puppet 5.5.22 → 6.0.0

data/lib/puppet/module_tool/skeleton/templates/generator/Gemfile

@@ -1,18 +0,0 @@
-source ENV['GEM_SOURCE'] || 'https://rubygems.org'
-
-puppetversion = ENV.key?('PUPPET_VERSION') ? ENV['PUPPET_VERSION'] : ['>= 3.3']
-gem 'metadata-json-lint'
-gem 'puppet', puppetversion
-gem 'puppetlabs_spec_helper', '>= 1.2.0'
-gem 'puppet-lint', '>= 1.0.0'
-gem 'facter', '>= 1.7.0'
-gem 'rspec-puppet'
-
-# rspec must be v2 for ruby 1.8.7
-if RUBY_VERSION >= '1.8.7' && RUBY_VERSION < '1.9'
-  gem 'rspec', '~> 2.0'
-  gem 'rake', '~> 10.0'
-else
-  # rubocop requires ruby >= 1.9
-  gem 'rubocop'
-end

data/lib/puppet/module_tool/skeleton/templates/generator/README.md.erb

@@ -1,89 +0,0 @@
-# <%= metadata.name %>
-
-#### Table of Contents
-
-1. [Description](#description)
-1. [Setup - The basics of getting started with <%= metadata.name %>](#setup)
-    * [What <%= metadata.name %> affects](#what-<%= metadata.name %>-affects)
-    * [Setup requirements](#setup-requirements)
-    * [Beginning with <%= metadata.name %>](#beginning-with-<%= metadata.name %>)
-1. [Usage - Configuration options and additional functionality](#usage)
-1. [Reference - An under-the-hood peek at what the module is doing and how](#reference)
-1. [Limitations - OS compatibility, etc.](#limitations)
-1. [Development - Guide for contributing to the module](#development)
-
-## Description
-
-Start with a one- or two-sentence summary of what the module does and/or what
-problem it solves. This is your 30-second elevator pitch for your module.
-Consider including OS/Puppet version it works with.
-
-You can give more descriptive information in a second paragraph. This paragraph
-should answer the questions: "What does this module *do*?" and "Why would I use
-it?" If your module has a range of functionality (installation, configuration,
-management, etc.), this is the time to mention it.
-
-## Setup
-
-### What <%= metadata.name %> affects **OPTIONAL**
-
-If it's obvious what your module touches, you can skip this section. For
-example, folks can probably figure out that your mysql_instance module affects
-their MySQL instances.
-
-If there's more that they should know about, though, this is the place to mention:
-
-* A list of files, packages, services, or operations that the module will alter,
-  impact, or execute.
-* Dependencies that your module automatically installs.
-* Warnings or other important notices.
-
-### Setup Requirements **OPTIONAL**
-
-If your module requires anything extra before setting up (pluginsync enabled,
-etc.), mention it here.
-
-If your most recent release breaks compatibility or requires particular steps
-for upgrading, you might want to include an additional "Upgrading" section
-here.
-
-### Beginning with <%= metadata.name %>
-
-The very basic steps needed for a user to get the module up and running. This
-can include setup steps, if necessary, or it can be an example of the most
-basic use of the module.
-
-## Usage
-
-This section is where you describe how to customize, configure, and do the
-fancy stuff with your module here. It's especially helpful if you include usage
-examples and code samples for doing things with your module.
-
-## Reference
-
-Users need a complete list of your module's classes, types, defined types providers, facts, and functions, along with the parameters for each. You can provide this list either via Puppet Strings code comments or as a complete list in this Reference section.
-
-* If you are using Puppet Strings code comments, this Reference section should include Strings information so that your users know how to access your documentation.
-
-* If you are not using Puppet Strings, include a list of all of your classes, defined types, and so on, along with their parameters. Each element in this listing should include:
-
-  * The data type, if applicable.
-  * A description of what the element does.
-  * Valid values, if the data type doesn't make it obvious.
-  * Default value, if any.
-
-## Limitations
-
-This is where you list OS compatibility, version compatibility, etc. If there
-are Known Issues, you might want to include them under their own heading here.
-
-## Development
-
-Since your module is awesome, other users will want to play with it. Let them
-know what the ground rules for contributing are.
-
-## Release Notes/Contributors/Etc. **Optional**
-
-If you aren't using changelog, put your release notes here (though you should
-consider using changelog). You can also add any additional sections you feel
-are necessary or important to include here. Please use the `## ` header.

