puppet 6.19.1-x64-mingw32 → 7.0.0-x64-mingw32
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of puppet might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/Gemfile +1 -1
- data/Gemfile.lock +19 -20
- data/README.md +1 -1
- data/conf/fileserver.conf +5 -10
- data/ext/build_defaults.yaml +1 -1
- data/ext/osx/file_mapping.yaml +0 -5
- data/ext/project_data.yaml +1 -14
- data/ext/redhat/puppet.spec.erb +0 -1
- data/ext/windows/service/daemon.rb +6 -5
- data/install.rb +21 -17
- data/lib/puppet.rb +11 -20
- data/lib/puppet/application.rb +172 -98
- data/lib/puppet/application/device.rb +100 -104
- data/lib/puppet/application/filebucket.rb +15 -11
- data/lib/puppet/application/ssl.rb +1 -1
- data/lib/puppet/configurer.rb +28 -33
- data/lib/puppet/configurer/plugin_handler.rb +21 -19
- data/lib/puppet/defaults.rb +95 -159
- data/lib/puppet/environments.rb +10 -25
- data/lib/puppet/face/config.rb +10 -0
- data/lib/puppet/face/epp.rb +12 -2
- data/lib/puppet/face/facts.rb +66 -6
- data/lib/puppet/face/help.rb +1 -1
- data/lib/puppet/face/plugin.rb +5 -8
- data/lib/puppet/ffi/windows.rb +12 -0
- data/lib/puppet/ffi/windows/api_types.rb +311 -0
- data/lib/puppet/ffi/windows/constants.rb +404 -0
- data/lib/puppet/ffi/windows/functions.rb +628 -0
- data/lib/puppet/ffi/windows/structs.rb +338 -0
- data/lib/puppet/file_serving/configuration.rb +0 -5
- data/lib/puppet/file_serving/configuration/parser.rb +3 -32
- data/lib/puppet/file_serving/http_metadata.rb +1 -1
- data/lib/puppet/file_serving/mount.rb +1 -2
- data/lib/puppet/forge/repository.rb +0 -1
- data/lib/puppet/functions/epp.rb +1 -0
- data/lib/puppet/functions/inline_epp.rb +1 -0
- data/lib/puppet/generate/models/type/type.rb +4 -1
- data/lib/puppet/http.rb +22 -13
- data/lib/puppet/http/client.rb +164 -114
- data/lib/puppet/{network/resolver.rb → http/dns.rb} +2 -2
- data/lib/puppet/http/errors.rb +16 -0
- data/lib/puppet/http/external_client.rb +5 -7
- data/lib/puppet/{network/http → http}/factory.rb +8 -11
- data/lib/puppet/{network/http → http}/pool.rb +61 -26
- data/lib/puppet/{network/http/session.rb → http/pool_entry.rb} +2 -3
- data/lib/puppet/http/proxy.rb +137 -0
- data/lib/puppet/http/redirector.rb +4 -12
- data/lib/puppet/http/resolver.rb +5 -15
- data/lib/puppet/http/resolver/server_list.rb +6 -10
- data/lib/puppet/http/resolver/settings.rb +4 -7
- data/lib/puppet/http/resolver/srv.rb +7 -11
- data/lib/puppet/http/response.rb +36 -54
- data/lib/puppet/http/response_converter.rb +24 -0
- data/lib/puppet/http/response_net_http.rb +42 -0
- data/lib/puppet/http/retry_after_handler.rb +4 -13
- data/lib/puppet/http/service.rb +12 -26
- data/lib/puppet/http/service/ca.rb +11 -22
- data/lib/puppet/http/service/compiler.rb +22 -69
- data/lib/puppet/http/service/file_server.rb +18 -27
- data/lib/puppet/http/service/puppetserver.rb +26 -12
- data/lib/puppet/http/service/report.rb +8 -10
- data/lib/puppet/http/session.rb +11 -20
- data/lib/puppet/{network/http → http}/site.rb +1 -2
- data/lib/puppet/indirector/catalog/rest.rb +2 -4
- data/lib/puppet/indirector/fact_search.rb +60 -0
- data/lib/puppet/indirector/facts/facter.rb +24 -3
- data/lib/puppet/indirector/facts/json.rb +27 -0
- data/lib/puppet/indirector/facts/rest.rb +3 -22
- data/lib/puppet/indirector/facts/yaml.rb +3 -58
- data/lib/puppet/indirector/file_bucket_file/rest.rb +3 -9
- data/lib/puppet/indirector/file_content/rest.rb +2 -6
- data/lib/puppet/indirector/file_metadata/rest.rb +3 -9
- data/lib/puppet/indirector/file_server.rb +1 -8
- data/lib/puppet/indirector/generic_http.rb +0 -11
- data/lib/puppet/indirector/json.rb +5 -1
- data/lib/puppet/indirector/node/json.rb +8 -0
