RubyGems - puppet - Versions diffs - 6.16.0-universal-darwin → 7.0.0-universal-darwin - Mend

puppet 6.16.0-universal-darwin → 7.0.0-universal-darwin

Potentially problematic release.

This version of puppet might be problematic. Click here for more details.

Files changed (645) hide show

checksums.yaml +4 -4
data/Gemfile +5 -3
data/Gemfile.lock +31 -33
data/README.md +4 -5
data/Rakefile +4 -12
data/conf/fileserver.conf +5 -10
data/ext/build_defaults.yaml +1 -1
data/ext/osx/file_mapping.yaml +0 -5
data/ext/project_data.yaml +1 -14
data/ext/redhat/puppet.spec.erb +0 -1
data/ext/windows/service/daemon.rb +6 -5
data/install.rb +21 -17
data/lib/puppet.rb +11 -20
data/lib/puppet/agent.rb +2 -2
data/lib/puppet/agent/locker.rb +0 -7
data/lib/puppet/application.rb +172 -98
data/lib/puppet/application/agent.rb +22 -6
data/lib/puppet/application/apply.rb +18 -20
data/lib/puppet/application/device.rb +100 -104
data/lib/puppet/application/doc.rb +1 -1
data/lib/puppet/application/filebucket.rb +15 -11
data/lib/puppet/application/lookup.rb +16 -4
data/lib/puppet/application/ssl.rb +1 -1
data/lib/puppet/configurer.rb +66 -31
data/lib/puppet/configurer/downloader.rb +31 -10
data/lib/puppet/configurer/plugin_handler.rb +21 -19
data/lib/puppet/confine.rb +2 -2
data/lib/puppet/confine/any.rb +1 -1
data/lib/puppet/defaults.rb +166 -169
data/lib/puppet/environments.rb +41 -15
data/lib/puppet/face/catalog.rb +1 -1
data/lib/puppet/face/config.rb +56 -16
data/lib/puppet/face/epp.rb +12 -2
data/lib/puppet/face/facts.rb +66 -6
data/lib/puppet/face/help.rb +1 -1
data/lib/puppet/face/node.rb +3 -3
data/lib/puppet/face/node/clean.rb +2 -2
data/lib/puppet/face/plugin.rb +5 -8
data/lib/puppet/feature/base.rb +1 -1
data/lib/puppet/ffi/windows.rb +12 -0
data/lib/puppet/ffi/windows/api_types.rb +311 -0
data/lib/puppet/ffi/windows/constants.rb +404 -0
data/lib/puppet/ffi/windows/functions.rb +628 -0
data/lib/puppet/ffi/windows/structs.rb +338 -0
data/lib/puppet/file_bucket/dipper.rb +1 -1
data/lib/puppet/file_serving/configuration.rb +0 -5
data/lib/puppet/file_serving/configuration/parser.rb +3 -32
data/lib/puppet/file_serving/http_metadata.rb +13 -1
data/lib/puppet/file_serving/metadata.rb +4 -1
data/lib/puppet/file_serving/mount.rb +1 -2
data/lib/puppet/file_serving/mount/locales.rb +1 -2
data/lib/puppet/file_serving/mount/pluginfacts.rb +1 -2
data/lib/puppet/file_serving/mount/plugins.rb +1 -2
data/lib/puppet/file_serving/terminus_selector.rb +7 -8
data/lib/puppet/file_system/file_impl.rb +4 -4
data/lib/puppet/file_system/uniquefile.rb +8 -16
data/lib/puppet/forge.rb +1 -1
data/lib/puppet/forge/cache.rb +1 -1
data/lib/puppet/forge/repository.rb +3 -8
data/lib/puppet/functions/epp.rb +1 -0
data/lib/puppet/functions/inline_epp.rb +1 -0
data/lib/puppet/functions/lstrip.rb +4 -4
data/lib/puppet/functions/new.rb +8 -3
data/lib/puppet/functions/reverse_each.rb +1 -1
data/lib/puppet/functions/rstrip.rb +4 -4
data/lib/puppet/functions/step.rb +1 -1
data/lib/puppet/functions/strip.rb +4 -4
data/lib/puppet/generate/models/type/type.rb +4 -1
data/lib/puppet/gettext/config.rb +5 -5
data/lib/puppet/gettext/module_translations.rb +4 -4
data/lib/puppet/http.rb +23 -13
data/lib/puppet/http/client.rb +170 -115
data/lib/puppet/{network/resolver.rb → http/dns.rb} +2 -2
data/lib/puppet/http/errors.rb +16 -0
data/lib/puppet/http/external_client.rb +5 -7
data/lib/puppet/{network/http → http}/factory.rb +8 -11
data/lib/puppet/{network/http → http}/pool.rb +61 -26
data/lib/puppet/{network/http/session.rb → http/pool_entry.rb} +2 -3
data/lib/puppet/http/proxy.rb +137 -0
data/lib/puppet/http/redirector.rb +13 -19
data/lib/puppet/http/resolver.rb +10 -23
data/lib/puppet/http/resolver/server_list.rb +23 -45
data/lib/puppet/http/resolver/settings.rb +7 -10
data/lib/puppet/http/resolver/srv.rb +11 -15
data/lib/puppet/http/response.rb +49 -48
data/lib/puppet/http/response_converter.rb +24 -0
data/lib/puppet/http/response_net_http.rb +42 -0
data/lib/puppet/http/retry_after_handler.rb +4 -13
data/lib/puppet/http/service.rb +15 -27
data/lib/puppet/http/service/ca.rb +11 -22
data/lib/puppet/http/service/compiler.rb +23 -70
data/lib/puppet/http/service/file_server.rb +19 -28
data/lib/puppet/http/service/puppetserver.rb +53 -0
data/lib/puppet/http/service/report.rb +8 -10
data/lib/puppet/http/session.rb +16 -24
data/lib/puppet/{network/http → http}/site.rb +1 -2
data/lib/puppet/indirector.rb +1 -1
data/lib/puppet/indirector/catalog/compiler.rb +1 -1
data/lib/puppet/indirector/catalog/rest.rb +2 -4
data/lib/puppet/indirector/exec.rb +1 -1
data/lib/puppet/indirector/fact_search.rb +60 -0
data/lib/puppet/indirector/facts/facter.rb +27 -6
data/lib/puppet/indirector/facts/json.rb +27 -0
data/lib/puppet/indirector/facts/rest.rb +3 -22
data/lib/puppet/indirector/facts/yaml.rb +4 -59
data/lib/puppet/indirector/file_bucket_file/rest.rb +3 -9
data/lib/puppet/indirector/file_content/rest.rb +3 -7
data/lib/puppet/indirector/file_metadata/http.rb +25 -5
data/lib/puppet/indirector/file_metadata/rest.rb +5 -11
data/lib/puppet/indirector/file_server.rb +1 -8
data/lib/puppet/indirector/generic_http.rb +0 -11
data/lib/puppet/indirector/hiera.rb +4 -0
data/lib/puppet/indirector/indirection.rb +1 -1
data/lib/puppet/indirector/json.rb +5 -1
data/lib/puppet/indirector/msgpack.rb +1 -1
data/lib/puppet/indirector/node/json.rb +8 -0
data/lib/puppet/indirector/node/rest.rb +2 -4
data/lib/puppet/indirector/report/json.rb +34 -0
data/lib/puppet/indirector/report/processor.rb +2 -2
data/lib/puppet/indirector/report/rest.rb +3 -8
data/lib/puppet/indirector/request.rb +2 -103
data/lib/puppet/indirector/rest.rb +12 -263
data/lib/puppet/indirector/yaml.rb +1 -1
data/lib/puppet/module.rb +1 -2
data/lib/puppet/module_tool/applications.rb +0 -1
data/lib/puppet/network/authconfig.rb +2 -96
data/lib/puppet/network/authorization.rb +13 -35
data/lib/puppet/network/format_support.rb +2 -2
data/lib/puppet/network/formats.rb +2 -1
data/lib/puppet/network/http.rb +3 -3
data/lib/puppet/network/http/api/indirected_routes.rb +3 -21
data/lib/puppet/network/http/api/master/v3.rb +11 -13
data/lib/puppet/network/http/api/master/v3/environments.rb +0 -1
data/lib/puppet/network/http/connection.rb +247 -316
data/lib/puppet/network/http/handler.rb +0 -1
data/lib/puppet/network/http/route.rb +2 -2
data/lib/puppet/network/http_pool.rb +16 -34
data/lib/puppet/node.rb +1 -30
data/lib/puppet/node/environment.rb +12 -5
data/lib/puppet/node/facts.rb +17 -0
data/lib/puppet/pal/json_catalog_encoder.rb +4 -0
data/lib/puppet/pal/pal_impl.rb +93 -14
data/lib/puppet/parameter.rb +1 -1
data/lib/puppet/parser/ast/leaf.rb +5 -5
data/lib/puppet/parser/ast/pops_bridge.rb +0 -42
data/lib/puppet/parser/compiler.rb +1 -199
data/lib/puppet/parser/compiler/catalog_validator/relationship_validator.rb +14 -39
