chef 17.2.29-universal-mingw32 → 17.5.22-universal-mingw32

Sign up to get free protection for your applications and to get access to all the features.
Files changed (173) hide show
  1. checksums.yaml +4 -4
  2. data/Gemfile +6 -5
  3. data/chef.gemspec +3 -0
  4. data/lib/chef/application/base.rb +11 -1
  5. data/lib/chef/application.rb +3 -1
  6. data/lib/chef/client.rb +2 -3
  7. data/lib/chef/compliance/default_attributes.rb +5 -3
  8. data/lib/chef/compliance/input.rb +115 -0
  9. data/lib/chef/compliance/input_collection.rb +139 -0
  10. data/lib/chef/compliance/profile.rb +122 -0
  11. data/lib/chef/compliance/profile_collection.rb +109 -0
  12. data/lib/chef/compliance/reporter/automate.rb +1 -1
  13. data/lib/chef/compliance/runner.rb +62 -6
  14. data/lib/chef/compliance/waiver.rb +115 -0
  15. data/lib/chef/compliance/waiver_collection.rb +143 -0
  16. data/lib/chef/data_bag.rb +1 -2
  17. data/lib/chef/data_bag_item.rb +1 -2
  18. data/lib/chef/deprecated.rb +10 -4
  19. data/lib/chef/dsl/compliance.rb +38 -0
  20. data/lib/chef/dsl/reader_helpers.rb +51 -0
  21. data/lib/chef/dsl/recipe.rb +4 -2
  22. data/lib/chef/dsl/render_helpers.rb +44 -0
  23. data/lib/chef/dsl/secret.rb +62 -0
  24. data/lib/chef/dsl/toml.rb +116 -0
  25. data/lib/chef/dsl/universal.rb +7 -0
  26. data/lib/chef/dsl.rb +1 -0
  27. data/lib/chef/event_dispatch/base.rb +44 -2
  28. data/lib/chef/exceptions.rb +20 -0
  29. data/lib/chef/formatters/doc.rb +60 -13
  30. data/lib/chef/formatters/error_mapper.rb +2 -2
  31. data/lib/chef/formatters/minimal.rb +6 -5
  32. data/lib/chef/handler/slow_report.rb +1 -1
  33. data/lib/chef/http/basic_client.rb +15 -7
  34. data/lib/chef/http.rb +12 -8
  35. data/lib/chef/json_compat.rb +1 -1
  36. data/lib/chef/policy_builder/policyfile.rb +88 -45
  37. data/lib/chef/provider/execute.rb +1 -1
  38. data/lib/chef/provider/file.rb +4 -2
  39. data/lib/chef/provider/group/dscl.rb +1 -1
  40. data/lib/chef/provider/launchd.rb +6 -6
  41. data/lib/chef/provider/link.rb +2 -2
  42. data/lib/chef/provider/lwrp_base.rb +1 -1
  43. data/lib/chef/provider/package/habitat.rb +168 -0
  44. data/lib/chef/provider/package/powershell.rb +5 -0
  45. data/lib/chef/provider/registry_key.rb +3 -2
  46. data/lib/chef/provider/remote_file/http.rb +1 -1
  47. data/lib/chef/provider/subversion.rb +4 -4
  48. data/lib/chef/provider/support/yum_repo.erb +1 -1
  49. data/lib/chef/provider/systemd_unit.rb +17 -16
  50. data/lib/chef/provider/template.rb +1 -1
  51. data/lib/chef/provider/user/mac.rb +3 -3
  52. data/lib/chef/provider/yum_repository.rb +27 -43
  53. data/lib/chef/provider/zypper_repository.rb +3 -3
  54. data/lib/chef/provider.rb +26 -1
  55. data/lib/chef/provider_resolver.rb +8 -2
  56. data/lib/chef/providers.rb +1 -0
  57. data/lib/chef/resource/archive_file.rb +17 -14
  58. data/lib/chef/resource/chef_client_config.rb +7 -2
  59. data/lib/chef/resource/chef_client_cron.rb +1 -1
  60. data/lib/chef/resource/chef_client_launchd.rb +1 -1
  61. data/lib/chef/resource/chef_client_scheduled_task.rb +46 -3
  62. data/lib/chef/resource/chef_client_systemd_timer.rb +1 -1
  63. data/lib/chef/resource/chef_client_trusted_certificate.rb +2 -2
  64. data/lib/chef/resource/chef_vault_secret.rb +2 -2
  65. data/lib/chef/resource/chocolatey_config.rb +13 -13
  66. data/lib/chef/resource/dsc_resource.rb +1 -1