- data/lib/puppet/indirector/node/rest.rb +2 -4
- data/lib/puppet/indirector/report/json.rb +34 -0
- data/lib/puppet/indirector/report/rest.rb +3 -8
- data/lib/puppet/indirector/request.rb +0 -101
- data/lib/puppet/indirector/rest.rb +12 -263
- data/lib/puppet/module_tool/applications.rb +0 -1
- data/lib/puppet/network/authconfig.rb +2 -96
- data/lib/puppet/network/authorization.rb +13 -35
- data/lib/puppet/network/formats.rb +2 -1
- data/lib/puppet/network/http.rb +3 -3
- data/lib/puppet/network/http/api/indirected_routes.rb +2 -20
- data/lib/puppet/network/http/api/master/v3.rb +11 -13
- data/lib/puppet/network/http/connection.rb +247 -316
- data/lib/puppet/network/http/handler.rb +0 -1
- data/lib/puppet/network/http_pool.rb +16 -34
- data/lib/puppet/node.rb +1 -30
- data/lib/puppet/pal/json_catalog_encoder.rb +4 -0
- data/lib/puppet/pal/pal_impl.rb +73 -18
- data/lib/puppet/parser/ast/pops_bridge.rb +0 -38
- data/lib/puppet/parser/compiler.rb +0 -198
- data/lib/puppet/parser/compiler/catalog_validator/relationship_validator.rb +14 -39
- data/lib/puppet/parser/resource.rb +0 -69
- data/lib/puppet/pops/evaluator/evaluator_impl.rb +22 -8
- data/lib/puppet/pops/evaluator/runtime3_resource_support.rb +3 -3
- data/lib/puppet/pops/evaluator/runtime3_support.rb +1 -1
- data/lib/puppet/pops/issues.rb +0 -5
- data/lib/puppet/pops/loader/ruby_legacy_function_instantiator.rb +6 -8
- data/lib/puppet/pops/model/ast.pp +0 -42
- data/lib/puppet/pops/model/ast.rb +0 -290
- data/lib/puppet/pops/model/factory.rb +0 -45
- data/lib/puppet/pops/model/model_label_provider.rb +0 -5
- data/lib/puppet/pops/model/model_tree_dumper.rb +0 -22
- data/lib/puppet/pops/model/pn_transformer.rb +0 -16
- data/lib/puppet/pops/parser/egrammar.ra +0 -56
- data/lib/puppet/pops/parser/eparser.rb +1520 -1712
- data/lib/puppet/pops/parser/lexer2.rb +4 -4
- data/lib/puppet/pops/parser/parser_support.rb +0 -5
- data/lib/puppet/pops/resource/resource_type_impl.rb +2 -24
- data/lib/puppet/pops/types/type_calculator.rb +0 -7
- data/lib/puppet/pops/types/type_parser.rb +0 -4
- data/lib/puppet/pops/types/types.rb +0 -1
- data/lib/puppet/pops/validation/checker4_0.rb +9 -37
- data/lib/puppet/pops/validation/tasks_checker.rb +0 -12
- data/lib/puppet/pops/validation/validator_factory_4_0.rb +1 -2
- data/lib/puppet/provider.rb +0 -13
- data/lib/puppet/provider/nameservice.rb +0 -18
- data/lib/puppet/provider/package/dpkg.rb +0 -10
- data/lib/puppet/provider/package/gem.rb +23 -3
- data/lib/puppet/provider/package/pip.rb +0 -1
- data/lib/puppet/provider/package/pkg.rb +0 -4
- data/lib/puppet/provider/package/portage.rb +1 -1
- data/lib/puppet/provider/package/puppet_gem.rb +1 -4
- data/lib/puppet/provider/service/smf.rb +191 -73
- data/lib/puppet/provider/user/directoryservice.rb +0 -10
- data/lib/puppet/reference/configuration.rb +2 -0
- data/lib/puppet/reference/indirection.rb +1 -1
- data/lib/puppet/resource.rb +1 -89
- data/lib/puppet/resource/catalog.rb +1 -14
- data/lib/puppet/resource/type.rb +3 -119
- data/lib/puppet/resource/type_collection.rb +3 -48
- data/lib/puppet/runtime.rb +1 -2
- data/lib/puppet/settings.rb +45 -33
- data/lib/puppet/settings/base_setting.rb +26 -2
- data/lib/puppet/settings/integer_setting.rb +17 -0
- data/lib/puppet/settings/port_setting.rb +15 -0
- data/lib/puppet/settings/priority_setting.rb +5 -4
- data/lib/puppet/ssl.rb +10 -6
- data/lib/puppet/ssl/base.rb +3 -5
- data/lib/puppet/ssl/certificate.rb +0 -6
- data/lib/puppet/ssl/certificate_request.rb +1 -12
- data/lib/puppet/ssl/certificate_signer.rb +6 -0
- data/lib/puppet/ssl/oids.rb +3 -1
- data/lib/puppet/ssl/ssl_provider.rb +17 -0
