puppet 6.0.10 → 6.1.0

data/CODEOWNERS

@@ -1,30 +0,0 @@
-# default to platform-core
-* @puppetlabs/platform-core
-
-# platform-os
-/lib/puppet/type/group @puppetlabs/platform-os
-/lib/puppet/type/package @puppetlabs/platform-os
-/lib/puppet/type/service @puppetlabs/platform-os
-/lib/puppet/type/user @puppetlabs/platform-os
-/lib/puppet/provider/group @puppetlabs/platform-os
-/lib/puppet/provider/package @puppetlabs/platform-os
-/lib/puppet/provider/service @puppetlabs/platform-os
-/lib/puppet/provider/user @puppetlabs/platform-os
-
-# language
-/lib/puppet/datatypes @puppetlabs/language
-/lib/puppet/functions @puppetlabs/language
-/lib/puppet/pal @puppetlabs/language
-/lib/puppet/parser @puppetlabs/language
-/lib/puppet/pops @puppetlabs/language
-/lib/puppet/syntax_checkers @puppetlabs/language
-
-# puppet device
-/lib/puppet/application/device.rb @puppetlabs/networking
-/lib/puppet/util/network_device @puppetlabs/networking
-
-# puppet module
-/lib/puppet/application/module.rb @puppetlabs/pdk
-/lib/puppet/face/module @puppetlabs/pdk
-/lib/puppet/forge @puppetlabs/pdk
-/lib/puppet/module_tool @puppetlabs/pdk

data/ext/autotest/Rakefile

@@ -1,8 +0,0 @@
-dest = File.expand_path("~/.autotest")
-file dest => ["config", "Rakefile"] do
-    sh "cp config #{dest}"
-end
-
-task :install => dest
-
-task :default => :install

data/ext/autotest/config

@@ -1,43 +0,0 @@
-# vim: syntax=ruby
-# From http://pastie.caboo.se/115692, linked from rickbradley
-
-require 'autotest/redgreen'
-require 'autotest/timestamp'
-
-Autotest.send(:alias_method, :real_find_files, :find_files)
-Autotest.send(:define_method, :find_files) do |*args|
-  real_find_files.reject do |k, v|
-    if (ENV['AUTOTEST'] and !ENV['AUTOTEST'].empty?)
-      !Regexp.new(ENV['AUTOTEST']).match(k)
-    end
-  end
-end
-
-module Autotest::Growl
-
-  def self.growl title, msg, img, pri=0, sticky=""
-    system "growlnotify -n autotest --image #{img} -p #{pri} -m #{msg.inspect} #{title} #{sticky}"
-  end
-
-  Autotest.add_hook :ran_command do |at|
-    image_root = "~/.autotest_images"
-    results = [at.results].flatten.join("\n")
-    output = results.slice(/(\d+)\stests,\s(\d+)\sassertions,\s(\d+)\sfailures,\s(\d+)\serrors/)
-    if output
-      if $~[3].to_i > 0 || $~[4].to_i > 0
-        growl "FAIL", "#{output}", "#{image_root}/fail.png", 2
-      else
-        growl "Pass", "#{output}", "#{image_root}/pass.png"
-      end
-    end
-
-    output = results.slice(/(\d+)\sexamples,\s(\d+)\sfailures?(,\s+\d+\s+pending)?/)
-    if output
-      if $~[2].to_i > 0 || $~[4].to_i > 0
-        growl "FAIL", "#{output}", "#{image_root}/fail.png", 2
-      else
-        growl "Pass", "#{output}", "#{image_root}/pass.png"
-      end
-    end
-  end
-end

data/ext/autotest/readme.rst

@@ -1,16 +0,0 @@
-Autotest is a simple tool that automatically links tests with the files being
-tested, and runs tests automatically when either the test or code has changed.
-
-If you are running on a Mac and have growlnotify_ installed, install the
-ZenTest_ gem, then copy the ``config`` file to ``~/.autotest`` (or just
-run ``rake`` in this directory).
-
-Once you have ``autotest`` installed, change to the root of your Puppet
-git repository and run ``autotest`` with no arguments.  To refresh the list
-of files to scan, hit ``^c`` (that is, control-c).
-
-It's recommended you leave this running in another terminal during all
-development, preferably on another monitor.
-
-.. _zentest: http://www.zenspider.com/ZSS/Products/ZenTest/
-.. _growlnotify: http://growl.info/extras.php

