puppet 5.0.0 → 6.0.0

data/lib/puppet/type/ssh_authorized_key.rb

@@ -1,143 +0,0 @@
-module Puppet
-  Type.newtype(:ssh_authorized_key) do
-    @doc = "Manages SSH authorized keys. Currently only type 2 keys are supported.
-
-      In their native habitat, SSH keys usually appear as a single long line, in
-      the format `<TYPE> <KEY> <NAME/COMMENT>`. This resource type requires you
-      to split that line into several attributes. Thus, a key that appears in
-      your `~/.ssh/id_rsa.pub` file like this...
-
-          ssh-rsa AAAAB3Nza[...]qXfdaQ== nick@magpie.example.com
-
-      ...would translate to the following resource:
-
-          ssh_authorized_key { 'nick@magpie.example.com':
-            ensure => present,
-            user   => 'nick',
-            type   => 'ssh-rsa',
-            key    => 'AAAAB3Nza[...]qXfdaQ==',
-          }
-
-      To ensure that only the currently approved keys are present, you can purge
-      unmanaged SSH keys on a per-user basis. Do this with the `user` resource
-      type's `purge_ssh_keys` attribute:
-
-          user { 'nick':
-            ensure         => present,
-            purge_ssh_keys => true,
-          }
-
-      This will remove any keys in `~/.ssh/authorized_keys` that aren't being
-      managed with `ssh_authorized_key` resources. See the documentation of the
-      `user` type for more details.
-
-      **Autorequires:** If Puppet is managing the user account in which this
-      SSH key should be installed, the `ssh_authorized_key` resource will autorequire
-      that user."
-
-    ensurable
-
-    newparam(:name) do
-      desc "The SSH key comment. This can be anything, and doesn't need to match
-        the original comment from the `.pub` file.
-
-        Due to internal limitations, this must be unique across all user accounts;
-        if you want to specify one key for multiple users, you must use a different
-        comment for each instance."
-
-      isnamevar
-
-    end
-
-    newproperty(:type) do
-      desc "The encryption type used."
-
-      newvalues :'ssh-dss', :'ssh-rsa', :'ecdsa-sha2-nistp256', :'ecdsa-sha2-nistp384', :'ecdsa-sha2-nistp521', :'ssh-ed25519'
-
-      aliasvalue(:dsa, :'ssh-dss')
-      aliasvalue(:ed25519, :'ssh-ed25519')
-      aliasvalue(:rsa, :'ssh-rsa')
-    end
-
-    newproperty(:key) do
-      desc "The public key itself; generally a long string of hex characters. The `key`
-        attribute may not contain whitespace.
-
-        Make sure to omit the following in this attribute (and specify them in
-        other attributes):
-
-        * Key headers (e.g. 'ssh-rsa') --- put these in the `type` attribute.
-        * Key identifiers / comments (e.g. 'joe@joescomputer.local') --- put these in
-          the `name` attribute/resource title."
-
-      validate do |value|
-        raise Puppet::Error, _("Key must not contain whitespace: %{value}") % { value: value } if value =~ /\s/
-      end
-    end
-
-    newproperty(:user) do
-      desc "The user account in which the SSH key should be installed. The resource
-        will autorequire this user if it is being managed as a `user` resource."
-    end
-
-    newproperty(:target) do
-      desc "The absolute filename in which to store the SSH key. This
-        property is optional and should only be used in cases where keys
-        are stored in a non-standard location (i.e.` not in
-        `~user/.ssh/authorized_keys`)."
-
-      defaultto :absent
-
-      def should
-        return super if defined?(@should) and @should[0] != :absent
-
-        return nil unless user = resource[:user]
-
-        begin
-          return File.expand_path("~#{user}/.ssh/authorized_keys")
-        rescue
-          Puppet.debug "The required user is not yet present on the system"
-          return nil
-        end
-      end
-
-      def insync?(is)
-        is == should
-      end
-    end
-
-    newproperty(:options, :array_matching => :all) do
-      desc "Key options; see sshd(8) for possible values. Multiple values
-        should be specified as an array."
