gcewinpass 1.0.0

Sign up to get free protection for your applications and to get access to all the features.
@@ -0,0 +1,7 @@
1
+ ---
2
+ SHA1:
3
+ metadata.gz: eb0cfbd95f92dc277084c872c2d93b98b5b652f9
4
+ data.tar.gz: ed05b9226a81687f3561d3449e943afcc5726919
5
+ SHA512:
6
+ metadata.gz: 0c046373136e2de5206b16cc4152c09b3dedc348fe4325180f59f4baca63512d1ca56074cd2f01923629195d1aa66c0660970421db53a377a4338f8794234a99
7
+ data.tar.gz: b25f1710e24322ce178a21a5533dcc8e00f3352163c96fec638e61fabbbaf32235e0e648810dddeeccd172d142a3b7486ccd65adf0b1fd811354c1344327f7f9
@@ -0,0 +1,9 @@
1
+ /.bundle/
2
+ /.yardoc
3
+ /Gemfile.lock
4
+ /_yardoc/
5
+ /coverage/
6
+ /doc/
7
+ /pkg/
8
+ /spec/reports/
9
+ /tmp/
data/.rspec ADDED
@@ -0,0 +1,2 @@
1
+ --format documentation
2
+ --color
@@ -0,0 +1,16 @@
1
+ language: ruby
2
+ cache: bundler
3
+ sudo: false
4
+ rvm:
5
+ - 2.0.0
6
+ - 2.1
7
+ - 2.2
8
+ branches:
9
+ only:
10
+ - master
11
+ notifications:
12
+ slack:
13
+ on_success: change
14
+ on_failure: always
15
+ rooms:
16
+ secure: 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
data/Gemfile ADDED
@@ -0,0 +1,6 @@
1
+ source "https://rubygems.org"
2
+
3
+ # Specify your gem's dependencies in gcewinpass.gemspec
4
+ gemspec
5
+
6
+ gem "chefstyle", git: "https://github.com/chef/chefstyle.git", branch: "master", group: :development
@@ -0,0 +1,201 @@
1
+ Apache License
2
+ Version 2.0, January 2004
3
+ http://www.apache.org/licenses/
4
+
5
+ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
6
+
7
+ 1. Definitions.
8
+
9
+ "License" shall mean the terms and conditions for use, reproduction,
10
+ and distribution as defined by Sections 1 through 9 of this document.
11
+
12
+ "Licensor" shall mean the copyright owner or entity authorized by
13
+ the copyright owner that is granting the License.
14
+
15
+ "Legal Entity" shall mean the union of the acting entity and all
16
+ other entities that control, are controlled by, or are under common
17
+ control with that entity. For the purposes of this definition,
18
+ "control" means (i) the power, direct or indirect, to cause the
19
+ direction or management of such entity, whether by contract or
20
+ otherwise, or (ii) ownership of fifty percent (50%) or more of the
21
+ outstanding shares, or (iii) beneficial ownership of such entity.
22
+
23
+ "You" (or "Your") shall mean an individual or Legal Entity
24
+ exercising permissions granted by this License.
25
+
26
+ "Source" form shall mean the preferred form for making modifications,
27
+ including but not limited to software source code, documentation
28
+ source, and configuration files.
29
+
30
+ "Object" form shall mean any form resulting from mechanical
31
+ transformation or translation of a Source form, including but
32
+ not limited to compiled object code, generated documentation,
33
+ and conversions to other media types.
34
+
35
+ "Work" shall mean the work of authorship, whether in Source or
36
+ Object form, made available under the License, as indicated by a
37
+ copyright notice that is included in or attached to the work
38
+ (an example is provided in the Appendix below).
39
+
40
+ "Derivative Works" shall mean any work, whether in Source or Object
41
+ form, that is based on (or derived from) the Work and for which the
42
+ editorial revisions, annotations, elaborations, or other modifications
43
+ represent, as a whole, an original work of authorship. For the purposes
44
+ of this License, Derivative Works shall not include works that remain
45
+ separable from, or merely link (or bind by name) to the interfaces of,
46
+ the Work and Derivative Works thereof.
