ogre 0.1.0

data/lib/ogre/skeletons/code_generator/templates/default/LICENSE.mit.erb

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) <%= year %> <%= copyright_holder %>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/lib/ogre/skeletons/code_generator/templates/default/README.md.erb

@@ -0,0 +1,4 @@
+# <%= cookbook_name %>
+
+TODO: Enter the cookbook description here.
+

data/lib/ogre/skeletons/code_generator/templates/default/knife.rb.erb

@@ -0,0 +1,44 @@
+#=====================================================================
+#  <%= org %>-chef/.chef/knife.rb
+#
+#  <%= org %> Chef Knife Configuration
+#
+#---------------------------------------------------------------------
+# Useful variables
+#
+current_dir = File.dirname(__FILE__)
+user_email  = `git config --get user.email`.delete!("\n")
+home_dir    = ENV['HOME'] || ENV['HOMEDRIVE']
+org         = "<%= org %>"
+chef_server = "<%= chef_server_url %>"
+
+knife_override = "#{home_dir}/.chef/knife_override.rb"
+
+#---------------------------------------------------------------------
+# Configuration directives
+#
+
+# Where is the chef server?
+chef_server_url          "#{chef_server}/organizations/#{org}"
+
+# Logging defaults
+log_level                :info
+log_location             STDOUT
+
+# USERNAME is UPPERCASE in Windows, but lowercase in the Chef server,
+# so `downcase` it.
+node_name                ( ENV['USER'] || ENV['USERNAME'] ).downcase
+client_key               "#{home_dir}/.chef/#{node_name}_#{org}.pem"
+cache_type               'BasicFile'
+cache_options( :path => "#{home_dir}/.chef/checksums" )
+
+# Validation, for use when bootstrapping nodes
+validation_client_name   "#{org}-validator"
+validation_key           "#{current_dir}/#{validation_client_name}.pem"
+
+# We keep our cookbooks in separate repos under a ~/chef/cookbooks dir
+cookbook_path            [ "#{current_dir}/../../../cookbooks",
+                           "#{current_dir}/../../../community" ]
+cookbook_copyright       <%=copyright_holder%>
+cookbook_license         "<%=license%>"
+cookbook_email           "<%=email%>"

data/lib/ogre/skeletons/code_generator/templates/default/metadata.rb.erb

@@ -0,0 +1,8 @@
+name             '<%= cookbook_name %>'
+maintainer       '<%= copyright_holder %>'
+maintainer_email '<%= email %>'
+license          '<%= license %>'
+description      'Installs/Configures <%= cookbook_name %>'
+long_description 'Installs/Configures <%= cookbook_name %>'
+version          '0.1.0'
+

data/lib/ogre/skeletons/code_generator/templates/default/repo/gitignore.erb

@@ -0,0 +1,11 @@
+.rake_test_cache
+
+###
+# Ignore Chef key files and secrets
+###
+.chef/*.pem
+.chef/encrypted_data_bag_secret
+<%- if policy_only -%>
+cookbooks/**
+!cookbooks/README.md
+<%- end -%>

data/lib/ogre/user-create.rb

@@ -0,0 +1,40 @@
+module Ogre
+  # This is used to create a user in enterprise chef
+  class UserCreate < Ogre::Base
+    include Thor::Actions
+
+    # required
+    argument :username, type: :string
+    argument :first_name, type: :string
+    argument :last_name, type: :string
+    argument :email, type: :string
+    argument :password, type: :string
+
+    # Create chef user
+    def user_create
+      # create user
+      user_json = {
+        username:     username,
+        first_name:   first_name,
+        last_name:    last_name,
+        display_name: "#{first_name} #{last_name}",
+        email:        email,
+        password:     password
+      }
+
+      chef_rest.post_rest('/users', user_json)
+
+      puts "'#{username}' has been created."
+
+      # TODO: print/save pem key?
+
+    rescue Net::HTTPServerException => e
+      # already exists -- i will allow it
+      if e.response.code == '409'
+        puts "'#{username}' already exists."
+      else
+        raise e
+      end
+    end
+  end
+end