-
-      defaultto do :absent end
-
-      validate do |value|
-        unless value == :absent or value =~ /^[-a-z0-9A-Z_]+(?:=\".*?\")?$/
-          raise Puppet::Error, _("Option %{value} is not valid. A single option must either be of the form 'option' or 'option=\"value\". Multiple options must be provided as an array") % { value: value }
-        end
-      end
-    end
-
-    autorequire(:user) do
-      should(:user) if should(:user)
-    end
-
-    validate do
-      # Go ahead if target attribute is defined
-      return if @parameters[:target].shouldorig[0] != :absent
-
-      # Go ahead if user attribute is defined
-      return if @parameters.include?(:user)
-
-      # If neither target nor user is defined, this is an error
-      raise Puppet::Error, _("Attribute 'user' or 'target' is mandatory")
-    end
-
-    # regular expression suitable for use by a ParsedFile based provider
-    REGEX = /^(?:(.+)\s+)?(ssh-dss|ssh-ed25519|ssh-rsa|ecdsa-sha2-nistp256|ecdsa-sha2-nistp384|ecdsa-sha2-nistp521)\s+([^ ]+)\s*(.*)$/
-    def self.keyline_regex
-      REGEX
-    end
-  end
-end

data/lib/puppet/type/sshkey.rb

@@ -1,75 +0,0 @@
-module Puppet
-  Type.newtype(:sshkey) do
-    @doc = "Installs and manages ssh host keys.  By default, this type will
-      install keys into `/etc/ssh/ssh_known_hosts`. To manage ssh keys in a
-      different `known_hosts` file, such as a user's personal `known_hosts`,
-      pass its path to the `target` parameter. See the `ssh_authorized_key`
-      type to manage authorized keys."
-
-    ensurable
-
-    newproperty(:type) do
-      desc "The encryption type used.  Probably ssh-dss or ssh-rsa."
-
-      newvalues :'ssh-dss', :'ssh-ed25519', :'ssh-rsa', :'ecdsa-sha2-nistp256', :'ecdsa-sha2-nistp384', :'ecdsa-sha2-nistp521'
-
-      aliasvalue(:dsa, :'ssh-dss')
-      aliasvalue(:ed25519, :'ssh-ed25519')
-      aliasvalue(:rsa, :'ssh-rsa')
-    end
-
-    newproperty(:key) do
-      desc "The key itself; generally a long string of uuencoded characters."
-    end
-
-    # FIXME This should automagically check for aliases to the hosts, just
-    # to see if we can automatically glean any aliases.
-    newproperty(:host_aliases) do
-      desc 'Any aliases the host might have.  Multiple values must be
-        specified as an array.'
-
-      attr_accessor :meta
-
-      def insync?(is)
-        is == @should
-      end
-      # We actually want to return the whole array here, not just the first
-      # value.
-      def should
-        defined?(@should) ? @should : nil
-      end
-
-      validate do |value|
-        if value =~ /\s/
-          raise Puppet::Error, _("Aliases cannot include whitespace")
-        end
-        if value =~ /,/
-          raise Puppet::Error, _("Aliases must be provided as an array, not a comma-separated list")
-        end
-      end
-    end
-
-    newparam(:name) do
-      desc "The host name that the key is associated with."
-
-      isnamevar
-
-      validate do |value|
-        raise Puppet::Error, _("Resourcename cannot include whitespaces") if value =~ /\s/
-        raise Puppet::Error, _("No comma in resourcename allowed. If you want to specify aliases use the host_aliases property") if value.include?(',')
-      end
-    end
-
-    newproperty(:target) do
-      desc "The file in which to store the ssh key.  Only used by
-        the `parsed` provider."
-
-      defaultto { if @resource.class.defaultprovider.ancestors.include?(Puppet::Provider::ParsedFile)
-        @resource.class.defaultprovider.default_target
-        else
-          nil
-        end
-      }
-    end
-  end
-end

data/lib/puppet/type/vlan.rb

@@ -1,26 +0,0 @@
-#
-# Manages a Vlan on a given router or switch
-#
-
-Puppet::Type.newtype(:vlan) do
-    @doc = "Manages a VLAN on a router or switch."
-
-    apply_to_device
-
-    ensurable
-
-    newparam(:name) do
-      desc "The numeric VLAN ID."
-      isnamevar
-
-      newvalues(/^\d+/)
-    end
-
-    newproperty(:description) do
-      desc "The VLAN's name."
-    end
-
-    newparam(:device_url) do
-      desc "The URL of the router or switch maintaining this VLAN."
-    end
-end

data/lib/puppet/type/yumrepo.rb

@@ -1,409 +0,0 @@
-require 'uri'
-
-Puppet::Type.newtype(:yumrepo) do
-  @doc = "The client-side description of a yum repository. Repository
-    configurations are found by parsing `/etc/yum.conf` and
-    the files indicated by the `reposdir` option in that file
-    (see `yum.conf(5)` for details).