47
+
48
+ "Contribution" shall mean any work of authorship, including
49
+ the original version of the Work and any modifications or additions
50
+ to that Work or Derivative Works thereof, that is intentionally
51
+ submitted to Licensor for inclusion in the Work by the copyright owner
52
+ or by an individual or Legal Entity authorized to submit on behalf of
53
+ the copyright owner. For the purposes of this definition, "submitted"
54
+ means any form of electronic, verbal, or written communication sent
55
+ to the Licensor or its representatives, including but not limited to
56
+ communication on electronic mailing lists, source code control systems,
57
+ and issue tracking systems that are managed by, or on behalf of, the
58
+ Licensor for the purpose of discussing and improving the Work, but
59
+ excluding communication that is conspicuously marked or otherwise
60
+ designated in writing by the copyright owner as "Not a Contribution."
61
+
62
+ "Contributor" shall mean Licensor and any individual or Legal Entity
63
+ on behalf of whom a Contribution has been received by Licensor and
64
+ subsequently incorporated within the Work.
65
+
66
+ 2. Grant of Copyright License. Subject to the terms and conditions of
67
+ this License, each Contributor hereby grants to You a perpetual,
68
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
69
+ copyright license to reproduce, prepare Derivative Works of,
70
+ publicly display, publicly perform, sublicense, and distribute the
71
+ Work and such Derivative Works in Source or Object form.
72
+
73
+ 3. Grant of Patent License. Subject to the terms and conditions of
74
+ this License, each Contributor hereby grants to You a perpetual,
75
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
76
+ (except as stated in this section) patent license to make, have made,
77
+ use, offer to sell, sell, import, and otherwise transfer the Work,
78
+ where such license applies only to those patent claims licensable
79
+ by such Contributor that are necessarily infringed by their
80
+ Contribution(s) alone or by combination of their Contribution(s)
81
+ with the Work to which such Contribution(s) was submitted. If You
82
+ institute patent litigation against any entity (including a
83
+ cross-claim or counterclaim in a lawsuit) alleging that the Work
84
+ or a Contribution incorporated within the Work constitutes direct
85
+ or contributory patent infringement, then any patent licenses
86
+ granted to You under this License for that Work shall terminate
87
+ as of the date such litigation is filed.
88
+
89
+ 4. Redistribution. You may reproduce and distribute copies of the
90
+ Work or Derivative Works thereof in any medium, with or without
91
+ modifications, and in Source or Object form, provided that You
92
+ meet the following conditions:
93
+
94
+ (a) You must give any other recipients of the Work or
95
+ Derivative Works a copy of this License; and
96
+
97
+ (b) You must cause any modified files to carry prominent notices
98
+ stating that You changed the files; and
99
+
100
+ (c) You must retain, in the Source form of any Derivative Works
101
+ that You distribute, all copyright, patent, trademark, and
102
+ attribution notices from the Source form of the Work,
103
+ excluding those notices that do not pertain to any part of
104
+ the Derivative Works; and
105
+
106
+ (d) If the Work includes a "NOTICE" text file as part of its
107
+ distribution, then any Derivative Works that You distribute must
108
+ include a readable copy of the attribution notices contained
109
+ within such NOTICE file, excluding those notices that do not
110
+ pertain to any part of the Derivative Works, in at least one
111
+ of the following places: within a NOTICE text file distributed
112
+ as part of the Derivative Works; within the Source form or
113
+ documentation, if provided along with the Derivative Works; or,
114
+ within a display generated by the Derivative Works, if and
115
+ wherever such third-party notices normally appear. The contents
116
+ of the NOTICE file are for informational purposes only and
117
+ do not modify the License. You may add Your own attribution
118
+ notices within Derivative Works that You distribute, alongside
119
+ or as an addendum to the NOTICE text from the Work, provided
120
+ that such additional attribution notices cannot be construed
121
+ as modifying the License.
122
+
123
+ You may add Your own copyright statement to Your modifications and
124
+ may provide additional or different license terms and conditions
125
+ for use, reproduction, or distribution of Your modifications, or
126
+ for any such Derivative Works as a whole, provided Your use,
127
+ reproduction, and distribution of the Work otherwise complies with
128
+ the conditions stated in this License.
129
+
130
+ 5. Submission of Contributions. Unless You explicitly state otherwise,
131
+ any Contribution intentionally submitted for inclusion in the Work
132
+ by You to the Licensor shall be under the terms and conditions of
133
+ this License, without any additional terms or conditions.
