puppet-retrospec 1.5.0 → 1.6.0

data/vendor/gems/puppet-4.5.2/ext/puppetlisten/puppetlisten.rb

@@ -1,77 +0,0 @@
-#! /usr/bin/env ruby
-# this is a daemon which accepts non standard (within puppet normal intervals) puppet configruation run request
-# uses SSL for communication based on the puppet infrastructure
-# ohadlevy@gmail.com
-
-port = 8139
-cmd = "puppetd -o -v --no-daemonize"
-
-require 'puppet/sslcertificates/support'
-require 'socket'
-require 'facter'
-
-# load puppet configuration, needed to find SSL certificates
-Puppet.initialize_settings
-
-# set the SSL environment
-ctx = OpenSSL::SSL::SSLContext.new
-ctx.key = OpenSSL::PKey::RSA.new(File::read(Puppet[:hostprivkey]))
-ctx.cert = OpenSSL::X509::Certificate.new(File::read(Puppet[:hostcert]))
-ctx.verify_mode = OpenSSL::SSL::VERIFY_PEER|OpenSSL::SSL::VERIFY_FAIL_IF_NO_PEER_CERT
-ctx.ca_file = Puppet[:localcacert]
-
-# find which hosts are allowed to trigger us
-allowed_servers = Array.new
-runner = false;
-File.open(Puppet[:authconfig]).each do |line|
-  case line
-  when /^\s*#/
-    next # skip comments
-  when /^\s*$/
-    next # skip blank lines
-  when /\[puppetrunner\]/ # puppetrunner section
-    runner=true
-  when /^\s*(\w+)\s+(.+)$/
-    var = $1
-    value = $2
-    case var
-    when "allow"
-      value.split(/\s*,\s*/).each { |val|
-      allowed_servers << val
-      puts "allowing #{val} access"
-    } if runner==true
-    end
-  else
-    runner=false
-  end
-end
-
-# be a daemon
-sock = TCPServer.new(port)
-ssls = OpenSSL::SSL::SSLServer.new(sock, ctx)
-
-loop do
-  begin
-    ns = ssls.accept # start SSL session
-    af, port, host, ip = ns.peeraddr
-    print "connection from #{host+"("+ip+")"} "
-    if allowed_servers.include?(host)
-      #TODO add support for tags and other command line arguments
-      puts "accepted"
-      ns.puts "Executing #{cmd} on #{Facter.fqdn}.\n*******OUTPUT********\n\n"
-      IO.popen(cmd) do |f|
-        while line = f.gets
-          ns.puts line
-        end
-      end
-      ns.puts "\n*********DONE**********"
-    else
-      ns.puts "denied\n"
-      puts "denied"
-    end
-    ns.close
-  rescue
-    ns.close
-    next
-  end
-end

data/vendor/gems/puppet-4.5.2/ext/puppetlisten/puppetrun.rb

@@ -1,38 +0,0 @@
-#! /usr/bin/env ruby
-# this scripts calls a client and ask him to trigger a puppetd run
-# uses SSL for communication based on the puppet infrastructure
-# the client allows access based on the namespaceauth
-# ohadlevy@gmail.com
-
-port = 8139
-if ARGV[0].nil?
-  warn "Usage: hostname to run against"
-  exit 1
-else
-  host = ARGV[0]
-end
-
-require 'puppet/sslcertificates/support'
-require 'socket'
-
-# load puppet configuration, needed to find ssl certificates
-Puppet.initialize_settings
-
-# establish the certificate
-ctx = OpenSSL::SSL::SSLContext.new
-ctx.key = OpenSSL::PKey::RSA.new(File::read(Puppet[:hostprivkey]))
-ctx.cert = OpenSSL::X509::Certificate.new(File::read(Puppet[:hostcert]))
-ctx.verify_mode = OpenSSL::SSL::VERIFY_PEER
-ctx.ca_file = Puppet[:localcacert]
-
-# establish the connection
-s = TCPSocket.new(host, port)
-ssl = OpenSSL::SSL::SSLSocket.new(s, ctx)
-ssl.connect # start SSL session
-ssl.sync_close = true  # if true the underlying socket will be
-#                        closed in SSLSocket#close. (default: false)
-while (line = ssl.gets)
-  puts line
-end
-
-ssl.close