-
-    Most parameters are identical to the ones documented
-    in the `yum.conf(5)` man page.
-
-    Continuation lines that yum supports (for the `baseurl`, for example)
-    are not supported. This type does not attempt to read or verify the
-    existence of files listed in the `include` attribute."
-
-  # Ensure yumrepos can be removed too.
-  ensurable
-  # Doc string for properties that can be made 'absent'
-  ABSENT_DOC="Set this to `absent` to remove it from the file completely."
-  # False can be false/0/no and True can be true/1/yes in yum.
-  YUM_BOOLEAN=/^(true|false|0|1|no|yes)$/
-  YUM_BOOLEAN_DOC="Valid values are: false/0/no or true/1/yes."
-
-  # Common munge logic for YUM_BOOLEAN values. Munges for two requirements:
-  # 1) Because of how regex validation works in Puppet::Parameter::Value,
-  # Boolean false and lowercase false will not be considered invalid. However,
-  # if the user specified false (or true), they meant False (or True).
-  # 2) In order for parameter removal to work correctly, when absent is passed
-  # as a string it needs to be munged back to a symbol.
-  munge_yum_bool = Proc.new do |val|
-    val.to_s == 'absent' ? :absent : val.to_s.capitalize
-  end
-
-  VALID_SCHEMES = %w[file http https ftp]
-
-  newparam(:name, :namevar => true) do
-    desc "The name of the repository.  This corresponds to the
-     `repositoryid` parameter in `yum.conf(5)`."
-  end
-
-  newparam(:target) do
-    desc "The filename to write the yum repository to."
-
-    defaultto :absent
-  end
-
-  newproperty(:descr) do
-    desc "A human-readable description of the repository.
-      This corresponds to the name parameter in `yum.conf(5)`.
-      #{ABSENT_DOC}"
-
-    newvalues(/.*/, :absent)
-  end
-
-  newproperty(:mirrorlist) do
-    desc "The URL that holds the list of mirrors for this repository.
-      #{ABSENT_DOC}"
-
-    newvalues(/.*/, :absent)
-    validate do |value|
-      next if value.to_s == 'absent'
-      parsed = URI.parse(value)
-
-      unless VALID_SCHEMES.include?(parsed.scheme)
-        raise _("Must be a valid URL")
-      end
-    end
-  end
-
-  newproperty(:baseurl) do
-    desc "The URL for this repository. #{ABSENT_DOC}"
-
-    newvalues(/.*/, :absent)
-    validate do |value|
-      next if value.to_s == 'absent'
-
-      value.split(/\s+/).each do |uri|
-
-        parsed = URI.parse(uri)
-
-        unless VALID_SCHEMES.include?(parsed.scheme)
-          raise _("Must be a valid URL")
-        end
-      end
-    end
-  end
-
-  newproperty(:enabled) do
-    desc "Whether this repository is enabled.
-    #{YUM_BOOLEAN_DOC}
-    #{ABSENT_DOC}"
-
-    newvalues(YUM_BOOLEAN, :absent)
-    munge(&munge_yum_bool)
-  end
-
-  newproperty(:gpgcheck) do
-    desc "Whether to check the GPG signature on packages installed
-      from this repository.
-      #{YUM_BOOLEAN_DOC}
-      #{ABSENT_DOC}"
-
-    newvalues(YUM_BOOLEAN, :absent)
-    munge(&munge_yum_bool)
-  end
-
-  newproperty(:repo_gpgcheck) do
-    desc "Whether to check the GPG signature on repodata.
-      #{YUM_BOOLEAN_DOC}
-      #{ABSENT_DOC}"
-
-    newvalues(YUM_BOOLEAN, :absent)
-    munge(&munge_yum_bool)
-  end
-
-  newproperty(:gpgkey) do
-    desc "The URL for the GPG key with which packages from this
-      repository are signed. #{ABSENT_DOC}"
-
-    newvalues(/.*/, :absent)
-    validate do |value|
-      next if value.to_s == 'absent'
-
-      value.split(/\s+/).each do |uri|
-
-        parsed = URI.parse(uri)
-
-        unless VALID_SCHEMES.include?(parsed.scheme)
-          raise _("Must be a valid URL")
-        end
-      end
-    end
-  end
-
-  newproperty(:mirrorlist_expire) do
-    desc "Time (in seconds) after which the mirrorlist locally cached
-      will expire.\n#{ABSENT_DOC}"
-
-    newvalues(/^[0-9]+$/, :absent)
-  end
-
-  newproperty(:include) do
-    desc "The URL of a remote file containing additional yum configuration
-      settings. Puppet does not check for this file's existence or validity.