data/lib/puppet/confine/boolean.rb

@@ -1,45 +0,0 @@
-require 'puppet/confine'
-
-# Common module for the Boolean confines. It currently
-# contains just enough code to implement PUP-9336.
-class Puppet::Confine
-  module Boolean
-    # Returns the passing value for the Boolean confine.
-    def passing_value
-      raise NotImplementedError, "The Boolean confine %{confine} must provide the passing value." % { confine: self.class.name }
-    end
-
-    # The Boolean confines 'true' and 'false' let the user specify
-    # two types of values:
-    #     * A lambda for lazy evaluation. This would be something like
-    #         confine :true => lambda { true }
-    #
-    #     * A single Boolean value, or an array of Boolean values. This would
-    #     be something like
-    #         confine :true => true OR confine :true => [true, false, false, true]
-    #
-    # This override distinguishes between the two cases.
-    def values
-      # Note that Puppet::Confine's constructor ensures that @values
-      # will always be an array, even if a lambda's passed in. This is
-      # why we have the length == 1 check.
-      unless @values.length == 1 && @values.first.respond_to?(:call)
-        return @values
-      end
-
-      # We have a lambda. Here, we want to enforce "cache positive"
-      # behavior, which is to cache the result _if_ it evaluates to
-      # the passing value (i.e. the class name).
-
-      return @cached_value unless @cached_value.nil?
-
-      # Double negate to coerce the value into a Boolean
-      calculated_value = !! @values.first.call
-      if calculated_value == passing_value
-        @cached_value = [calculated_value]
-      end
-
-      [calculated_value]
-    end
-  end
-end

data/lib/puppet/provider/package_targetable.rb

@@ -1,68 +0,0 @@
-# Targetable package providers implement a `command` attribute.
-#
-# The `packages` hash passed to `Puppet::Provider::Package::prefetch` is deduplicated,
-# as it is keyed only by name in `Puppet::Transaction::prefetch_if_necessary`.
-#
-# (The `packages` hash passed to ``Puppet::Provider::Package::prefetch`` should be keyed by all namevars,
-# possibly via a `prefetchV2` method that could take a better data structure.)
-#
-# In addition, `Puppet::Provider::Package::properties` calls `query` in the provider.
-require 'puppet/provider/package'
-
-# But `query` in the provider depends upon whether a `command` attribute is defined for the resource.
-# This is a Catch-22.
-#
-# Instead ...
-#
-# Inspect any package to access the catalog (every package includes a reference to the catalog).
-# Inspect the catalog to find all of the `command` attributes for all of the packages of this class.
-# Find all of the package instances using each package `command`, including the default provider command.
-# Assign each instance's `provider` by selecting it from the `packages` hash passed to `prefetch`, based upon `name` and `command`.
-#
-# The original `command` parameter in the catalog is not populated by the default (`:default`) for the parameter in type/package.rb.
-# Rather, the result of the `original_parameters` is `nil` when the `command` parameter is undefined in the catalog.
-
-class Puppet::Provider::Package::Targetable < Puppet::Provider::Package
-  # Prefetch our package list, yo.
-  def self.prefetch(packages)
-    catalog_packages = packages.first[1]::catalog::resources.select{ |p| p.provider.class == self }
-    package_commands = catalog_packages.map { |catalog_package| catalog_package::original_parameters[:command] }.uniq
-    package_commands.each do |command|
-      instances(command).each do |instance|
-        catalog_packages.each do |catalog_package|
-          if catalog_package[:name] == instance.name && catalog_package::original_parameters[:command] == command
-            catalog_package.provider = instance
-            self.debug "Prefetched instance: %{name} via command: %{command}" % { name: instance.name, cmd: (command || :default)}
-          end
-        end
-      end
-    end
-  end
-
-  # Returns the resource command or provider command.
-
-  def resource_or_provider_command
-    resource::original_parameters[:command] || self.class.provider_command
-  end
-
-  # Targetable providers use has_command/is_optional to defer validation of provider suitability.
-  # Evaluate provider suitability here and now by validating that the command is defined and exists.
-  #
-  # cmd: the full path to the package command.
-
-  def self.validate_command(cmd)
-    unless cmd
-      raise Puppet::Error, _("Provider %{name} package command is not functional on this host") % { name: name }
-    end
-    unless File.file?(cmd)
-      raise Puppet::Error, _("Provider %{name} package command '%{cmd}' does not exist on this host") % { name: name, cmd: cmd }
-    end
-  end
-
-  # Return information about the package, its provider, and its (optional) command.
-
-  def to_s
-    cmd = resource[:command] || :default
-    "#{@resource}(provider=#{self.class.name})(command=#{cmd})"
-  end
-end