data/lib/puppet/parser/functions.rb +21 -17
data/lib/puppet/parser/functions/create_resources.rb +11 -7
data/lib/puppet/parser/resource.rb +3 -71
data/lib/puppet/parser/resource/param.rb +6 -0
data/lib/puppet/parser/type_loader.rb +2 -2
data/lib/puppet/pops/adaptable.rb +7 -13
data/lib/puppet/pops/adapters.rb +8 -4
data/lib/puppet/pops/evaluator/collectors/abstract_collector.rb +1 -3
data/lib/puppet/pops/evaluator/evaluator_impl.rb +27 -13
data/lib/puppet/pops/evaluator/runtime3_converter.rb +2 -2
data/lib/puppet/pops/evaluator/runtime3_resource_support.rb +3 -3
data/lib/puppet/pops/evaluator/runtime3_support.rb +1 -1
data/lib/puppet/pops/loader/ruby_legacy_function_instantiator.rb +6 -8
data/lib/puppet/pops/loader/runtime3_type_loader.rb +4 -2
data/lib/puppet/pops/loaders.rb +18 -11
data/lib/puppet/pops/lookup/context.rb +1 -1
data/lib/puppet/pops/lookup/hiera_config.rb +14 -1
data/lib/puppet/pops/model/ast.pp +0 -42
data/lib/puppet/pops/model/ast.rb +0 -290
data/lib/puppet/pops/model/factory.rb +0 -45
data/lib/puppet/pops/model/model_label_provider.rb +0 -5
data/lib/puppet/pops/model/model_tree_dumper.rb +0 -22
data/lib/puppet/pops/model/pn_transformer.rb +0 -16
data/lib/puppet/pops/parser/egrammar.ra +0 -56
data/lib/puppet/pops/parser/eparser.rb +1520 -1712
data/lib/puppet/pops/parser/lexer2.rb +4 -4
data/lib/puppet/pops/parser/parser_support.rb +0 -5
data/lib/puppet/pops/resource/resource_type_impl.rb +2 -22
data/lib/puppet/pops/types/iterable.rb +34 -8
data/lib/puppet/pops/types/p_meta_type.rb +1 -1
data/lib/puppet/pops/types/p_type_set_type.rb +4 -0
data/lib/puppet/pops/types/type_calculator.rb +0 -7
data/lib/puppet/pops/types/type_parser.rb +0 -4
data/lib/puppet/pops/types/types.rb +0 -1
data/lib/puppet/pops/validation/checker4_0.rb +28 -42
data/lib/puppet/pops/validation/tasks_checker.rb +0 -12
data/lib/puppet/pops/validation/validator_factory_4_0.rb +1 -1
data/lib/puppet/provider.rb +0 -13
data/lib/puppet/provider/file/windows.rb +1 -1
data/lib/puppet/provider/nameservice.rb +0 -18
data/lib/puppet/provider/package/apt.rb +34 -0
data/lib/puppet/provider/package/aptitude.rb +1 -1
data/lib/puppet/provider/package/dpkg.rb +1 -11
data/lib/puppet/provider/package/gem.rb +27 -5
data/lib/puppet/provider/package/pip.rb +0 -1
data/lib/puppet/provider/package/pip2.rb +17 -0
data/lib/puppet/provider/package/pkg.rb +0 -4
data/lib/puppet/provider/package/portage.rb +1 -1
data/lib/puppet/provider/package/puppet_gem.rb +6 -4
data/lib/puppet/provider/package/puppetserver_gem.rb +180 -0
data/lib/puppet/provider/package/yum.rb +2 -1
data/lib/puppet/provider/package/zypper.rb +3 -0
data/lib/puppet/provider/service/smf.rb +191 -73
data/lib/puppet/provider/service/windows.rb +23 -7
data/lib/puppet/provider/user/aix.rb +1 -1
data/lib/puppet/provider/user/directoryservice.rb +0 -10
data/lib/puppet/provider/user/user_role_add.rb +1 -1
data/lib/puppet/provider/user/useradd.rb +11 -4
data/lib/puppet/provider/user/windows_adsi.rb +18 -1
data/lib/puppet/reference/configuration.rb +2 -0
data/lib/puppet/reference/indirection.rb +1 -1
data/lib/puppet/reports/http.rb +2 -0
data/lib/puppet/resource.rb +3 -90
data/lib/puppet/resource/catalog.rb +1 -14
data/lib/puppet/resource/type.rb +5 -112
data/lib/puppet/resource/type_collection.rb +3 -48
data/lib/puppet/runtime.rb +1 -2
data/lib/puppet/settings.rb +84 -35
data/lib/puppet/settings/base_setting.rb +26 -2
data/lib/puppet/settings/integer_setting.rb +17 -0
data/lib/puppet/settings/port_setting.rb +15 -0
data/lib/puppet/settings/priority_setting.rb +5 -4
data/lib/puppet/ssl.rb +10 -6
data/lib/puppet/ssl/base.rb +3 -5
data/lib/puppet/ssl/certificate.rb +0 -6
data/lib/puppet/ssl/certificate_request.rb +1 -12
data/lib/puppet/ssl/certificate_signer.rb +6 -0
data/lib/puppet/ssl/oids.rb +3 -1
data/lib/puppet/ssl/ssl_context.rb +2 -2
data/lib/puppet/ssl/ssl_provider.rb +37 -1
data/lib/puppet/ssl/state_machine.rb +3 -1
data/lib/puppet/ssl/verifier.rb +2 -0
data/lib/puppet/test/test_helper.rb +19 -16
data/lib/puppet/transaction.rb +3 -9
data/lib/puppet/transaction/persistence.rb +1 -1
data/lib/puppet/transaction/report.rb +10 -8
data/lib/puppet/trusted_external.rb +29 -1
data/lib/puppet/type.rb +9 -77
data/lib/puppet/type/file.rb +45 -22
data/lib/puppet/type/file/checksum.rb +5 -5
data/lib/puppet/type/file/source.rb +33 -13
data/lib/puppet/type/filebucket.rb +4 -4
data/lib/puppet/type/notify.rb +2 -2
data/lib/puppet/type/package.rb +5 -13
data/lib/puppet/type/service.rb +53 -0
data/lib/puppet/type/user.rb +18 -3
data/lib/puppet/util.rb +41 -3
data/lib/puppet/util/autoload.rb +9 -7
data/lib/puppet/util/character_encoding.rb +9 -5
data/lib/puppet/util/checksums.rb +19 -4
data/lib/puppet/util/execution.rb +2 -13
data/lib/puppet/util/fileparsing.rb +2 -2
data/lib/puppet/util/http_proxy.rb +2 -215
data/lib/puppet/util/monkey_patches.rb +0 -46
data/lib/puppet/util/provider_features.rb +1 -1
data/lib/puppet/util/rdoc.rb +0 -7
data/lib/puppet/util/reference.rb +1 -1
data/lib/puppet/util/retry_action.rb +1 -1
data/lib/puppet/util/rubygems.rb +5 -1
data/lib/puppet/util/run_mode.rb +14 -2
data/lib/puppet/util/windows.rb +3 -7
data/lib/puppet/util/windows/daemon.rb +360 -0
data/lib/puppet/util/windows/error.rb +1 -0
data/lib/puppet/util/windows/eventlog.rb +5 -15
data/lib/puppet/util/windows/file.rb +8 -242
data/lib/puppet/util/windows/monkey_patches/process.rb +414 -0
data/lib/puppet/util/windows/principal.rb +8 -6
data/lib/puppet/util/windows/process.rb +4 -226
data/lib/puppet/util/windows/registry.rb +11 -11
data/lib/puppet/util/windows/security.rb +4 -4
data/lib/puppet/util/windows/service.rb +52 -486
data/lib/puppet/util/windows/string.rb +12 -13
data/lib/puppet/util/windows/user.rb +242 -8
data/lib/puppet/util/yaml.rb +0 -22
data/lib/puppet/vendor/require_vendored.rb +0 -1
data/lib/puppet/version.rb +1 -1
data/lib/puppet/x509.rb +5 -1
data/lib/puppet/x509/cert_provider.rb +29 -1
data/locales/puppet.pot +713 -1380
data/man/man5/puppet.conf.5 +84 -98
data/man/man8/puppet-agent.8 +7 -4
data/man/man8/puppet-apply.8 +1 -1
data/man/man8/puppet-catalog.8 +1 -1
data/man/man8/puppet-config.8 +6 -6
data/man/man8/puppet-describe.8 +1 -1
data/man/man8/puppet-device.8 +1 -1
data/man/man8/puppet-doc.8 +1 -1
data/man/man8/puppet-epp.8 +1 -1
data/man/man8/puppet-facts.8 +55 -9
data/man/man8/puppet-filebucket.8 +6 -6
data/man/man8/puppet-generate.8 +1 -1
data/man/man8/puppet-help.8 +1 -1
data/man/man8/puppet-lookup.8 +2 -2
data/man/man8/puppet-module.8 +1 -58
data/man/man8/puppet-node.8 +7 -4
data/man/man8/puppet-parser.8 +1 -1
data/man/man8/puppet-plugin.8 +1 -1
data/man/man8/puppet-report.8 +4 -1
data/man/man8/puppet-resource.8 +1 -1
data/man/man8/puppet-script.8 +1 -1
data/man/man8/puppet-ssl.8 +1 -1
data/man/man8/puppet.8 +2 -2