-      #{ABSENT_DOC}"
-
-    newvalues(/.*/, :absent)
-    validate do |value|
-      next if value.to_s == 'absent'
-      parsed = URI.parse(value)
-
-      unless VALID_SCHEMES.include?(parsed.scheme)
-        raise _("Must be a valid URL")
-      end
-    end
-  end
-
-  newproperty(:exclude) do
-    desc "List of shell globs. Matching packages will never be
-      considered in updates or installs for this repo.
-      #{ABSENT_DOC}"
-
-    newvalues(/.*/, :absent)
-  end
-
-  newproperty(:gpgcakey) do
-    desc "The URL for the GPG CA key for this repository. #{ABSENT_DOC}"
-
-    newvalues(/.*/, :absent)
-    validate do |value|
-      next if value.to_s == 'absent'
-      parsed = URI.parse(value)
-
-      unless VALID_SCHEMES.include?(parsed.scheme)
-        raise _("Must be a valid URL")
-      end
-    end
-  end
-
-  newproperty(:includepkgs) do
-    desc "List of shell globs. If this is set, only packages
-      matching one of the globs will be considered for
-      update or install from this repository. #{ABSENT_DOC}"
-
-    newvalues(/.*/, :absent)
-  end
-
-  newproperty(:enablegroups) do
-    desc "Whether yum will allow the use of package groups for this
-      repository.
-      #{YUM_BOOLEAN_DOC}
-      #{ABSENT_DOC}"
-
-    newvalues(YUM_BOOLEAN, :absent)
-    munge(&munge_yum_bool)
-  end
-
-  newproperty(:failovermethod) do
-    desc "The failover method for this repository; should be either
-      `roundrobin` or `priority`. #{ABSENT_DOC}"
-
-    newvalues(/^roundrobin|priority$/, :absent)
-  end
-
-  newproperty(:keepalive) do
-    desc "Whether HTTP/1.1 keepalive should be used with this repository.
-      #{YUM_BOOLEAN_DOC}
-      #{ABSENT_DOC}"
-
-    newvalues(YUM_BOOLEAN, :absent)
-    munge(&munge_yum_bool)
-  end
-
-  newproperty(:retries) do
-    desc "Set the number of times any attempt to retrieve a file should
-      retry before returning an error. Setting this to `0` makes yum
-     try forever.\n#{ABSENT_DOC}"
-
-    newvalues(/^[0-9]+$/, :absent)
-  end
-
-  newproperty(:http_caching) do
-    desc "What to cache from this repository. #{ABSENT_DOC}"
-
-    newvalues(/^(packages|all|none)$/, :absent)
-  end
-
-  newproperty(:timeout) do
-    desc "Number of seconds to wait for a connection before timing
-      out. #{ABSENT_DOC}"
-
-    newvalues(/^\d+$/, :absent)
-  end
-
-  newproperty(:metadata_expire) do
-    desc "Number of seconds after which the metadata will expire.
-      #{ABSENT_DOC}"
-
-    newvalues(/^([0-9]+[dhm]?|never)$/, :absent)
-  end
-
-  newproperty(:protect) do
-    desc "Enable or disable protection for this repository. Requires
-      that the `protectbase` plugin is installed and enabled.
-      #{YUM_BOOLEAN_DOC}
-      #{ABSENT_DOC}"
-
-    newvalues(YUM_BOOLEAN, :absent)
-    munge(&munge_yum_bool)
-  end
-
-  newproperty(:priority) do
-    desc "Priority of this repository from 1-99. Requires that
-      the `priorities` plugin is installed and enabled.
-      #{ABSENT_DOC}"
-
-    newvalues(/.*/, :absent)
-    validate do |value|
-      next if value.to_s == 'absent'
-      unless (1..99).include?(value.to_i)
-        fail(_("Must be within range 1-99"))
-      end
-    end
-  end
-
-  newproperty(:throttle) do
-    desc "Enable bandwidth throttling for downloads. This option
-      can be expressed as a absolute data rate in bytes/sec or a
-      percentage `60%`. An SI prefix (k, M or G) may be appended
-      to the data rate values.\n#{ABSENT_DOC}"
-
-    newvalues(/^\d+[kMG%]?$/, :absent)
-  end
-
-  newproperty(:bandwidth) do
-    desc "Use to specify the maximum available network bandwidth
-      in bytes/second. Used with the `throttle` option. If `throttle`
-      is a percentage and `bandwidth` is `0` then bandwidth throttling
-      will be disabled. If `throttle` is expressed as a data rate then
-      this option is ignored.\n#{ABSENT_DOC}"
-
-    newvalues(/^\d+[kMG]?$/, :absent)
-  end
-
-  newproperty(:cost) do
-    desc "Cost of this repository. #{ABSENT_DOC}"
-
-    newvalues(/^\d+$/, :absent)
-  end
-
-  newproperty(:proxy) do
-    desc "URL of a proxy server that Yum should use when accessing this repository.