- data/lib/puppet/ssl/state_machine.rb +3 -1
- data/lib/puppet/ssl/verifier.rb +2 -0
- data/lib/puppet/test/test_helper.rb +1 -3
- data/lib/puppet/transaction.rb +1 -7
- data/lib/puppet/transaction/report.rb +2 -4
- data/lib/puppet/type.rb +0 -76
- data/lib/puppet/type/file.rb +5 -7
- data/lib/puppet/type/file/checksum.rb +1 -1
- data/lib/puppet/type/file/source.rb +1 -1
- data/lib/puppet/type/filebucket.rb +3 -3
- data/lib/puppet/type/package.rb +5 -13
- data/lib/puppet/util/execution.rb +0 -11
- data/lib/puppet/util/http_proxy.rb +2 -215
- data/lib/puppet/util/monkey_patches.rb +0 -46
- data/lib/puppet/util/rdoc.rb +0 -7
- data/lib/puppet/util/retry_action.rb +1 -1
- data/lib/puppet/util/rubygems.rb +5 -1
- data/lib/puppet/util/run_mode.rb +9 -1
- data/lib/puppet/util/windows.rb +3 -8
- data/lib/puppet/util/windows/daemon.rb +360 -0
- data/lib/puppet/util/windows/error.rb +1 -0
- data/lib/puppet/util/windows/eventlog.rb +4 -9
- data/lib/puppet/util/windows/file.rb +8 -242
- data/lib/puppet/util/windows/monkey_patches/process.rb +414 -0
- data/lib/puppet/util/windows/process.rb +4 -226
- data/lib/puppet/util/windows/service.rb +9 -460
- data/lib/puppet/util/windows/string.rb +12 -13
- data/lib/puppet/util/yaml.rb +0 -22
- data/lib/puppet/vendor/require_vendored.rb +0 -1
- data/lib/puppet/version.rb +1 -1
- data/lib/puppet/x509.rb +5 -1
- data/lib/puppet/x509/cert_provider.rb +29 -1
- data/locales/puppet.pot +531 -1232
- data/man/man5/puppet.conf.5 +37 -97
- data/man/man8/puppet-agent.8 +1 -1
- data/man/man8/puppet-apply.8 +1 -1
- data/man/man8/puppet-catalog.8 +1 -1
- data/man/man8/puppet-config.8 +1 -1
- data/man/man8/puppet-describe.8 +1 -1
- data/man/man8/puppet-device.8 +1 -1
- data/man/man8/puppet-doc.8 +1 -1
- data/man/man8/puppet-epp.8 +1 -1
- data/man/man8/puppet-facts.8 +55 -9
- data/man/man8/puppet-filebucket.8 +6 -6
- data/man/man8/puppet-generate.8 +1 -1
- data/man/man8/puppet-help.8 +1 -1
- data/man/man8/puppet-lookup.8 +1 -1
- data/man/man8/puppet-module.8 +1 -58
- data/man/man8/puppet-node.8 +4 -1
- data/man/man8/puppet-parser.8 +1 -1
- data/man/man8/puppet-plugin.8 +1 -1
- data/man/man8/puppet-report.8 +4 -1
- data/man/man8/puppet-resource.8 +1 -1
- data/man/man8/puppet-script.8 +1 -1
- data/man/man8/puppet-ssl.8 +1 -1
- data/man/man8/puppet.8 +2 -2
- data/spec/fixtures/unit/provider/service/smf/{svcs.out → svcs_instances.out} +0 -0
- data/spec/integration/application/agent_spec.rb +24 -11
- data/spec/integration/application/apply_spec.rb +1 -1
- data/spec/integration/application/filebucket_spec.rb +16 -16
- data/spec/integration/application/help_spec.rb +2 -0
- data/spec/integration/application/plugin_spec.rb +23 -1
- data/spec/integration/defaults_spec.rb +7 -3
- data/spec/integration/environments/setting_hooks_spec.rb +1 -1
- data/spec/integration/network/http_pool_spec.rb +3 -21
- data/spec/integration/parser/catalog_spec.rb +0 -38
- data/spec/integration/parser/node_spec.rb +0 -9
- data/spec/integration/parser/pcore_resource_spec.rb +0 -37
- data/spec/integration/type/file_spec.rb +5 -4
- data/spec/integration/util/windows/monkey_patches/process_spec.rb +231 -0
- data/spec/integration/util/windows/security_spec.rb +1 -1
- data/spec/lib/puppet_spec/puppetserver.rb +1 -1
- data/spec/lib/puppet_spec/settings.rb +7 -1
- data/spec/spec_helper.rb +2 -0
- data/spec/unit/agent_spec.rb +0 -2
- data/spec/unit/application/config_spec.rb +224 -4
- data/spec/unit/application/facts_spec.rb +35 -0
- data/spec/unit/application/filebucket_spec.rb +41 -39
- data/spec/unit/application/ssl_spec.rb +2 -2
- data/spec/unit/certificate_factory_spec.rb +1 -1
- data/spec/unit/configurer/downloader_spec.rb +6 -2