134
+ Notwithstanding the above, nothing herein shall supersede or modify
135
+ the terms of any separate license agreement you may have executed
136
+ with Licensor regarding such Contributions.
137
+
138
+ 6. Trademarks. This License does not grant permission to use the trade
139
+ names, trademarks, service marks, or product names of the Licensor,
140
+ except as required for reasonable and customary use in describing the
141
+ origin of the Work and reproducing the content of the NOTICE file.
142
+
143
+ 7. Disclaimer of Warranty. Unless required by applicable law or
144
+ agreed to in writing, Licensor provides the Work (and each
145
+ Contributor provides its Contributions) on an "AS IS" BASIS,
146
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
147
+ implied, including, without limitation, any warranties or conditions
148
+ of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
149
+ PARTICULAR PURPOSE. You are solely responsible for determining the
150
+ appropriateness of using or redistributing the Work and assume any
151
+ risks associated with Your exercise of permissions under this License.
152
+
153
+ 8. Limitation of Liability. In no event and under no legal theory,
154
+ whether in tort (including negligence), contract, or otherwise,
155
+ unless required by applicable law (such as deliberate and grossly
156
+ negligent acts) or agreed to in writing, shall any Contributor be
157
+ liable to You for damages, including any direct, indirect, special,
158
+ incidental, or consequential damages of any character arising as a
159
+ result of this License or out of the use or inability to use the
160
+ Work (including but not limited to damages for loss of goodwill,
161
+ work stoppage, computer failure or malfunction, or any and all
162
+ other commercial damages or losses), even if such Contributor
163
+ has been advised of the possibility of such damages.
164
+
165
+ 9. Accepting Warranty or Additional Liability. While redistributing
166
+ the Work or Derivative Works thereof, You may choose to offer,
167
+ and charge a fee for, acceptance of support, warranty, indemnity,
168
+ or other liability obligations and/or rights consistent with this
169
+ License. However, in accepting such obligations, You may act only
170
+ on Your own behalf and on Your sole responsibility, not on behalf
171
+ of any other Contributor, and only if You agree to indemnify,
172
+ defend, and hold each Contributor harmless for any liability
173
+ incurred by, or claims asserted against, such Contributor by reason
174
+ of your accepting any such warranty or additional liability.
175
+
176
+ END OF TERMS AND CONDITIONS
177
+
178
+ APPENDIX: How to apply the Apache License to your work.
179
+
180
+ To apply the Apache License to your work, attach the following
181
+ boilerplate notice, with the fields enclosed by brackets "{}"
182
+ replaced with your own identifying information. (Don't include
183
+ the brackets!) The text should be enclosed in the appropriate
184
+ comment syntax for the file format. We also recommend that a
185
+ file or class name and description of purpose be included on the
186
+ same "printed page" as the copyright notice for easier
187
+ identification within third-party archives.
188
+
189
+ Copyright {yyyy} {name of copyright owner}
190
+
191
+ Licensed under the Apache License, Version 2.0 (the "License");
192
+ you may not use this file except in compliance with the License.
193
+ You may obtain a copy of the License at
194
+
195
+ http://www.apache.org/licenses/LICENSE-2.0
196
+
197
+ Unless required by applicable law or agreed to in writing, software
198
+ distributed under the License is distributed on an "AS IS" BASIS,
199
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
200
+ See the License for the specific language governing permissions and
201
+ limitations under the License.
@@ -0,0 +1,85 @@
1
+ # gcewinpass - Reset GCE Windows Instance Passwords
2
+
3
+ The process for resetting a Windows instance password on Google Compute Engine is a bit involved. This gem provides a tool for automating the resetting of those passwords.
4
+
5
+ It was originally developed for use by Chef in the [knife-google](https://github.com/chef/knife-google) and [kitchen-google](https://github.com/test-kitchen/kitchen-google) plugins.
6
+
7
+ ## Installation
8
+
9
+ Add this line to your application's Gemfile:
10
+
11
+ ```ruby
12
+ gem 'gcewinpass'
13
+ ```
14
+
15
+ And then execute:
16
+
17
+ $ bundle
18
+
19
+ Or install it yourself as:
20
+
21
+ $ gem install gcewinpass
22
+
23
+ ## Usage
24
+
25
+ First, create a Google Cloud credentials file. The easiest way to do this is to install the [Google Cloud SDK](https://cloud.google.com/sdk/) and run `gcloud auth login`. Alternatively, set a `GOOGLE_APPLICATION_CREDENTIALS` environment variable pointing to your credentials JSON file.