data/spec/fixtures/unit/pops/loaders/loaders/mix_4x_and_3x_functions/usee/lib/puppet/parser/functions/bad_func_load2.rb

@@ -1,11 +0,0 @@
-module Puppet::Parser::Functions
-  x = newfunction(:bad_func_load2, :type => :rvalue, :doc => <<-EOS
-    A function using the 3x API
-  EOS
-  ) do |arguments|
-    "some return value"
-  end
-end
-def illegal_method_here
-end
-x

data/spec/fixtures/unit/pops/loaders/loaders/mix_4x_and_3x_functions/usee/lib/puppet/parser/functions/bad_func_load3.rb

@@ -1,11 +0,0 @@
-module Puppet::Parser::Functions
-  newfunction(:bad_func_load3, :type => :rvalue, :doc => <<-EOS
-    A function using the 3x API
-  EOS
-  ) do |arguments|
-    def bad_func_load3_illegal_method
-      "some return value from illegal method"
-    end
-    "some return value"
-  end
-end

data/spec/fixtures/unit/pops/loaders/loaders/mix_4x_and_3x_functions/usee/lib/puppet/parser/functions/bad_func_load4.rb

@@ -1,11 +0,0 @@
-module Puppet::Parser::Functions
-  newfunction(:bad_func_load4, :type => :rvalue, :doc => <<-EOS
-    A function using the 3x API
-  EOS
-  ) do |arguments|
-    def self.bad_func_load4_illegal_method
-      "some return value from illegal method"
-    end
-    "some return value"
-  end
-end

data/spec/fixtures/unit/pops/loaders/loaders/mix_4x_and_3x_functions/usee/lib/puppet/parser/functions/bad_func_load5.rb

@@ -1,12 +0,0 @@
-x = module Puppet::Parser::Functions
-  newfunction(:bad_func_load5, :type => :rvalue, :doc => <<-EOS
-    A function using the 3x API
-  EOS
-  ) do |arguments|
-    "some return value"
-  end
-end
-def self.bad_func_load5_illegal_method
-end
-# Attempt to get around problem of not returning what newfunction returns
-x

data/spec/fixtures/unit/pops/loaders/loaders/mix_4x_and_3x_functions/usee/lib/puppet/parser/functions/good_func_load.rb

@@ -1,9 +0,0 @@
-module Puppet::Parser::Functions
-  newfunction(:good_func_load, :type => :rvalue, :doc => <<-EOS
-    A function using the 3x API
-  EOS
-  ) do |arguments|
-    # This is not illegal
-    Float("3.14")
-  end
-end

data/spec/fixtures/unit/provider/package/pkgng/pkg.info

@@ -1,7 +0,0 @@
-ca_root_nss 3.15.3.1 security/ca_root_nss
-curl 7.33.0 ftp/curl
-gnupg 2.0.22 security/gnupg
-nmap 6.40 security/nmap
-pkg 1.2.4_1 ports-mgmt/pkg
-zsh 5.0.2_1 shells/zsh
-tac_plus F4.0.4.27a net/tac_plus4