- data/spec/unit/configurer/plugin_handler_spec.rb +56 -18
- data/spec/unit/configurer_spec.rb +12 -9
- data/spec/unit/context/trusted_information_spec.rb +2 -6
- data/spec/unit/defaults_spec.rb +77 -28
- data/spec/unit/environments_spec.rb +0 -3
- data/spec/unit/face/config_spec.rb +27 -32
- data/spec/unit/face/facts_spec.rb +4 -0
- data/spec/unit/face/plugin_spec.rb +73 -33
- data/spec/unit/file_bucket/file_spec.rb +1 -1
- data/spec/unit/file_serving/configuration/parser_spec.rb +14 -18
- data/spec/unit/file_serving/configuration_spec.rb +6 -12
- data/spec/unit/functions/camelcase_spec.rb +1 -1
- data/spec/unit/functions/capitalize_spec.rb +1 -1
- data/spec/unit/functions/downcase_spec.rb +1 -1
- data/spec/unit/functions/inline_epp_spec.rb +26 -1
- data/spec/unit/functions/upcase_spec.rb +1 -1
- data/spec/unit/http/client_spec.rb +7 -8
- data/spec/unit/{network/resolver_spec.rb → http/dns_spec.rb} +3 -3
- data/spec/unit/http/external_client_spec.rb +4 -4
- data/spec/unit/{network/http → http}/factory_spec.rb +5 -11
- data/spec/unit/{network/http/session_spec.rb → http/pool_entry_spec.rb} +3 -3
- data/spec/unit/{network/http → http}/pool_spec.rb +12 -17
- data/spec/unit/{util/http_proxy_spec.rb → http/proxy_spec.rb} +2 -69
- data/spec/unit/http/resolver_spec.rb +13 -13
- data/spec/unit/http/service/compiler_spec.rb +49 -62
- data/spec/unit/http/service/file_server_spec.rb +3 -3
- data/spec/unit/http/service/puppetserver_spec.rb +34 -4
- data/spec/unit/http/service_spec.rb +1 -2
- data/spec/unit/http/session_spec.rb +16 -14
- data/spec/unit/{network/http → http}/site_spec.rb +3 -3
- data/spec/unit/indirector/facts/facter_spec.rb +97 -0
- data/spec/unit/indirector/facts/json_spec.rb +255 -0
- data/spec/unit/indirector/file_bucket_file/file_spec.rb +5 -3
- data/spec/unit/indirector/file_content/rest_spec.rb +0 -4
- data/spec/unit/indirector/file_metadata/rest_spec.rb +0 -4
- data/spec/unit/indirector/file_server_spec.rb +1 -15
- data/spec/unit/indirector/node/json_spec.rb +33 -0
- data/spec/{integration/indirector/report/yaml.rb → unit/indirector/report/json_spec.rb} +13 -24
- data/spec/unit/indirector/report/rest_spec.rb +2 -17
- data/spec/unit/indirector/report/yaml_spec.rb +72 -8
- data/spec/unit/indirector/request_spec.rb +0 -264
- data/spec/unit/indirector/rest_spec.rb +98 -752
- data/spec/unit/network/authconfig_spec.rb +2 -132
- data/spec/unit/network/authorization_spec.rb +2 -55
- data/spec/unit/network/formats_spec.rb +4 -4
- data/spec/unit/network/http/api/indirected_routes_spec.rb +1 -97
- data/spec/unit/network/http/api/master/v3_spec.rb +28 -7
- data/spec/unit/network/http/api_spec.rb +10 -0
- data/spec/unit/network/http/connection_spec.rb +19 -41
- data/spec/unit/network/http/handler_spec.rb +0 -6
- data/spec/unit/network/http_pool_spec.rb +0 -4
- data/spec/unit/node/environment_spec.rb +33 -21
- data/spec/unit/node_spec.rb +2 -54
- data/spec/unit/parser/functions/create_resources_spec.rb +2 -20
- data/spec/unit/pops/evaluator/evaluating_parser_spec.rb +4 -7
- data/spec/unit/pops/loaders/loaders_spec.rb +6 -21
- data/spec/unit/pops/parser/parse_application_spec.rb +4 -22
- data/spec/unit/pops/parser/parse_basic_expressions_spec.rb +0 -1
- data/spec/unit/pops/parser/parse_capabilities_spec.rb +8 -21
- data/spec/unit/pops/parser/parse_site_spec.rb +20 -24
- data/spec/unit/pops/resource/resource_type_impl_spec.rb +0 -71
- data/spec/unit/pops/serialization/to_from_hr_spec.rb +1 -1
- data/spec/unit/pops/types/type_calculator_spec.rb +6 -6
- data/spec/unit/pops/types/type_factory_spec.rb +1 -1
- data/spec/unit/pops/validator/validator_spec.rb +61 -46