data/lib/ogre/user-delete.rb

@@ -0,0 +1,39 @@
+module Ogre
+  # This is used to delete a user from enterprise chef
+  class UserDelete < Ogre::Base
+    include Thor::Actions
+
+    # required
+    argument :username, type: :string
+
+    # optional
+    class_option :force, aliases: '-f', default: false, type: :boolean, desc: DESC_FORCE
+
+    # Delete user from enterprise chef
+    def user_delete
+      # prompt user
+      # rubocop:disable LineLength
+      exit unless options[:force] || HighLine.agree("Deleting '#{username}' is permanent. Do you want to proceed? (y/n)")
+      # rubocop:enable LineLength
+
+      # disassociate from all orgs
+      orgs = chef_rest.get_rest("users/#{username}/organizations")
+      org_names = orgs.map { |o| o['organization']['name'] }
+      org_names.each do |org|
+        puts chef_rest.delete_rest("organizations/#{org}/users/#{username}")
+      end
+
+      # delete user
+      chef_rest.delete_rest("users/#{username}")
+      puts "'#{username}' has been deleted."
+
+    rescue Net::HTTPServerException => e
+      # user not found -- i will allow it
+      if e.response.code == '404'
+        puts "'#{username}' not found."
+      else
+        raise e
+      end
+    end
+  end
+end

data/lib/ogre/version.rb

@@ -0,0 +1,5 @@
+# simple gem version number tracking
+module Ogre
+  # version
+  VERSION = '0.1.0'
+end

data/ogre.gemspec

@@ -0,0 +1,45 @@
+# rubocop:disable all
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'ogre/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = 'ogre'
+  spec.version       = Ogre::VERSION
+  spec.authors       = %w('Joe Nguyen')
+  spec.email         = %w('joe.nguyen@activenetwork.com')
+  spec.summary       = 'Automated generation of enterprise chef organizations'
+  spec.description   = 'Command line tool to automate creation of chef orgs, chef policy repositories, and validation key integration with vco'
+  spec.homepage      = 'https://github.com/activenetwork-automation/ogre'
+  spec.license       = 'Apache 2.0'
+
+  spec.files         = `git ls-files -z`.split("\x0")
+  spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
+  spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
+  spec.require_paths = ['lib']
+
+  spec.add_development_dependency 'bundler', '~> 1.7.4'
+  spec.add_development_dependency 'rake', '~> 10.0'
+  spec.add_development_dependency 'rubocop', '~> 0.30.1'
+  # spec.add_development_dependency 'aruba', '>= 0.6'
+  spec.add_development_dependency 'rspec', '>= 3.0'
+  spec.add_development_dependency 'coveralls', '>= 0.7.9'
+  spec.add_development_dependency 'guard', '>= 2.10.0'
+  spec.add_development_dependency 'guard-rubocop', '>= 1.1.0'
+  # growl functionality in Guardfile depends on growl-notify
+  spec.add_development_dependency 'growl', '>= 1.0'
+  spec.add_development_dependency 'yard', '>= 0.8'
+  spec.add_development_dependency 'webmock', '>= 1.21.0'
+  spec.add_development_dependency 'vcr', '>= 2.9.3'
+
+  spec.add_dependency 'thor', '~> 0.19.1'
+  spec.add_dependency 'chef-dk', '~> 0.5.1'
+  spec.add_dependency 'vcoworkflows', '~> 0.1.2'
+end
+# rubocop:enable all
+
+# spec.add_development_dependency('chef')
+# spec.add_development_dependency('knife-vsphere')
+#
+# spec.add_dependency('open4')
+# spec.add_dependency('english')