data/spec/fixtures/integration/application/apply/environments/spec/modules/amod/lib/puppet/provider/applytest/applytest.rb +2 -0
data/spec/fixtures/integration/application/apply/environments/spec/modules/amod/lib/puppet/type/applytest.rb +25 -0
data/spec/fixtures/unit/forge/bacula-releases.json +128 -0
data/spec/fixtures/unit/forge/bacula.tar.gz +0 -0
data/spec/fixtures/unit/provider/package/puppetserver_gem/gem-list-local-packages +30 -0
data/spec/fixtures/unit/provider/service/smf/{svcs.out → svcs_instances.out} +0 -0
data/spec/integration/application/agent_spec.rb +157 -59
data/spec/integration/application/apply_spec.rb +150 -150
data/spec/integration/application/doc_spec.rb +16 -6
data/spec/integration/application/filebucket_spec.rb +78 -29
data/spec/integration/application/help_spec.rb +44 -0
data/spec/integration/application/lookup_spec.rb +13 -0
data/spec/integration/application/module_spec.rb +68 -0
data/spec/integration/application/plugin_spec.rb +76 -4
data/spec/integration/configurer_spec.rb +14 -0
data/spec/integration/data_binding_spec.rb +82 -0
data/spec/integration/defaults_spec.rb +33 -5
data/spec/integration/directory_environments_spec.rb +17 -17
data/spec/integration/environments/setting_hooks_spec.rb +1 -1
data/spec/integration/indirector/facts/facter_spec.rb +8 -6
data/spec/integration/network/http_pool_spec.rb +29 -30
data/spec/integration/node/environment_spec.rb +1 -1
data/spec/integration/parser/catalog_spec.rb +0 -38
data/spec/integration/parser/compiler_spec.rb +11 -0
data/spec/integration/parser/node_spec.rb +0 -9
data/spec/integration/parser/pcore_resource_spec.rb +0 -37
data/spec/integration/type/file_spec.rb +6 -5
data/spec/integration/util/execution_spec.rb +22 -0
data/spec/integration/util/windows/adsi_spec.rb +2 -2
data/spec/integration/util/windows/monkey_patches/process_spec.rb +231 -0
data/spec/integration/util/windows/process_spec.rb +26 -32
data/spec/integration/util/windows/registry_spec.rb +7 -7
data/spec/integration/util/windows/security_spec.rb +1 -1
data/spec/integration/util/windows/user_spec.rb +47 -5
data/spec/integration/util_spec.rb +7 -33
data/spec/lib/puppet_spec/matchers.rb +0 -80
data/spec/lib/puppet_spec/puppetserver.rb +9 -1
data/spec/lib/puppet_spec/settings.rb +7 -1
data/spec/shared_contexts/types_setup.rb +2 -0
data/spec/spec_helper.rb +2 -0
data/spec/unit/agent_spec.rb +0 -2
data/spec/unit/application/agent_spec.rb +3 -4
data/spec/unit/application/config_spec.rb +224 -4
data/spec/unit/application/doc_spec.rb +2 -2
data/spec/unit/application/face_base_spec.rb +6 -4
data/spec/unit/application/facts_spec.rb +74 -8
data/spec/unit/application/filebucket_spec.rb +41 -39
data/spec/unit/application/resource_spec.rb +3 -1
data/spec/unit/application/ssl_spec.rb +17 -4
data/spec/unit/application_spec.rb +9 -4
data/spec/unit/certificate_factory_spec.rb +1 -1
data/spec/unit/configurer/downloader_spec.rb +14 -0
data/spec/unit/configurer/fact_handler_spec.rb +4 -4
data/spec/unit/configurer/plugin_handler_spec.rb +56 -18
data/spec/unit/configurer_spec.rb +96 -44
data/spec/unit/confine_spec.rb +2 -1
data/spec/unit/context/trusted_information_spec.rb +12 -10
data/spec/unit/defaults_spec.rb +77 -28
data/spec/unit/environments_spec.rb +96 -32
data/spec/unit/face/config_spec.rb +65 -12
data/spec/unit/face/facts_spec.rb +4 -0
data/spec/unit/face/node_spec.rb +2 -2
data/spec/unit/face/plugin_spec.rb +73 -33
data/spec/unit/file_bucket/file_spec.rb +1 -1
data/spec/unit/file_serving/configuration/parser_spec.rb +14 -18
data/spec/unit/file_serving/configuration_spec.rb +6 -12
data/spec/unit/file_serving/http_metadata_spec.rb +37 -14
data/spec/unit/file_serving/mount/locales_spec.rb +2 -2
data/spec/unit/file_serving/mount/pluginfacts_spec.rb +2 -2
data/spec/unit/file_serving/mount/plugins_spec.rb +2 -2
data/spec/unit/file_serving/terminus_selector_spec.rb +45 -26
data/spec/unit/file_system/uniquefile_spec.rb +18 -0
data/spec/unit/file_system_spec.rb +1 -2
data/spec/unit/functions/camelcase_spec.rb +1 -1
data/spec/unit/functions/capitalize_spec.rb +1 -1
data/spec/unit/functions/downcase_spec.rb +1 -1
data/spec/unit/functions/inline_epp_spec.rb +26 -1
data/spec/unit/functions/upcase_spec.rb +1 -1
data/spec/unit/http/client_spec.rb +71 -17
data/spec/unit/{network/resolver_spec.rb → http/dns_spec.rb} +3 -3
data/spec/unit/http/external_client_spec.rb +4 -4
data/spec/unit/{network/http → http}/factory_spec.rb +5 -11
data/spec/unit/{network/http/session_spec.rb → http/pool_entry_spec.rb} +3 -3
data/spec/unit/{network/http → http}/pool_spec.rb +12 -17
data/spec/unit/{util/http_proxy_spec.rb → http/proxy_spec.rb} +2 -69
data/spec/unit/http/resolver_spec.rb +34 -15
data/spec/unit/http/response_spec.rb +6 -0
data/spec/unit/http/service/ca_spec.rb +2 -3
data/spec/unit/http/service/compiler_spec.rb +51 -65
data/spec/unit/http/service/file_server_spec.rb +5 -6
data/spec/unit/http/service/puppetserver_spec.rb +112 -0
data/spec/unit/http/service/report_spec.rb +2 -3
data/spec/unit/http/service_spec.rb +1 -3
data/spec/unit/http/session_spec.rb +24 -35
data/spec/unit/{network/http → http}/site_spec.rb +3 -3
data/spec/unit/indirector/catalog/json_spec.rb +1 -1
data/spec/unit/indirector/catalog/rest_spec.rb +1 -1
data/spec/unit/indirector/facts/facter_spec.rb +97 -0
data/spec/unit/indirector/facts/json_spec.rb +255 -0
data/spec/unit/indirector/facts/rest_spec.rb +1 -1
data/spec/unit/indirector/file_bucket_file/file_spec.rb +5 -3
data/spec/unit/indirector/file_content/rest_spec.rb +0 -4
data/spec/unit/indirector/file_metadata/http_spec.rb +27 -0
data/spec/unit/indirector/file_metadata/rest_spec.rb +0 -4
data/spec/unit/indirector/file_server_spec.rb +1 -15
data/spec/unit/indirector/json_spec.rb +8 -8
data/spec/unit/indirector/msgpack_spec.rb +8 -8
data/spec/unit/indirector/node/json_spec.rb +33 -0
data/spec/unit/indirector/node/rest_spec.rb +1 -1
data/spec/{integration/indirector/report/yaml.rb → unit/indirector/report/json_spec.rb} +13 -24
data/spec/unit/indirector/report/rest_spec.rb +2 -17
data/spec/unit/indirector/report/yaml_spec.rb +72 -8
data/spec/unit/indirector/request_spec.rb +3 -267
data/spec/unit/indirector/rest_spec.rb +98 -752
data/spec/unit/indirector/yaml_spec.rb +7 -7
data/spec/unit/interface_spec.rb +3 -3
data/spec/unit/module_tool/tar/mini_spec.rb +20 -0
data/spec/unit/network/authconfig_spec.rb +2 -132
data/spec/unit/network/authorization_spec.rb +2 -55
data/spec/unit/network/format_support_spec.rb +3 -2
data/spec/unit/network/formats_spec.rb +4 -4
data/spec/unit/network/http/api/indirected_routes_spec.rb +3 -98
data/spec/unit/network/http/api/master/v3/environments_spec.rb +12 -23
data/spec/unit/network/http/api/master/v3_spec.rb +28 -7
data/spec/unit/network/http/api_spec.rb +10 -0
data/spec/unit/network/http/connection_spec.rb +61 -73
data/spec/unit/network/http/handler_spec.rb +0 -6
