cheffish 16.0.12 → 16.0.26

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 726a0ded80830e71581d351ec749ff293d81949a19da0402da101bcc3544a826
-  data.tar.gz: 998aec1220e1a3c5a1d4b23d124d913f8bc1773657a77de5981965e04c59e4d1
+  metadata.gz: 91e2132a23578c15fe42a8603cf3cd4d72eee69a671f853c273a5a61788f9a31
+  data.tar.gz: 75a4e43250b1b53eb3fd10aee2af0dd5e62e3ee5a6bcede10792691d77080d7c
 SHA512:
-  metadata.gz: debed5adc595ef207988ad3d63249803ea2dfca46848f1e93e62fc80b5abd22efaa299077e0594a9c93555ba385da8fd5a2dda9c8688f6ff4b6ba96c725924b6
-  data.tar.gz: 7ba6a0b11beccce010665ef0239634b4549b2d19b2d6569d179ed2cbcf894bacfae3e5a45f44a70865971bd2bf183ade6a9b54e0dc3cc470e76c96bf6abd43b5
+  metadata.gz: 93706f7357daca264cbdd1ca1a6b3d2912597968e68f58ae376fc71284a3d7f4c92bbf91d31a9fdd3450d317e1961ea91372c3f348a77465a27d8f73a40d45ab
+  data.tar.gz: 3e47fb9564110ced0731b2c19f00af626482fc9fc4daa6be1e7c056a583c22f43a6aae8a64489899ffd7ceef10c17f7d12b942240cf65a8331fd34ee48ec020f

data/Gemfile

@@ -3,7 +3,7 @@ source "https://rubygems.org"
 gemspec
 
 group :development do
-  gem "chefstyle", "1.4.3"
+  gem "chefstyle", "1.7.4"
   gem "rake"
   gem "rspec", "~> 3.0"
 end

data/lib/chef/resource/chef_data_bag_item.rb

@@ -196,17 +196,15 @@ class Chef
         end
 
         def new_secret
-          @new_secret ||= begin
-            if new_resource.secret
-              new_resource.secret
-            elsif new_resource.secret_path
-              Chef::EncryptedDataBagItem.load_secret(new_resource.secret_path)
-            elsif new_resource.encrypt.nil?
-              current_resource.secret
-            else
-              raise "Data bag item #{new_resource.name} has encryption on but no secret or secret_path is specified"
-            end
-          end
+          @new_secret ||= if new_resource.secret
+                            new_resource.secret
+                          elsif new_resource.secret_path
+                            Chef::EncryptedDataBagItem.load_secret(new_resource.secret_path)
+                          elsif new_resource.encrypt.nil?
+                            current_resource.secret
+                          else
+                            raise "Data bag item #{new_resource.name} has encryption on but no secret or secret_path is specified"
+                          end
         end
 
         def decrypt(json, secret)
@@ -238,15 +236,13 @@ class Chef
 
         # Get the current json decrypted, for comparison purposes
         def current_decrypted
-          @current_decrypted ||= begin
-            if current_resource.secret
-              decrypt(current_resource.raw_data || { "id" => new_resource.id }, current_resource.secret)
-            elsif current_resource.encrypt
-              raise "Could not decrypt current data bag item #{current_resource.name}"
-            else
-              current_resource.raw_data || { "id" => new_resource.id }
-            end
-          end
+          @current_decrypted ||= if current_resource.secret
+                                   decrypt(current_resource.raw_data || { "id" => new_resource.id }, current_resource.secret)
+                                 elsif current_resource.encrypt
+                                   raise "Could not decrypt current data bag item #{current_resource.name}"
+                                 else
+                                   current_resource.raw_data || { "id" => new_resource.id }
+                                 end
         end
 
         # Figure out the differences between new and current

data/lib/chef/resource/private_key.rb

@@ -78,7 +78,7 @@ class Chef
             desired_output = encode_private_key(new_source_key)
             if current_resource.path == :none || desired_output != IO.read(new_path)
               converge_by "reformat key at #{new_resource.source_key_path} to #{new_resource.format} private key #{new_path} (#{new_resource.pass_phrase ? ", #{new_resource.cipher} password" : ""})" do
-                IO.write(new_path, desired_output)
+                IO.binwrite(new_path, desired_output)
               end
             end
 