  67. data/lib/chef/resource/execute.rb +5 -5
  68. data/lib/chef/resource/file/verification/json.rb +50 -0
  69. data/lib/chef/resource/file/verification/yaml.rb +52 -0
  70. data/lib/chef/resource/gem_package.rb +2 -1
  71. data/lib/chef/resource/habitat/_habitat_shared.rb +28 -0
  72. data/lib/chef/resource/habitat/habitat_package.rb +129 -0
  73. data/lib/chef/resource/habitat/habitat_sup.rb +329 -0
  74. data/lib/chef/resource/habitat/habitat_sup_systemd.rb +67 -0
  75. data/lib/chef/resource/habitat/habitat_sup_windows.rb +90 -0
  76. data/lib/chef/resource/habitat_config.rb +107 -0
  77. data/lib/chef/resource/habitat_install.rb +247 -0
  78. data/lib/chef/resource/habitat_service.rb +451 -0
  79. data/lib/chef/resource/habitat_user_toml.rb +92 -0
  80. data/lib/chef/resource/homebrew_cask.rb +1 -1
  81. data/lib/chef/resource/inspec_input.rb +128 -0
  82. data/lib/chef/resource/inspec_waiver.rb +185 -0
  83. data/lib/chef/resource/inspec_waiver_file_entry.rb +2 -2
  84. data/lib/chef/resource/launchd.rb +3 -3
  85. data/lib/chef/resource/lwrp_base.rb +1 -1
  86. data/lib/chef/resource/mount.rb +1 -1
  87. data/lib/chef/resource/registry_key.rb +36 -48
  88. data/lib/chef/resource/remote_file.rb +99 -3
  89. data/lib/chef/resource/rhsm_subscription.rb +5 -5
  90. data/lib/chef/resource/ruby_block.rb +100 -0
  91. data/lib/chef/resource/scm/subversion.rb +1 -1
  92. data/lib/chef/resource/support/HabService.dll.config.erb +19 -0
  93. data/lib/chef/resource/support/client.erb +8 -1
  94. data/lib/chef/resource/support/sup.toml.erb +179 -0
  95. data/lib/chef/resource/sysctl.rb +2 -2
  96. data/lib/chef/resource/systemd_unit.rb +3 -3
  97. data/lib/chef/resource/timezone.rb +2 -2
  98. data/lib/chef/resource/user_ulimit.rb +1 -0
  99. data/lib/chef/resource/windows_defender.rb +163 -0
  100. data/lib/chef/resource/windows_defender_exclusion.rb +125 -0
  101. data/lib/chef/resource/windows_printer.rb +78 -44
  102. data/lib/chef/resource/windows_printer_port.rb +1 -1
  103. data/lib/chef/resource/windows_uac.rb +3 -1
  104. data/lib/chef/resource/windows_update_settings.rb +259 -0
  105. data/lib/chef/resource/windows_user_privilege.rb +1 -1
  106. data/lib/chef/resource/yum_package.rb +1 -5
  107. data/lib/chef/resource.rb +13 -17
  108. data/lib/chef/resource_inspector.rb +6 -2
  109. data/lib/chef/resources.rb +14 -1
  110. data/lib/chef/run_context/cookbook_compiler.rb +112 -28
  111. data/lib/chef/run_context.rb +31 -1
  112. data/lib/chef/secret_fetcher/akeyless_vault.rb +57 -0
  113. data/lib/chef/secret_fetcher/aws_secrets_manager.rb +65 -0
  114. data/lib/chef/secret_fetcher/azure_key_vault.rb +78 -0
  115. data/lib/chef/secret_fetcher/base.rb +76 -0
  116. data/lib/chef/secret_fetcher/example.rb +46 -0
  117. data/lib/chef/secret_fetcher/hashi_vault.rb +100 -0
  118. data/lib/chef/secret_fetcher.rb +61 -0
  119. data/lib/chef/version.rb +1 -1
  120. data/spec/data/archive_file/test_archive.tar.gz +0 -0
  121. data/spec/functional/mixin/from_file_spec.rb +1 -1
  122. data/spec/functional/resource/archive_file_spec.rb +87 -0
  123. data/spec/functional/resource/group_spec.rb +5 -1
  124. data/spec/functional/resource/link_spec.rb +8 -0
  125. data/spec/integration/compliance/compliance_spec.rb +61 -0
  126. data/spec/integration/recipes/recipe_dsl_spec.rb +1 -1