-      This attribute can also be set to `'_none_'`, which will make Yum bypass any
-      global proxy settings when accessing this repository.
-      #{ABSENT_DOC}"
-
-    newvalues(/.*/, :absent)
-    validate do |value|
-      next if value.to_s =~ /^(absent|_none_)$/
-      parsed = URI.parse(value)
-
-      unless VALID_SCHEMES.include?(parsed.scheme)
-        raise _("Must be a valid URL")
-      end
-    end
-  end
-
-  newproperty(:proxy_username) do
-    desc "Username for this proxy. #{ABSENT_DOC}"
-
-    newvalues(/.*/, :absent)
-  end
-
-  newproperty(:proxy_password) do
-    desc "Password for this proxy. #{ABSENT_DOC}"
-
-    newvalues(/.*/, :absent)
-  end
-
-  newproperty(:s3_enabled) do
-    desc "Access the repository via S3.
-      #{YUM_BOOLEAN_DOC}
-      #{ABSENT_DOC}"
-
-    newvalues(YUM_BOOLEAN, :absent)
-    munge(&munge_yum_bool)
-  end
-
-  newproperty(:sslcacert) do
-    desc "Path to the directory containing the databases of the
-      certificate authorities yum should use to verify SSL certificates.
-      #{ABSENT_DOC}"
-
-    newvalues(/.*/, :absent)
-  end
-
-  newproperty(:sslverify) do
-    desc "Should yum verify SSL certificates/hosts at all.
-      #{YUM_BOOLEAN_DOC}
-      #{ABSENT_DOC}"
-
-    newvalues(YUM_BOOLEAN, :absent)
-    munge(&munge_yum_bool)
-  end
-
-  newproperty(:sslclientcert) do
-    desc "Path  to the SSL client certificate yum should use to connect
-      to repositories/remote sites. #{ABSENT_DOC}"
-
-    newvalues(/.*/, :absent)
-  end
-
-  newproperty(:sslclientkey) do
-    desc "Path to the SSL client key yum should use to connect
-      to repositories/remote sites. #{ABSENT_DOC}"
-
-    newvalues(/.*/, :absent)
-  end
-
-  newproperty(:metalink) do
-    desc "Metalink for mirrors. #{ABSENT_DOC}"
-
-    newvalues(/.*/, :absent)
-    validate do |value|
-      next if value.to_s == 'absent'
-      parsed = URI.parse(value)
-
-      unless VALID_SCHEMES.include?(parsed.scheme)
-        raise _("Must be a valid URL")
-      end
-    end
-  end
-
-  newproperty(:skip_if_unavailable) do
-    desc "Should yum skip this repository if unable to reach it.
-      #{YUM_BOOLEAN_DOC}
-      #{ABSENT_DOC}"
-
-    newvalues(YUM_BOOLEAN, :absent)
-    munge(&munge_yum_bool)
-  end
-
-  newproperty(:assumeyes) do
-    desc "Determines if yum prompts for confirmation of critical actions.
-      #{YUM_BOOLEAN_DOC}
-      #{ABSENT_DOC}"
-
-    newvalues(YUM_BOOLEAN, :absent)
-    munge(&munge_yum_bool)
-  end
-
-  newproperty(:deltarpm_percentage) do
-    desc "Percentage value that determines when to use deltas for this repository.
-      When the delta is larger than this percentage value of the package, the
-      delta is not used.
-      #{ABSENT_DOC}"
-
-    newvalues(/^\d+$/, :absent)
-  end
-
-  newproperty(:deltarpm_metadata_percentage) do
-    desc "Percentage value that determines when to download deltarpm metadata.
-      When the deltarpm metadata is larger than this percentage value of the
-      package, deltarpm metadata is not downloaded.
-      #{ABSENT_DOC}"
-
-    newvalues(/^\d+$/, :absent)
-  end
-end