data/spec/fixtures/client_key/dummy.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEowIBAAKCAQEA3SqsHlVmqP6OxcMBZm96sObwGHK3pM7LHl6F8TZ3poPzFgut
+SVt2sBfHQZC2vXIN/lnwlExtixzttgd9F4VkGij5LX/crLZ8JV7he0/+c0Y/slAg
+dqe2AMRNuxAL+s/FpqVnB7iiePIxlA9sDFhsYyHz6QtwzIRAaxnlC/ZWzJCYRHxE
+hIwZMC1oZsPdSc9k5D60vIxJLHwQ/OOIhVjk6h+szS3uRUYpHiyywF09lwaCeKR0
+FqxqSBb5yJv9lzLqhJkhHM6t0y88rNWggwj3nE3YmlCHcp/B81BTbyXT2EpF6mbt
+CQbmDO118YHDDuXGiTuSimGx9oFyw9tMe8Nx/QIBIwKCAQEAl6g7goO0HBxEpN19
+TY5FgJ5bfnqMjkSoidpqeYRvTZxO6ouqBmqah2DDJaUPl9kuKsFUgvKUQiJ3Hbv+
+AYAKIJEf5K9yv5MTTNNYyZXwTwuZZFQzhJBCSast/J1KCxIhIdCBKd2xPP3Y2o47
+di4BLginQLdjSmlQvngoCDPjv3fRNhvyoTNvKoiCXWFbw+Rnax1UpzAGL1u6JHjE
+dfLfRmJNdnOQVpnfUQ2ELoF6iTTB2/mJsbDcfAmKIGeWmXFa006f1RO3YxS+925t
+/7eoyPEAJ/fRBBzUZrkhoVjGaZXgEgmOw3k3rVQFbixZf0FXQpehwXyE4WCkY3rc
+F1AZawKBgQD6Rq/u9S8xhR9nvibntCqko/jBhqqBD2hhXh+w0WWSZcISLPoKNC1F
+L3ThiuBEm/jRpbxWJtfMNd0jcd4Nad8EoAHDxI7VYfsoYwVm2xnUe5ynAtpReOCC
+2t6xMNdYIy4X+CtkM/1uYFZkGAb3nN1a9ZvQoh1Crb+5pxcIKsYuTwKBgQDiOY4+
+ZEc64lxCixmlF/epbrstF2Zpwq3q1D5j3UZ3kw4+/iCxks3TmIQbHFV7naDAx3GK
+d11ciAFCPNGJ4uPsGxoJlthtALXTIPnZPa33plG8B9d6fmqJV/j73a0FBcxHLULt
+9/ixJSc0mM9zmHPMUoKgrhmC1WoetlvDWahz8wKBgQDzIBie/M7CZA/hHx56rwTa
+c2atXj87i090h1H8OSDXW4lTfCYYinUeoyEVnNncP76Cg75FD8pRWOVy46SCDxMp
+EHa+LKgCfHBTHl0E1NdDcMQP9CSJqJ+VDyF47Z392Qg0iq3PDe7gQFPsNJkNy5Uz
+ygUT0K61zVspYHzGGuxnfwKBgQCbICcGNiI3AZ5Zg/RT8y17fyFDfcKRqhDbijlp
+DMKbIwJ0VnzRiTyuWfQv2Ooo4R3GBRqoF1X2TqHHBSH4Jo2pNyfMD6pZX5KfZxG5
+iWFZXBrKFAF4kTMcWZTJ9xeOamAwzpRLaDWAyQTw3dAUwE9niQkduTYQkldlhFwu
+LtnpGwKBgHblG0jaKbPGeE2QANZ1koiOoOHV007tGunmq/Bv2paRpgn/yzjpU/l8
+oLWSvbabIU3ANxu6Ich6OGTikQqo+b+Pi0v5lv66nSb1lZSGk2NIll3SEF4/rmx/
+5ijGogq7y/I62ZoYUy4oZ/tKVQMqIgn3tGJ3sGImxeSwfKzxfLer
+-----END RSA PRIVATE KEY-----