@@ -137,7 +137,7 @@ class Chef
                 converge_by "change format of #{new_resource.type} private key #{new_path} from #{current_resource.format} to #{new_resource.format}" do
                   write_private_key(current_private_key)
                 end
-              elsif (@current_file_mode & 0077) != 0
+              elsif RUBY_PLATFORM !~ /mswin|mingw32|windows/ && (@current_file_mode & 0077) != 0
                 new_mode = @current_file_mode & 07700
                 converge_by "change mode of private key #{new_path} to #{new_mode.to_s(8)}" do
                   ::File.chmod(new_mode, new_path)
@@ -171,25 +171,23 @@ class Chef
         end
 
         def write_private_key(key)
-          ::File.open(new_path, "w") do |file|
+          ::File.open(new_path, "wb") do |file|
             file.chmod(0600)
             file.write(encode_private_key(key))
           end
         end
 
         def new_source_key
-          @new_source_key ||= begin
-                                if new_resource.source_key.is_a?(String)
-                                  source_key, _source_key_format = Cheffish::KeyFormatter.decode(new_resource.source_key, new_resource.source_key_pass_phrase)
-                                  source_key
-                                elsif new_resource.source_key
-                                  new_resource.source_key
-                                elsif new_resource.source_key_path
-                                  source_key, _source_key_format = Cheffish::KeyFormatter.decode(IO.read(new_resource.source_key_path), new_resource.source_key_pass_phrase, new_resource.source_key_path)
-                                  source_key
-                                else
-                                  nil
-                                end
+          @new_source_key ||= if new_resource.source_key.is_a?(String)
+                                source_key, _source_key_format = Cheffish::KeyFormatter.decode(new_resource.source_key, new_resource.source_key_pass_phrase)
+                                source_key
+                              elsif new_resource.source_key
+                                new_resource.source_key
+                              elsif new_resource.source_key_path
+                                source_key, _source_key_format = Cheffish::KeyFormatter.decode(IO.read(new_resource.source_key_path), new_resource.source_key_pass_phrase, new_resource.source_key_path)
+                                source_key
+                              else
+                                nil
                               end
         end
 

data/lib/chef/resource/public_key.rb

@@ -31,7 +31,7 @@ class Chef
         desired_output = encode_public_key(new_source_key)
         if Array(current_resource.action) == [ :delete ] || desired_output != IO.read(new_resource.path)
           converge_by "write #{new_resource.format} public key #{new_resource.path} from #{new_source_key_publicity} key #{new_resource.source_key_path}" do
-            IO.write(new_resource.path, desired_output)
+            IO.binwrite(new_resource.path, desired_output)
             # TODO permissions on file?
           end
         end
@@ -62,7 +62,7 @@ class Chef
             elsif new_resource.source_key
               source_key = new_resource.source_key
             elsif new_resource.source_key_path
-              source_key, _source_key_format = Cheffish::KeyFormatter.decode(IO.read(new_resource.source_key_path), new_resource.source_key_pass_phrase, new_resource.source_key_path)
+              source_key, _source_key_format = Cheffish::KeyFormatter.decode(IO.binread(new_resource.source_key_path), new_resource.source_key_pass_phrase, new_resource.source_key_path)
             else
               return nil
             end