  127. data/spec/integration/recipes/resource_action_spec.rb +6 -6
  128. data/spec/spec_helper.rb +3 -0
  129. data/spec/support/platform_helpers.rb +4 -0
  130. data/spec/support/ruby_installer.rb +51 -0
  131. data/spec/support/shared/unit/provider/file.rb +2 -8
  132. data/spec/unit/compliance/input_spec.rb +104 -0
  133. data/spec/unit/compliance/profile_spec.rb +120 -0
  134. data/spec/unit/compliance/runner_spec.rb +46 -2
  135. data/spec/unit/compliance/waiver_spec.rb +104 -0
  136. data/spec/unit/data_bag_item_spec.rb +2 -2
  137. data/spec/unit/data_bag_spec.rb +1 -1
  138. data/spec/unit/dsl/render_helpers_spec.rb +102 -0
  139. data/spec/unit/dsl/secret_spec.rb +71 -0
  140. data/spec/unit/formatters/doc_spec.rb +1 -1
  141. data/spec/unit/http/basic_client_spec.rb +30 -0
  142. data/spec/unit/http_spec.rb +8 -2
  143. data/spec/unit/policy_builder/dynamic_spec.rb +0 -5
  144. data/spec/unit/policy_builder/policyfile_spec.rb +144 -56
  145. data/spec/unit/provider/apt_update_spec.rb +3 -1
  146. data/spec/unit/provider/link_spec.rb +13 -7
  147. data/spec/unit/provider/mount/aix_spec.rb +1 -1
  148. data/spec/unit/provider/package/powershell_spec.rb +74 -12
  149. data/spec/unit/provider/remote_file/http_spec.rb +10 -0
  150. data/spec/unit/provider/template_spec.rb +2 -2
  151. data/spec/unit/provider_spec.rb +23 -0
  152. data/spec/unit/resource/archive_file_spec.rb +414 -3
  153. data/spec/unit/resource/chef_client_scheduled_task_spec.rb +69 -0
  154. data/spec/unit/resource/file/verification/json_spec.rb +72 -0
  155. data/spec/unit/resource/file/verification/yaml_spec.rb +67 -0
  156. data/spec/unit/resource/homebrew_cask_spec.rb +29 -11
  157. data/spec/unit/resource/inspec_input_spec.rb +300 -0
  158. data/spec/unit/resource/inspec_waiver_spec.rb +312 -0
  159. data/spec/unit/resource/mount_spec.rb +10 -0
  160. data/spec/unit/resource/rhsm_subscription_spec.rb +50 -3
  161. data/spec/unit/resource/systemd_unit_spec.rb +1 -1
  162. data/spec/unit/resource/user_ulimit_spec.rb +14 -1
  163. data/spec/unit/resource/windows_defender_exclusion_spec.rb +62 -0
  164. data/spec/unit/resource/windows_defender_spec.rb +71 -0
  165. data/spec/unit/resource/windows_update_settings_spec.rb +64 -0
  166. data/spec/unit/resource_spec.rb +19 -8
  167. data/spec/unit/secret_fetcher/akeyless_vault_spec.rb +37 -0
  168. data/spec/unit/secret_fetcher/aws_secrets_manager_spec.rb +70 -0
  169. data/spec/unit/secret_fetcher/azure_key_vault_spec.rb +70 -0
  170. data/spec/unit/secret_fetcher/hashi_vault_spec.rb +80 -0
  171. data/spec/unit/secret_fetcher_spec.rb +82 -0
  172. data/tasks/rspec.rb +2 -1
  173. metadata +106 -7
@@ -0,0 +1,247 @@
1
+ #
2
+ # Copyright:: Chef Software, Inc.
3
+ # License:: Apache License, Version 2.0
4
+ #
5
+ # Licensed under the Apache License, Version 2.0 (the "License");
6
+ # you may not use this file except in compliance with the License.
7
+ # You may obtain a copy of the License at
8
+ #
9
+ # http://www.apache.org/licenses/LICENSE-2.0
10
+ #
11
+ # Unless required by applicable law or agreed to in writing, software
12
+ # distributed under the License is distributed on an "AS IS" BASIS,
13
+ # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14
+ # See the License for the specific language governing permissions and
15
+ # limitations under the License.