data/spec/unit/network/http_pool_spec.rb +0 -4
data/spec/unit/node/environment_spec.rb +51 -22
data/spec/unit/node_spec.rb +2 -54
data/spec/unit/parser/ast/block_expression_spec.rb +1 -1
data/spec/unit/parser/functions/create_resources_spec.rb +2 -20
data/spec/unit/parser/scope_spec.rb +1 -1
data/spec/unit/pops/evaluator/evaluating_parser_spec.rb +19 -8
data/spec/unit/pops/loaders/loaders_spec.rb +77 -22
data/spec/unit/pops/lookup/lookup_spec.rb +25 -0
data/spec/unit/pops/parser/parse_application_spec.rb +4 -22
data/spec/unit/pops/parser/parse_basic_expressions_spec.rb +0 -1
data/spec/unit/pops/parser/parse_capabilities_spec.rb +8 -21
data/spec/unit/pops/parser/parse_site_spec.rb +20 -24
data/spec/unit/pops/resource/resource_type_impl_spec.rb +0 -71
data/spec/unit/pops/serialization/to_from_hr_spec.rb +1 -1
data/spec/unit/pops/types/type_calculator_spec.rb +7 -17
data/spec/unit/pops/types/type_factory_spec.rb +1 -1
data/spec/unit/pops/validator/validator_spec.rb +61 -46
data/spec/unit/pops/visitor_spec.rb +1 -1
data/spec/unit/provider/exec_spec.rb +4 -3
data/spec/unit/provider/nameservice_spec.rb +0 -57
data/spec/unit/provider/package/apt_spec.rb +77 -0
data/spec/unit/provider/package/aptitude_spec.rb +1 -0
data/spec/unit/provider/package/dpkg_spec.rb +22 -55
data/spec/unit/provider/package/gem_spec.rb +32 -0
data/spec/unit/provider/package/openbsd_spec.rb +2 -0
data/spec/unit/provider/package/pip2_spec.rb +36 -0
data/spec/unit/provider/package/puppet_gem_spec.rb +6 -2
data/spec/unit/provider/package/puppetserver_gem_spec.rb +137 -0
data/spec/unit/provider/package/yum_spec.rb +31 -0
data/spec/unit/provider/package/zypper_spec.rb +14 -0
data/spec/unit/provider/service/base_spec.rb +2 -4
data/spec/unit/provider/service/bsd_spec.rb +5 -1
data/spec/unit/provider/service/daemontools_spec.rb +1 -1
data/spec/unit/provider/service/debian_spec.rb +3 -5
data/spec/unit/provider/service/freebsd_spec.rb +1 -1
data/spec/unit/provider/service/gentoo_spec.rb +4 -5
data/spec/unit/provider/service/init_spec.rb +45 -5
data/spec/unit/provider/service/launchd_spec.rb +5 -6
data/spec/unit/provider/service/openrc_spec.rb +4 -5
data/spec/unit/provider/service/openwrt_spec.rb +1 -1
data/spec/unit/provider/service/redhat_spec.rb +1 -1
data/spec/unit/provider/service/runit_spec.rb +2 -1
data/spec/unit/provider/service/smf_spec.rb +402 -166
data/spec/unit/provider/service/src_spec.rb +3 -5
data/spec/unit/provider/service/systemd_spec.rb +3 -6
data/spec/unit/provider/service/upstart_spec.rb +4 -5
data/spec/unit/provider/service/windows_spec.rb +50 -15
data/spec/unit/provider/user/openbsd_spec.rb +1 -0
data/spec/unit/provider/user/useradd_spec.rb +22 -16
data/spec/unit/provider/user/windows_adsi_spec.rb +82 -0
data/spec/unit/provider_spec.rb +0 -12
data/spec/unit/puppet_pal_2pec.rb +40 -0
data/spec/unit/puppet_pal_catalog_spec.rb +45 -0
data/spec/unit/reports/store_spec.rb +17 -13
data/spec/unit/resource/type_collection_spec.rb +2 -22
data/spec/unit/resource_spec.rb +3 -59
data/spec/unit/settings/http_extra_headers_spec.rb +2 -4
data/spec/unit/settings/integer_setting_spec.rb +42 -0
data/spec/unit/settings/port_setting_spec.rb +31 -0
data/spec/unit/settings/priority_setting_spec.rb +4 -4
data/spec/unit/settings_spec.rb +586 -239
data/spec/unit/ssl/base_spec.rb +36 -3
data/spec/unit/ssl/certificate_request_spec.rb +15 -45
data/spec/unit/ssl/certificate_spec.rb +2 -11
data/spec/unit/ssl/ssl_provider_spec.rb +78 -49
data/spec/unit/ssl/state_machine_spec.rb +0 -1
data/spec/unit/ssl/verifier_spec.rb +0 -21
data/spec/unit/test/test_helper_spec.rb +17 -0
data/spec/unit/transaction/persistence_spec.rb +15 -0
data/spec/unit/transaction/report_spec.rb +3 -3
data/spec/unit/transaction/resource_harness_spec.rb +2 -2
data/spec/unit/transaction_spec.rb +45 -79
data/spec/unit/type/file/checksum_spec.rb +6 -6
data/spec/unit/type/file/content_spec.rb +1 -1
data/spec/unit/type/file/ensure_spec.rb +1 -1
data/spec/unit/type/file/mode_spec.rb +1 -1
data/spec/unit/type/file/source_spec.rb +4 -5
data/spec/unit/type/file_spec.rb +134 -102
data/spec/unit/type/filebucket_spec.rb +1 -1
data/spec/unit/type/package_spec.rb +1 -1
data/spec/unit/type/service_spec.rb +209 -0
data/spec/unit/type/user_spec.rb +31 -2
data/spec/unit/type_spec.rb +70 -0
data/spec/unit/util/backups_spec.rb +0 -2
data/spec/unit/util/character_encoding_spec.rb +4 -4
data/spec/unit/util/checksums_spec.rb +16 -0
data/spec/unit/util/command_line_spec.rb +11 -6
data/spec/unit/util/execution_spec.rb +0 -29
data/spec/unit/util/monkey_patches_spec.rb +0 -6
data/spec/unit/util/rubygems_spec.rb +2 -2
data/spec/unit/util/run_mode_spec.rb +27 -127
data/spec/unit/util/windows/api_types_spec.rb +104 -40
data/spec/unit/util/windows/service_spec.rb +4 -4
data/spec/unit/util/windows/string_spec.rb +1 -3
data/spec/unit/util/yaml_spec.rb +0 -54
data/spec/unit/util_spec.rb +3 -21
data/spec/unit/x509/cert_provider_spec.rb +1 -1
metadata +76 -214
data/conf/auth.conf +0 -150
data/lib/puppet/application/cert.rb +0 -76
data/lib/puppet/application/key.rb +0 -4
data/lib/puppet/application/man.rb +0 -4
data/lib/puppet/application/status.rb +0 -4
data/lib/puppet/face/key.rb +0 -16
data/lib/puppet/face/man.rb +0 -145
data/lib/puppet/face/module/build.rb +0 -14
data/lib/puppet/face/module/generate.rb +0 -14
data/lib/puppet/face/module/search.rb +0 -103
data/lib/puppet/face/status.rb +0 -51
data/lib/puppet/indirector/certificate/file.rb +0 -9
data/lib/puppet/indirector/certificate/rest.rb +0 -18
data/lib/puppet/indirector/certificate_request/file.rb +0 -9
data/lib/puppet/indirector/certificate_request/memory.rb +0 -7
data/lib/puppet/indirector/certificate_request/rest.rb +0 -11
data/lib/puppet/indirector/file_content/http.rb +0 -22
data/lib/puppet/indirector/key/file.rb +0 -46
data/lib/puppet/indirector/key/memory.rb +0 -7
data/lib/puppet/indirector/ssl_file.rb +0 -162
data/lib/puppet/indirector/status.rb +0 -3
data/lib/puppet/indirector/status/local.rb +0 -12
data/lib/puppet/indirector/status/rest.rb +0 -27
data/lib/puppet/module_tool/applications/searcher.rb +0 -29
data/lib/puppet/network/auth_config_parser.rb +0 -90
data/lib/puppet/network/authstore.rb +0 -283
data/lib/puppet/network/http/api/master/v3/authorization.rb +0 -18
data/lib/puppet/network/http/api/master/v3/environment.rb +0 -85
data/lib/puppet/network/http/base_pool.rb +0 -36
data/lib/puppet/network/http/compression.rb +0 -127
data/lib/puppet/network/http/connection_adapter.rb +0 -182
data/lib/puppet/network/http/nocache_pool.rb +0 -28
data/lib/puppet/network/rest_controller.rb +0 -2
data/lib/puppet/network/rights.rb +0 -210
data/lib/puppet/parser/compiler/catalog_validator/env_relationship_validator.rb +0 -64
data/lib/puppet/parser/compiler/catalog_validator/site_validator.rb +0 -20
data/lib/puppet/parser/environment_compiler.rb +0 -199