- data/spec/unit/pops/visitor_spec.rb +1 -1
- data/spec/unit/provider/nameservice_spec.rb +0 -57
- data/spec/unit/provider/package/dpkg_spec.rb +0 -48
- data/spec/unit/provider/package/gem_spec.rb +32 -0
- data/spec/unit/provider/package/puppet_gem_spec.rb +3 -2
- data/spec/unit/provider/service/smf_spec.rb +401 -165
- data/spec/unit/provider/service/windows_spec.rb +0 -1
- data/spec/unit/provider_spec.rb +0 -12
- data/spec/unit/puppet_pal_catalog_spec.rb +45 -0
- data/spec/unit/resource/type_collection_spec.rb +2 -22
- data/spec/unit/resource_spec.rb +0 -56
- data/spec/unit/settings/http_extra_headers_spec.rb +2 -4
- data/spec/unit/settings/integer_setting_spec.rb +42 -0
- data/spec/unit/settings/port_setting_spec.rb +31 -0
- data/spec/unit/settings/priority_setting_spec.rb +4 -4
- data/spec/unit/settings_spec.rb +423 -236
- data/spec/unit/ssl/base_spec.rb +36 -3
- data/spec/unit/ssl/certificate_request_spec.rb +15 -45
- data/spec/unit/ssl/certificate_spec.rb +2 -11
- data/spec/unit/ssl/ssl_provider_spec.rb +11 -8
- data/spec/unit/ssl/state_machine_spec.rb +0 -1
- data/spec/unit/ssl/verifier_spec.rb +0 -21
- data/spec/unit/transaction/report_spec.rb +0 -2
- data/spec/unit/transaction/resource_harness_spec.rb +2 -2
- data/spec/unit/transaction_spec.rb +45 -79
- data/spec/unit/type/file/checksum_spec.rb +6 -6
- data/spec/unit/type/file/content_spec.rb +1 -1
- data/spec/unit/type/file/ensure_spec.rb +1 -1
- data/spec/unit/type/file/mode_spec.rb +1 -1
- data/spec/unit/type/file/source_spec.rb +0 -1
- data/spec/unit/type/file_spec.rb +12 -6
- data/spec/unit/type/package_spec.rb +1 -1
- data/spec/unit/type_spec.rb +20 -0
- data/spec/unit/util/backups_spec.rb +0 -2
- data/spec/unit/util/execution_spec.rb +0 -29
- data/spec/unit/util/monkey_patches_spec.rb +0 -6
- data/spec/unit/util/rubygems_spec.rb +2 -2
- data/spec/unit/util/run_mode_spec.rb +21 -121
- data/spec/unit/util/windows/string_spec.rb +1 -3
- data/spec/unit/util/yaml_spec.rb +0 -54
- data/spec/unit/util_spec.rb +0 -18
- metadata +50 -232
- data/conf/auth.conf +0 -150
- data/lib/puppet/application/cert.rb +0 -76
- data/lib/puppet/application/key.rb +0 -4
- data/lib/puppet/application/man.rb +0 -4
- data/lib/puppet/application/status.rb +0 -4
- data/lib/puppet/face/key.rb +0 -16
- data/lib/puppet/face/man.rb +0 -145
- data/lib/puppet/face/module/build.rb +0 -14
- data/lib/puppet/face/module/generate.rb +0 -14
- data/lib/puppet/face/module/search.rb +0 -103
- data/lib/puppet/face/status.rb +0 -51
- data/lib/puppet/indirector/certificate/file.rb +0 -9
- data/lib/puppet/indirector/certificate/rest.rb +0 -18
- data/lib/puppet/indirector/certificate_request/file.rb +0 -9
- data/lib/puppet/indirector/certificate_request/memory.rb +0 -7
- data/lib/puppet/indirector/certificate_request/rest.rb +0 -11
- data/lib/puppet/indirector/file_content/http.rb +0 -22
- data/lib/puppet/indirector/key/file.rb +0 -46
- data/lib/puppet/indirector/key/memory.rb +0 -7
- data/lib/puppet/indirector/ssl_file.rb +0 -162
- data/lib/puppet/indirector/status.rb +0 -3
- data/lib/puppet/indirector/status/local.rb +0 -12
- data/lib/puppet/indirector/status/rest.rb +0 -27
- data/lib/puppet/module_tool/applications/searcher.rb +0 -29
- data/lib/puppet/network/auth_config_parser.rb +0 -90
- data/lib/puppet/network/authstore.rb +0 -283
- data/lib/puppet/network/http/api/master/v3/authorization.rb +0 -18
- data/lib/puppet/network/http/api/master/v3/environment.rb +0 -88
- data/lib/puppet/network/http/base_pool.rb +0 -36
- data/lib/puppet/network/http/compression.rb +0 -127
- data/lib/puppet/network/http/connection_adapter.rb +0 -184
- data/lib/puppet/network/http/nocache_pool.rb +0 -28