16
+ #
17
+ require_relative "../http/simple"
18
+ require_relative "../resource"
19
+ class Chef
20
+ class Resource
21
+ class HabitatInstall < Chef::Resource
22
+ unified_mode true
23
+ provides :habitat_install
24
+
25
+ description "Use the **habitat_install** resource to install Chef Habitat."
26
+ introduced "17.3"
27
+ examples <<~DOC
28
+ **Installation Without a Resource Name**
29
+
30
+ ```ruby
31
+ habitat_install
32
+ ```
33
+
34
+ **Installation specifying a habitat builder URL**
35
+
36
+ ```ruby
37
+ habitat_install 'install habitat' do
38
+ bldr_url 'http://localhost'
39
+ end
40
+ ```
41
+
42
+ **Installation specifying version and habitat builder URL**
43
+
44
+ ```ruby
45
+ habitat_install 'install habitat' do
46
+ bldr_url 'http://localhost'
47
+ hab_version '1.5.50'
48
+ end
49
+ ```
50
+ DOC
51
+
52
+ property :name, String, default: "install habitat",
53
+ description: "Name of the resource block. This has no impact other than logging."
54
+
55
+ property :install_url, String, default: "https://raw.githubusercontent.com/habitat-sh/habitat/master/components/hab/install.sh",
56
+ description: "URL to the install script, default is from the [habitat repo](https://raw.githubusercontent.com/habitat-sh/habitat/master/components/hab/install.sh) ."
57
+
58
+ property :bldr_url, String,
59
+ description: "Optional URL to an alternate Habitat Builder."
60
+
61
+ property :create_user, [true, false], default: true,
62
+ description: "Creates the `hab` system user."
63
+
64
+ property :tmp_dir, String,
65
+ description: "Sets TMPDIR environment variable for location to place temp files. Note: This is required if `/tmp` and `/var/tmp` are mounted `noexec`."
66
+
67
+ property :license, String, equal_to: ["accept"],
68
+ description: "Specifies acceptance of habitat license when set to `accept`."
69
+
70
+ property :hab_version, String,
71
+ description: "Specify the version of `Habitat` you would like to install."
72
+
73
+ action :install, description: "Installs Habitat. Does nothing if the `hab` binary is found in the default location for the system (`/bin/hab` on Linux, `/usr/local/bin/hab` on macOS, `C:/habitat/hab.exe` on Windows)" do
74
+ if ::File.exist?(hab_path)
75
+ cmd = shell_out!([hab_path, "--version"].flatten.compact.join(" "))
76
+ version = %r{hab (\d*\.\d*\.\d[^\/]*)}.match(cmd.stdout)[1]
77
+ return if version == new_resource.hab_version
78
+ end
79
+
80
+ if windows?
81
+ # Retrieve version information
82
+ uri = "https://packages.chef.io/files"
83
+ package_name = "hab-x86_64-windows"
84
+ habfile = "#{Chef::Config[:file_cache_path]}/#{package_name}.zip"
85
+
86
+ # TODO: Figure out how to properly validate the shasum for windows. Doesn't seem it's published
87
+ # as a .sha265sum like for the linux .tar.gz
88
+ download = "#{uri}/stable/habitat/latest/hab-x86_64-windows.zip"
89
+
90
+ remote_file habfile do
91
+ source download
92
+ end
93
+
94
+ archive_file "#{package_name}.zip" do
95
+ path habfile
96
+ destination "#{Chef::Config[:file_cache_path]}/habitat"
97
+ action :extract
98
+ not_if { ::Dir.exist?('c:\habitat') }
99
+ end
100
+
101
+ directory 'c:\habitat' do
102
+ notifies :run, "powershell_script[installing from archive]", :immediately
103
+ end
104
+
105
+ powershell_script "installing from archive" do
106
+ code <<-EOH
107
+ Move-Item -Path #{Chef::Config[:file_cache_path]}/habitat/hab-*/* -Destination C:/habitat -Force
108
+ EOH
109
+ action :nothing
110
+ end
111
+
112
+ # TODO: This won't self heal if missing until the next upgrade
113
+ windows_path 'C:\habitat' do
114
+ action :add
115
+ end
116
+ else
117
+ package %w{curl tar gzip}
118
+
119
+ if new_resource.create_user
120
+ group "hab"
