chef 16.2.73-universal-mingw32 → 16.4.41-universal-mingw32
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/Gemfile +4 -4
- data/Rakefile +1 -1
- data/chef-universal-mingw32.gemspec +2 -3
- data/chef.gemspec +2 -1
- data/lib/chef/action_collection.rb +4 -0
- data/lib/chef/api_client/registration.rb +2 -2
- data/lib/chef/application.rb +13 -1
- data/lib/chef/application/apply.rb +5 -5
- data/lib/chef/application/windows_service.rb +27 -27
- data/lib/chef/{whitelist.rb → attribute_allowlist.rb} +11 -11
- data/lib/chef/{blacklist.rb → attribute_blocklist.rb} +9 -9
- data/lib/chef/chef_class.rb +0 -1
- data/lib/chef/chef_fs/chef_fs_data_store.rb +54 -54
- data/lib/chef/chef_fs/data_handler/organization_data_handler.rb +1 -2
- data/lib/chef/chef_fs/file_system/chef_server/acl_entry.rb +10 -10
- data/lib/chef/chef_fs/file_system/chef_server/cookbooks_dir.rb +1 -5
- data/lib/chef/chef_fs/file_system/chef_server/organization_invites_entry.rb +8 -8
- data/lib/chef/chef_fs/file_system/chef_server/organization_members_entry.rb +8 -8
- data/lib/chef/chef_fs/file_system/repository/base_file.rb +1 -0
- data/lib/chef/chef_fs/file_system/repository/chef_repository_file_system_cookbook_dir.rb +2 -2
- data/lib/chef/chef_fs/file_system/repository/chef_repository_file_system_cookbook_entry.rb +1 -1
- data/lib/chef/chef_fs/file_system/repository/chef_repository_file_system_root_dir.rb +18 -18
- data/lib/chef/chef_fs/file_system/repository/directory.rb +1 -1
- data/lib/chef/chef_fs/file_system/repository/file_system_entry.rb +1 -1
- data/lib/chef/chef_fs/parallelizer/parallel_enumerable.rb +1 -1
- data/lib/chef/client.rb +14 -14
- data/lib/chef/cookbook/remote_file_vendor.rb +1 -3
- data/lib/chef/cookbook/syntax_check.rb +1 -2
- data/lib/chef/cookbook_loader.rb +15 -29
- data/lib/chef/data_bag.rb +1 -2
- data/lib/chef/data_collector/run_end_message.rb +11 -1
- data/lib/chef/deprecated.rb +8 -0
- data/lib/chef/dsl/platform_introspection.rb +9 -7
- data/lib/chef/encrypted_data_bag_item/decryptor.rb +1 -1
- data/lib/chef/environment.rb +3 -4
- data/lib/chef/exceptions.rb +4 -1
- data/lib/chef/file_content_management/tempfile.rb +9 -9
- data/lib/chef/handler.rb +2 -0
- data/lib/chef/http.rb +11 -11
- data/lib/chef/http/authenticator.rb +3 -1
- data/lib/chef/json_compat.rb +1 -1
- data/lib/chef/knife.rb +4 -4
- data/lib/chef/knife/bootstrap.rb +6 -12
- data/lib/chef/knife/bootstrap/train_connector.rb +1 -0
- data/lib/chef/knife/config_get.rb +1 -0
- data/lib/chef/knife/config_list_profiles.rb +4 -1
- data/lib/chef/knife/configure.rb +3 -1
- data/lib/chef/knife/cookbook_download.rb +1 -1
- data/lib/chef/knife/cookbook_metadata.rb +1 -1
- data/lib/chef/knife/cookbook_upload.rb +28 -33
- data/lib/chef/knife/core/gem_glob_loader.rb +1 -1
- data/lib/chef/knife/core/generic_presenter.rb +1 -1
- data/lib/chef/knife/core/hashed_command_loader.rb +3 -2
- data/lib/chef/knife/core/subcommand_loader.rb +20 -1
- data/lib/chef/knife/core/ui.rb +8 -2
- data/lib/chef/knife/core/windows_bootstrap_context.rb +32 -25
- data/lib/chef/knife/delete.rb +15 -15
- data/lib/chef/knife/exec.rb +2 -2
- data/lib/chef/knife/rehash.rb +3 -21
- data/lib/chef/knife/ssh.rb +11 -7
- data/lib/chef/knife/xargs.rb +19 -19
- data/lib/chef/knife/yaml_convert.rb +1 -1
- data/lib/chef/log.rb +7 -2
- data/lib/chef/mixin/checksum.rb +0 -1
- data/lib/chef/mixin/chef_utils_wiring.rb +40 -0
- data/lib/chef/mixin/deep_merge.rb +35 -6
- data/{spec/unit/log_spec.rb → lib/chef/mixin/default_paths.rb} +13 -5
- data/lib/chef/mixin/openssl_helper.rb +30 -6
- data/lib/chef/mixin/path_sanity.rb +5 -4
- data/lib/chef/mixin/shell_out.rb +4 -188
- data/lib/chef/mixin/template.rb +1 -0
- data/lib/chef/mixin/which.rb +6 -3
- data/lib/chef/mixins.rb +1 -0
- data/lib/chef/monkey_patches/webrick-utils.rb +10 -10
- data/lib/chef/node.rb +36 -12
- data/lib/chef/node/attribute.rb +2 -4
- data/lib/chef/node_map.rb +21 -18
- data/lib/chef/platform/service_helpers.rb +31 -28
- data/lib/chef/property.rb +1 -1
- data/lib/chef/provider/cron/unix.rb +0 -2
- data/lib/chef/provider/git.rb +17 -9
- data/lib/chef/provider/group.rb +0 -2
- data/lib/chef/provider/group/suse.rb +5 -5
- data/lib/chef/provider/ifconfig.rb +1 -4
- data/lib/chef/provider/mount.rb +0 -2
- data/lib/chef/provider/mount/solaris.rb +0 -1
- data/lib/chef/provider/package.rb +0 -2