data/spec/fixtures/unit/provider/package/pkgng/pkg.query_absent

@@ -1 +0,0 @@
-pkg: No package(s) matching bash

data/spec/integration/network/http_pool_spec.rb

@@ -1,120 +0,0 @@
-require 'spec_helper'
-require 'puppet_spec/https'
-require 'puppet_spec/files'
-require 'puppet/network/http_pool'
-
-describe Puppet::Network::HttpPool do
-  include PuppetSpec::Files
-
-  before :all do
-    WebMock.disable!
-  end
-
-  after :all do
-    WebMock.enable!
-  end
-
-  before :each do
-    # make sure we don't take too long
-    Puppet[:http_connect_timeout] = '5s'
-  end
-
-  let(:hostname) { '127.0.0.1' }
-  let(:wrong_hostname) { 'localhost' }
-  let(:server) { PuppetSpec::HTTPSServer.new }
-
-  context "when calling deprecated HttpPool methods" do
-    let(:ssl_host) {
-      # use server's cert/key as the client cert/key
-      host = Puppet::SSL::Host.new
-      host.key = Puppet::SSL::Key.from_instance(server.server_key, host.name)
-      host.certificate = Puppet::SSL::Certificate.from_instance(server.server_cert, host.name)
-      host
-    }
-
-    before(:each) do
-      ssldir = tmpdir('http_pool')
-      Puppet[:ssldir] = ssldir
-      Puppet.settings.use(:main, :ssl)
-
-      File.write(Puppet[:localcacert], server.ca_cert.to_pem)
-      File.write(Puppet[:hostcrl], server.ca_crl.to_pem)
-      File.write(Puppet[:hostcert], server.server_cert.to_pem)
-      File.write(Puppet[:hostprivkey], server.server_key.to_pem)
-    end
-
-    # Can't use `around(:each)` because it will cause ssl_host to be
-    # created outside of any rspec example, and $confdir won't be set
-    before(:each) do
-      Puppet.push_context(ssl_host: ssl_host)
-    end
-
-    after (:each) do
-      Puppet.pop_context
-    end
-
-    def connection(host, port)
-      Puppet::Network::HttpPool.http_instance(host, port, use_ssl: true)
-    end
-
-    shared_examples_for 'HTTPS client' do
-      it "connects over SSL" do
-        server.start_server do |port|
-          http = connection(hostname, port)
-          res = http.get('/')
-          expect(res.code).to eq('200')
-        end
-      end
-
-      it "raises if the server's cert doesn't match the hostname we connected to" do
-        server.start_server do |port|
-          http = connection(wrong_hostname, port)
-          expect {
-            http.get('/')
-          }.to raise_error { |err|
-            expect(err).to be_instance_of(Puppet::Error)
-            expect(err.message).to match(/\AServer hostname '#{wrong_hostname}' did not match server certificate; expected one of (.+)/)
-
-            md = err.message.match(/expected one of (.+)/)
-            expect(md[1].split(', ')).to contain_exactly('127.0.0.1', 'DNS:127.0.0.1', 'DNS:127.0.0.2')
-          }
-        end
-      end
-
-      it "raises if the server's CA is unknown" do
-        # File must exist and by not empty so DefaultValidator doesn't
-        # downgrade to VERIFY_NONE, so use a different CA that didn't
-        # issue the server's cert
-        capath = tmpfile('empty')
-        File.write(capath, PuppetSpec::HTTPSServer::UNKNOWN_CA)
-        Puppet[:localcacert] = capath
-        Puppet[:certificate_revocation] = false
-
-        server.start_server do |port|
-          http = connection(hostname, port)
-          expect {
-            http.get('/')
-          }.to raise_error(Puppet::Error,
-                           %r{certificate verify failed.* .self signed certificate in certificate chain for /CN=Test CA.})
-        end
-      end
-    end
-
-
-    context "when using single use HTTPS connections" do
-      include_examples 'HTTPS client'
-    end
-
-    context "when using persistent HTTPS connections" do
-      around :each do |example|
-        pool = Puppet::Network::HTTP::Pool.new
-        Puppet.override(:http_pool => pool) do
-          example.run
-        end
-        pool.close
-      end
-
-      include_examples 'HTTPS client'
-    end
-  end
-end