data/vendor/gems/puppet-4.5.2/ext/pure_ruby_dsl/dsl_test.rb

@@ -1,7 +0,0 @@
-hostclass "foobar" do
-  notify "this is a test", "loglevel" => "warning"
-end
-
-node "default" do
-  acquire "foobar"
-end

data/vendor/gems/puppet-4.5.2/ext/rack/config.ru

@@ -1,44 +0,0 @@
-# a config.ru, for use with every rack-compatible webserver.
-# SSL needs to be handled outside this, though.
-
-# if puppet is not in your RUBYLIB:
-# $LOAD_PATH.unshift('/opt/puppet/lib')
-
-$0 = "master"
-
-# if you want debugging:
-# ARGV << "--debug"
-
-ARGV << "--rack"
-
-# Rack applications typically don't start as root.  Set --confdir, --vardir,
-# --logdir, --rundir to prevent reading configuration from
-# ~/ based pathing.
-ARGV << "--confdir" << "/etc/puppetlabs/puppet"
-ARGV << "--vardir"  << "/opt/puppetlabs/server/data/puppetmaster"
-ARGV << "--logdir"  << "/var/log/puppetlabs/puppetmaster"
-ARGV << "--rundir"  << "/var/run/puppetlabs/puppetmaster"
-ARGV << "--codedir"  << "/etc/puppetlabs/code"
-
-# always_cache_features is a performance improvement and safe for a master to
-# apply. This is intended to allow agents to recognize new features that may be
-# delivered during catalog compilation.
-ARGV << "--always_cache_features"
-
-# NOTE: it's unfortunate that we have to use the "CommandLine" class
-#  here to launch the app, but it contains some initialization logic
-#  (such as triggering the parsing of the config file) that is very
-#  important.  We should do something less nasty here when we've
-#  gotten our API and settings initialization logic cleaned up.
-#
-# Also note that the "$0 = master" line up near the top here is
-#  the magic that allows the CommandLine class to know that it's
-#  supposed to be running master.
-#
-# --cprice 2012-05-22
-
-require 'puppet/util/command_line'
-# we're usually running inside a Rack::Builder.new {} block,
-# therefore we need to call run *here*.
-run Puppet::Util::CommandLine.new.execute
-

data/vendor/gems/puppet-4.5.2/ext/rack/example-passenger-vhost.conf

@@ -1,57 +0,0 @@
-# This Apache 2 virtual host config shows how to use Puppet as a Rack
-# application via Passenger. See
-# https://docs.puppetlabs.com/guides/passenger.html for more information.
-
-# You can also use the included config.ru file to run Puppet with other Rack
-# servers instead of Passenger.
-
-# you probably want to tune these settings
-PassengerHighPerformance on
-PassengerMaxPoolSize 12
-PassengerPoolIdleTime 1500
-# PassengerMaxRequests 1000
-PassengerStatThrottleRate 120
-RackAutoDetect Off
-RailsAutoDetect Off
-
-Listen 8140
-
-<VirtualHost *:8140>
-        SSLEngine on
-        SSLProtocol             ALL -SSLv2 -SSLv3
-        SSLCipherSuite          EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
-        SSLHonorCipherOrder     on
-
-        SSLCertificateFile      /etc/puppet/ssl/certs/squigley.namespace.at.pem
-        SSLCertificateKeyFile   /etc/puppet/ssl/private_keys/squigley.namespace.at.pem
-        SSLCertificateChainFile /etc/puppet/ssl/ca/ca_crt.pem
-        SSLCACertificateFile    /etc/puppet/ssl/ca/ca_crt.pem
-        # If Apache complains about invalid signatures on the CRL, you can try disabling
-        # CRL checking by commenting the next line, but this is not recommended.
-        SSLCARevocationFile     /etc/puppet/ssl/ca/ca_crl.pem
-        # Apache 2.4 introduces the SSLCARevocationCheck directive and sets it to none
-        # which effectively disables CRL checking; if you are using Apache 2.4+ you must
-        # specify 'SSLCARevocationCheck chain' to actually use the CRL.
-        # SSLCARevocationCheck chain
-        SSLVerifyClient optional
-        SSLVerifyDepth  1
-        # The `ExportCertData` option is needed for agent certificate expiration warnings
-        SSLOptions +StdEnvVars +ExportCertData
-
-        # This header needs to be set if using a loadbalancer or proxy
-        RequestHeader unset X-Forwarded-For
-
-        RequestHeader set X-SSL-Subject %{SSL_CLIENT_S_DN}e
-        RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e
-        RequestHeader set X-Client-Verify %{SSL_CLIENT_VERIFY}e
-
-        DocumentRoot /etc/puppet/rack/public/
-        RackBaseURI /
-        <Directory /etc/puppet/rack/>
-                Options None
-                AllowOverride None
-                Order allow,deny
-                allow from all
-        </Directory>
-</VirtualHost>
-

data/vendor/gems/puppet-4.5.2/ext/redhat/client.init

@@ -1,169 +0,0 @@
-#!/bin/bash
-# puppet        Init script for running the puppet client daemon
-#
-# Author:       Duane Griffin <d.griffin@psenterprise.com>
-#               David Lutterkort <dlutter@redhat.com>
-#
-# chkconfig: - 98 02
-#
-# description: Enables periodic system configuration checks through puppet.
-# processname: puppet
-# config: /etc/sysconfig/puppet
-
-# Source function library.
-. /etc/rc.d/init.d/functions
-
-[ -f /etc/sysconfig/puppet ] && . /etc/sysconfig/puppet
-lockfile=/var/lock/subsys/puppet
-piddir=/var/run/puppetlabs
-pidfile=${piddir}/agent.pid
-puppetd=/opt/puppetlabs/puppet/bin/puppet
-pid=$(cat $pidfile 2> /dev/null)
-RETVAL=0
-
-PUPPET_OPTS="agent "
-
-# Determine if we can use the -p option to daemon, killproc, and status.
-# RHEL < 5 can't.
-if status | grep -q -- '-p' 2>/dev/null; then
-    daemonopts="--pidfile $pidfile"
-    pidopts="-p $pidfile"
-    USEINITFUNCTIONS=true
-fi
-
-# Figure out if the system just booted. Let's assume
-# boot doesn't take longer than 5 minutes
-## Not used for now
-##[ -n "$INIT_VERSION" ] && PUPPET_OPTS="${PUPPET_OPTS} --fullrun"
-
-start() {
-    echo -n $"Starting puppet agent: "
-    mkdir -p $piddir
-    daemon $daemonopts $puppetd ${PUPPET_OPTS} ${PUPPET_EXTRA_OPTS}
-    RETVAL=$?
-    echo
-        [ $RETVAL = 0 ] && touch ${lockfile}
-        return $RETVAL
-}
-
-stop() {
-    echo -n $"Stopping puppet agent: "
-    if [ "$USEINITFUNCTIONS" = "true" ]; then
-      killproc $pidopts $puppetd
-      RETVAL=$?
-    else
-      if [ -n "${pid}" ]; then
-        kill -TERM $pid >/dev/null 2>&1
-        RETVAL=$?
-      fi
-    fi
-    echo
-    [ $RETVAL = 0 ] && rm -f ${lockfile} ${pidfile}
-    return $RETVAL
-}
-
-reload() {
-    echo -n $"Reloading puppet agent: "
-    if [ "$USEINITFUNCTIONS" = "true" ]; then
-      killproc $pidopts $puppetd -HUP
-      RETVAL=$?
-    else
-      if [ -n "${pid}" ]; then
-        kill -HUP $pid >/dev/null 2>&1
-        RETVAL=$?
-      else
-        RETVAL=0
-      fi
-    fi
-    echo
-    return $RETVAL
-}
-
-rotate() {
-    echo -n $"Reopening log files for puppet agent: "
-    killproc $pidopts $puppetd -USR2
-    RETVAL=$?
-    echo
-    return $RETVAL
-}
-
-restart() {
-    stop
-    start
-}
-
-rh_status() {
-    base=puppet
-    if [ "$USEINITFUNCTIONS" = "true" ]; then
-      status $pidopts $puppetd
-      RETVAL=$?
-      return $RETVAL
-    else
-      if [ -n "${pid}" ]; then
-        if `ps -p $pid | grep $pid > /dev/null 2>&1`; then
-          echo "${base} (pid ${pid}) is running..."
-          RETVAL=0
-          return $RETVAL
-        fi
-      fi
-      if [ -f "${pidfile}" ] ; then
-        echo "${base} dead but pid file exists"
-        RETVAL=1
-        return $RETVAL
-      fi
-      if [ -f "${lockfile}" ]; then
-        echo "${base} dead but subsys locked"
-        RETVAL=2
-        return $RETVAL
-      fi
-      echo "${base} is stopped"
-      RETVAL=3
-      return $RETVAL
-    fi
-}
-
-rh_status_q() {
-    rh_status >/dev/null 2>&1
-}
-
-genconfig() {
-    echo -n $"Generate puppet agent configuration: "
-    $puppetd ${PUPPET_OPTS} ${PUPPET_EXTRA_OPTS} --genconfig
-}
-
-case "$1" in
-    start)
-        start
-    ;;
-    stop)
-        stop
-    ;;
-    restart)
-        restart
-    ;;
-    rotate)
-        rotate
-    ;;
-    reload|force-reload)
-        reload
-    ;;
-    condrestart|try-restart)
-        rh_status_q || exit 0
-        restart
-    ;;
-    status)
-        rh_status
-    ;;
-    once)
-        shift
-        $puppetd ${PUPPET_OPTS} --onetime ${PUPPET_EXTRA_OPTS} $@
-        ;;
-    genconfig)
-        genconfig
-    ;;
-    *)
-        echo $"Usage: $0 {start|stop|status|restart|reload|force-reload|condrestart|rotate|once|genconfig}"
-        exit 1
-esac
-
-exit $RETVAL

data/vendor/gems/puppet-4.5.2/ext/redhat/client.sysconfig

@@ -1,2 +0,0 @@
-# You may specify parameters to the puppet client here
-#PUPPET_EXTRA_OPTS=--waitforcert=500

data/vendor/gems/puppet-4.5.2/ext/redhat/fileserver.conf

@@ -1,41 +0,0 @@
-# fileserver.conf
-
-# Puppet automatically serves PLUGINS and FILES FROM MODULES: anything in
-# <module name>/files/<file name> is available to authenticated nodes at
-# puppet:///modules/<module name>/<file name>. You do not need to edit this
-# file to enable this.
-
-# MOUNT POINTS
-
-# If you need to serve files from a directory that is NOT in a module,
-# you must create a static mount point in this file:
-#
-# [extra_files]
-#   path /etc/puppet/files
-#   allow *
-#
-# In the example above, anything in /etc/puppet/files/<file name> would be
-# available to authenticated nodes at puppet:///extra_files/<file name>.
-#
-# Mount points may also use three placeholders as part of their path:
-#
-# %H - The node's certname.
-# %h - The portion of the node's certname before the first dot. (Usually the
-#      node's short hostname.)
-# %d - The portion of the node's certname after the first dot. (Usually the
-#      node's domain name.)
-
-# PERMISSIONS
-
-# Every static mount point should have an `allow *` line; setting more
-# granular permissions in this file is deprecated. Instead, you can
-# control file access in auth.conf by controlling the
-# /file_metadata/<mount point> and /file_content/<mount point> paths:
-#
-# path ~ ^/file_(metadata|content)/extra_files/
-# auth yes
-# allow /^(.+)\.example\.com$/
-# allow_ip 192.168.100.0/24
-#
-# If added to auth.conf BEFORE the "path /file" rule, the rule above
-# will add stricter restrictions to the extra_files mount point.

data/vendor/gems/puppet-4.5.2/ext/redhat/logrotate

@@ -1,21 +0,0 @@
-# Generic logrotate config for Red Hat systems. Works with both official
-# Fedora and RHEL packages as well as PuppetLabs distributions.
-
-/var/log/puppetlabs/masterhttp.log /var/log/puppet/masterhttp.log {
-  compress
-  missingok
-  notifempty
-  nocreate
-}
-
-/var/log/puppetlabs/puppetd.log /var/log/puppet/puppetd.log {
-  compress
-  missingok
-  notifempty
-  nocreate
-  sharedscripts
-  postrotate
-   ([ -x /etc/init.d/puppet ] && /etc/init.d/puppet reload > /dev/null 2>&1) ||
-    ([ -x /usr/bin/systemctl ] && /usr/bin/systemctl kill -s USR2 puppet.service > /dev/null 2>&1) || true
-  endscript
-}