data/lib/puppet/pops/types/enumeration.rb +0 -16
data/lib/puppet/resource/capability_finder.rb +0 -154
data/lib/puppet/rest/errors.rb +0 -15
data/lib/puppet/rest/response.rb +0 -35
data/lib/puppet/rest/route.rb +0 -85
data/lib/puppet/rest/routes.rb +0 -135
data/lib/puppet/ssl/host.rb +0 -505
data/lib/puppet/ssl/key.rb +0 -61
data/lib/puppet/ssl/validator.rb +0 -61
data/lib/puppet/ssl/validator/default_validator.rb +0 -209
data/lib/puppet/ssl/validator/no_validator.rb +0 -22
data/lib/puppet/ssl/verifier_adapter.rb +0 -58
data/lib/puppet/status.rb +0 -40
data/lib/puppet/util/connection.rb +0 -88
data/lib/puppet/util/ssl.rb +0 -83
data/lib/puppet/util/windows/api_types.rb +0 -282
data/lib/puppet/vendor/load_pathspec.rb +0 -1
data/lib/puppet/vendor/pathspec/CHANGELOG.md +0 -2
data/lib/puppet/vendor/pathspec/LICENSE +0 -201
data/lib/puppet/vendor/pathspec/PUPPET_README.md +0 -6
data/lib/puppet/vendor/pathspec/README.md +0 -53
data/lib/puppet/vendor/pathspec/lib/pathspec.rb +0 -122
data/lib/puppet/vendor/pathspec/lib/pathspec/gitignorespec.rb +0 -275
data/lib/puppet/vendor/pathspec/lib/pathspec/regexspec.rb +0 -17
data/lib/puppet/vendor/pathspec/lib/pathspec/spec.rb +0 -14
data/man/man8/puppet-key.8 +0 -126
data/man/man8/puppet-man.8 +0 -76
data/man/man8/puppet-status.8 +0 -108
data/spec/integration/faces/config_spec.rb +0 -91
data/spec/integration/faces/documentation_spec.rb +0 -57
data/spec/integration/file_bucket/file_spec.rb +0 -50
data/spec/integration/file_serving/content_spec.rb +0 -7
data/spec/integration/file_serving/fileset_spec.rb +0 -12
data/spec/integration/file_serving/metadata_spec.rb +0 -8
data/spec/integration/file_serving/terminus_helper_spec.rb +0 -20
data/spec/integration/file_system/uniquefile_spec.rb +0 -26
data/spec/integration/module_tool/forge_spec.rb +0 -51
data/spec/integration/module_tool/tar/mini_spec.rb +0 -28
data/spec/integration/network/authconfig_spec.rb +0 -256
data/spec/integration/provider/service/init_spec.rb +0 -48
data/spec/integration/provider/service/systemd_spec.rb +0 -25
data/spec/integration/provider/service/windows_spec.rb +0 -50
data/spec/integration/reference/providers_spec.rb +0 -21
data/spec/integration/reports_spec.rb +0 -13
data/spec/integration/ssl/certificate_request_spec.rb +0 -44
data/spec/integration/ssl/host_spec.rb +0 -72
data/spec/integration/ssl/key_spec.rb +0 -99
data/spec/integration/test/test_helper_spec.rb +0 -31
data/spec/shared_behaviours/file_serving_model.rb +0 -51
data/spec/unit/capability_spec.rb +0 -414
data/spec/unit/face/catalog_spec.rb +0 -6
data/spec/unit/face/key_spec.rb +0 -9
data/spec/unit/face/man_spec.rb +0 -25
data/spec/unit/face/module/search_spec.rb +0 -231
data/spec/unit/face/module_spec.rb +0 -3
data/spec/unit/face/status_spec.rb +0 -9
data/spec/unit/indirector/certificate/file_spec.rb +0 -14
data/spec/unit/indirector/certificate/rest_spec.rb +0 -61
data/spec/unit/indirector/certificate_request/file_spec.rb +0 -14
data/spec/unit/indirector/certificate_request/rest_spec.rb +0 -25
data/spec/unit/indirector/key/file_spec.rb +0 -79
data/spec/unit/indirector/ssl_file_spec.rb +0 -305
data/spec/unit/indirector/status/local_spec.rb +0 -10
data/spec/unit/indirector/status/rest_spec.rb +0 -50
data/spec/unit/man_spec.rb +0 -31
data/spec/unit/module_tool/applications/searcher_spec.rb +0 -38
data/spec/unit/network/auth_config_parser_spec.rb +0 -115
data/spec/unit/network/authstore_spec.rb +0 -422
data/spec/unit/network/http/api/master/v3/authorization_spec.rb +0 -57
data/spec/unit/network/http/api/master/v3/environment_spec.rb +0 -185
data/spec/unit/network/http/compression_spec.rb +0 -240
data/spec/unit/network/http/nocache_pool_spec.rb +0 -64
data/spec/unit/network/http_spec.rb +0 -9
data/spec/unit/network/rights_spec.rb +0 -439
data/spec/unit/parser/environment_compiler_spec.rb +0 -723
data/spec/unit/pops/types/enumeration_spec.rb +0 -51
data/spec/unit/resource/capability_finder_spec.rb +0 -143
data/spec/unit/rest/route_spec.rb +0 -132
data/spec/unit/ssl/host_spec.rb +0 -650
data/spec/unit/ssl/key_spec.rb +0 -173
data/spec/unit/ssl/validator_spec.rb +0 -278
data/spec/unit/status_spec.rb +0 -45
data/spec/unit/util/ssl_spec.rb +0 -91

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPETCONF" "5" "May 2020" "Puppet, Inc." "Puppet manual"
+.TH "PUPPETCONF" "5" "November 2020" "Puppet, Inc." "Puppet manual"
 \fBThis page is autogenerated; any changes will get overwritten\fR
 .
 .SH "Configuration settings"
@@ -149,7 +149,7 @@ The name to use the Certificate Authority certificate\.
 The port to use for the certificate authority\.
 .
 .IP "\(bu" 4
-\fIDefault\fR: $masterport
+\fIDefault\fR: $serverport
 .
 .IP "" 0
 .
@@ -189,7 +189,7 @@ The certificate revocation list (CRL) for the CA\.
 The root directory for the certificate authority\.
 .
 .IP "\(bu" 4
-\fIDefault\fR: $ssldir/ca
+\fIDefault\fR: /etc/puppetlabs/puppetserver/ca
 .
 .IP "" 0
 .
@@ -264,7 +264,7 @@ When certificate_revocation is set to \'false\', Puppet disables all certificate
 The name to use when handling certificates\. When a node requests a certificate from the CA puppet master, it uses the value of the \fBcertname\fR setting as its requested Subject CN\.
 .
 .P
-This is the name used when managing a node\'s permissions in auth\.conf \fIhttps://puppet\.com/docs/puppet/latest/config_file_auth\.html\fR\. In most cases, it is also used as the node\'s name when matching node definitions \fIhttps://puppet\.com/docs/puppet/latest/lang_node_definitions\.html\fR and requesting data from an ENC\. (This can be changed with the \fBnode_name_value\fR and \fBnode_name_fact\fR settings, although you should only do so if you have a compelling reason\.)
+This is the name used when managing a node\'s permissions in Puppet Server\'s auth\.conf \fIhttps://puppet\.com/docs/puppetserver/latest/config_file_auth\.html\fR\. In most cases, it is also used as the node\'s name when matching node definitions \fIhttps://puppet\.com/docs/puppet/latest/lang_node_definitions\.html\fR and requesting data from an ENC\. (This can be changed with the \fBnode_name_value\fR and \fBnode_name_fact\fR settings, although you should only do so if you have a compelling reason\.)
 .
 .P
 A node\'s certname is available in Puppet manifests as \fB$trusted[\'certname\']\fR\. (See Facts and Built\-In Variables \fIhttps://puppet\.com/docs/puppet/latest/lang_facts_and_builtin_vars\.html\fR for more details\.)
@@ -275,6 +275,9 @@ For best compatibility, you should limit the value of \fBcertname\fR to only use
 .IP "\(bu" 4
 The special value \fBca\fR is reserved, and can\'t be used as the certname for a normal node\.
 .
+.IP
+\fBNote:\fR You must set the certname in the main section of the puppet\.conf file\. Setting it in a different section causes errors\.
+.
 .IP "" 0
 .