121
+
122
+ user "hab" do
123
+ gid "hab"
124
+ system true
125
+ end
126
+ end
127
+
128
+ remote_file ::File.join(Chef::Config[:file_cache_path], "hab-install.sh") do
129
+ source new_resource.install_url
130
+ sensitive true
131
+ end
132
+
133
+ execute "installing with hab-install.sh" do
134
+ command hab_command
135
+ environment(
136
+ {
137
+ "HAB_BLDR_URL" => "bldr_url",
138
+ "TMPDIR" => "tmp_dir",
139
+ }.each_with_object({}) do |(var, property), env|
140
+ env[var] = new_resource.send(property.to_sym) if new_resource.send(property.to_sym)
141
+ end
142
+ )
143
+ end
144
+ end
145
+ execute "hab license accept" if new_resource.license == "accept"
146
+ end
147
+
148
+ # TODO: Work out cleanest method to implement upgrade that will support effortless installs as well as standard chef-client
149
+ # action :upgrade do
150
+ # if platform_family?('windows')
151
+ # # Retrieve version information
152
+ # uri = 'https://packages.chef.io/files'
153
+ # package_name = 'hab-x86_64-windows'
154
+ # zipfile = "#{Chef::Config[:file_cache_path]}/#{package_name}.zip"
155
+
156
+ # # TODO: Figure out how to properly validate the shasum for windows. Doesn't seem it's published
157
+ # # as a .sha265sum like for the linux .tar.gz
158
+ # download = "#{uri}/stable/habitat/latest/hab-x86_64-windows.zip"
159
+
160
+ # remote_file zipfile do
161
+ # source download
162
+ # end
163
+
164
+ # if Chef::VERSION.to_i < 15
165
+ # ruby_block "#{package_name}.zip" do
166
+ # block do
167
+ # require 'zip'
168
+ # Zip::File.open(zipfile) do |zip_file|
169
+ # zip_file.each do |f|
170
+ # fpath = "#{Chef::Config[:file_cache_path]}/habitat/" + f.name
171
+ # zip_file.extract(f, fpath) # unless ::File.exist?(fpath)
172
+ # end
173
+ # end
174
+ # end
175
+ # action :run
176
+ # end
177
+ # else
178
+ # archive_file "#{package_name}.zip" do
179
+ # path zipfile
180
+ # destination "#{Chef::Config[:file_cache_path]}/habitat"
181
+ # action :extract
182
+ # end
183
+ # end
184
+
185
+ # powershell_script 'installing from archive' do
186
+ # code <<-EOH
187
+ # Move-Item -Path #{Chef::Config[:file_cache_path]}/habitat/hab-*/* -Destination C:/habitat -Force
188
+ # EOH
189
+ # end
190
+
191
+ # # TODO: This won't self heal if missing until the next upgrade
192
+ # if Chef::VERSION.to_i < 14
193
+ # env 'PATH_c-habitat' do
194
+ # key_name 'PATH'
195
+ # delim ';' # this was missing
196
+ # value 'C:\habitat'
197
+ # action :modify
198
+ # end
199
+ # else
200
+ # windows_path 'C:\habitat' do
201
+ # action :add
202
+ # end
203
+ # end
204
+ # else
205
+ # remote_file ::File.join(Chef::Config[:file_cache_path], 'hab-install.sh') do
206
+ # source new_resource.install_url
207
+ # sensitive true
208
+ # end
209
+
210
+ # execute 'installing with hab-install.sh' do
211
+ # command hab_command
212
+ # environment(
213
+ # {
214
+ # 'HAB_BLDR_URL' => 'bldr_url',
215
+ # 'TMPDIR' => 'tmp_dir',
216
+ # }.each_with_object({}) do |(var, property), env|
217
+ # env[var] = new_resource.send(property.to_sym) if new_resource.send(property.to_sym)
218
+ # end
219
+ # )
220
+ # not_if { ::File.exist?('/bin/hab') }
221
+ # end
222
+ # end
223
+ # end
224
+
225
+ action_class do
226
+ use "../resource/habitat/habitat_shared"
227
+
228
+ def hab_path
229
+ if macos?
230
+ "/usr/local/bin/hab"
231
+ elsif windows?
232
+ "C:/habitat/hab.exe"
233
+ else
234
+ "/bin/hab"
235
+ end
236
+ end
237
+
238
+ def hab_command
239
+ cmd = "bash #{Chef::Config[:file_cache_path]}/hab-install.sh"
240
+ cmd << " -v #{new_resource.hab_version} " if new_resource.hab_version
241
+ cmd << " -t x86_64-linux-kernel2" if node["kernel"]["release"].to_i < 3
242
+ cmd
243
+ end
244
+ end
245
+ end
246
+ end
247
+ end