26
+
27
+ Then, in your application, create a GoogleComputeWindowsPassword object and retrieve a new password:
28
+
29
+ ```ruby
30
+ password_reset = GoogleComputeWindowsPassword.new(
31
+ project: "my-gce-project",
32
+ zone: "us-east1-c",
33
+ instance_name: "windows-instance-1",
34
+ email: "myemail@company.com"
35
+ )
36
+ password_reset.new_password
37
+ ```
38
+
39
+ The return from `new_password` will be the new password set on the Windows instance.
40
+
41
+ The following parameters are required:
42
+
43
+ - **project**: short-name of the Google Cloud project hosting the instance
44
+ - **zone**: the name of the zone hosting the instance
45
+ - **instance_name**: the name of the instance on which you wish to reset a password
46
+ - **email**: the email address of the logged-in Google Cloud user
47
+
48
+ The following parameters are optional:
49
+
50
+ - **username**: the account user name on the instance for which to reset the password. Defaults to "Administrator"
51
+ - **timeout**: number of seconds to wait for any API interaction. Defaults to 60.
52
+ - **debug**: when set to true, some helpful debugging messages will be output to STDERR. Defaults to false.
53
+
54
+
55
+ ## License and Authors
56
+
57
+ Author:: Chef Partner Engineering (<partnereng@chef.io>)
58
+
59
+ Copyright:: Copyright (c) 2016 Chef Software, Inc.
60
+
61
+ License:: Apache License, Version 2.0
62
+
63
+ Licensed under the Apache License, Version 2.0 (the "License"); you may not use
64
+ this file except in compliance with the License. You may obtain a copy of the License at
65
+
66
+ ```
67
+ http://www.apache.org/licenses/LICENSE-2.0
68
+ ```
69
+
70
+ Unless required by applicable law or agreed to in writing, software distributed under the
71
+ License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
72
+ either express or implied. See the License for the specific language governing permissions
73
+ and limitations under the License.
74
+
75
+ ## Contributing
76
+
77
+ We'd love to hear from you if you find this isn't working for you. Please submit a GitHub issue with any problems you encounter.
78
+
79
+ Additionally, contributions are welcome! If you'd like to send up any fixes or changes:
80
+
81
+ 1. Fork it ( https://github.com/chef-partners/gcewinpass/fork )
82
+ 2. Create your feature branch (`git checkout -b my-new-feature`)
83
+ 3. Commit your changes (`git commit -am 'Add some feature'`)
84
+ 4. Push to the branch (`git push origin my-new-feature`)
85
+ 5. Create a new Pull Request
@@ -0,0 +1,12 @@
1
+ require "bundler/gem_tasks"
2
+ require "rspec/core/rake_task"
3
+
4
+ RSpec::Core::RakeTask.new(:spec)
5
+
6
+ require "chefstyle"
7
+ require "rubocop/rake_task"
8
+ RuboCop::RakeTask.new(:style) do |task|
9
+ task.options << "--display-cop-names"
10
+ end
11
+
12
+ task default: [:spec, :style]
@@ -0,0 +1,26 @@
1
+ # coding: utf-8
2
+ lib = File.expand_path("../lib", __FILE__)
3
+ $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
4
+
5
+ require "gcewinpass/version"
6
+
7
+ Gem::Specification.new do |spec|
8
+ spec.name = "gcewinpass"
9
+ spec.version = GoogleComputeWindowsPassword::VERSION
10
+ spec.authors = ["Chef Partner Engineering"]
11
+ spec.email = ["partnereng@chef.io"]
12
+
13
+ spec.summary = "Reset a password on a Google Compute Engine instance running Windows."