- data/lib/chef/provider/package/rubygems.rb +1 -1
- data/lib/chef/provider/package/snap.rb +3 -4
- data/lib/chef/provider/package/windows.rb +9 -4
- data/lib/chef/provider/package/windows/registry_uninstall_entry.rb +9 -9
- data/lib/chef/provider/package/zypper.rb +0 -1
- data/lib/chef/provider/powershell_script.rb +21 -5
- data/lib/chef/provider/route.rb +1 -1
- data/lib/chef/provider/service.rb +2 -2
- data/lib/chef/provider/service/arch.rb +1 -1
- data/lib/chef/provider/service/debian.rb +1 -1
- data/lib/chef/provider/service/gentoo.rb +2 -2
- data/lib/chef/provider/service/macosx.rb +2 -2
- data/lib/chef/provider/service/openbsd.rb +1 -4
- data/lib/chef/provider/service/redhat.rb +2 -2
- data/lib/chef/provider/service/upstart.rb +1 -1
- data/lib/chef/provider/service/windows.rb +10 -10
- data/lib/chef/provider/systemd_unit.rb +0 -2
- data/lib/chef/provider/template/content.rb +1 -0
- data/lib/chef/provider/user/dscl.rb +2 -2
- data/lib/chef/provider/user/mac.rb +9 -9
- data/lib/chef/provider/windows_task.rb +0 -3
- data/lib/chef/provider/yum_repository.rb +1 -1
- data/lib/chef/provider/zypper_repository.rb +1 -2
- data/lib/chef/providers.rb +0 -1
- data/lib/chef/recipe.rb +1 -1
- data/lib/chef/resource.rb +8 -10
- data/lib/chef/resource/apt_repository.rb +1 -10
- data/lib/chef/resource/build_essential.rb +2 -2
- data/lib/chef/resource/chef_client_scheduled_task.rb +1 -1
- data/lib/chef/resource/chef_client_systemd_timer.rb +2 -2
- data/lib/chef/resource/chef_vault_secret.rb +13 -13
- data/lib/chef/resource/chocolatey_feature.rb +1 -2
- data/lib/chef/resource/cron/cron_d.rb +1 -1
- data/lib/chef/resource/cron_access.rb +2 -2
- data/lib/chef/resource/execute.rb +4 -5
- data/lib/chef/resource/homebrew_update.rb +2 -2
- data/lib/chef/resource/hostname.rb +18 -18
- data/lib/chef/resource/lwrp_base.rb +1 -0
- data/lib/chef/resource/macos_userdefaults.rb +176 -61
- data/lib/chef/resource/openssl_dhparam.rb +2 -0
- data/lib/chef/resource/openssl_ec_private_key.rb +2 -0
- data/lib/chef/resource/openssl_ec_public_key.rb +2 -0
- data/lib/chef/resource/openssl_rsa_private_key.rb +2 -0
- data/lib/chef/resource/openssl_rsa_public_key.rb +2 -0
- data/lib/chef/resource/openssl_x509_certificate.rb +35 -35
- data/lib/chef/resource/openssl_x509_crl.rb +3 -2
- data/lib/chef/resource/openssl_x509_request.rb +23 -20
- data/lib/chef/resource/osx_profile.rb +227 -5
- data/lib/chef/resource/powershell_package_source.rb +1 -1
- data/lib/chef/resource/powershell_script.rb +24 -30
- data/lib/chef/resource/service.rb +2 -2
- data/lib/chef/resource/ssh_known_hosts_entry.rb +1 -1
- data/lib/chef/resource/sudo.rb +2 -2
- data/lib/chef/resource/sysctl.rb +5 -5
- data/lib/chef/resource/timezone.rb +112 -73
- data/lib/chef/resource/user_ulimit.rb +1 -1
- data/lib/chef/resource/windows_ad_join.rb +2 -0
- data/lib/chef/resource/windows_audit_policy.rb +3 -0
- data/lib/chef/resource/windows_auto_run.rb +2 -0
- data/lib/chef/resource/windows_certificate.rb +2 -0
- data/lib/chef/resource/windows_dfs_folder.rb +2 -0
- data/lib/chef/resource/windows_dfs_namespace.rb +2 -0
- data/lib/chef/resource/windows_dfs_server.rb +2 -0
- data/lib/chef/resource/windows_dns_record.rb +25 -5
- data/lib/chef/resource/windows_dns_zone.rb +12 -7
- data/lib/chef/resource/windows_feature.rb +2 -0
- data/lib/chef/resource/windows_feature_dism.rb +10 -0
- data/lib/chef/resource/windows_feature_powershell.rb +14 -2
- data/lib/chef/resource/windows_firewall_profile.rb +199 -0
- data/lib/chef/resource/windows_firewall_rule.rb +5 -3
- data/lib/chef/resource/windows_font.rb +3 -1
- data/lib/chef/resource/windows_pagefile.rb +4 -0
- data/lib/chef/resource/windows_printer.rb +17 -18
- data/lib/chef/resource/windows_printer_port.rb +14 -13
- data/lib/chef/resource/windows_security_policy.rb +51 -20
- data/lib/chef/resource/windows_share.rb +5 -3
- data/lib/chef/resource/windows_shortcut.rb +2 -0
- data/lib/chef/resource/windows_uac.rb +2 -0
- data/lib/chef/resource/windows_user_privilege.rb +2 -0
- data/lib/chef/resource/windows_workgroup.rb +2 -3
- data/lib/chef/resource_collection/stepable_iterator.rb +1 -2
- data/lib/chef/resource_inspector.rb +7 -1
- data/lib/chef/resources.rb +1 -0
- data/lib/chef/role.rb +3 -4
- data/lib/chef/run_context/cookbook_compiler.rb +20 -20
- data/lib/chef/run_status.rb +2 -6