data/lib/puppet/module_tool/skeleton/templates/generator/Rakefile

@@ -1,32 +0,0 @@
-require 'puppetlabs_spec_helper/rake_tasks'
-require 'puppet-lint/tasks/puppet-lint'
-require 'metadata-json-lint/rake_task'
-
-if RUBY_VERSION >= '1.9'
-  require 'rubocop/rake_task'
-  RuboCop::RakeTask.new
-end
-
-PuppetLint.configuration.send('disable_80chars')
-PuppetLint.configuration.relative = true
-PuppetLint.configuration.ignore_paths = ['spec/**/*.pp', 'pkg/**/*.pp']
-
-desc 'Validate manifests, templates, and ruby files'
-task :validate do
-  Dir['manifests/**/*.pp'].each do |manifest|
-    sh "puppet parser validate --noop #{manifest}"
-  end
-  Dir['spec/**/*.rb', 'lib/**/*.rb'].each do |ruby_file|
-    sh "ruby -c #{ruby_file}" unless ruby_file =~ %r{spec/fixtures}
-  end
-  Dir['templates/**/*.erb'].each do |template|
-    sh "erb -P -x -T '-' #{template} | ruby -c"
-  end
-end
-
-desc 'Run lint, validate, and spec tests.'
-task :test do
-  [:lint, :validate, :spec].each do |test|
-    Rake::Task[test].invoke
-  end
-end

data/lib/puppet/module_tool/skeleton/templates/generator/examples/init.pp.erb

@@ -1,12 +0,0 @@
-# The baseline for module testing used by Puppet Inc. is that each manifest
-# should have a corresponding test manifest that declares that class or defined
-# type.
-#
-# Tests are then run by using puppet apply --noop (to check for compilation
-# errors and view a log of events) or by fully applying the test in a virtual
-# environment (to compare the resulting system state to the desired state).
-#
-# Learn more about module testing here:
-# https://puppet.com/docs/puppet/latest/bgtm.html#testing-your-module
-#
-include ::<%= metadata.name %>

data/lib/puppet/module_tool/skeleton/templates/generator/manifests/init.pp.erb

@@ -1,48 +0,0 @@
-# Class: <%= metadata.name %>
-# ===========================
-#
-# Full description of class <%= metadata.name %> here.
-#
-# Parameters
-# ----------
-#
-# Document parameters here.
-#
-# * `sample parameter`
-# Explanation of what this parameter affects and what it defaults to.
-# e.g. "Specify one or more upstream ntp servers as an array."
-#
-# Variables
-# ----------
-#
-# Here you should define a list of variables that this module would require.
-#
-# * `sample variable`
-#  Explanation of how this variable affects the function of this class and if
-#  it has a default. e.g. "The parameter enc_ntp_servers must be set by the
-#  External Node Classifier as a comma separated list of hostnames." (Note,
-#  global variables should be avoided in favor of class parameters as
-#  of Puppet 2.6.)
-#
-# Examples
-# --------
-#
-# @example
-#    class { '<%= metadata.name %>':
-#      servers => [ 'pool.ntp.org', 'ntp.local.company.com' ],
-#    }
-#
-# Authors
-# -------
-#
-# Author Name <author@domain.com>
-#
-# Copyright
-# ---------
-#
-# Copyright <%= Time.now.year %> Your name here, unless otherwise noted.
-#
-class <%= metadata.name %> {
-
-
-}

data/lib/puppet/module_tool/skeleton/templates/generator/metadata.json.erb

@@ -1 +0,0 @@
-<%= metadata.to_json %>

data/lib/puppet/module_tool/skeleton/templates/generator/spec/classes/init_spec.rb.erb