data/spec/fixtures/vcr_cassettes/associate-no-org.yml

@@ -0,0 +1,65 @@
+---
+http_interactions:
+- request:
+    method: post
+    uri: https://chef.server/organizations/non-existent-org/association_requests
+    body:
+      encoding: ASCII-8BIT
+      string: '{"user":"test"}'
+    headers:
+      Content-Type:
+      - application/json
+      Accept:
+      - application/json
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      X-Ops-Sign:
+      - algorithm=sha1;version=1.0;
+      X-Ops-Userid: pivotal
+      X-Ops-Timestamp:
+      - '2015-04-29T17:35:33Z'
+      X-Ops-Content-Hash:
+      - "{{X-Ops-Content-Hash}}"
+      X-Ops-Authorization-1:
+      - "{{X-Ops-Authorization-1}}"
+      X-Ops-Authorization-2:
+      - "{{X-Ops-Authorization-2}}"
+      X-Ops-Authorization-3:
+      - "{{X-Ops-Authorization-3}}"
+      X-Ops-Authorization-4:
+      - "{{X-Ops-Authorization-4}}"
+      X-Ops-Authorization-5:
+      - "{{X-Ops-Authorization-5}}"
+      X-Ops-Authorization-6:
+      - "{{X-Ops-Authorization-6}}"
+      Host:
+      - chef.server:443
+      X-Remote-Request-Id:
+      - 6c5bd7e8-44f4-4aab-aaa3-c05d6376bb3f
+      Content-Length:
+      - '15'
+      X-Chef-Version:
+      - 12.3.0
+      User-Agent:
+      - ruby
+  response:
+    status:
+      code: 404
+      message: Object Not Found
+    headers:
+      Server:
+      - ngx_openresty/1.4.3.6
+      Date:
+      - Wed, 29 Apr 2015 17:35:32 GMT
+      Content-Length:
+      - '61'
+      Connection:
+      - keep-alive
+      X-Ops-Api-Info:
+      - flavor=cs;version=12.0.0;oc_erchef=1.5.0
+    body:
+      encoding: UTF-8
+      string: '{"error":["organization ''non-existent-org'' does not exist."]}'
+    http_version: 
+  recorded_at: Wed, 29 Apr 2015 17:35:33 GMT
+recorded_with: VCR 2.9.3

data/spec/fixtures/vcr_cassettes/associate-no-user.yml

@@ -0,0 +1,65 @@
+---
+http_interactions:
+- request:
+    method: post
+    uri: https://chef.server/organizations/my-org-name/association_requests
+    body:
+      encoding: ASCII-8BIT
+      string: '{"user":"non-existent-user"}'
+    headers:
+      Content-Type:
+      - application/json
+      Accept:
+      - application/json
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      X-Ops-Sign:
+      - algorithm=sha1;version=1.0;
+      X-Ops-Userid: pivotal
+      X-Ops-Timestamp:
+      - '2015-04-29T17:41:28Z'
+      X-Ops-Content-Hash:
+      - "{{X-Ops-Content-Hash}}"
+      X-Ops-Authorization-1:
+      - "{{X-Ops-Authorization-1}}"
+      X-Ops-Authorization-2:
+      - "{{X-Ops-Authorization-2}}"
+      X-Ops-Authorization-3:
+      - "{{X-Ops-Authorization-3}}"
+      X-Ops-Authorization-4:
+      - "{{X-Ops-Authorization-4}}"
+      X-Ops-Authorization-5:
+      - "{{X-Ops-Authorization-5}}"
+      X-Ops-Authorization-6:
+      - "{{X-Ops-Authorization-6}}"
+      Host:
+      - chef.server:443
+      X-Remote-Request-Id:
+      - c2f3113f-655f-4ecb-baa5-e572f0d1aa9e
+      Content-Length:
+      - '28'
+      X-Chef-Version:
+      - 12.3.0
+      User-Agent:
+      - ruby
+  response:
+    status:
+      code: 404
+      message: Object Not Found
+    headers:
+      Server:
+      - ngx_openresty/1.4.3.6
+      Date:
+      - Wed, 29 Apr 2015 17:41:27 GMT
+      Content-Length:
+      - '49'
+      Connection:
+      - keep-alive
+      X-Ops-Api-Info:
+      - flavor=cs;version=12.0.0;oc_erchef=1.5.0
+    body:
+      encoding: UTF-8
+      string: '{"error":"Could not find user non-existent-user"}'
+    http_version: 
+  recorded_at: Wed, 29 Apr 2015 17:41:28 GMT
+recorded_with: VCR 2.9.3