 .P
@@ -329,7 +332,7 @@ The main Puppet code directory\. The default for this setting is calculated base
 .IP "" 0
 .
 .SS "color"
-Whether to use colors when logging to the console\. Valid values are \fBansi\fR (equivalent to \fBtrue\fR), \fBhtml\fR, and \fBfalse\fR, which produces no color\. Defaults to false on Windows, as its console does not support ansi colors\.
+Whether to use colors when logging to the console\. Valid values are \fBansi\fR (equivalent to \fBtrue\fR), \fBhtml\fR, and \fBfalse\fR, which produces no color\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: ansi
@@ -494,10 +497,10 @@ Which arguments to pass to the diff command when printing differences between fi
 .IP "" 0
 .
 .SS "digest_algorithm"
-Which digest algorithm to use for file resources and the filebucket\. Valid values are md5, sha256, sha384, sha512, sha224\. Default is md5\.
+Which digest algorithm to use for file resources and the filebucket\. Valid values are sha256, sha384, sha512, sha224, md5\. Default is sha256\.
 .
 .IP "\(bu" 4
-\fIDefault\fR: md5
+\fIDefault\fR: sha256
 .
 .IP "" 0
 .
@@ -505,7 +508,7 @@ Which digest algorithm to use for file resources and the filebucket\. Valid valu
 If true, turns off all translations of Puppet and module log messages, which affects error, warning, and info log messages, as well as any translations in the report and CLI\.
 .
 .IP "\(bu" 4
-\fIDefault\fR: false
+\fIDefault\fR: true
 .
 .IP "" 0
 .
@@ -588,24 +591,24 @@ The name of a registered environment data provider used when obtaining environme
 .
 .SS "environment_timeout"
-How long the Puppet master should cache data it loads from an environment\.
+How long the Puppet server should cache data it loads from an environment\.
 .
 .P
-A value of \fB0\fR will disable caching\. This setting can also be set to \fBunlimited\fR, which will cache environments until the master is restarted or told to refresh the cache\.
+A value of \fB0\fR will disable caching\. This setting can also be set to \fBunlimited\fR, which will cache environments until the server is restarted or told to refresh the cache\. All other values will result in Puppet server evicting environments that haven\'t been used within the last \fBenvironment_timeout\fR seconds\.
 .
 .P
-You should change this setting once your Puppet deployment is doing non\-trivial work\. We chose the default value of \fB0\fR because it lets new users update their code without any extra steps, but it lowers the performance of your Puppet master\.
+You should change this setting once your Puppet deployment is doing non\-trivial work\. We chose the default value of \fB0\fR because it lets new users update their code without any extra steps, but it lowers the performance of your Puppet server\. We recommend either:
 .
-.P
-We recommend setting this to \fBunlimited\fR and explicitly refreshing your Puppet master as part of your code deployment process\.
+.IP "\(bu" 4
+Setting this to \fBunlimited\fR and explicitly refreshing your Puppet server as part of your code deployment process\.
 .
 .IP "\(bu" 4
-With Puppet Server, you should refresh environments by calling the \fBenvironment\-cache\fR API endpoint\. See the docs for the Puppet Server administrative API \fIhttps://puppet\.com/docs/puppetserver/latest/admin\-api/v1/environment\-cache\.html\fR\.
+Setting this to a number that will keep your most actively used environments cached, but allow testing environments to fall out of the cache and reduce memory usage\. A value of 3 minutes (3m) is a reasonable value\.
 .
 .IP "" 0
 .
 .P
-Any value other than \fB0\fR or \fBunlimited\fR is deprecated, since most Puppet servers use a pool of Ruby interpreters which all have their own cache timers\. When these timers drift out of sync, agents can be served inconsistent catalogs\.
+Once you set \fBenvironment_timeout\fR to a non\-zero value, you need to tell Puppet server to read new code from disk using the \fBenvironment\-cache\fR API endpoint after you deploy new code\. See the docs for the Puppet Server administrative API \fIhttps://puppet\.com/docs/puppetserver/latest/admin\-api/v1/environment\-cache\.html\fR\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: 0
@@ -673,14 +676,6 @@ For more info, see the ENC documentation \fIhttps://puppet\.com/docs/puppet/late
 .
 .IP "" 0
 .
-.SS "facterng"
-Whether to enable a pre\-Facter 4\.0 release of Facter (distributed as the "facter\-ng" gem)\. This is not necessary if Facter 3\.x or later is installed\. This setting is still experimental\.
-.
-.IP "\(bu" 4
-\fIDefault\fR: false
-.
-.IP "" 0
-.
 .SS "factpath"
 Where Puppet should look for facts\. Multiple directories should be separated by the system path separator character\. (The POSIX path separator is \':\', and the Windows path separator is \';\'\.)
 .
@@ -728,22 +723,6 @@ Freezes the \'main\' class, disallowing any code to be added to it\. This essent
 .
 .IP "" 0
 .
-.SS "func3x_check"
-Causes validation of loaded legacy Ruby functions (3x API) to raise errors about illegal constructs that could cause harm or that simply does not work\. This flag is on by default\. This flag is made available so that the validation can be turned off in case the method of validation is faulty \- if encountered, please file a bug report\.
-.
-.IP "\(bu" 4
-\fIDefault\fR: true
-.
-.IP "" 0
-.
-.SS "future_features"
-Whether or not to enable all features currently being developed for future major releases of Puppet\. Should be used with caution, as in development features are experimental and can have unexpected effects\.
-.
-.IP "\(bu" 4
-\fIDefault\fR: false
-.
-.IP "" 0
-.
 .SS "genconfig"
 When true, causes Puppet applications to print an example config file to stdout and exit\. The example will include descriptions of each setting, and the current (or default) value of each setting, incorporating any settings overridden on the CLI (with the exception of \fBgenconfig\fR itself)\. This setting only makes sense when specified on the command line as \fB\-\-genconfig\fR\.
 .
@@ -794,7 +773,7 @@ The group Puppet Server will run as\. Used to ensure the agent side processes (a
 .IP "" 0
 .
 .SS "hiera_config"
-The hiera configuration file\. Puppet only reads this file on startup, so you must restart the puppet master every time you edit it\.
+The hiera configuration file\. Puppet only reads this file on startup, so you must restart the puppet server every time you edit it\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: $confdir/hiera\.yaml\. However, for backwards compatibility, if a file exists at $codedir/hiera\.yaml, Puppet uses that instead\.
@@ -818,10 +797,10 @@ Where the host\'s certificate revocation list can be found\. This is distinct fr
 .IP "" 0
 .
 .SS "hostcsr"
-This setting is deprecated\.
+Where individual hosts store their certificate request (CSR) while waiting for the CA to issue their certificate\.
 .
 .IP "\(bu" 4
-\fIDefault\fR: $ssldir/csr_$certname\.pem
+\fIDefault\fR: $requestdir/$certname\.pem
 .
 .IP "" 0
 .
@@ -920,7 +899,15 @@ The time to wait for data to be read from an HTTP connection\. If nothing is rea
 The HTTP User\-Agent string to send when making network requests\.
 .
 .IP "\(bu" 4
-\fIDefault\fR: Puppet/6\.16\.0 Ruby/2\.4\.1\-p111 (x86_64\-linux)
+\fIDefault\fR: Puppet/7\.0\.0 Ruby/2\.5\.1\-p57 (x86_64\-linux)
+.
+.IP "" 0
+.
+.SS "ignore_plugin_errors"
+Whether the puppet run should ignore errors during pluginsync\. If the setting is false and there are errors during pluginsync, then the agent will abort the run and submit a report containing information about the failed run\.
+.
+.IP "\(bu" 4
+\fIDefault\fR: false
 .
 .IP "" 0
 .
@@ -960,12 +947,12 @@ The bit length of keys\.
 Where puppet agent stores the last run report summary in yaml format\.
 .
 .IP "\(bu" 4
-\fIDefault\fR: $statedir/last_run_summary\.yaml
+\fIDefault\fR: $publicdir/last_run_summary\.yaml
 .
 .IP "" 0
 .
 .SS "lastrunreport"
-Where puppet agent stores the last run report in yaml format\.
+Where Puppet Agent stores the last run report, by default, in yaml format\. The format of the report can be changed by setting the \fBcache\fR key of the \fBreport\fR terminus in the routes\.yaml \fIhttps://puppet\.com/docs/puppet/latest/config_file_routes\.html\fR file\. To avoid mismatches between content and file extension, this setting needs to be manually updated to reflect the terminus changes\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: $statedir/last_run_report\.yaml
@@ -1154,7 +1141,7 @@ Setting a global value for \fBmanifest\fR in puppet\.conf is not allowed (but it
 The default port puppet subcommands use to communicate with Puppet Server\. (eg \fBpuppet facts upload\fR, \fBpuppet agent\fR)\. May be overridden by more specific settings (see \fBca_port\fR, \fBreport_port\fR)\.
 .