@@ -1,6 +0,0 @@
-require 'spec_helper'
-describe '<%= metadata.name %>' do
-  context 'with default values for all parameters' do
-    it { should contain_class('<%= metadata.name %>') }
-  end
-end

data/lib/puppet/module_tool/skeleton/templates/generator/spec/spec_helper.rb

@@ -1 +0,0 @@
-require 'puppetlabs_spec_helper/module_spec_helper'

data/lib/puppet/network/http/api/ca.rb

@@ -1,2 +0,0 @@
-module Puppet::Network::HTTP::API::CA
-end

data/lib/puppet/network/http/api/ca/v1.rb

@@ -1,11 +0,0 @@
-require 'puppet/network/http/api/indirected_routes'
-class Puppet::Network::HTTP::API::CA::V1
-
-  INDIRECTED = Puppet::Network::HTTP::Route.
-    path(/.*/).
-    any(Puppet::Network::HTTP::API::IndirectedRoutes.new)
-
-  def self.routes
-    Puppet::Network::HTTP::Route.path(%r{v1}).any.chain(INDIRECTED)
-  end
-end

data/lib/puppet/network/http/rack.rb

@@ -1,33 +0,0 @@
-require 'rack'
-require 'rack/request'
-require 'rack/response'
-
-require 'puppet/network/http'
-require 'puppet/network/http/rack/rest'
-
-# An rack application, for running the Puppet HTTP Server.
-class Puppet::Network::HTTP::Rack
-  # The real rack application (which needs to respond to call).
-  # The work we need to do, roughly is:
-  # * Read request (from env) and prepare a response
-  # * Route the request to the correct handler
-  # * Return the response (in rack-format) to our caller.
-  def call(env)
-    request = Rack::Request.new(env)
-    response = Rack::Response.new
-    Puppet.debug 'Handling request: %s %s' % [request.request_method, request.fullpath]
-
-    begin
-      Puppet::Network::HTTP::RackREST.new.process(request, response)
-    rescue => detail
-      # Send a Status 500 Error on unhandled exceptions.
-      response.status = 500
-      response['Content-Type'] = 'text/plain'
-      response.write _("Internal Server Error: \"%{message}\"") % { message: detail.message }
-      # log what happened
-      Puppet.log_exception(detail, _("Puppet Server (Rack): Internal Server Error: Unhandled Exception: \"%{message}\"") % { message: detail.message })
-    end
-    response.finish
-  end
-end
-