data/spec/integration/provider/file/windows_spec.rb

@@ -1,162 +0,0 @@
-require 'spec_helper'
-require 'puppet_spec/compiler'
-require 'puppet_spec/files'
-
-# For some reason the provider test will not filter out on windows when using the
-# :if => Puppet.features.microsoft_windows? method of filtering the tests.
-if Puppet.features.microsoft_windows?
-  require 'puppet/util/windows'
-  describe Puppet::Type.type(:file).provider(:windows), '(integration)' do
-    include PuppetSpec::Compiler
-    include PuppetSpec::Files
-
-    def create_temp_file(owner_sid, group_sid, initial_mode)
-      tmp_file = tmpfile('filewindowsprovider')
-      File.delete(tmp_file) if File.exist?(tmp_file)
-      File.open(tmp_file, 'w') { |file| file.write("rspec test") }
-
-      # There are other tests to ensure that these methods do indeed
-      # set the owner and group.  Therefore it's ok to depend on them
-      # here
-      Puppet::Util::Windows::Security.set_owner(owner_sid, tmp_file) unless owner_sid.nil?
-      Puppet::Util::Windows::Security.set_group(group_sid, tmp_file) unless group_sid.nil?
-      # Pretend we are managing the owner and group to FORCE this mode, even if it's "bad"
-      Puppet::Util::Windows::Security.set_mode(initial_mode.to_i(8), tmp_file, true, true, true) unless initial_mode.nil?
-
-      tmp_file
-    end
-
-    def strip_sticky(value)
-      # For the purposes of these tests we don't care about the extra-ace bit in modes
-      # This function removes it
-      value & ~Puppet::Util::Windows::Security::S_IEXTRA
-    end
-
-    sids = {
-      :system => Puppet::Util::Windows::SID::LocalSystem,
-      :administrators => Puppet::Util::Windows::SID::BuiltinAdministrators,
-      :users => Puppet::Util::Windows::SID::BuiltinUsers,
-      :power_users => Puppet::Util::Windows::SID::PowerUsers,
-      :none => Puppet::Util::Windows::SID::Nobody,
-      :everyone => Puppet::Util::Windows::SID::Everyone
-    }
-
-    # Testcase Hash options
-    # create_* : These options are used when creating the initial test file
-    # create_owner (Required!)
-    # create_group (Required!)
-    # create_mode
-    #
-    # manifest_* : These options are used to craft the manifest which is applied to the test file after createion
-    # manifest_owner,
-    # manifest_group,
-    # manifest_mode (Required!)
-    #
-    # actual_* : These options are used to check the _actual_ values as opposed to the munged values from puppet
-    # actual_mode (Uses manifest_mode for checks if not set)
-
-    RSpec.shared_examples "a mungable file resource" do |testcase|
-
-      before(:each) do
-        @tmp_file = create_temp_file(sids[testcase[:create_owner]], sids[testcase[:create_group]], testcase[:create_mode])
-        raise "Could not create temporary file" if @tmp_file.nil?
-      end
-
-      after(:each) do
-        File.delete(@tmp_file) if File.exist?(@tmp_file)
-      end
-
-      context_name = "With initial owner '#{testcase[:create_owner]}' and initial group '#{testcase[:create_owner]}'"
-      context_name += " and initial mode of '#{testcase[:create_mode]}'" unless testcase[:create_mode].nil?
-      context_name += " and a mode of '#{testcase[:manifest_mode]}' in the manifest"
-      context_name += " and an owner of '#{testcase[:manifest_owner]}' in the manifest" unless testcase[:manifest_owner].nil?
-      context_name += " and a group of '#{testcase[:manifest_group]}' in the manifest" unless testcase[:manifest_group].nil?
-
-      context context_name do
-        is_idempotent = testcase[:is_idempotent].nil? || testcase[:is_idempotent]
-
-        let(:manifest) do
-          value = <<-MANIFEST
-            file { 'rspec_example':
-              ensure => present,
-              path   => '#{@tmp_file}',
-              mode   => '#{testcase[:manifest_mode]}',
-          MANIFEST
-          value += "  owner  => '#{testcase[:manifest_owner]}',\n" unless testcase[:manifest_owner].nil?
-          value += "  group  => '#{testcase[:manifest_group]}',\n" unless testcase[:manifest_group].nil?
-          value + "}"
-        end
-