14
+ spec.description = spec.summary
15
+ spec.homepage = "https://github.com/chef-partners/gcewinpass"
16
+
17
+ spec.files = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
18
+ spec.require_paths = ["lib"]
19
+
20
+ spec.add_dependency "google-api-client", "~> 0.9.0"
21
+
22
+ spec.add_development_dependency "bundler", "~> 1.7"
23
+ spec.add_development_dependency "rake", "~> 10.0"
24
+ spec.add_development_dependency "rspec", "~> 3.4"
25
+ spec.add_development_dependency "pry", "~> 0.10"
26
+ end
@@ -0,0 +1,211 @@
1
+ #
2
+ # Author:: Chef Partner Engineering (<partnereng@chef.io>)
3
+ # Copyright:: Copyright (c) 2016 Chef Software, Inc.
4
+ # License:: Apache License, Version 2.0
5
+ #
6
+ # Licensed under the Apache License, Version 2.0 (the "License");
7
+ # you may not use this file except in compliance with the License.
8
+ # You may obtain a copy of the License at
9
+ #
10
+ # http://www.apache.org/licenses/LICENSE-2.0
11
+ #
12
+ # Unless required by applicable law or agreed to in writing, software
13
+ # distributed under the License is distributed on an "AS IS" BASIS,
14
+ # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15
+ # See the License for the specific language governing permissions and
16
+ # limitations under the License.
17
+ #
18
+
19
+ require "gcewinpass/version"
20
+ require "google/apis/compute_v1"
21
+ require "base64"
22
+ require "json"
23
+ require "openssl"
24
+ require "time"
25
+ require "timeout"
26
+
27
+ class GoogleComputeWindowsPassword
28
+ attr_reader :api, :project, :zone, :instance_name, :username, :email, :debug
29
+
30
+ def initialize(opts = {})
31
+ validate_options!(opts)
32
+
33
+ @api = Google::Apis::ComputeV1::ComputeService.new
34
+ @api.authorization = authorization
35
+
36
+ @project = opts[:project]
37
+ @zone = opts[:zone]
38
+ @instance_name = opts[:instance_name]
39
+ @email = opts[:email]
40
+ @username = opts.fetch(:username, "Administrator")
41
+ @debug = opts.fetch(:debug, false)
42
+ @timeout = opts.fetch(:timeout, 120)
43
+ end
44
+
45
+ def new_password
46
+ raise "Unable to locate instance #{instance_name} in project #{project}, zone #{zone}" unless instance_exists?
47
+
48
+ update_instance_metadata
49
+ password_from_instance
50
+ end
51
+
52
+ def validate_options!(opts)
53
+ raise "Project not specified" unless opts[:project]
54
+ raise "Zone not specified" unless opts[:zone]
55
+ raise "Instance name not specified" unless opts[:instance_name]
56
+ raise "Email address of GCE user not specified" unless opts[:email]
57
+ end
58
+
59
+ def authorization
60
+ @authorization ||= Google::Auth.get_application_default(
61
+ [
62
+ "https://www.googleapis.com/auth/cloud-platform",
63
+ "https://www.googleapis.com/auth/compute",
64
+ ]
65
+ )
66
+ end
67
+
68
+ def instance
69
+ @instance ||= api.get_instance(project, zone, instance_name)
70
+ end
71
+
72
+ def instance_exists?
73
+ instance
74
+ rescue Google::Apis::ClientError
75
+ false
76
+ else
77
+ true
78
+ end
79
+
80
+ def instance_metadata
81
+ instance.metadata
82
+ end
83
+
84
+ def password_request
85
+ {
86
+ "userName" => username,
87
+ "modulus" => modulus,
88
+ "exponent" => exponent,
89
+ "email" => email,
90
+ "expireOn" => expiration_date,
91
+ }
92
+ end
93
+
94
+ def password_request_metadata
95
+ Google::Apis::ComputeV1::Metadata::Item.new.tap do |item|
96
+ item.key = "windows-keys"
97
+ item.value = password_request.to_json
98
+ end
99
+ end
100
+
101
+ def update_instance_metadata
102
+ instance_metadata.items = [] if instance_metadata.items.nil?
103
+ instance_metadata.items = instance_metadata.items.select { |item| item.key != "windows-keys" }
104
+ instance_metadata.items << password_request_metadata
105
+
106
+ log_debug("Updating instance #{instance_name} metadata with: #{instance_metadata.inspect}")
107
+
108
+ wait_for_operation(api.set_instance_metadata(project, zone, instance_name, instance_metadata))
109
+
110
+ log_debug("Instance metadata updated.")