data/lib/puppet/network/http/rack/rest.rb

@@ -1,162 +0,0 @@
-require 'openssl'
-require 'cgi'
-require 'puppet/network/http/handler'
-require 'puppet/util/ssl'
-require 'uri'
-
-class Puppet::Network::HTTP::RackREST
-  include Puppet::Network::HTTP::Handler
-
-  ContentType = 'Content-Type'.freeze
-
-  CHUNK_SIZE = 8192
-
-  class RackFile
-    def initialize(file)
-      @file = file
-    end
-
-    def each
-      while chunk = @file.read(CHUNK_SIZE)
-        yield chunk
-      end
-    end
-
-    def close
-      @file.close
-    end
-  end
-
-  def initialize(args={})
-    super()
-    register([Puppet::Network::HTTP::API.master_routes,
-              Puppet::Network::HTTP::API.ca_routes,
-              Puppet::Network::HTTP::API.not_found_upgrade])
-  end
-
-  def set_content_type(response, format)
-    response[ContentType] = format
-  end
-
-  # produce the body of the response
-  def set_response(response, result, status = 200)
-    response.status = status
-    unless result.is_a?(File)
-      response.write result
-    else
-      response["Content-Length"] = result.stat.size.to_s
-      response.body = RackFile.new(result)
-    end
-  end
-
-  # Retrieve all headers from the http request, as a map.
-  def headers(request)
-    headers = request.env.select {|k,v| k.start_with? 'HTTP_'}.inject({}) do |m, (k,v)|
-      m[k.sub(/^HTTP_/, '').tr('_','-').downcase] = v
-      m
-    end
-    headers['content-type'] = request.content_type
-    headers
-  end
-
-  # Return which HTTP verb was used in this request.
-  def http_method(request)
-    request.request_method
-  end
-
-  # Return the query params for this request.
-  def params(request)
-    if request.post?
-      params = request.params
-    else
-      # rack doesn't support multi-valued query parameters,
-      # e.g. ignore, so parse them ourselves
-      params = CGI.parse(request.query_string)
-      convert_singular_arrays_to_value(params)
-    end
-    result = decode_params(params)
-    result.merge(extract_client_info(request))
-  end
-
-  # what path was requested? (this is, without any query parameters)
-  def path(request)
-    # The value that Passenger provides for 'path' is escaped
-    # (URL percent-encoded), see
-    # https://github.com/phusion/passenger/blob/release-5.0.26/src/apache2_module/Hooks.cpp#L885
-    # for the implementation as hooked up to an Apache web server.  Code
-    # in the indirector / HTTP layer which consumes this path, however, assumes
-    # that it has already been unescaped, so it is unescaped here.
-    if request.path
-      # don't use CGI.unescape which mangles space handling
-      URI.unescape(request.path.encode(Encoding::UTF_8))
-    end
-  end
-
-  # return the request body
-  def body(request)
-    request.body.read
-  end
-
-  def client_cert(request)
-    # This environment variable is set by mod_ssl, note that it
-    # requires the `+ExportCertData` option in the `SSLOptions` directive
-    cert = request.env['SSL_CLIENT_CERT']
-    # NOTE: The SSL_CLIENT_CERT environment variable will be the empty string
-    # when Puppet agent nodes have not yet obtained a signed certificate.
-    if cert.nil? || cert.empty?
-      # When running with unicorn, the SSL_CLIENT_CERT variable is not available
-      # in the environment, therefore we have to pass a header: 'X-SSL-Client-Cert'
-      cert = request.env['HTTP_X_SSL_CLIENT_CERT']
-      if cert.nil? || cert.empty?
-        nil
-      else
-        # in contrast to the environment variable, the client cert is passed in
-        # as single string, therefore restore the certificate to a valid pem
-        # encoded certificate
-        cert.tr!(' ', "\n")
-        cert.gsub!(/BEGIN\nCERT/, "BEGIN CERT")
-        cert.gsub!(/END\nCERT/, "END CERT")
-        cert = Puppet::SSL::Certificate.from_instance(OpenSSL::X509::Certificate.new(cert))
-        cert
-      end
-    else
-      Puppet::SSL::Certificate.from_instance(OpenSSL::X509::Certificate.new(cert))
-    end
-  end
-
-  # Passenger freaks out if we finish handling the request without reading any
-  # part of the body, so make sure we have.
-  def cleanup(request)
-    request.body.read(1)
-    nil
-  end
-
-  def extract_client_info(request)
-    result = {}
-    result[:ip] = request.ip
-
-    # if we find SSL info in the headers, use them to get a hostname from the CN.
-    # try this with :ssl_client_header, which defaults should work for
-    # Apache with StdEnvVars.
-    subj_str = request.env[Puppet[:ssl_client_header]]
-    subject = Puppet::Util::SSL.subject_from_dn(subj_str || "")
-
-    if cn = Puppet::Util::SSL.cn_from_subject(subject)
-      result[:node] = cn
-      result[:authenticated] = (request.env[Puppet[:ssl_client_verify_header]] == 'SUCCESS')
-    else
-      result[:node] = resolve_node(result)
-      result[:authenticated] = false
-    end
-
-    result
-  end
-
-  def convert_singular_arrays_to_value(hash)
-    hash.each do |key, value|
-      if value.size == 1
-        hash[key] = value.first
-      end
-    end
-  end
-end

