fingerpuppet 0.0.2 → 0.0.4

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 9df93929da6a2a6a1dff9bb4f411146bab36e76b
+  data.tar.gz: 368735d4d1046aae97d21671a0a43b7a3dd63208
+SHA512:
+  metadata.gz: 3d6ea04279f15c0cf9cf2f3e367b59c3010167e68d6034a69df3be5c93bc452d67a9f88cd981cadf28b00e44fcc5aae9f074109a0d7d8a58bafc84eb6e529dae
+  data.tar.gz: 117541b7afb8bc25d057901c3163c784bf65f6167f0bd21eb1f00ade0fd13a0eb5cc0fd3e64fd8a38ec01601d1722cef7918c0a44dc876839a3cd6fdd806c2a7

data/README.md

@@ -36,14 +36,74 @@ Steps for using the API with fingerpuppet:
 Your Puppetmaster must be configured to allow requests other than certificate requests.
 See [http://docs.puppetlabs.com/guides/rest_auth_conf.html](http://docs.puppetlabs.com/guides/rest_auth_conf.html) for more information.
 
-For example, you could add the stanza below as one of the first rules in `auth.conf` to
-allow a single authenticated provisioning system complete access to all endpoints.
+An example `auth.conf` might look something like:
 
-    # Allow the provisioner unfettered access to any endpoint
-    path /
+    path ~ ^/catalog/([^/]+)$
+    method find
     auth yes
-    allow provision.mycompany.com
-
+    allow $1, provisioner.example.com
+    
+    path ~ ^/node/([^/]+)$
+    method find
+    auth yes
+    allow $1, provisioner.example.com
+    
+    path  /certificate_revocation_list/ca
+    method find
+    auth yes
+    allow *
+    
+    path  /report
+    method save
+    auth yes
+    allow *
+    
+    path  /file
+    auth yes
+    allow *
+
+    path  /resource
+    method find
+    auth any
+    allow provisioner.example.com
+    
+    path  /status
+    method find
+    auth any
+    allow provisioner.example.com
+    
+    path  /certificate/ca
+    method find
+    auth any
+    allow *
+    
+    path  /certificate/
+    method find
+    auth any
+    allow *
+    
+    path  /certificate_request
+    method find, save
+    auth any
+    allow *
+    
+    path  /certificate_status
+    method find, search, save, destroy
+    auth yes
+    allow pe-internal-dashboard, provisioner.example.com
+    
+    path  /facts
+    method find, search
+    auth any
+    allow *
+    
+    path  /facts
+    method save
+    auth yes
+    allow master.puppetlabs.vm, provisioner.example.com
+    
+    path  /
+    auth any
 
 The certname can be specified with `--certname` or with optional `CERTNAME` argument to many options.
 

data/bin/fingerpuppet

@@ -130,7 +130,7 @@ optparse = OptionParser.new { |opts|
         options[:action] = 'certificate_revocation_list'
     end
 
-    opts.on("--sign [CERTNAME]", "Instruct the Puppetmaster to sign a certificate. Requires significate privileges in auth.conf.") do |certname|
+    opts.on("--sign [CERTNAME]", "Instruct the Puppetmaster to sign a certificate. Requires significant privileges in auth.conf.") do |certname|
         options[:action] = 'sign'
         options[:certname] ||= certname
     end

data/lib/fingerpuppet/restapi.rb

@@ -83,15 +83,16 @@ module Fingerpuppet
 
               when 'DELETE'
                   request = Net::HTTP::Delete.new(uri)
+                  request["Accept"] = opts[:type]
               when 'HEAD'
                   request = Net::HTTP::Head.new(uri)
+                  request["Accept"] = opts[:type]
               else
                   # default to a GET request
                   request = Net::HTTP::Get.new(uri)
+                  request["Accept"] = opts[:type]
           end
 
-          request["Accept"] = opts[:type]
-
           if @debug
               puts '------ HTTP Request ------'
               puts request.to_yaml

metadata

@@ -1,23 +1,15 @@
---- !ruby/object:Gem::Specification 
+--- !ruby/object:Gem::Specification
 name: fingerpuppet
-version: !ruby/object:Gem::Version 
-  prerelease: false
-  segments: 
-  - 0
-  - 0
-  - 2
-  version: 0.0.2
+version: !ruby/object:Gem::Version
+  version: 0.0.4
 platform: ruby
-authors: 
+authors:
 - Ben Ford
 autorequire: 
 bindir: bin
 cert_chain: []
-
-date: 2013-03-28 00:00:00 -04:00
-default_executable: 
+date: 2014-05-09 00:00:00.000000000 Z
 dependencies: []
-
 description: |
   `fingerpuppet` is a simple library and commandline tool to interact with Puppet's REST API
   without needing to have Puppet itself installed. This may be integrated, for example,
@@ -27,47 +19,40 @@ description: |
   perform acceptance testing against a new version of Puppet before upgrading your
   production master.
 
+  Install the binford2k/fingerpuppet puppet module to get a class that can automatically
+  configure your `auth.conf` file under Puppet Enterprise, where that file is managed.
 email: binford2k@gmail.com
-executables: 
+executables:
 - fingerpuppet
 extensions: []
-
 extra_rdoc_files: []
-
-files: 
+files:
 - README.md
 - LICENSE
 - bin/fingerpuppet
 - lib/fingerpuppet/restapi.rb
-has_rdoc: true
 homepage: http://github.com/binford2k/fingerpuppet
 licenses: []
-
+metadata: {}
 post_install_message: 
 rdoc_options: []
-
-require_paths: 
+require_paths:
 - lib
-required_ruby_version: !ruby/object:Gem::Requirement 
-  requirements: 
-  - - ">="
-    - !ruby/object:Gem::Version 
-      segments: 
-      - 0
-      version: "0"
-required_rubygems_version: !ruby/object:Gem::Requirement 
-  requirements: 
-  - - ">="
-    - !ruby/object:Gem::Version 
-      segments: 
-      - 0
-      version: "0"
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
 requirements: []
-
 rubyforge_project: 
-rubygems_version: 1.3.6
+rubygems_version: 2.0.14
 signing_key: 
-specification_version: 3
-summary: A simple library and tool to interact with Puppet's REST API without needing Puppet itself installed.
+specification_version: 4
+summary: A simple library and tool to interact with Puppet's REST API without needing
+  Puppet itself installed.
 test_files: []
-