 .IP "\(bu" 4
-\fIDefault\fR: 8140
+\fIDefault\fR: $serverport
 .
 .IP "" 0
 .
@@ -1286,23 +1273,12 @@ How to store cached nodes\. Valid values are (none), \'json\', \'msgpack\', or \
 .TP
 \fIDefault\fR:
-.
-.SS "node_name"
-How the puppet master determines the client\'s identity and sets the \'hostname\', \'fqdn\' and \'domain\' facts for use in the manifest, in particular for determining which \'node\' statement applies to the client\. Possible values are \'cert\' (use the subject\'s CN in the client\'s certificate) and \'facter\' (use the hostname that the client reported in its facts)\.
-.
-.P
-This setting is deprecated, please use explicit fact matching for classification\.
-.
-.IP "\(bu" 4
-\fIDefault\fR: cert
-.
-.IP "" 0
 .
 .SS "node_name_fact"
-The fact name used to determine the node name used for all requests the agent makes to the master\. WARNING: This setting is mutually exclusive with node_name_value\. Changing this setting also requires changes to the default auth\.conf configuration on the Puppet Master\. Please see http://links\.puppet\.com/node_name_fact for more information\.
+The fact name used to determine the node name used for all requests the agent makes to the master\. WARNING: This setting is mutually exclusive with node_name_value\. Changing this setting also requires changes to Puppet Server\'s default auth\.conf \fIhttps://puppet\.com/docs/puppetserver/latest/config_file_auth\.html\fR\.
 .
 .SS "node_name_value"
-The explicit value used for the node name for all requests the agent makes to the master\. WARNING: This setting is mutually exclusive with node_name_fact\. Changing this setting also requires changes to the default auth\.conf configuration on the Puppet Master\. Please see http://links\.puppet\.com/node_name_value for more information\.
+The explicit value used for the node name for all requests the agent makes to the master\. WARNING: This setting is mutually exclusive with node_name_fact\. Changing this setting also requires changes to Puppet Server\'s default auth\.conf \fIhttps://puppet\.com/docs/puppetserver/latest/config_file_auth\.html\fR\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: $certname
@@ -1377,7 +1353,7 @@ Where puppet agent stores the password for its private key\. Generally unused\.
 The shell search path\. Defaults to whatever is inherited from the parent process\.
 .
 .P
-This setting can only be set in the \fB[main]\fR section of puppet\.conf; it cannot be set in \fB[master]\fR, \fB[agent]\fR, or an environment config section\.
+This setting can only be set in the \fB[main]\fR section of puppet\.conf; it cannot be set in \fB[server]\fR, \fB[agent]\fR, or an environment config section\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: none
@@ -1432,6 +1408,14 @@ From where to retrieve plugins\. The standard Puppet \fBfile\fR type is used for
 .
 .IP "" 0
 .
+.SS "pluginsync"
+Whether plugins should be synced with the central server\. This setting is deprecated\.
+.
+.IP "\(bu" 4
+\fIDefault\fR: true
+.
+.IP "" 0
+.
 .SS "postrun_command"
 A command to run after every agent run\. If this command returns a non\-zero return code, the entire Puppet run will be considered to have failed, even though it might have performed work during the normal run\.
 .
@@ -1485,6 +1469,14 @@ Whether to enable experimental performance profiling
 .
 .IP "" 0
 .
+.SS "publicdir"
+Where Puppet stores public files\.
+.
+.IP "\(bu" 4
+\fIDefault\fR: Unix/Linux: /opt/puppetlabs/puppet/public \-\- Windows: C:\eProgramData\ePuppetLabs\epuppet\epublic \-\- Non\-root user: ~/\.puppetlabs/opt/puppet/public
+.
+.IP "" 0
+.
 .SS "publickeydir"
 The public key directory\.
 .
@@ -1535,7 +1527,7 @@ Whether the \'http\' report processor should include the system certificate stor
 The port to communicate with the report_server\.
 .
 .IP "\(bu" 4
-\fIDefault\fR: $masterport
+\fIDefault\fR: $serverport
 .
 .IP "" 0
 .
@@ -1593,14 +1585,6 @@ The file in which puppet agent stores a list of the resources associated with th
 .
 .IP "" 0
 .
-.SS "rest_authconfig"
-The configuration file that defines the rights to the different rest indirections\. This can be used as a fine\-grained authorization system for \fBpuppet master\fR\. The \fBpuppet master\fR command is deprecated and Puppet Server uses its own auth\.conf that must be placed within its configuration directory\.
-.
-.IP "\(bu" 4
-\fIDefault\fR: $confdir/auth\.conf
-.
-.IP "" 0
-.
 .SS "resubmit_facts"
 Whether to send updated facts after every transaction\. By default puppet only submits facts at the beginning of the transaction before applying a catalog\. Since puppet can modify the state of the system, the value of the facts may change after puppet finishes\. Therefore, any facts stored in puppetdb may not be consistent until the agent next runs, typically in 30 minutes\. If this feature is enabled, puppet will resubmit facts after applying its catalog, ensuring facts for the node stored in puppetdb are current\. However, this will double the fact submission load on puppetdb, so it is disabled by default\.
 .
@@ -1634,7 +1618,7 @@ Where Puppet PID files are kept\.
 .IP "" 0
 .
 .SS "runinterval"
-How often puppet agent applies the catalog\. Note that a runinterval of 0 means "run continuously" rather than "never run\." If you want puppet agent to never run, you should start it with the \fB\-\-no\-client\fR option\. This setting can be a time interval in seconds (30 or 30s), minutes (30m), hours (6h), days (2d), or years (5y)\.
+How often puppet agent applies the catalog\. Note that a runinterval of 0 means "run continuously" rather than "never run\." This setting can be a time interval in seconds (30 or 30s), minutes (30m), hours (6h), days (2d), or years (5y)\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: 30m
@@ -1674,13 +1658,29 @@ The directory in which serialized data is stored, usually in a subdirectory\.
 .IP "" 0
 .
 .SS "server_list"
-The list of puppet master servers to which the puppet agent should connect, in the order that they will be tried\.
+The list of Puppet master servers to which the Puppet agent should connect, in the order that they will be tried\. Each value should be a fully qualified domain name, followed by an optional \':\' and port number\. If a port is omitted, Puppet uses masterport for that host\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: []
 .
 .IP "" 0
 .
+.SS "serverport"
+The default port puppet subcommands use to communicate with Puppet Server\. (eg \fBpuppet facts upload\fR, \fBpuppet agent\fR)\. May be overridden by more specific settings (see \fBca_port\fR, \fBreport_port\fR)\.
+.
+.IP "\(bu" 4
+\fIDefault\fR: 8140
+.
+.IP "" 0
+.
+.SS "settings_catalog"
+Whether to compile and apply the settings catalog
+.
+.IP "\(bu" 4
+\fIDefault\fR: true
+.
+.IP "" 0
+.
 .SS "show_diff"
 Whether to log and report a contextual diff when files are being replaced\. This causes partial file contents to pass through Puppet\'s normal logging and reporting system, so this setting should be used with caution if you are sending Puppet\'s reports to an insecure destination\. This feature currently requires the \fBdiff/lcs\fR Ruby library\.
 .
@@ -1739,13 +1739,6 @@ The domain which will be queried to find the SRV records of servers to use\.
 \fIDefault\fR: delivery\.puppetlabs\.net
 .
 .IP "" 0
-.
-.SS "ssl_client_ca_auth"
-Certificate authorities who issue server certificates\. SSL servers will not be considered authentic unless they possess a certificate issued by an authority listed in this file\. If this setting has no value then the Puppet master\'s CA certificate (localcacert) will be used\.
-.
-.TP
-\fIDefault\fR:
 .
 .SS "ssl_client_header"
 The header containing an authenticated client\'s SSL DN\. This header must be set by the proxy to the authenticated client\'s SSL DN (e\.g\., \fB/CN=puppet\.puppetlabs\.com\fR)\. Puppet will parse out the Common Name (CN) from the Distinguished Name (DN) and use the value of the CN field for authorization\.
@@ -1777,8 +1770,8 @@ A lock file to indicate that the ssl bootstrap process is currently in progress\
 .
 .IP "" 0
 .
-.SS "ssl_server_ca_auth"
-The setting is deprecated and has no effect\. Ensure all root and intermediate certificate authorities used to issue client certificates are contained in the server\'s \fBcacert\fR file on the server\.
+.SS "ssl_trust_store"
+A file containing CA certificates in PEM format that puppet should trust when making HTTPS requests\. This \fBonly\fR applies to https requests to non\-puppet infrastructure, such as retrieving file metadata and content from https file sources, puppet module tool and the \'http\' report processor\. This setting is ignored when making requests to puppet:// URLs such as catalog and report requests\.
 .
 .TP
 \fIDefault\fR:
@@ -1882,17 +1875,6 @@ Whether the agent specified environment should be considered authoritative, caus
 .