data/lib/puppet/network/http/webrick.rb

@@ -1,124 +0,0 @@
-require 'webrick'
-require 'webrick/https'
-require 'puppet/network/http/webrick/rest'
-require 'thread'
-
-require 'puppet/ssl/certificate'
-require 'puppet/ssl/certificate_revocation_list'
-require 'puppet/ssl/configuration'
-
-class Puppet::Network::HTTP::WEBrick
-  CIPHERS = "EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA"
-
-  def initialize
-    @listening = false
-  end
-
-  def listen(address, port)
-    @server = create_server(address, port)
-
-    @server.mount('/', Puppet::Network::HTTP::WEBrickREST)
-
-    raise _("WEBrick server is already listening") if @listening
-    @listening = true
-    @thread = Thread.new do
-      @server.start do |sock|
-        timeout = 10.0
-        if ! IO.select([sock],nil,nil,timeout)
-          raise _("Client did not send data within %{timeout} seconds of connecting") % { timeout: ("%.1f") % timeout }
-        end
-        sock.accept
-        @server.run(sock)
-      end
-    end
-    sleep 0.1 until @server.status == :Running
-  end
-
-  def unlisten
-    raise _("WEBrick server is not listening") unless @listening
-    @server.shutdown
-    wait_for_shutdown
-    @server = nil
-    @listening = false
-  end
-
-  def listening?
-    @listening
-  end
-
-  def wait_for_shutdown
-    @thread.join
-  end
-
-  # @api private
-  def create_server(address, port)
-    address = nil if address == '*'
-    arguments = {:BindAddress => address, :Port => port, :DoNotReverseLookup => true}
-    arguments.merge!(setup_logger)
-    arguments.merge!(setup_ssl)
-
-    BasicSocket.do_not_reverse_lookup = true
-
-    server = WEBrick::HTTPServer.new(arguments)
-    server.ssl_context.ciphers = CIPHERS
-    server
-  end
-
-  # Configure our http log file.
-  def setup_logger
-    # Make sure the settings are all ready for us.
-    Puppet.settings.use(:main, :ssl, :application)
-
-    file = Puppet[:masterhttplog]
-
-    # open the log manually to prevent file descriptor leak
-    # webrick logged strings may contain UTF-8
-    file_io = ::File.open(file, "a+:UTF-8")
-    file_io.sync = true
-    if defined?(Fcntl::FD_CLOEXEC)
-      file_io.fcntl(Fcntl::F_SETFD, Fcntl::FD_CLOEXEC)
-    end
-
-    args = [file_io]
-    args << WEBrick::Log::DEBUG if Puppet::Util::Log.level == :debug
-
-    logger = WEBrick::Log.new(*args)
-    return :Logger => logger, :AccessLog => [
-      [logger, WEBrick::AccessLog::COMMON_LOG_FORMAT ],
-      [logger, WEBrick::AccessLog::REFERER_LOG_FORMAT ]
-    ]
-  end
-
-  # Add all of the ssl cert information.
-  def setup_ssl
-    results = {}
-
-    # Get the cached copy.  We know it's been generated, too.
-    host = Puppet::SSL::Host.localhost
-
-    raise Puppet::Error, _("Could not retrieve certificate for %{host} and not running on a valid certificate authority") % { value0: host.name } unless host.certificate
-
-    results[:SSLPrivateKey] = host.key.content
-    results[:SSLCertificate] = host.certificate.content
-    results[:SSLStartImmediately] = false
-    results[:SSLEnable] = true
-    results[:SSLOptions] = OpenSSL::SSL::OP_NO_SSLv2 | OpenSSL::SSL::OP_NO_SSLv3
-
-    raise Puppet::Error, _("Could not find CA certificate") unless Puppet::SSL::Certificate.indirection.find(Puppet::SSL::CA_NAME)
-
-    results[:SSLCACertificateFile] = ssl_configuration.ca_auth_file
-    results[:SSLVerifyClient] = OpenSSL::SSL::VERIFY_PEER
-
-    results[:SSLCertificateStore] = host.ssl_store
-
-    results
-  end
-
-  private
-
-  def ssl_configuration
-    @ssl_configuration ||= Puppet::SSL::Configuration.new(
-      Puppet[:localcacert],
-      :ca_auth_file  => Puppet[:ssl_server_ca_auth])
-  end
-end