111
+ end
112
+
113
+ def private_key
114
+ @private_key ||= OpenSSL::PKey::RSA.new(2048)
115
+ end
116
+
117
+ def public_key
118
+ @public_key ||= private_key.public_key
119
+ end
120
+
121
+ def modulus
122
+ Base64.strict_encode64(public_key.to_der[33, 256])
123
+ end
124
+
125
+ def exponent
126
+ Base64.strict_encode64(public_key.to_der[291, 3])
127
+ end
128
+
129
+ def expiration_date
130
+ (Time.now + 300).to_datetime.rfc3339
131
+ end
132
+
133
+ def password_from_instance
134
+ response = response_from_console_port
135
+ raise "Password agent attempted the reset but did not succeed" if response["passwordFound"] == false
136
+
137
+ private_key.private_decrypt(Base64.strict_decode64(response["encryptedPassword"]), OpenSSL::PKey::RSA::PKCS1_OAEP_PADDING)
138
+ end
139
+
140
+ def response_from_console_port
141
+ log_debug("fetching password from console port")
142
+
143
+ Timeout.timeout(timeout) do
144
+ loop do
145
+ api.get_instance_serial_port_output(project, zone, instance_name, port: 4).contents.lines.reverse_each do |line|
146
+ line.strip!
147
+
148
+ begin
149
+ event = JSON.load(line)
150
+ rescue JSON::ParserError
151
+ next
152
+ end
153
+
154
+ if event["modulus"] == modulus && event["exponent"] == exponent
155
+ log_debug("modulus and exponent found - returning event")
156
+ return event
157
+ end
158
+ end
159
+
160
+ log_debug("event not found, sleeping...")
161
+ sleep 5
162
+ end
163
+ end
164
+ rescue Timeout::Error
165
+ raise Timeout::Error, "Timeout while waiting for password agent to perform password reset"
166
+ end
167
+
168
+ def wait_for_operation(operation_obj)
169
+ operation_name = operation_obj.name
170
+
171
+ begin
172
+ Timeout.timeout(timeout) do
173
+ loop do
174
+ operation = operation(operation_name)
175
+ log_debug("Current operation status: #{operation.status}")
176
+ break if operation.status == "DONE"
177
+
178
+ sleep 2
179
+ end
180
+ end
181
+ rescue Timeout::Error
182
+ raise Timeout::Error, "Timeout while performing GCE API operation"
183
+ end
184
+
185
+ check_operation_for_errors!(operation_name)
186
+ log_debug("Operation completed successfully.")
187
+ end
188
+
189
+ def check_operation_for_errors!(operation_name)
190
+ operation = operation(operation_name)
191
+ unless operation.error.nil?
192
+ errors = operation.error.errors.each_with_object([]) do |error, memo|
193
+ memo << "#{error.code}: #{error.message}"
194
+ end
195
+
196
+ raise "Operation failed: #{errors.join(", ")}"
197
+ end
198
+ end
199
+
200
+ def operation(operation_name)
201
+ api.get_zone_operation(project, zone, operation_name)
202
+ end
203
+
204
+ def log_debug(msg)
205
+ $stderr.puts msg if debug
206
+ end
207
+
208
+ def timeout
209
+ @timeout.to_i
210
+ end
211
+ end
@@ -0,0 +1,21 @@
1
+ #
2
+ # Author:: Chef Partner Engineering (<partnereng@chef.io>)
3
+ # Copyright:: Copyright (c) 2016 Chef Software, Inc.
4
+ # License:: Apache License, Version 2.0
5
+ #
6
+ # Licensed under the Apache License, Version 2.0 (the "License");
7
+ # you may not use this file except in compliance with the License.
8
+ # You may obtain a copy of the License at
9
+ #
10
+ # http://www.apache.org/licenses/LICENSE-2.0
11
+ #
12
+ # Unless required by applicable law or agreed to in writing, software
13
+ # distributed under the License is distributed on an "AS IS" BASIS,
14
+ # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15
+ # See the License for the specific language governing permissions and
16
+ # limitations under the License.