data/lib/cheffish.rb

@@ -32,11 +32,13 @@ module Cheffish
   end
 
   def self.load_chef_config(chef_config = Chef::Config)
-    if ::Gem::Version.new(::Chef::VERSION) >= ::Gem::Version.new("12.0.0")
-      chef_config.config_file = ::Chef::Knife.chef_config_dir
-    else
-      chef_config.config_file = ::Chef::Knife.locate_config_file
-    end
+    chef_config.config_file = if ::Gem::Version.new(::Chef::VERSION) >= ::Gem::Version.new("12.0.0")
+                                require "chef/workstation_config_loader"
+                                Chef::WorkstationConfigLoader.new(nil, Chef::Log).chef_config_dir
+                              else
+                                require "chef/knife"
+                                Chef::Knife.locate_config_file
+                              end
     config_fetcher = Chef::ConfigFetcher.new(chef_config.config_file, chef_config.config_file_jail)
     if chef_config.config_file.nil?
       Chef::Log.warn("No config file found or specified on command line, using command line options.")
@@ -120,11 +122,17 @@ module Cheffish
 end
 
 # Include all recipe objects so require 'cheffish' brings in the whole recipe DSL
-
 require "chef/run_list/run_list_item"
 require_relative "cheffish/basic_chef_client"
 require_relative "cheffish/server_api"
-require "chef/knife"
+
+# Starting with the version below, knife is no longer in the chef gem and is
+# not available during a chef-client run.  We'll keep it here for older versions
+# to retain backward-compatibility.
+if ::Gem::Version.new(::Chef::VERSION) < ::Gem::Version.new("17.0.178")
+  require "chef/knife"
+end
+
 require "chef/config_fetcher"
 require "chef/log"
 require "chef/application"

data/lib/cheffish/chef_actor_base.rb

@@ -74,38 +74,36 @@ module Cheffish
       end
 
       def new_public_key
-        @new_public_key ||= begin
-          if new_resource.source_key
-            if new_resource.source_key.is_a?(String)
-              key, _key_format = Cheffish::KeyFormatter.decode(new_resource.source_key)
+        @new_public_key ||= if new_resource.source_key
+                              if new_resource.source_key.is_a?(String)
+                                key, _key_format = Cheffish::KeyFormatter.decode(new_resource.source_key)
 
-              if key.private?
-                key.public_key
-              else
-                key
-              end
-            elsif new_resource.source_key.private?
-              new_resource.source_key.public_key
-            else
-              new_resource.source_key
-            end
-          elsif new_resource.source_key_path
-            source_key_path = new_resource.source_key_path
-            if Pathname.new(source_key_path).relative?
-              source_key_str, source_key_path = Cheffish.get_private_key_with_path(source_key_path, run_context.config)
-            else
-              source_key_str = IO.read(source_key_path)
-            end
-            source_key, _source_key_format = Cheffish::KeyFormatter.decode(source_key_str, new_resource.source_key_pass_phrase, source_key_path)
-            if source_key.private?
-              source_key.public_key
-            else
-              source_key
-            end
-          else
-            nil
-          end
-        end
+                                if key.private?
+                                  key.public_key
+                                else
+                                  key
+                                end
+                              elsif new_resource.source_key.private?
+                                new_resource.source_key.public_key
+                              else
+                                new_resource.source_key
+                              end
+                            elsif new_resource.source_key_path
+                              source_key_path = new_resource.source_key_path
+                              if Pathname.new(source_key_path).relative?
+                                source_key_str, source_key_path = Cheffish.get_private_key_with_path(source_key_path, run_context.config)
+                              else
+                                source_key_str = IO.read(source_key_path)
+                              end
+                              source_key, _source_key_format = Cheffish::KeyFormatter.decode(source_key_str, new_resource.source_key_pass_phrase, source_key_path)
+                              if source_key.private?
+                                source_key.public_key
+                              else
+                                source_key
+                              end
+                            else
+                              nil
+                            end
       end
 
       def augment_new_json(json)

data/lib/cheffish/recipe_dsl.rb

@@ -62,13 +62,11 @@ class Chef
             string_key = "#{type}_path"
             symbol_key = "#{type}_path".to_sym
 