- data/lib/puppet/network/rest_controller.rb +0 -2
- data/lib/puppet/network/rights.rb +0 -210
- data/lib/puppet/parser/compiler/catalog_validator/env_relationship_validator.rb +0 -66
- data/lib/puppet/parser/compiler/catalog_validator/site_validator.rb +0 -22
- data/lib/puppet/parser/environment_compiler.rb +0 -202
- data/lib/puppet/pops/types/enumeration.rb +0 -16
- data/lib/puppet/resource/capability_finder.rb +0 -154
- data/lib/puppet/rest/errors.rb +0 -15
- data/lib/puppet/rest/response.rb +0 -35
- data/lib/puppet/rest/route.rb +0 -85
- data/lib/puppet/rest/routes.rb +0 -135
- data/lib/puppet/ssl/host.rb +0 -505
- data/lib/puppet/ssl/key.rb +0 -61
- data/lib/puppet/ssl/validator.rb +0 -61
- data/lib/puppet/ssl/validator/default_validator.rb +0 -209
- data/lib/puppet/ssl/validator/no_validator.rb +0 -22
- data/lib/puppet/ssl/verifier_adapter.rb +0 -58
- data/lib/puppet/status.rb +0 -40
- data/lib/puppet/util/connection.rb +0 -88
- data/lib/puppet/util/ssl.rb +0 -83
- data/lib/puppet/util/windows/api_types.rb +0 -309
- data/lib/puppet/util/windows/monkey_patches/dir.rb +0 -40
- data/lib/puppet/vendor/load_pathspec.rb +0 -1
- data/lib/puppet/vendor/pathspec/CHANGELOG.md +0 -2
- data/lib/puppet/vendor/pathspec/LICENSE +0 -201
- data/lib/puppet/vendor/pathspec/PUPPET_README.md +0 -6
- data/lib/puppet/vendor/pathspec/README.md +0 -53
- data/lib/puppet/vendor/pathspec/lib/pathspec.rb +0 -122
- data/lib/puppet/vendor/pathspec/lib/pathspec/gitignorespec.rb +0 -275
- data/lib/puppet/vendor/pathspec/lib/pathspec/regexspec.rb +0 -17
- data/lib/puppet/vendor/pathspec/lib/pathspec/spec.rb +0 -14
- data/man/man8/puppet-key.8 +0 -126
- data/man/man8/puppet-man.8 +0 -76
- data/man/man8/puppet-status.8 +0 -108
- data/spec/integration/application/config_spec.rb +0 -74
- data/spec/integration/network/authconfig_spec.rb +0 -256
- data/spec/integration/util/windows/monkey_patches/dir_spec.rb +0 -11
- data/spec/unit/application/man_spec.rb +0 -52
- data/spec/unit/capability_spec.rb +0 -414
- data/spec/unit/face/catalog_spec.rb +0 -6
- data/spec/unit/face/key_spec.rb +0 -9
- data/spec/unit/face/module/search_spec.rb +0 -231
- data/spec/unit/face/module_spec.rb +0 -3
- data/spec/unit/face/status_spec.rb +0 -9
- data/spec/unit/indirector/certificate/file_spec.rb +0 -14
- data/spec/unit/indirector/certificate/rest_spec.rb +0 -61
- data/spec/unit/indirector/certificate_request/file_spec.rb +0 -14
- data/spec/unit/indirector/certificate_request/rest_spec.rb +0 -25
- data/spec/unit/indirector/key/file_spec.rb +0 -79
- data/spec/unit/indirector/ssl_file_spec.rb +0 -305
- data/spec/unit/indirector/status/local_spec.rb +0 -10
- data/spec/unit/indirector/status/rest_spec.rb +0 -50
- data/spec/unit/module_tool/applications/searcher_spec.rb +0 -38
- data/spec/unit/network/auth_config_parser_spec.rb +0 -115
- data/spec/unit/network/authstore_spec.rb +0 -422
- data/spec/unit/network/http/api/master/v3/authorization_spec.rb +0 -57
- data/spec/unit/network/http/api/master/v3/environment_spec.rb +0 -185
- data/spec/unit/network/http/compression_spec.rb +0 -240
- data/spec/unit/network/http/nocache_pool_spec.rb +0 -64
- data/spec/unit/network/http_spec.rb +0 -9
- data/spec/unit/network/rights_spec.rb +0 -439
- data/spec/unit/parser/environment_compiler_spec.rb +0 -730
- data/spec/unit/pops/types/enumeration_spec.rb +0 -51
- data/spec/unit/resource/capability_finder_spec.rb +0 -143
- data/spec/unit/rest/route_spec.rb +0 -132
- data/spec/unit/ssl/host_spec.rb +0 -650
- data/spec/unit/ssl/key_spec.rb +0 -173
- data/spec/unit/ssl/validator_spec.rb +0 -278
- data/spec/unit/status_spec.rb +0 -45
- data/spec/unit/util/ssl_spec.rb +0 -91
@@ -1,422 +0,0 @@
|
|
1
|
-
require 'spec_helper'
|
2
|
-
require 'rbconfig'
|
3
|
-
|
4
|
-
require 'puppet/network/authconfig'
|
5
|
-
|
6
|
-
describe Puppet::Network::AuthStore do
|
7
|
-
before :each do
|
8
|
-
@authstore = Puppet::Network::AuthStore.new
|
9
|
-
@authstore.reset_interpolation
|
10
|
-
end
|
11
|
-
|
12
|
-
describe "when checking if the acl has some entries" do
|
13
|
-
it "should be empty if no ACE have been entered" do
|
14
|
-
expect(@authstore).to be_empty
|
15
|
-
end
|
16
|
-
|
17
|
-
it "should not be empty if it is a global allow" do
|
18
|
-
@authstore.allow('*')
|
19
|
-
|
20
|
-
expect(@authstore).not_to be_empty
|
21
|
-
end
|
22
|
-
|
23
|
-
it "should not be empty if at least one allow has been entered" do
|
24
|
-
@authstore.allow_ip('1.1.1.*')
|
25
|
-
|
26
|
-
expect(@authstore).not_to be_empty
|
27
|
-
end
|
28
|
-
|
29
|
-
it "should not be empty if at least one deny has been entered" do
|
30
|
-
@authstore.deny_ip('1.1.1.*')
|
31
|
-
|
32
|
-
expect(@authstore).not_to be_empty
|
33
|
-
end
|
34
|
-
end
|
35
|
-
|
36
|
-
describe "when checking global allow" do
|
37
|
-
it "should not be enabled by default" do
|
38
|
-
expect(@authstore).not_to be_globalallow
|
39
|
-
expect(@authstore).not_to be_allowed('foo.bar.com', '192.168.1.1')
|
40
|
-
end
|
41
|
-
|
42
|
-
it "should always allow when enabled" do
|
43
|
-
@authstore.allow('*')
|
44
|
-
|
45
|
-
expect(@authstore).to be_globalallow
|
46
|
-
expect(@authstore).to be_allowed('foo.bar.com', '192.168.1.1')
|
47
|
-
end
|
48
|
-
end
|
49
|
-
|
50
|
-
describe "when checking a regex type of allow" do
|
51
|
-
before :each do
|
52
|
-
@authstore.allow('/^(test-)?host[0-9]+\.other-domain\.(com|org|net)$|some-domain\.com/')
|
53
|
-
@ip = '192.168.1.1'
|
54
|
-
end
|
55
|
-
['host5.other-domain.com', 'test-host12.other-domain.net', 'foo.some-domain.com'].each { |name|
|
56
|
-
it "should allow the host #{name}" do
|
57
|
-
expect(@authstore).to be_allowed(name, @ip)
|
58
|
-
end
|
59
|
-
}
|
60
|
-
['host0.some-other-domain.com',''].each { |name|
|
61
|
-
it "should not allow the host #{name}" do
|
62
|
-
expect(@authstore).not_to be_allowed(name, @ip)
|
63
|
-
end
|
64
|
-
}
|
65
|
-
end
|
66
|
-
end
|
67
|
-
|
68
|
-
describe Puppet::Network::AuthStore::Declaration do
|
69
|
-
|
70
|
-
['100.101.99.98','100.100.100.100','1.2.3.4','11.22.33.44'].each { |ip|
|
71
|
-
describe "when the pattern is a simple numeric IP such as #{ip}" do
|
72
|
-
before :each do
|
73
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow_ip,ip)
|
74
|
-
end
|
75
|
-
it "should match the specified IP" do
|
76
|
-
expect(@declaration).to be_match('www.testsite.org',ip)
|
77
|
-
end
|
78
|
-
it "should not match other IPs" do
|
79
|
-
expect(@declaration).not_to be_match('www.testsite.org','200.101.99.98')
|
80
|
-
end
|
81
|
-
end
|
82
|
-
|
83
|
-
(1..3).each { |n|
|
84
|
-
describe "when the pattern is an IP mask with #{n} numeric segments and a *" do
|
85
|
-
before :each do
|
86
|
-
@ip_pattern = ip.split('.')[0,n].join('.')+'.*'
|
87
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow_ip,@ip_pattern)
|
88
|
-
end
|
89
|
-
it "should match an IP in the range" do
|
90
|
-
expect(@declaration).to be_match('www.testsite.org',ip)
|
91
|
-
end
|
92
|
-
it "should not match other IPs" do
|
93
|
-
expect(@declaration).not_to be_match('www.testsite.org','200.101.99.98')
|
94
|
-
end
|
95
|
-
it "should not match IPs that differ in the last non-wildcard segment" do
|
96
|
-
other = ip.split('.')
|
97
|
-
other[n-1].succ!
|
98
|
-
expect(@declaration).not_to be_match('www.testsite.org',other.join('.'))
