin/shell_out.rb
CHANGED
@@ -15,198 +15,14 @@
|
|
15
15
|
# See the License for the specific language governing permissions and
|
16
16
|
# limitations under the License.
|
17
17
|
|
18
|
-
require "mixlib/shellout" unless defined?(Mixlib::ShellOut::
|
19
|
-
|
18
|
+
require "mixlib/shellout/helper" unless defined?(Mixlib::ShellOut::Helper)
|
19
|
+
require_relative "chef_utils_wiring" unless defined?(Chef::Mixin::ChefUtilsWiring)
|
20
20
|
|
21
21
|
class Chef
|
22
22
|
module Mixin
|
23
23
|
module ShellOut
|
24
|
-
|
25
|
-
|
26
|
-
#
|
27
|
-
# all consumers should now call shell_out!/shell_out.
|
28
|
-
#
|
29
|
-
# the shell_out_compacted/shell_out_compacted! APIs are private but are intended for use
|
30
|
-
# in rspec tests, and should ideally always be used to make code refactoring that do not
|
31
|
-
# change behavior easier:
|
32
|
-
#
|
33
|
-
# allow(provider).to receive(:shell_out_compacted!).with("foo", "bar", "baz")
|
34
|
-
# provider.shell_out!("foo", [ "bar", nil, "baz"])
|
35
|
-
# provider.shell_out!(["foo", nil, "bar" ], ["baz"])
|
36
|
-
#
|
37
|
-
# note that shell_out_compacted also includes adding the magical timeout option to force
|
38
|
-
# people to setup expectations on that value explicitly. it does not include the default_env
|
39
|
-
# mangling in order to avoid users having to setup an expectation on anything other than
|
40
|
-
# setting `default_env: false` and allow us to make tweak to the default_env without breaking
|
41
|
-
# a thousand unit tests.
|
42
|
-
#
|
43
|
-
|
44
|
-
def shell_out(*args, **options)
|
45
|
-
options = options.dup
|
46
|
-
options = Chef::Mixin::ShellOut.maybe_add_timeout(self, options)
|
47
|
-
if options.empty?
|
48
|
-
shell_out_compacted(*Chef::Mixin::ShellOut.clean_array(*args))
|
49
|
-
else
|
50
|
-
shell_out_compacted(*Chef::Mixin::ShellOut.clean_array(*args), **options)
|
51
|
-
end
|
52
|
-
end
|
53
|
-
|
54
|
-
def shell_out!(*args, **options)
|
55
|
-
options = options.dup
|
56
|
-
options = Chef::Mixin::ShellOut.maybe_add_timeout(self, options)
|
57
|
-
if options.empty?
|
58
|
-
shell_out_compacted!(*Chef::Mixin::ShellOut.clean_array(*args))
|
59
|
-
else
|
60
|
-
shell_out_compacted!(*Chef::Mixin::ShellOut.clean_array(*args), **options)
|
61
|
-
end
|
62
|
-
end
|
63
|
-
|
64
|
-
# helper sugar for resources that support passing timeouts to shell_out
|
65
|
-
#
|
66
|
-
# module method to not pollute namespaces, but that means we need self injected as an arg
|
67
|
-
# @api private
|
68
|
-
def self.maybe_add_timeout(obj, options)
|
69
|
-
options = options.dup
|
70
|
-
# historically resources have not properly declared defaults on their timeouts, so a default default of 900s was enforced here
|
71
|
-
default_val = 900
|
72
|
-
return options if options.key?(:timeout)
|
73
|
-
|
74
|
-
# FIXME: need to nuke descendent tracker out of Chef::Provider so we can just define that class here without requiring the
|
75
|
-
# world, and then just use symbol lookup
|
76
|
-
if obj.class.ancestors.map(&:name).include?("Chef::Provider") && obj.respond_to?(:new_resource) && obj.new_resource.respond_to?(:timeout) && !options.key?(:timeout)
|
77
|
-
options[:timeout] = obj.new_resource.timeout ? obj.new_resource.timeout.to_f : default_val
|
78
|
-
end
|
79
|
-
options
|
80
|
-
end
|
81
|
-
|
82
|
-
# helper function to mangle options when `default_env` is true
|
83
|
-
#
|
84
|
-
# @api private
|
85
|
-
def self.apply_default_env(options)
|
86
|
-
options = options.dup
|
87
|
-
default_env = options.delete(:default_env)
|
88
|
-
default_env = true if default_env.nil?
|
89
|
-
if default_env
|
90
|
-
env_key = options.key?(:env) ? :env : :environment
|
91
|
-
options[env_key] = {
|
92
|
-
"LC_ALL" => Chef::Config[:internal_locale],
|
93
|
-
"LANGUAGE" => Chef::Config[:internal_locale],
|
94
|
-
"LANG" => Chef::Config[:internal_locale],
|
95
|
-
env_path => ChefUtils::DSL::PathSanity.sanitized_path,
|
96
|
-
}.update(options[env_key] || {})
|
97
|
-
end
|
98
|
-
options
|
99
|
-
end
|
100
|
-
|
101
|
-
private
|
102
|
-
|
103
|
-
# this SHOULD be used for setting up expectations in rspec, see banner comment at top.
|
104
|
-
#
|
105
|
-
# the private constraint is meant to avoid code calling this directly, rspec expectations are fine.
|
106
|
-
#
|
107
|
-
def shell_out_compacted(*args, **options)
|
108
|
-
options = Chef::Mixin::ShellOut.apply_default_env(options)
|
109
|
-
if options.empty?
|
110
|
-
Chef::Mixin::ShellOut.shell_out_command(*args)
|
111
|
-
else
|
112
|
-
Chef::Mixin::ShellOut.shell_out_command(*args, **options)
|
113
|
-
end
|
114
|
-
end
|
115
|
-
|
116
|
-
# this SHOULD be used for setting up expectations in rspec, see banner comment at top.
|
117
|
-
#
|
118
|
-
# the private constraint is meant to avoid code calling this directly, rspec expectations are fine.
|
119
|
-
#
|
120
|
-
def shell_out_compacted!(*args, **options)
|
121
|
-
options = Chef::Mixin::ShellOut.apply_default_env(options)
|
122
|
-
cmd = if options.empty?
|
123
|
-
Chef::Mixin::ShellOut.shell_out_command(*args)
|
124
|
-
else
|
125
|
-
Chef::Mixin::ShellOut.shell_out_command(*args, **options)
|
126
|
-
end
|
127
|
-
cmd.error!
|
128
|
-
cmd
|
129
|
-
end
|
130
|
-
|
131
|
-
# Helper for subclasses to reject nil out of an array. It allows
|
132
|
-
# using the array form of shell_out (which avoids the need to surround arguments with
|
133
|
-
# quote marks to deal with shells).
|
134
|
-
#
|
135
|
-
# Usage:
|
136
|
-
# shell_out!(*clean_array("useradd", universal_options, useradd_options, new_resource.username))
|
137
|
-
#
|
138
|
-
# universal_options and useradd_options can be nil, empty array, empty string, strings or arrays
|
139
|
-
# and the result makes sense.
|
140
|
-
#
|
141
|
-
# keeping this separate from shell_out!() makes it a bit easier to write expectations against the
|
142
|
-
# shell_out args and be able to omit nils and such in the tests (and to test that the nils are
|
143
|
-
# being rejected correctly).
|
144
|
-
#
|
145
|
-
# @param args [String] variable number of string arguments
|
146
|
-
# @return [Array] array of strings with nil and null string rejection
|
147
|
-
|
148
|
-
def self.clean_array(*args)
|
149
|
-
args.flatten.compact.map(&:to_s)
|
150
|
-
end
|
151
|
-
|
152
|
-
def self.transport_connection
|
153
|
-
Chef.run_context.transport_connection
|
154
|
-
end
|
155
|
-
|
156
|
-
def self.shell_out_command(*args, **options)
|
157
|
-
if Chef::Config.target_mode?
|
158
|
-
FakeShellOut.new(args, options, transport_connection.run_command(args.join(" "))) # FIXME: train should accept run_command(*args)
|
159
|
-
else
|
160
|
-
cmd = if options.empty?
|
161
|
-
Mixlib::ShellOut.new(*args)
|
162
|
-
else
|
163
|
-
Mixlib::ShellOut.new(*args, **options)
|
164
|
-
end
|
165
|
-
cmd.live_stream ||= io_for_live_stream
|
166
|
-
cmd.run_command
|
167
|
-
cmd
|
168
|
-
end
|
169
|
-
end
|
170
|
-
|
171
|
-
def self.io_for_live_stream
|
172
|
-
if STDOUT.tty? && !Chef::Config[:daemon] && Chef::Log.debug?
|
173
|
-
STDOUT
|
174
|
-
else
|
175
|
-
nil
|
176
|
-
end
|
177
|
-
end
|
178
|
-
|
179
|
-
def self.env_path
|
180
|
-
if ChefUtils.windows?
|
181
|
-
"Path"
|
182
|
-
else
|
183
|
-
"PATH"
|
184
|
-
end
|
185
|
-
end
|
186
|
-
|
187
|
-
class FakeShellOut
|
188
|
-
attr_reader :stdout, :stderr, :exitstatus, :status
|
189
|
-
|
190
|
-
def initialize(args, options, result)
|
191
|
-
@args = args
|
192
|
-
@options = options
|
193
|
-
@stdout = result.stdout
|
194
|
-
@stderr = result.stderr
|
195
|
-
@exitstatus = result.exit_status
|
196
|
-
@status = OpenStruct.new(success?: ( exitstatus == 0 ))
|
197
|
-
end
|
198
|
-
|
199
|
-
def error?
|
200
|
-
exitstatus != 0
|
201
|
-
end
|
202
|
-
|
203
|
-
def error!
|
204
|
-
raise Mixlib::ShellOut::ShellCommandFailed, "Unexpected exit status of #{exitstatus} running #{@args}" if error?
|
205
|
-
end
|
206
|
-
end
|
24
|
+
include Mixlib::ShellOut::Helper
|
25
|
+
include Chef::Mixin::ChefUtilsWiring
|
207
26
|
end
|
208
27
|
end
|
209
28
|
end
|
210
|
-
|
211
|
-
# Break circular dep
|
212
|
-
require_relative "../config"
|
data/lib/chef/mixin/template.rb
CHANGED
data/lib/chef/mixin/which.rb
CHANGED
@@ -16,20 +16,23 @@
|
|
16
16
|
# limitations under the License.
|
17
17
|
|
18
18
|
require "chef-utils/dsl/which" unless defined?(ChefUtils::DSL::Which)
|
19
|
-
require "chef-utils/dsl/
|
19
|
+
require "chef-utils/dsl/default_paths" unless defined?(ChefUtils::DSL::DefaultPaths)
|
20
|
+
require_relative "chef_utils_wiring" unless defined?(Chef::Mixin::ChefUtilsWiring)
|
20
21
|
|
21
22
|
class Chef
|
22
23
|
module Mixin
|
23
24
|
module Which
|
24
25
|
include ChefUtils::DSL::Which
|
26
|
+
include ChefUtils::DSL::DefaultPaths
|
27
|
+
include ChefUtilsWiring
|
25
28
|
|
26
29
|
private
|
27
30
|
|
28
|
-
# we dep-inject
|
31
|
+
# we dep-inject default paths into this API for historical reasons
|
29
32
|
#
|
30
33
|
# @api private
|
31
34
|
def __extra_path
|
32
|
-
|
35
|
+
__default_paths
|
33
36
|
end
|
34
37
|
end
|
35
38
|
end
|