17
+ #
18
+
19
+ class GoogleComputeWindowsPassword
20
+ VERSION = "1.0.0".freeze
21
+ end
metadata ADDED
@@ -0,0 +1,124 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: gcewinpass
3
+ version: !ruby/object:Gem::Version
4
+ version: 1.0.0
5
+ platform: ruby
6
+ authors:
7
+ - Chef Partner Engineering
8
+ autorequire:
9
+ bindir: bin
10
+ cert_chain: []
11
+ date: 2016-02-25 00:00:00.000000000 Z
12
+ dependencies:
13
+ - !ruby/object:Gem::Dependency
14
+ name: google-api-client
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - "~>"
18
+ - !ruby/object:Gem::Version
19
+ version: 0.9.0
20
+ type: :runtime
21
+ prerelease: false
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - "~>"
25
+ - !ruby/object:Gem::Version
26
+ version: 0.9.0
27
+ - !ruby/object:Gem::Dependency
28
+ name: bundler
29
+ requirement: !ruby/object:Gem::Requirement
30
+ requirements:
31
+ - - "~>"
32
+ - !ruby/object:Gem::Version
33
+ version: '1.7'
34
+ type: :development
35
+ prerelease: false
36
+ version_requirements: !ruby/object:Gem::Requirement
37
+ requirements:
38
+ - - "~>"
39
+ - !ruby/object:Gem::Version
40
+ version: '1.7'
41
+ - !ruby/object:Gem::Dependency
42
+ name: rake
43
+ requirement: !ruby/object:Gem::Requirement
44
+ requirements:
45
+ - - "~>"
46
+ - !ruby/object:Gem::Version
47
+ version: '10.0'
48
+ type: :development
49
+ prerelease: false
50
+ version_requirements: !ruby/object:Gem::Requirement
51
+ requirements:
52
+ - - "~>"
53
+ - !ruby/object:Gem::Version
54
+ version: '10.0'
55
+ - !ruby/object:Gem::Dependency
56
+ name: rspec
57
+ requirement: !ruby/object:Gem::Requirement
58
+ requirements:
59
+ - - "~>"
60
+ - !ruby/object:Gem::Version
61
+ version: '3.4'
62
+ type: :development
63
+ prerelease: false
64
+ version_requirements: !ruby/object:Gem::Requirement
65
+ requirements:
66
+ - - "~>"
67
+ - !ruby/object:Gem::Version
68
+ version: '3.4'
69
+ - !ruby/object:Gem::Dependency
70
+ name: pry
71
+ requirement: !ruby/object:Gem::Requirement
72
+ requirements:
73
+ - - "~>"
74
+ - !ruby/object:Gem::Version
75
+ version: '0.10'
76
+ type: :development
77
+ prerelease: false
78
+ version_requirements: !ruby/object:Gem::Requirement
79
+ requirements:
80
+ - - "~>"
81
+ - !ruby/object:Gem::Version
82
+ version: '0.10'
83
+ description: Reset a password on a Google Compute Engine instance running Windows.
84
+ email:
85
+ - partnereng@chef.io
86
+ executables: []
87
+ extensions: []
88
+ extra_rdoc_files: []
89
+ files:
90
+ - ".gitignore"
91
+ - ".rspec"
92
+ - ".travis.yml"
93
+ - Gemfile
94
+ - LICENSE.txt
95
+ - README.md
96
+ - Rakefile
97
+ - gcewinpass.gemspec
98
+ - lib/gcewinpass.rb
99
+ - lib/gcewinpass/version.rb
100
+ homepage: https://github.com/chef-partners/gcewinpass
101
+ licenses: []
102
+ metadata: {}
103
+ post_install_message:
104
+ rdoc_options: []
105
+ require_paths:
106
+ - lib
107
+ required_ruby_version: !ruby/object:Gem::Requirement
108
+ requirements:
109
+ - - ">="
110
+ - !ruby/object:Gem::Version
111
+ version: '0'
112
+ required_rubygems_version: !ruby/object:Gem::Requirement
113
+ requirements:
114
+ - - ">="
115
+ - !ruby/object:Gem::Version
116
+ version: '0'
117
+ requirements: []
118
+ rubyforge_project:
119
+ rubygems_version: 2.4.8
120
+ signing_key:
121
+ specification_version: 4
122
+ summary: Reset a password on a Google Compute Engine instance running Windows.
123
+ test_files: []
124
+ has_rdoc: