puppet 5.0.0 → 6.0.0

data/lib/puppet/ssl/configuration.rb

@@ -1,61 +0,0 @@
-require 'puppet/ssl'
-require 'openssl'
-module Puppet
-module SSL
-  # Puppet::SSL::Configuration is intended to separate out the following concerns:
-  # * CA certificates that authenticate peers (ca_auth_file)
-  # * Who clients trust as distinct from who servers trust.  We should not
-  #   assume one single self signed CA cert for everyone.
-class Configuration
-  def initialize(localcacert, options={})
-    @localcacert = localcacert
-    @ca_auth_file = options[:ca_auth_file]
-  end
-
-  # @deprecated Use {#ca_auth_file} instead.
-  def ca_chain_file
-    ca_auth_file
-  end
-
-  # The ca_auth_file method is intended to return the PEM bundle of CA certs
-  # used to authenticate peer connections.
-  def ca_auth_file
-    @ca_auth_file || @localcacert
-  end
-
-  ##
-  # ca_auth_certificates returns an Array of OpenSSL::X509::Certificate
-  # instances intended to be used in the connection verify_callback.  This
-  # method loads and parses the {#ca_auth_file} from the filesystem.
-  #
-  # @api private
-  #
-  # @return [Array<OpenSSL::X509::Certificate>]
-  def ca_auth_certificates
-    @ca_auth_certificates ||= decode_cert_bundle(read_file(ca_auth_file))
-  end
-
-  ##
-  # Decode a string of concatenated certificates
-  #
-  # @return [Array<OpenSSL::X509::Certificate>]
-  def decode_cert_bundle(bundle_str)
-    re = /-----BEGIN CERTIFICATE-----.*?-----END CERTIFICATE-----/m
-    pem_ary = bundle_str.scan(re)
-    pem_ary.map do |pem_str|
-      OpenSSL::X509::Certificate.new(pem_str)
-    end
-  end
-  private :decode_cert_bundle
-
-  # read_file makes testing easier.
-  def read_file(path)
-    # https://www.ietf.org/rfc/rfc2459.txt defines the x509 V3 certificate format
-    # CA bundles are concatenated X509 certificates, but may also include
-    # comments, which could have UTF-8 characters
-    Puppet::FileSystem.read(path, :encoding => Encoding::UTF_8)
-  end
-  private :read_file
-end
-end
-end

data/lib/puppet/ssl/inventory.rb

@@ -1,55 +0,0 @@
-require 'puppet/ssl'
-require 'puppet/ssl/certificate'
-
-# Keep track of all of our known certificates.
-class Puppet::SSL::Inventory
-  attr_reader :path
-
-  # Add a certificate to our inventory.
-  def add(cert)
-    cert = cert.content if cert.is_a?(Puppet::SSL::Certificate)
-    # RFC 5280 says the cert subject may contain UTF8 - https://www.ietf.org/rfc/rfc5280.txt
-    # Note however that Puppet generated SSL files must only contain ASCII characters
-    # based on the validate_certname method of Puppet::SSL::Base
-    Puppet.settings.setting(:cert_inventory).open('a:UTF-8') do |f|
-      f.print format(cert)
-    end
-  end
-
-  # Format our certificate for output.
-  def format(cert)
-    iso = '%Y-%m-%dT%H:%M:%S%Z'
-    "0x%04x %s %s %s\n" % [cert.serial,  cert.not_before.strftime(iso), cert.not_after.strftime(iso), cert.subject]
-  end
-
-  def initialize
-    @path = Puppet[:cert_inventory]
-  end
-
-  # Rebuild the inventory from scratch.  This should happen if
-  # the file is entirely missing or if it's somehow corrupted.
-  def rebuild
-    Puppet.notice _("Rebuilding inventory file")
-
-    # RFC 5280 says the cert subject may contain UTF8 - https://www.ietf.org/rfc/rfc5280.txt
-    Puppet.settings.setting(:cert_inventory).open('w:UTF-8') do |f|
-      Puppet::SSL::Certificate.indirection.search("*").each do |cert|
-        f.print format(cert.content)
-      end
-    end
-  end
-
-  # Find all serial numbers for a given certificate. If none can be found, returns
-  # an empty array.
-  def serials(name)
-    return [] unless Puppet::FileSystem.exist?(@path)
-
-    # RFC 5280 says the cert subject may contain UTF8 - https://www.ietf.org/rfc/rfc5280.txt
-    # Note however that Puppet generated SSL files must only contain ASCII characters
-    # based on the validate_certname method of Puppet::SSL::Base
-    File.readlines(@path, :encoding => Encoding::UTF_8).collect do |line|
-      /^(\S+).+\/CN=#{name}$/.match(line)
-    end.compact.map { |m| Integer(m[1]) }
-  end
-
-end

data/lib/puppet/type/augeas.rb

@@ -1,211 +0,0 @@
-#
-#   Copyright 2011 Bryan Kearney <bkearney@redhat.com>
-#
-#   Licensed under the Apache License, Version 2.0 (the "License");
-#   you may not use this file except in compliance with the License.
-#   You may obtain a copy of the License at
-#
-#       https://www.apache.org/licenses/LICENSE-2.0
-#
-#   Unless required by applicable law or agreed to in writing, software
-#   distributed under the License is distributed on an "AS IS" BASIS,
-#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-#   See the License for the specific language governing permissions and
-#   limitations under the License.
-
-require 'puppet/parameter/boolean'
-
-Puppet::Type.newtype(:augeas) do
-  include Puppet::Util
-
-  feature :parse_commands, "Parse the command string"
-  feature :need_to_run?, "If the command should run"
-  feature :execute_changes, "Actually make the changes"
-
-  @doc = <<-'EOT'
-    Apply a change or an array of changes to the filesystem
-    using the augeas tool.
-
-    Requires:
-
-    - [Augeas](http://www.augeas.net)
-    - The ruby-augeas bindings
-
-    Sample usage with a string:
-
-        augeas{"test1" :
-          context => "/files/etc/sysconfig/firstboot",
-          changes => "set RUN_FIRSTBOOT YES",
-          onlyif  => "match other_value size > 0",
-        }
-
-    Sample usage with an array and custom lenses:
-
-        augeas{"jboss_conf":
-          context   => "/files",
-          changes   => [
-              "set etc/jbossas/jbossas.conf/JBOSS_IP $ipaddress",
-              "set etc/jbossas/jbossas.conf/JAVA_HOME /usr",
-            ],
-          load_path => "$/usr/share/jbossas/lenses",
-        }
-
-  EOT
-
-  newparam (:name) do
-    desc "The name of this task. Used for uniqueness."
-    isnamevar
-  end
-
-  newparam (:context) do
-    desc "Optional context path. This value is prepended to the paths of all
-      changes if the path is relative. If the `incl` parameter is set,
-      defaults to `/files + incl`; otherwise, defaults to the empty string."
-    defaultto ""
-    munge do |value|
-      if value.empty? and resource[:incl]
-        "/files" + resource[:incl]
-      else
-        value
-      end
-    end
-  end
-
-  newparam (:onlyif) do
-    desc "Optional augeas command and comparisons to control the execution of this type.
-
-      Note: `values` is not an actual augeas API command. It calls `match` to retrieve an array of paths
-             in <MATCH_PATH> and then `get` to retrieve the values from each of the returned paths.
-
-      Supported onlyif syntax:
-
-      * `get <AUGEAS_PATH> <COMPARATOR> <STRING>`
-      * `values <MATCH_PATH> include <STRING>`
-      * `values <MATCH_PATH> not_include <STRING>`
-      * `values <MATCH_PATH> == <AN_ARRAY>`
-      * `values <MATCH_PATH> != <AN_ARRAY>`
-      * `match <MATCH_PATH> size <COMPARATOR> <INT>`
-      * `match <MATCH_PATH> include <STRING>`
-      * `match <MATCH_PATH> not_include <STRING>`
-      * `match <MATCH_PATH> == <AN_ARRAY>`
-      * `match <MATCH_PATH> != <AN_ARRAY>`
-
-      where:
-
-      * `AUGEAS_PATH` is a valid path scoped by the context
-      * `MATCH_PATH` is a valid match syntax scoped by the context
-      * `COMPARATOR` is one of `>, >=, !=, ==, <=,` or `<`
-      * `STRING` is a string
-      * `INT` is a number
-      * `AN_ARRAY` is in the form `['a string', 'another']`"
-    defaultto ""
-  end
-
-
-  newparam(:changes) do
-    desc "The changes which should be applied to the filesystem. This
-    can be a command or an array of commands. The following commands are supported:
-
-    * `set <PATH> <VALUE>` --- Sets the value `VALUE` at location `PATH`
-    * `setm <PATH> <SUB> <VALUE>` --- Sets multiple nodes (matching `SUB` relative to `PATH`) to `VALUE`
-    * `rm <PATH>` --- Removes the node at location `PATH`
-    * `remove <PATH>` --- Synonym for `rm`
-    * `clear <PATH>` --- Sets the node at `PATH` to `NULL`, creating it if needed
-    * `clearm <PATH> <SUB>` --- Sets multiple nodes (matching `SUB` relative to `PATH`) to `NULL`
-    * `touch <PATH>` --- Creates `PATH` with the value `NULL` if it does not exist
-    * `ins <LABEL> (before|after) <PATH>` --- Inserts an empty node `LABEL` either before or after `PATH`.
-    * `insert <LABEL> <WHERE> <PATH>` --- Synonym for `ins`
-    * `mv <PATH> <OTHER PATH>` --- Moves a node at `PATH` to the new location `OTHER PATH`
-    * `move <PATH> <OTHER PATH>` --- Synonym for `mv`
-    * `rename <PATH> <LABEL>` --- Rename a node at `PATH` to a new `LABEL`
-    * `defvar <NAME> <PATH>` --- Sets Augeas variable `$NAME` to `PATH`
-    * `defnode <NAME> <PATH> <VALUE>` --- Sets Augeas variable `$NAME` to `PATH`, creating it with `VALUE` if needed
-
-    If the `context` parameter is set, that value is prepended to any relative `PATH`s."
-  end
-
-
-  newparam(:root) do
-    desc "A file system path; all files loaded by Augeas are loaded underneath `root`."
-    defaultto "/"
-  end
-
-  newparam(:load_path) do
-    desc "Optional colon-separated list or array of directories; these directories are searched for schema definitions. The agent's `$libdir/augeas/lenses` path will always be added to support pluginsync."
-    defaultto ""
-  end
-
-  newparam(:force) do
-    desc "Optional command to force the augeas type to execute even if it thinks changes
-    will not be made. This does not override the `onlyif` parameter."
-
-    defaultto false
-  end
-
-  newparam(:type_check) do
-    desc "Whether augeas should perform typechecking. Defaults to false."
-    newvalues(:true, :false)
-
-    defaultto :false
-  end
-
-  newparam(:lens) do
-    desc "Use a specific lens, e.g. `Hosts.lns`. When this parameter is set, you
-      must also set the `incl` parameter to indicate which file to load.
-      The Augeas documentation includes [a list of available lenses](http://augeas.net/stock_lenses.html)."
-  end
-
-  newparam(:incl) do
-    desc "Load only a specific file, e.g. `/etc/hosts`. This can greatly speed
-      up the execution the resource. When this parameter is set, you must also
-      set the `lens` parameter to indicate which lens to use."
-  end
-
-  validate do
-    has_lens = !self[:lens].nil?
-    has_incl = !self[:incl].nil?
-    self.fail _("You must specify both the lens and incl parameters, or neither.") if has_lens != has_incl
-  end
-
-  newparam(:show_diff, :boolean => true, :parent => Puppet::Parameter::Boolean) do
-    desc "Whether to display differences when the file changes, defaulting to
-        true.  This parameter is useful for files that may contain passwords or
-        other secret data, which might otherwise be included in Puppet reports or
-        other insecure outputs.  If the global `show_diff` setting
-        is false, then no diffs will be shown even if this parameter is true."
-
-    defaultto :true
-  end
-
-  # This is the actual meat of the code. It forces
-  # augeas to be run and fails or not based on the augeas return
-  # code.
-  newproperty(:returns) do |property|
-    include Puppet::Util
-    desc "The expected return code from the augeas command. Should not be set."
-
-    defaultto 0
-
-    # Make output a bit prettier
-    def change_to_s(currentvalue, newvalue)
-      _("executed successfully")
-    end
-
-    # if the onlyif resource is provided, then the value is parsed.
-    # a return value of 0 will stop execution because it matches the
-    # default value.
-    def retrieve
-      if @resource.provider.need_to_run?()
-        :need_to_run
-      else
-        0
-      end
-    end
-
-    # Actually execute the command.
-    def sync
-      @resource.provider.execute_changes
-    end
-  end
-
-end