-            options[symbol_key] ||= begin
-              if options[:chef_repo_path].is_a?(String)
-                Chef::Util::PathHelper.join(options[:chef_repo_path], "#{type}s")
-              else
-                options[:chef_repo_path].map { |path| Chef::Util::PathHelper.join(path, "#{type}s") }
-              end
-            end
+            options[symbol_key] ||= if options[:chef_repo_path].is_a?(String)
+                                      Chef::Util::PathHelper.join(options[:chef_repo_path], "#{type}s")
+                                    else
+                                      options[:chef_repo_path].map { |path| Chef::Util::PathHelper.join(path, "#{type}s") }
+                                    end
 
             # Copy over to string keys for things that use string keys (ChefFS)...
             # TODO: Fix ChefFS to take symbols or use something that is insensitive to the difference

data/lib/cheffish/version.rb

@@ -1,3 +1,3 @@
 module Cheffish
-  VERSION = "16.0.12".freeze
+  VERSION = "16.0.26".freeze
 end

data/spec/integration/private_key_spec.rb

@@ -224,7 +224,7 @@ describe Chef::Resource::PrivateKey do
         end
       end.to have_updated "private_key[#{repo_path}/blah]", :create
       expect(IO.read("#{repo_path}/blah")).not_to start_with("-----BEGIN")
-      expect(OpenSSL::PKey.read(IO.read("#{repo_path}/blah"))).to be_kind_of(OpenSSL::PKey::RSA)
+      expect(OpenSSL::PKey.read(IO.binread("#{repo_path}/blah"))).to be_kind_of(OpenSSL::PKey::RSA)
     end
   end
 

data/spec/integration/rspec/converge_spec.rb

@@ -4,7 +4,11 @@ require "cheffish/rspec/chef_run_support"
 describe "Cheffish::RSpec::ChefRunSupport" do
   extend Cheffish::RSpec::ChefRunSupport
 
-  let(:temp_file) { Tempfile.new("test") }
+  let(:temp_file) do
+    f = Tempfile.new("test")
+    f.close
+    f
+  end
 
   context "#recipe" do
     it "recipe { file ... } updates the file" do

data/spec/support/key_support.rb

@@ -1,10 +1,10 @@
 RSpec::Matchers.define :be_public_key_for do |private_key, pass_phrase|
   match do |public_key|
     if public_key.is_a?(String)
-      public_key, _public_key_format = Cheffish::KeyFormatter.decode(IO.read(File.expand_path(public_key)), pass_phrase, public_key)
+      public_key, _public_key_format = Cheffish::KeyFormatter.decode(IO.binread(File.expand_path(public_key)), pass_phrase, public_key)
     end
     if private_key.is_a?(String)
-      private_key, _private_key_format = Cheffish::KeyFormatter.decode(IO.read(File.expand_path(private_key)), pass_phrase, private_key)
+      private_key, _private_key_format = Cheffish::KeyFormatter.decode(IO.binread(File.expand_path(private_key)), pass_phrase, private_key)
     end
 
     encrypted = public_key.public_encrypt("hi there")
@@ -15,10 +15,10 @@ end
 RSpec::Matchers.define :match_private_key do |expected, pass_phrase|
   match do |actual|
     if expected.is_a?(String)
-      expected, _format = Cheffish::KeyFormatter.decode(IO.read(File.expand_path(expected)), pass_phrase, expected)
+      expected, _format = Cheffish::KeyFormatter.decode(IO.binread(File.expand_path(expected)), pass_phrase, expected)
     end
     if actual.is_a?(String)
-      actual, _format = Cheffish::KeyFormatter.decode(IO.read(File.expand_path(actual)), pass_phrase, actual)
+      actual, _format = Cheffish::KeyFormatter.decode(IO.binread(File.expand_path(actual)), pass_phrase, actual)
     end
 
     encrypted = actual.public_encrypt("hi there")

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cheffish
 version: !ruby/object:Gem::Version
-  version: 16.0.12
+  version: 16.0.26
 platform: ruby
 authors:
 - Chef Software Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-09-30 00:00:00.000000000 Z
+date: 2021-04-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: chef-zero
@@ -127,7 +127,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3
+rubygems_version: 3.1.4
 signing_key: 
 specification_version: 4
 summary: A set of Chef resources for configuring Chef Infra.