- data/lib/chef/server_api_versions.rb +4 -0
- data/lib/chef/shell.rb +1 -1
- data/lib/chef/shell/shell_session.rb +2 -0
- data/lib/chef/util/backup.rb +1 -1
- data/lib/chef/util/diff.rb +11 -12
- data/lib/chef/util/powershell/cmdlet.rb +1 -1
- data/lib/chef/version.rb +2 -2
- data/lib/chef/win32/file.rb +2 -2
- data/lib/chef/win32/file/version_info.rb +5 -5
- data/lib/chef/win32/registry.rb +1 -2
- data/spec/data/ssl/chef-rspec.cert +15 -15
- data/spec/functional/knife/ssh_spec.rb +5 -16
- data/spec/functional/resource/aix_service_spec.rb +0 -2
- data/spec/functional/resource/aixinit_service_spec.rb +7 -8
- data/spec/functional/resource/apt_package_spec.rb +0 -1
- data/spec/functional/resource/bff_spec.rb +2 -2
- data/spec/functional/resource/cookbook_file_spec.rb +1 -1
- data/spec/functional/resource/cron_spec.rb +0 -1
- data/spec/functional/resource/dsc_resource_spec.rb +1 -1
- data/spec/functional/resource/dsc_script_spec.rb +0 -1
- data/spec/functional/resource/git_spec.rb +23 -1
- data/spec/functional/resource/group_spec.rb +12 -8
- data/spec/functional/resource/insserv_spec.rb +4 -5
- data/spec/functional/resource/link_spec.rb +20 -20
- data/spec/functional/resource/powershell_script_spec.rb +4 -4
- data/spec/functional/resource/remote_file_spec.rb +1 -7
- data/spec/functional/resource/rpm_spec.rb +2 -2
- data/spec/functional/resource/windows_certificate_spec.rb +3 -3
- data/spec/functional/resource/windows_font_spec.rb +49 -0
- data/spec/functional/resource/windows_security_policy_spec.rb +0 -3
- data/spec/functional/resource/windows_user_privilege_spec.rb +1 -1
- data/spec/functional/run_lock_spec.rb +26 -25
- data/spec/functional/shell_spec.rb +5 -5
- data/spec/functional/util/powershell/cmdlet_spec.rb +1 -1
- data/spec/functional/version_spec.rb +1 -1
- data/spec/functional/win32/registry_spec.rb +8 -8
- data/spec/functional/win32/service_manager_spec.rb +1 -1
- data/spec/integration/knife/common_options_spec.rb +12 -12
- data/spec/integration/knife/config_get_profile_spec.rb +69 -68
- data/spec/integration/knife/config_get_spec.rb +126 -125
- data/spec/integration/knife/config_list_profiles_spec.rb +181 -152
- data/spec/integration/knife/config_use_profile_spec.rb +110 -109
- data/spec/integration/knife/cookbook_upload_spec.rb +27 -0
- data/spec/integration/knife/diff_spec.rb +3 -1
- data/spec/integration/knife/download_spec.rb +3 -1
- data/spec/integration/knife/serve_spec.rb +5 -5
- data/spec/integration/knife/upload_spec.rb +3 -1
- data/spec/integration/recipes/accumulator_spec.rb +1 -1
- data/spec/integration/recipes/lwrp_inline_resources_spec.rb +2 -2
- data/spec/integration/recipes/lwrp_spec.rb +1 -1
- data/spec/integration/recipes/notifies_spec.rb +1 -1
- data/spec/integration/recipes/notifying_block_spec.rb +1 -1
- data/spec/integration/recipes/recipe_dsl_spec.rb +1 -1
- data/spec/integration/recipes/resource_converge_if_changed_spec.rb +2 -0
- data/spec/integration/recipes/resource_load_spec.rb +2 -0
- data/spec/integration/recipes/unified_mode_spec.rb +1 -1
- data/spec/integration/recipes/use_partial_spec.rb +1 -1
- data/spec/scripts/ssl-serve.rb +1 -1
- data/spec/spec_helper.rb +16 -10
- data/spec/support/chef_helpers.rb +1 -20
- data/spec/support/platform_helpers.rb +9 -11
- data/spec/support/platforms/win32/spec_service.rb +1 -1
- data/spec/support/shared/functional/directory_resource.rb +1 -1
- data/spec/support/shared/functional/execute_resource.rb +1 -1
- data/spec/support/shared/functional/file_resource.rb +20 -21
- data/spec/support/shared/functional/win32_service.rb +1 -1
- data/spec/support/shared/functional/windows_script.rb +3 -3
- data/spec/support/shared/integration/integration_helper.rb +22 -52
- data/spec/support/shared/integration/knife_support.rb +2 -9
- data/spec/support/shared/unit/application_dot_d.rb +0 -1
- data/spec/support/shared/unit/script_resource.rb +6 -20
- data/spec/support/shared/unit/windows_script_resource.rb +15 -28
- data/spec/unit/application_spec.rb +4 -2
- data/spec/unit/chef_fs/file_system/operation_failed_error_spec.rb +2 -4
- data/spec/unit/chef_fs/{parallelizer.rb → parallelizer_spec.rb} +1 -1
- data/spec/unit/cookbook/gem_installer_spec.rb +2 -1
- data/spec/unit/data_collector_spec.rb +29 -1
- data/spec/unit/dsl/platform_introspection_spec.rb +1 -0
- data/spec/unit/environment_spec.rb +7 -7
- data/spec/unit/event_dispatch/dispatcher_spec.rb +3 -0
- data/spec/unit/http/api_versions_spec.rb +19 -1
- data/spec/unit/json_compat_spec.rb +1 -1
- data/spec/unit/knife/bootstrap_spec.rb +16 -20
- data/spec/unit/knife/cookbook_download_spec.rb +4 -4
- data/spec/unit/knife/cookbook_metadata_from_file_spec.rb +1 -1
- data/spec/unit/knife/cookbook_upload_spec.rb +7 -10
- data/spec/unit/knife/core/hashed_command_loader_spec.rb +3 -3
- data/spec/unit/knife/core/windows_bootstrap_context_spec.rb +21 -12
- data/spec/unit/knife/supermarket_share_spec.rb +1 -1
- data/spec/unit/log/syslog_spec.rb +6 -10
- data/spec/unit/log/winevt_spec.rb +21 -13
- data/spec/unit/lwrp_spec.rb +4 -4
- data/spec/unit/mixin/{path_sanity_spec.rb → default_paths_spec.rb} +14 -14
- data/spec/unit/mixin/powershell_exec_spec.rb +1 -1
- data/spec/unit/mixin/securable_spec.rb +0 -1
- data/spec/unit/mixin/shell_out_spec.rb +25 -26
- data/spec/unit/mixin/template_spec.rb +30 -30
- data/spec/unit/mixin/which.rb +8 -0
- data/spec/unit/mixin/windows_architecture_helper_spec.rb +4 -4
- data/spec/unit/node/immutable_collections_spec.rb +6 -2
- data/spec/unit/node_spec.rb +103 -16
- data/spec/unit/property_spec.rb +5 -5
- data/spec/unit/provider/execute_spec.rb +0 -7
- data/spec/unit/provider/ifconfig_spec.rb +0 -1
- data/spec/unit/provider/package/dnf/python_helper_spec.rb +1 -1
- data/spec/unit/provider/package/rubygems_spec.rb +5 -10
- data/spec/unit/provider/package/smartos_spec.rb +1 -1
- data/spec/unit/provider/package/windows_spec.rb +30 -53
- data/spec/unit/provider/powershell_script_spec.rb +11 -4
- data/spec/unit/provider/remote_directory_spec.rb +9 -9
- data/spec/unit/provider/service/arch_service_spec.rb +3 -2
- data/spec/unit/provider/service/debian_service_spec.rb +1 -1
- data/spec/unit/provider/service/gentoo_service_spec.rb +7 -7
- data/spec/unit/provider/service/macosx_spec.rb +3 -3
- data/spec/unit/provider/service/redhat_spec.rb +3 -3
- data/spec/unit/provider/service/upstart_service_spec.rb +3 -3
- data/spec/unit/provider/service/windows_spec.rb +2 -6
- data/spec/unit/provider/systemd_unit_spec.rb +28 -24
- data/spec/unit/provider_resolver_spec.rb +6 -6
- data/spec/unit/provider_spec.rb +1 -0
- data/spec/unit/resource/batch_spec.rb +6 -6
- data/spec/unit/resource/execute_spec.rb +123 -118
- data/spec/unit/resource/macos_user_defaults_spec.rb +103 -2
- data/spec/unit/resource/osx_profile_spec.rb +233 -0
- data/spec/unit/resource/powershell_script_spec.rb +11 -29
- data/spec/unit/resource/script_spec.rb +6 -1
- data/spec/unit/resource/timezone_spec.rb +63 -0
- data/spec/unit/resource/windows_feature_powershell_spec.rb +30 -4
- data/spec/unit/resource/windows_firewall_profile_spec.rb +77 -0
- data/spec/unit/resource/windows_package_spec.rb +1 -0
- data/spec/unit/resource_reporter_spec.rb +1 -1
- data/spec/unit/role_spec.rb +11 -11
- data/spec/unit/run_context/cookbook_compiler_spec.rb +1 -1
- data/spec/unit/run_lock_spec.rb +1 -1
- data/spec/unit/scan_access_control_spec.rb +1 -1
- data/spec/unit/server_api_spec.rb +43 -16
- data/spec/unit/util/diff_spec.rb +1 -15
- data/spec/unit/win32/security_spec.rb +4 -3
- data/tasks/rspec.rb +1 -1
- metadata +39 -31
- data/lib/chef/provider/osx_profile.rb +0 -255
- data/spec/unit/provider/osx_profile_spec.rb +0 -255
data/lib/chef/mixins.rb
CHANGED
@@ -6,6 +6,7 @@ require_relative "mixin/deep_merge"
|
|
6
6
|
require_relative "mixin/enforce_ownership_and_permissions"
|
7
7
|
require_relative "mixin/from_file"
|
8
8
|
require_relative "mixin/params_validate"
|
9
|
+
require_relative "mixin/default_paths"
|
9
10
|
require_relative "mixin/path_sanity"
|
10
11
|
require_relative "mixin/template"
|
11
12
|
require_relative "mixin/securable"
|
@@ -33,16 +33,16 @@ module WEBrick
|
|
33
33
|
last_error = nil
|
34
34
|
sockets = []
|
35
35
|
res.each do |ai|
|
36
|
-
|
37
|
-
|
38
|
-
|
39
|
-
|
40
|
-
|
41
|
-
|
42
|
-
|
43
|
-
|
44
|
-
|
45
|
-
|
36
|
+
|
37
|
+
logger.debug("TCPServer.new(#{ai[3]}, #{port})") if logger
|
38
|
+
sock = TCPServer.new(ai[3], port)
|
39
|
+
port = sock.addr[1] if port == 0
|
40
|
+
Utils.set_close_on_exec(sock)
|
41
|
+
sockets << sock
|
42
|
+
rescue => ex
|
43
|
+
logger.warn("TCPServer Error: #{ex}") if logger
|
44
|
+
last_error = ex
|
45
|
+
|
46
46
|
end
|
47
47
|
raise last_error if sockets.empty?
|
48
48
|
|
data/lib/chef/node.rb
CHANGED
@@ -34,8 +34,8 @@ require_relative "node/attribute"
|
|
34
34
|
require_relative "mash"
|
35
35
|
require_relative "json_compat"
|
36
36
|
require_relative "search/query"
|
37
|
-
require_relative "
|
38
|
-
require_relative "
|
37
|
+
require_relative "attribute_allowlist"
|
38
|
+
require_relative "attribute_blocklist"
|
39
39
|
|
40
40
|
class Chef
|
41
41
|
class Node
|
@@ -706,21 +706,45 @@ class Chef
|
|
706
706
|
end
|
707
707
|
end
|
708
708
|
|
709
|
+
# a method to handle the renamed configuration from whitelist -> allowed
|
710
|
+
# and to throw a deprecation warning when the old configuration is set
|
711
|
+
#
|
712
|
+
# @param [String] level the attribute level
|
713
|
+
def allowlist_or_whitelist_config(level)
|
714
|
+
if Chef::Config["#{level}_attribute_whitelist".to_sym]
|
715
|
+
Chef.deprecated(:attribute_blacklist_configuration, "Attribute whitelist configurations have been deprecated. Use the allowed_LEVEL_attribute configs instead")
|
716
|
+
Chef::Config["#{level}_attribute_whitelist".to_sym]
|
717
|
+
else
|
718
|
+
Chef::Config["allowed_#{level}_attributes".to_sym]
|
719
|
+
end
|
720
|
+
end
|
721
|
+
|
722
|
+
# a method to handle the renamed configuration from blacklist -> blocked
|
723
|
+
# and to throw a deprecation warning when the old configuration is set
|
724
|
+
#
|
725
|
+
# @param [String] level the attribute level
|
726
|
+
def blocklist_or_blacklist_config(level)
|
727
|
+
if Chef::Config["#{level}_attribute_blacklist".to_sym]
|
728
|
+
Chef.deprecated(:attribute_blacklist_configuration, "Attribute blacklist configurations have been deprecated. Use the blocked_LEVEL_attribute configs instead")
|
729
|
+
Chef::Config["#{level}_attribute_blacklist".to_sym]
|
730
|
+
else
|
731
|
+
Chef::Config["blocked_#{level}_attributes".to_sym]
|
732
|
+
end
|
733
|
+
end
|
734
|
+
|
709
735
|
def data_for_save
|
710
736
|
data = for_json
|
711
737
|
%w{automatic default normal override}.each do |level|
|
712
|
-
|
713
|
-
|
714
|
-
|
715
|
-
|
716
|
-
data[level] = Chef::Whitelist.filter(data[level], whitelist)
|
738
|
+
allowlist = allowlist_or_whitelist_config(level)
|
739
|
+
unless allowlist.nil? # nil => save everything
|
740
|
+
logger.info("Allowing #{level} node attributes for save.")
|
741
|
+
data[level] = Chef::AttributeAllowlist.filter(data[level], allowlist)
|
717
742
|
end
|
718
743
|
|
719
|
-
|
720
|
-
|
721
|
-
|
722
|
-
|
723
|
-
data[level] = Chef::Blacklist.filter(data[level], blacklist)
|
744
|
+
blocklist = blocklist_or_blacklist_config(level)
|
745
|
+
unless blocklist.nil? # nil => remove nothing
|
746
|
+
logger.info("Blocking #{level} node attributes for save")
|
747
|
+
data[level] = Chef::AttributeBlocklist.filter(data[level], blocklist)
|
724
748
|
end
|
725
749
|
end
|
726
750
|
data
|
data/lib/chef/node/attribute.rb
CHANGED
@@ -563,11 +563,10 @@ class Chef
|
|
563
563
|
# @param path [Array] Array of args to method chain to descend into the node object
|
564
564
|
# @return [attr] Deep Merged values (may be VividMash, Hash, Array, etc) from the node object
|
565
565
|
def merge_defaults(path)
|
566
|
-
|
566
|
+
DEFAULT_COMPONENTS.inject(NIL) do |merged, component_ivar|
|
567
567
|
component_value = apply_path(instance_variable_get(component_ivar), path)
|
568
568
|
deep_merge!(merged, component_value)
|
569
569
|
end
|
570
|
-
ret
|
571
570
|
end
|
572
571
|
|
573
572
|
# Deep merge the override attribute levels with array merging.
|
@@ -577,11 +576,10 @@ class Chef
|
|
577
576
|
# @param path [Array] Array of args to method chain to descend into the node object
|
578
577
|
# @return [attr] Deep Merged values (may be VividMash, Hash, Array, etc) from the node object
|
579
578
|
def merge_overrides(path)
|
580
|
-
|
579
|
+
OVERRIDE_COMPONENTS.inject(NIL) do |merged, component_ivar|
|
581
580
|
component_value = apply_path(instance_variable_get(component_ivar), path)
|
582
581
|
deep_merge!(merged, component_value)
|
583
582
|
end
|
584
|
-
ret
|
585
583
|
end
|
586
584
|
|
587
585
|
# needed for __path__
|
data/lib/chef/node_map.rb
CHANGED
@@ -35,10 +35,13 @@
|
|
35
35
|
#
|
36
36
|
# XXX: confusingly, in the *_priority_map the :klass may be an array of Strings of class names
|
37
37
|
#
|
38
|
+
|
39
|
+
require_relative "dist"
|
40
|
+
|
38
41
|
class Chef
|
39
42
|
class NodeMap
|
40
43
|
COLLISION_WARNING = <<~EOH.gsub(/\s+/, " ").strip
|
41
|
-
%{type_caps} %{key}
|
44
|
+
%{type_caps} %{key} built into %{client_name} is being overridden by the %{type} from a cookbook. Please upgrade your cookbook
|
42
45
|
or remove the cookbook from your run_list.
|
43
46
|
EOH
|
44
47
|
|
@@ -83,7 +86,7 @@ class Chef
|
|
83
86
|
else
|
84
87
|
klass.superclass.to_s
|
85
88
|
end
|
86
|
-
Chef::Log.warn( COLLISION_WARNING % { type: type_of_thing, key: key, type_caps: type_of_thing.capitalize } )
|
89
|
+
Chef::Log.warn( COLLISION_WARNING % { type: type_of_thing, key: key, type_caps: type_of_thing.capitalize, client_name: Chef::Dist::PRODUCT } )
|
87
90
|
end
|
88
91
|
|
89
92
|
# The map is sorted in order of preference already; we just need to find
|
@@ -209,7 +212,7 @@ class Chef
|
|
209
212
|
# - no negative matches (!value)
|
210
213
|
# - at least one positive match (value or :all), or no positive filters
|
211
214
|
#
|
212
|
-
def
|
215
|
+
def matches_block_allow_list?(node, filters, attribute)
|
213
216
|
# It's super common for the filter to be nil. Catch that so we don't
|
214
217
|
# spend any time here.
|
215
218
|
return true unless filters[attribute]
|
@@ -217,21 +220,21 @@ class Chef
|
|
217
220
|
filter_values = Array(filters[attribute])
|
218
221
|
value = node[attribute]
|
219
222
|
|
220
|
-
# Split the
|
221
|
-
|
223
|
+
# Split the blocklist and allowlist
|
224
|
+
blocklist, allowlist = filter_values.partition { |v| v.is_a?(String) && v.start_with?("!") }
|
222
225
|
|
223
226
|
if attribute == :platform_family
|
224
|
-
# If any
|
225
|
-
return false if
|
227
|
+
# If any blocklist value matches, we don't match
|
228
|
+
return false if blocklist.any? { |v| v[1..-1] == value || platform_family_query_helper?(node, v[1..-1]) }
|
226
229
|
|
227
|
-
# If the
|
228
|
-
|
230
|
+
# If the allowlist is empty, or anything matches, we match.
|
231
|
+
allowlist.empty? || allowlist.any? { |v| v == :all || v == value || platform_family_query_helper?(node, v) }
|
229
232
|
else
|
230
|
-
# If any
|
231
|
-
return false if
|
233
|
+
# If any blocklist value matches, we don't match
|
234
|
+
return false if blocklist.any? { |v| v[1..-1] == value }
|
232
235
|
|
233
|
-
# If the
|
234
|
-
|
236
|
+
# If the allowlist is empty, or anything matches, we match.
|
237
|
+
allowlist.empty? || allowlist.any? { |v| v == :all || v == value }
|
235
238
|
end
|
236
239
|
end
|
237
240
|
|
@@ -260,9 +263,9 @@ class Chef
|
|
260
263
|
end
|
261
264
|
|
262
265
|
def filters_match?(node, filters)
|
263
|
-
|
264
|
-
|
265
|
-
|
266
|
+
matches_block_allow_list?(node, filters, :os) &&
|
267
|
+
matches_block_allow_list?(node, filters, :platform_family) &&
|
268
|
+
matches_block_allow_list?(node, filters, :platform) &&
|
266
269
|
matches_version_list?(node, filters, :platform_version) &&
|
267
270
|
matches_target_mode?(filters)
|
268
271
|
end
|
@@ -311,8 +314,8 @@ class Chef
|
|
311
314
|
return -1 if !b && a
|
312
315
|
return 0 if !a && !b
|
313
316
|
|
314
|
-
# Check for
|
315
|
-
#
|
317
|
+
# Check for blocklists ('!windows'). Those always come *after* positive
|
318
|
+
# allowlists.
|
316
319
|
a_negated = Array(a).any? { |f| f.is_a?(String) && f.start_with?("!") }
|
317
320
|
b_negated = Array(b).any? { |f| f.is_a?(String) && f.start_with?("!") }
|
318
321
|
return 1 if a_negated && !b_negated
|
@@ -17,38 +17,41 @@
|
|
17
17
|
#
|
18
18
|
|
19
19
|
require_relative "../chef_class"
|
20
|
-
require "chef-utils"
|
20
|
+
require "chef-utils" unless defined?(ChefUtils::CANARY)
|
21
|
+
require_relative "../mixin/chef_utils_wiring" unless defined?(Chef::Mixin::ChefUtilsWiring)
|
21
22
|
|
22
23
|
class Chef
|
23
24
|
class Platform
|
24
|
-
|
25
|
-
|
26
|
-
|
27
|
-
|
28
|
-
|
29
|
-
|
30
|
-
|
31
|
-
|
32
|
-
|
33
|
-
|
34
|
-
|
35
|
-
|
36
|
-
|
37
|
-
|
38
|
-
|
39
|
-
|
40
|
-
|
41
|
-
|
42
|
-
|
43
|
-
|
44
|
-
|
45
|
-
|
46
|
-
|
47
|
-
|
48
|
-
|
49
|
-
|
50
|
-
|
25
|
+
module ServiceHelpers
|
26
|
+
include ChefUtils::DSL::Service
|
27
|
+
include Chef::Mixin::ChefUtilsWiring
|
28
|
+
|
29
|
+
def service_resource_providers
|
30
|
+
providers = []
|
31
|
+
|
32
|
+
providers << :debian if debianrcd?
|
33
|
+
providers << :invokercd if invokercd?
|
34
|
+
providers << :upstart if upstart?
|
35
|
+
providers << :insserv if insserv?
|
36
|
+
providers << :systemd if systemd?
|
37
|
+
providers << :redhat if redhatrcd?
|
38
|
+
|
39
|
+
providers
|
40
|
+
end
|
41
|
+
|
42
|
+
def config_for_service(service_name)
|
43
|
+
configs = []
|
44
|
+
|
45
|
+
configs << :initd if service_script_exist?(:initd, service_name)
|
46
|
+
configs << :upstart if service_script_exist?(:upstart, service_name)
|
47
|
+
configs << :xinetd if service_script_exist?(:xinetd, service_name)
|
48
|
+
configs << :systemd if service_script_exist?(:systemd, service_name)
|
49
|
+
configs << :etc_rcd if service_script_exist?(:etc_rcd, service_name)
|
50
|
+
|
51
|
+
configs
|
51
52
|
end
|
53
|
+
|
54
|
+
extend self
|
52
55
|
end
|
53
56
|
end
|
54
57
|
end
|
data/lib/chef/property.rb
CHANGED
@@ -706,7 +706,7 @@ class Chef
|
|
706
706
|
# As of this writing, `name` is the only Chef::Resource property created with the
|
707
707
|
# `property` definition, but this will allow for future properties to be extended
|
708
708
|
# as needed.
|
709
|
-
!Chef::Resource.properties.
|
709
|
+
!Chef::Resource.properties.key?(name)
|
710
710
|
end
|
711
711
|
|
712
712
|
def exec_in_resource(resource, proc, *args)
|
data/lib/chef/provider/git.rb
CHANGED
@@ -44,11 +44,11 @@ class Chef
|
|
44
44
|
unless new_resource.user.nil?
|
45
45
|
requirements.assert(:all_actions) do |a|
|
46
46
|
a.assertion do
|
47
|
-
|
48
|
-
|
49
|
-
|
50
|
-
|
51
|
-
|
47
|
+
|
48
|
+
get_homedir(new_resource.user)
|
49
|
+
rescue ArgumentError
|
50
|
+
false
|
51
|
+
|
52
52
|
end
|
53
53
|
a.whyrun("User #{new_resource.user} does not exist, this run will fail unless it has been previously created. Assuming it would have been created.")
|
54
54
|
a.failure_message(Chef::Exceptions::User, "#{new_resource.user} required by resource #{new_resource.name} does not exist")
|
@@ -154,6 +154,11 @@ class Chef
|
|
154
154
|
sha_hash?(result) ? result : nil
|
155
155
|
end
|
156
156
|
|
157
|
+
def already_on_target_branch?
|
158
|
+
current_branch = git("rev-parse", "--abbrev-ref", "HEAD", cwd: cwd, returns: [0, 128]).stdout.strip
|
159
|
+
current_branch == (new_resource.checkout_branch || new_resource.revision)
|
160
|
+
end
|
161
|
+
|
157
162
|
def add_remotes
|
158
163
|
if new_resource.additional_remotes.length > 0
|
159
164
|
new_resource.additional_remotes.each_pair do |remote_name, remote_url|
|
@@ -193,6 +198,9 @@ class Chef
|
|
193
198
|
# detached head
|
194
199
|
git("checkout", target_revision, cwd: cwd)
|
195
200
|
logger.info "#{new_resource} checked out reference: #{target_revision}"
|
201
|
+
elsif already_on_target_branch?
|
202
|
+
# we are already on the proper branch
|
203
|
+
git("reset", "--hard", target_revision, cwd: cwd)
|
196
204
|
else
|
197
205
|
# need a branch with a tracking branch
|
198
206
|
git("branch", "-f", new_resource.revision, target_revision, cwd: cwd)
|
@@ -222,13 +230,13 @@ class Chef
|
|
222
230
|
logger.trace "Fetching updates from #{new_resource.remote} and resetting to revision #{target_revision}"
|
223
231
|
git("fetch", "--prune", new_resource.remote, cwd: cwd)
|
224
232
|
git("fetch", new_resource.remote, "--tags", cwd: cwd)
|
225
|
-
if new_resource.
|
233
|
+
if sha_hash?(new_resource.revision) || is_tag? || already_on_target_branch?
|
234
|
+
# detached head or if we are already on the proper branch
|
235
|
+
git("reset", "--hard", target_revision, cwd: cwd)
|
236
|
+
elsif new_resource.checkout_branch
|
226
237
|
# check out to a local branch
|
227
238
|
git("branch", "-f", new_resource.checkout_branch, target_revision, cwd: cwd)
|
228
239
|
git("checkout", new_resource.checkout_branch, cwd: cwd)
|
229
|
-
elsif sha_hash?(new_resource.revision) || is_tag?
|
230
|
-
# detached head
|
231
|
-
git("reset", "--hard", target_revision, cwd: cwd)
|
232
240
|
else
|
233
241
|
# need a branch with a tracking branch
|
234
242
|
git("branch", "-f", new_resource.revision, target_revision, cwd: cwd)
|
data/lib/chef/provider/group.rb
CHANGED
@@ -17,13 +17,11 @@
|
|
17
17
|
#
|
18
18
|
|
19
19
|
require_relative "../provider"
|
20
|
-
require_relative "../mixin/shell_out"
|
21
20
|
require "etc" unless defined?(Etc)
|
22
21
|
|
23
22
|
class Chef
|
24
23
|
class Provider
|
25
24
|
class Group < Chef::Provider
|
26
|
-
include Chef::Mixin::ShellOut
|
27
25
|
attr_accessor :group_exists
|
28
26
|
attr_accessor :change_desc
|
29
27
|
|
@@ -39,11 +39,11 @@ class Chef
|
|
39
39
|
|
40
40
|
requirements.assert(:create, :manage, :modify) do |a|
|
41
41
|
a.assertion do
|
42
|
-
|
43
|
-
|
44
|
-
|
45
|
-
|
46
|
-
|
42
|
+
|
43
|
+
to_add(new_resource.members).all? { |member| Etc.getpwnam(member) }
|
44
|
+
rescue
|
45
|
+
false
|
46
|
+
|
47
47
|
end
|
48
48
|
a.failure_message Chef::Exceptions::Group, "Could not add users #{to_add(new_resource.members).join(", ")} to #{new_resource.group_name}: one of these users does not exist"
|
49
49
|
a.whyrun "Could not find one of these users: #{to_add(new_resource.members).join(", ")}. Assuming it will be created by a prior step"
|
@@ -17,11 +17,10 @@
|
|
17
17
|
#
|
18
18
|
|
19
19
|
require_relative "../log"
|
20
|
-
require_relative "../mixin/shell_out"
|
21
20
|
require_relative "../provider"
|
22
21
|
require_relative "../resource/file"
|
23
22
|
require_relative "../exceptions"
|
24
|
-
require "erb"
|
23
|
+
require "erb" unless defined?(Erb)
|
25
24
|
|
26
25
|
class Chef
|
27
26
|
class Provider
|
@@ -34,8 +33,6 @@ class Chef
|
|
34
33
|
class Ifconfig < Chef::Provider
|
35
34
|
provides :ifconfig
|
36
35
|
|
37
|
-
include Chef::Mixin::ShellOut
|
38
|
-
|
39
36
|
attr_accessor :config_template
|
40
37
|
attr_accessor :config_path
|
41
38
|
|
data/lib/chef/provider/mount.rb
CHANGED
@@ -18,13 +18,11 @@
|
|
18
18
|
#
|
19
19
|
|
20
20
|
require_relative "../log"
|
21
|
-
require_relative "../mixin/shell_out"
|
22
21
|
require_relative "../provider"
|
23
22
|
|
24
23
|
class Chef
|
25
24
|
class Provider
|
26
25
|
class Mount < Chef::Provider
|
27
|
-
include Chef::Mixin::ShellOut
|
28
26
|
|
29
27
|
attr_accessor :unmount_retries
|
30
28
|
|
@@ -16,7 +16,6 @@
|
|
16
16
|
# limitations under the License.
|
17
17
|
#
|
18
18
|
|
19
|
-
require_relative "../mixin/shell_out"
|
20
19
|
require_relative "../mixin/subclass_directive"
|
21
20
|
require_relative "../log"
|
22
21
|
require_relative "../file_cache"
|
@@ -27,7 +26,6 @@ require "shellwords" unless defined?(Shellwords)
|
|
27
26
|
class Chef
|
28
27
|
class Provider
|
29
28
|
class Package < Chef::Provider
|
30
|
-
include Chef::Mixin::ShellOut
|
31
29
|
extend Chef::Mixin::SubclassDirective
|
32
30
|
|
33
31
|
# subclasses declare this if they want all their arguments as arrays of packages and names
|