data/spec/fixtures/vcr_cassettes/associate-user-exists.yml

@@ -0,0 +1,135 @@
+---
+http_interactions:
+- request:
+    method: post
+    uri: https://chef.server/organizations/my-org-name/association_requests
+    body:
+      encoding: ASCII-8BIT
+      string: '{"user":"test"}'
+    headers:
+      Content-Type:
+      - application/json
+      Accept:
+      - application/json
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      X-Ops-Sign:
+      - algorithm=sha1;version=1.0;
+      X-Ops-Userid: pivotal
+      X-Ops-Timestamp:
+      - '2015-04-29T17:19:58Z'
+      X-Ops-Content-Hash:
+      - "{{X-Ops-Content-Hash}}"
+      X-Ops-Authorization-1:
+      - "{{X-Ops-Authorization-1}}"
+      X-Ops-Authorization-2:
+      - "{{X-Ops-Authorization-2}}"
+      X-Ops-Authorization-3:
+      - "{{X-Ops-Authorization-3}}"
+      X-Ops-Authorization-4:
+      - "{{X-Ops-Authorization-4}}"
+      X-Ops-Authorization-5:
+      - "{{X-Ops-Authorization-5}}"
+      X-Ops-Authorization-6:
+      - "{{X-Ops-Authorization-6}}"
+      Host:
+      - chef.server:443
+      X-Remote-Request-Id:
+      - d32e6397-0c4a-4649-813d-25efddacc6ce
+      Content-Length:
+      - '15'
+      X-Chef-Version:
+      - 12.3.0
+      User-Agent:
+      - ruby
+  response:
+    status:
+      code: 409
+      message: Conflict
+    headers:
+      Server:
+      - ngx_openresty/1.4.3.6
+      Date:
+      - Wed, 29 Apr 2015 17:19:57 GMT
+      Content-Type:
+      - application/json
+      Content-Length:
+      - '43'
+      Connection:
+      - keep-alive
+      X-Ops-Api-Info:
+      - flavor=cs;version=12.0.0;oc_erchef=1.5.0
+      Location:
+      - http://chef.server/organizations/my-org-name/association_requests/invalid_path
+    body:
+      encoding: UTF-8
+      string: '{"error":"The association already exists."}'
+    http_version: 
+  recorded_at: Wed, 29 Apr 2015 17:19:58 GMT
+- request:
+    method: get
+    uri: https://chef.server/organizations/my-org-name/groups/users
+    body:
+      encoding: US-ASCII
+      string: ''
+    headers:
+      Accept:
+      - application/json
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      X-Ops-Sign:
+      - algorithm=sha1;version=1.0;
+      X-Ops-Userid: pivotal
+      X-Ops-Timestamp:
+      - '2015-04-29T17:19:58Z'
+      X-Ops-Content-Hash:
+      - "{{X-Ops-Content-Hash}}"
+      X-Ops-Authorization-1:
+      - "{{X-Ops-Authorization-1}}"
+      X-Ops-Authorization-2:
+      - "{{X-Ops-Authorization-2}}"
+      X-Ops-Authorization-3:
+      - "{{X-Ops-Authorization-3}}"
+      X-Ops-Authorization-4:
+      - "{{X-Ops-Authorization-4}}"
+      X-Ops-Authorization-5:
+      - "{{X-Ops-Authorization-5}}"
+      X-Ops-Authorization-6:
+      - "{{X-Ops-Authorization-6}}"
+      Host:
+      - chef.server:443
+      X-Remote-Request-Id:
+      - d32e6397-0c4a-4649-813d-25efddacc6ce
+      X-Chef-Version:
+      - 12.3.0
+      User-Agent:
+      - ruby
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Server:
+      - ngx_openresty/1.4.3.6
+      Date:
+      - Wed, 29 Apr 2015 17:19:57 GMT
+      Content-Type:
+      - application/json
+      Transfer-Encoding:
+      - chunked
+      Connection:
+      - keep-alive
+      X-Ops-Api-Info:
+      - flavor=cs;version=12.0.0;oc_erchef=1.5.0
+      Content-Encoding:
+      - gzip
+    body:
+      encoding: ASCII-8BIT
+      string: !binary |-
+        H4sIAAAAAAAAA32OQQrCMBBF7zLrFpwGovYq4iKTzJRC25QkLYh4d5Poom6c
+        zed/Hrx5grHJhwj9DdZx98lM0EDimHJskQPcP/mfsNPISypMxofgt7Xyp8Oh
+        c/asiNAZTfoqyFZnxxHpBBU7QUISEtGduuji92FYzMzQw/xoc2lra+A7ljdj
+        rtX7s73e4g3mO98AAAA=
+    http_version: 
+  recorded_at: Wed, 29 Apr 2015 17:19:58 GMT
+recorded_with: VCR 2.9.3