 .IP "" 0
 .
-.SS "strict_hostname_checking"
-Whether to only search for the complete hostname as it is in the certificate when searching for node information in the catalogs or to match dot delimited segments of the cert\'s certname and the hostname, fqdn, and/or domain facts\.
-.
-.P
-This setting is deprecated and will be removed in a future release\.
-.
-.IP "\(bu" 4
-\fIDefault\fR: true
-.
-.IP "" 0
-.
 .SS "strict_variables"
 Causes an evaluation error when referencing unknown variables\. (This does not affect referencing variables that are explicitly set to undef)\.
 .
@@ -1910,10 +1892,10 @@ Whether to print a transaction summary\.
 .IP "" 0
 .
 .SS "supported_checksum_types"
-Checksum types supported by this agent for use in file resources of a static catalog\. Values must be comma\-separated\. Valid types are md5, md5lite, sha256, sha256lite, sha384, sha512, sha224, sha1, sha1lite, mtime, ctime\. Default is md5, sha256, sha384, sha512, sha224\.
+Checksum types supported by this agent for use in file resources of a static catalog\. Values must be comma\-separated\. Valid types are sha256, sha256lite, sha384, sha512, sha224, sha1, sha1lite, md5, md5lite, mtime, ctime\. Default is sha256, sha384, sha512, sha224, md5\.
 .
 .IP "\(bu" 4
-\fIDefault\fR: ["md5", "sha256", "sha384", "sha512", "sha224"]
+\fIDefault\fR: ["sha256", "sha384", "sha512", "sha224", "md5"]
 .
 .IP "" 0
 .
@@ -1953,7 +1935,7 @@ Transactional storage file for persisting data between transactions for the purp
 .IP "" 0
 .
 .SS "trusted_external_command"
-The external trusted facts script to use\. This setting\'s value can be set to the path to an executable command that can produce external trusted facts\. The command must:
+The external trusted facts script or directory to use\. This setting\'s value can be set to the path to an executable command that can produce external trusted facts or to a directory containing those executable commands\. The command(s) must:
 .
 .IP "\(bu" 4
 Take the name of a node as a command\-line argument\.
@@ -1964,10 +1946,14 @@ Return a JSON hash with the external trusted facts for this node\.
 .IP "\(bu" 4
 For unknown or invalid nodes, exit with a non\-zero exit code\.
 .
-.IP "\(bu" 4
-\fIDefault\fR:
-.
 .IP "" 0
+.
+.P
+If the setting points to an executable command, then the external trusted facts will be stored in the \'external\' key of the trusted facts hash\. Otherwise for each executable file in the directory, the external trusted facts will be stored in the \fB<basename>\fR key of the \fBtrusted[\'external\']\fR hash\. For example, if the files foo\.rb and bar\.sh are in the directory, then \fBtrusted[\'external\']\fR will be the hash \fB{ \'foo\' => <foo\.rb output>, \'bar\' => <bar\.sh output> }\fR\.
+.
+.TP
+\fIDefault\fR:
 .
 .SS "trusted_oid_mapping_file"
 File that provides mapping between custom SSL oids and user\-friendly names
@@ -2051,7 +2037,7 @@ Puppet agent cannot apply configurations until its approved certificate is avail
 How frequently puppet agent should try running when there is an already ongoing puppet agent instance\.
 .
 .P
-This argument is by default disabled (value set to 0)\. In this case puppet agent will immediatly exit if it cannot run at that moment\. When a value other than 0 is set, this can also be used in combination with the \fBmaxwaitforlock\fR argument\. This setting can be a time interval in seconds (30 or 30s), minutes (30m), hours (6h), days (2d), or years (5y)\.
+This argument is by default disabled (value set to 0)\. In this case puppet agent will immediately exit if it cannot run at that moment\. When a value other than 0 is set, this can also be used in combination with the \fBmaxwaitforlock\fR argument\. This setting can be a time interval in seconds (30 or 30s), minutes (30m), hours (6h), days (2d), or years (5y)\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: 0

data/man/man8/puppet-agent.8 CHANGED

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-AGENT" "8" "May 2020" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-AGENT" "8" "November 2020" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-agent\fR \- The puppet agent daemon
@@ -13,7 +13,7 @@ Retrieves the client configuration from the Puppet master and applies it to the
 This service may be run as a daemon, run periodically using cron (or something similar), or run interactively for testing purposes\.
 .
 .SH "USAGE"
-puppet agent [\-\-certname \fINAME\fR] [\-D|\-\-daemonize|\-\-no\-daemonize] [\-d|\-\-debug] [\-\-detailed\-exitcodes] [\-\-digest \fIDIGEST\fR] [\-\-disable [MESSAGE]] [\-\-enable] [\-\-fingerprint] [\-h|\-\-help] [\-l|\-\-logdest syslog|eventlog|\fIABS FILEPATH\fR|console] [\-\-masterport \fIPORT\fR] [\-\-noop] [\-o|\-\-onetime] [\-\-sourceaddress \fIIP_ADDRESS\fR] [\-t|\-\-test] [\-v|\-\-verbose] [\-V|\-\-version] [\-w|\-\-waitforcert \fISECONDS\fR]
+puppet agent [\-\-certname \fINAME\fR] [\-D|\-\-daemonize|\-\-no\-daemonize] [\-d|\-\-debug] [\-\-detailed\-exitcodes] [\-\-digest \fIDIGEST\fR] [\-\-disable [MESSAGE]] [\-\-enable] [\-\-fingerprint] [\-h|\-\-help] [\-l|\-\-logdest syslog|eventlog|\fIABS FILEPATH\fR|console] [\-\-serverport \fIPORT\fR] [\-\-noop] [\-o|\-\-onetime] [\-\-sourceaddress \fIIP_ADDRESS\fR] [\-t|\-\-test] [\-v|\-\-verbose] [\-V|\-\-version] [\-w|\-\-waitforcert \fISECONDS\fR]
 .
 .SH "DESCRIPTION"
 This is the main puppet client\. Its job is to retrieve the local machine\'s configuration from a remote server and apply it\. In order to successfully communicate with the remote server, the client must have a certificate signed by a certificate authority that the server trusts; the recommended method for this, at the moment, is to run a certificate authority as part of the puppet server (which is the default)\. The client will connect and request a signed certificate, and will continue connecting until it receives one\.
@@ -123,7 +123,7 @@ Disable can also take an optional message that will be reported by the \'puppet
 \-\-help: Print this help message
 .
 .IP "\(bu" 4
-\-\-job\-id: Attach the specified job id to the catalog request and the report used for this agent run\. This option only works when \'\-\-onetime\' is used\.
+\-\-job\-id: Attach the specified job id to the catalog request and the report used for this agent run\. This option only works when \'\-\-onetime\' is used\. When using Puppet Enterprise this flag should not be used as the orchestrator sets the job\-id for you and it must be unique\.
 .
 .IP "\(bu" 4
 \-\-logdest: Where to send log messages\. Choose between \'syslog\' (the POSIX syslog service), \'eventlog\' (the Windows Event Log), \'console\', or the path to a log file\. If debugging or verbosity is enabled, this defaults to \'console\'\. Otherwise, it defaults to \'syslog\' on POSIX systems and \'eventlog\' on Windows\.
@@ -135,7 +135,7 @@ A path ending with \'\.json\' will receive structured output in JSON format\. Th
 A path ending with \'\.jsonl\' will receive structured output in JSON Lines format\.
 .
 .IP "\(bu" 4
-\-\-masterport: The port on which to contact the puppet master\. (This is a Puppet setting, and can go in puppet\.conf\.)
+\-\-masterport: The port on which to contact the Puppet Server\. (This is a Puppet setting, and can go in puppet\.conf\. Deprecated in favor of the \'serverport\' setting\.)
 .
 .IP "\(bu" 4
 \-\-noop: Use \'noop\' mode where the daemon runs in a no\-op or dry\-run mode\. This is useful for seeing what changes Puppet would make without actually executing the changes\. (This is a Puppet setting, and can go in puppet\.conf\. Note the special \'no\-\' prefix for boolean settings on the command line\.)
@@ -144,6 +144,9 @@ A path ending with \'\.jsonl\' will receive structured output in JSON Lines form
 \-\-onetime: Run the configuration once\. Runs a single (normally daemonized) Puppet run\. Useful for interactively running puppet agent when used in conjunction with the \-\-no\-daemonize option\. (This is a Puppet setting, and can go in puppet\.conf\. Note the special \'no\-\' prefix for boolean settings on the command line\.)
 .
 .IP "\(bu" 4
+\-\-serverport: The port on which to contact the Puppet Server\. (This is a Puppet setting, and can go in puppet\.conf\.)
+.
+.IP "\(bu" 4
 \-\-sourceaddress: Set the source IP address for transactions\. This defaults to automatically selected\. (This is a Puppet setting, and can go in puppet\.conf\.)
 .
 .IP "\(bu" 4