|
99
|
-
end
|
100
|
-
end
|
101
|
-
}
|
102
|
-
}
|
103
|
-
|
104
|
-
describe "when the pattern is a numeric IP with a back reference" do
|
105
|
-
pending("implementation of backreferences for IP") do
|
106
|
-
before :each do
|
107
|
-
@ip = '100.101.$1'
|
108
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow_ip,@ip).interpolate('12.34'.match(/(.*)/))
|
109
|
-
end
|
110
|
-
it "should match an IP with the appropriate interpolation" do
|
111
|
-
@declaration.should be_match('www.testsite.org',@ip.sub(/\$1/,'12.34'))
|
112
|
-
end
|
113
|
-
it "should not match other IPs" do
|
114
|
-
@declaration.should_not be_match('www.testsite.org',@ip.sub(/\$1/,'66.34'))
|
115
|
-
end
|
116
|
-
end
|
117
|
-
end
|
118
|
-
|
119
|
-
[
|
120
|
-
"02001:0000:1234:0000:0000:C1C0:ABCD:0876",
|
121
|
-
"2001:0000:1234:0000:00001:C1C0:ABCD:0876",
|
122
|
-
" 2001:0000:1234:0000:0000:C1C0:ABCD:0876 0",
|
123
|
-
"2001:0000:1234: 0000:0000:C1C0:ABCD:0876",
|
124
|
-
"3ffe:0b00:0000:0001:0000:0000:000a",
|
125
|
-
"FF02:0000:0000:0000:0000:0000:0000:0000:0001",
|
126
|
-
"3ffe:b00::1::a",
|
127
|
-
"1:2:3::4:5::7:8",
|
128
|
-
"12345::6:7:8",
|
129
|
-
"1::5:400.2.3.4",
|
130
|
-
"1::5:260.2.3.4",
|
131
|
-
"1::5:256.2.3.4",
|
132
|
-
"1::5:1.256.3.4",
|
133
|
-
"1::5:1.2.256.4",
|
134
|
-
"1::5:1.2.3.256",
|
135
|
-
"1::5:300.2.3.4",
|
136
|
-
"1::5:1.300.3.4",
|
137
|
-
"1::5:1.2.300.4",
|
138
|
-
"1::5:1.2.3.300",
|
139
|
-
"1::5:900.2.3.4",
|
140
|
-
"1::5:1.900.3.4",
|
141
|
-
"1::5:1.2.900.4",
|
142
|
-
"1::5:1.2.3.900",
|
143
|
-
"1::5:300.300.300.300",
|
144
|
-
"1::5:3000.30.30.30",
|
145
|
-
"1::400.2.3.4",
|
146
|
-
"1::260.2.3.4",
|
147
|
-
"1::256.2.3.4",
|
148
|
-
"1::1.256.3.4",
|
149
|
-
"1::1.2.256.4",
|
150
|
-
"1::1.2.3.256",
|
151
|
-
"1::300.2.3.4",
|
152
|
-
"1::1.300.3.4",
|
153
|
-
"1::1.2.300.4",
|
154
|
-
"1::1.2.3.300",
|
155
|
-
"1::900.2.3.4",
|
156
|
-
"1::1.900.3.4",
|
157
|
-
"1::1.2.900.4",
|
158
|
-
"1::1.2.3.900",
|
159
|
-
"1::300.300.300.300",
|
160
|
-
"1::3000.30.30.30",
|
161
|
-
"::400.2.3.4",
|
162
|
-
"::260.2.3.4",
|
163
|
-
"::256.2.3.4",
|
164
|
-
"::1.256.3.4",
|
165
|
-
"::1.2.256.4",
|
166
|
-
"::1.2.3.256",
|
167
|
-
"::300.2.3.4",
|
168
|
-
"::1.300.3.4",
|
169
|
-
"::1.2.300.4",
|
170
|
-
"::1.2.3.300",
|
171
|
-
"::900.2.3.4",
|
172
|
-
"::1.900.3.4",
|
173
|
-
"::1.2.900.4",
|
174
|
-
"::1.2.3.900",
|
175
|
-
"::300.300.300.300",
|
176
|
-
"::3000.30.30.30",
|
177
|
-
"2001:DB8:0:0:8:800:200C:417A:221", # unicast, full
|
178
|
-
"FF01::101::2" # multicast, compressed
|
179
|
-
].each { |invalid_ip|
|
180
|
-
describe "when the pattern is an invalid IPv6 address such as #{invalid_ip}" do
|
181
|
-
it "should raise an exception" do
|
182
|
-
expect { Puppet::Network::AuthStore::Declaration.new(:allow,invalid_ip) }.to raise_error(Puppet::AuthStoreError, /Invalid pattern/)
|
183
|
-
end
|
184
|
-
end
|
185
|
-
}
|
186
|
-
|
187
|
-
[
|
188
|
-
"1.2.3.4",
|
189
|
-
"2001:0000:1234:0000:0000:C1C0:