-        it "should apply with no errors and have expected ACL" do
-          apply_with_error_check(manifest)
-          new_mode = strip_sticky(Puppet::Util::Windows::Security.get_mode(@tmp_file))
-          expect(new_mode.to_s(8)).to eq (testcase[:actual_mode].nil? ? testcase[:manifest_mode] : testcase[:actual_mode])
-        end
-
-        it "should be idempotent", :if => is_idempotent do
-          result = apply_with_error_check(manifest)
-          result = apply_with_error_check(manifest)
-          # Idempotent. Should be no changed resources
-          expect(result.changed?.count).to eq 0
-        end
-
-        it "should NOT be idempotent", :unless => is_idempotent do
-          result = apply_with_error_check(manifest)
-          result = apply_with_error_check(manifest)
-          result = apply_with_error_check(manifest)
-          result = apply_with_error_check(manifest)
-          # Not idempotent. Expect changed resources
-          expect(result.changed?.count).to be > 0
-        end
-      end
-    end
-
-    # These scenarios round-trip permissions and are idempotent
-    [
-      { :create_owner => :system,         :create_group => :administrators, :manifest_mode => '760' },
-      { :create_owner => :administrators, :create_group => :administrators, :manifest_mode => '660' },
-      { :create_owner => :system,         :create_group => :system,         :manifest_mode => '770' },
-    ].each do |testcase|
-      # What happens if the owner and group are not managed
-      it_behaves_like "a mungable file resource", testcase
-      # What happens if the owner is managed
-      it_behaves_like "a mungable file resource", testcase.merge({ :manifest_owner => testcase[:create_owner]})
-      # What happens if the group is managed
-      it_behaves_like "a mungable file resource", testcase.merge({ :manifest_group => testcase[:create_group]})
-      # What happens if both the owner and group are managed
-      it_behaves_like "a mungable file resource", testcase.merge({
-        :manifest_owner => testcase[:create_owner],
-        :manifest_group => testcase[:create_group]
-      })
-    end
-
-    # SYSTEM is special in that when specifying less than mode 7, the owner and/or group MUST be managed
-    # otherwise it's munged to 7 behind the scenes and is not idempotent
-    both_system_testcase = { :create_owner => :system, :create_group => :system, :manifest_mode => '660', :actual_mode => '770', :is_idempotent => false }
-    # What happens if the owner and group are not managed
-    it_behaves_like "a mungable file resource", both_system_testcase.merge({ :is_idempotent => true })
-    # What happens if the owner is managed
-    it_behaves_like "a mungable file resource", both_system_testcase.merge({ :manifest_owner => both_system_testcase[:create_owner]})
-    # What happens if the group is managed
-    it_behaves_like "a mungable file resource", both_system_testcase.merge({ :manifest_group => both_system_testcase[:create_group]})
-
-    # However when we manage SYSTEM explicitly, then the modes lower than 7 stick and the file provider
-    # assumes it's insync (i.e. idempotent)
-    it_behaves_like "a mungable file resource", both_system_testcase.merge({
-      :manifest_owner => both_system_testcase[:create_owner],
-      :manifest_group => both_system_testcase[:create_group],
-      :actual_mode    => both_system_testcase[:manifest_mode],
-      :is_idempotent  => true
-    })
-
-    # What happens if we _create_ a file that SYSTEM is a part of, and is Full Control, but the manifest says it should not be Full Control
-    # Behind the scenes the mode should be changed to 7 and be idempotent
-    [
-      { :create_owner => :system,         :create_group => :system,         :manifest_mode => '660' },
-      { :create_owner => :administrators, :create_group => :system,         :manifest_mode => '760' },
-      { :create_owner => :system,         :create_group => :administrators, :manifest_mode => '670' },
-    ].each do |testcase|
-      it_behaves_like "a mungable file resource", testcase.merge({ :create_mode => '770', :actual_mode => '770'})
-    end
-  end
-end