data/lib/puppet/type/computer.rb

@@ -1,66 +0,0 @@
-Puppet::Type.newtype(:computer) do
-
-  @doc = "Computer object management using DirectoryService
-    on OS X.
-
-    Note that these are distinctly different kinds of objects to 'hosts',
-    as they require a MAC address and can have all sorts of policy attached to
-    them.
-
-    This provider only manages Computer objects in the local directory service
-    domain, not in remote directories.
-
-    If you wish to manage `/etc/hosts` file on Mac OS X, then simply use the host
-    type as per other platforms.
-
-    This type primarily exists to create localhost Computer objects that MCX
-    policy can then be attached to.
-
-    **Autorequires:** If Puppet is managing the plist file representing a
-    Computer object (located at `/var/db/dslocal/nodes/Default/computers/{name}.plist`),
-    the Computer resource will autorequire it."
-
-  # ensurable
-
-  # We autorequire the computer object in case it is being managed at the
-  # file level by Puppet.
-
-  autorequire(:file) do
-    if self[:name]
-      "/var/db/dslocal/nodes/Default/computers/#{self[:name]}.plist"
-    else
-      nil
-    end
-  end
-
-  newproperty(:ensure, :parent => Puppet::Property::Ensure) do
-    desc "Control the existences of this computer record. Set this attribute to
-      `present` to ensure the computer record exists.  Set it to `absent`
-      to delete any computer records with this name"
-    newvalue(:present) do
-      provider.create
-    end
-
-    newvalue(:absent) do
-      provider.delete
-    end
-  end
-
-  newparam(:name) do
-    desc "The authoritative 'short' name of the computer record."
-    isnamevar
-  end
-
-  newparam(:realname) do
-    desc "The 'long' name of the computer record."
-  end
-
-  newproperty(:en_address) do
-    desc "The MAC address of the primary network interface. Must match en0."
-  end
-
-  newproperty(:ip_address) do
-    desc "The IP Address of the Computer object."
-  end
-
-end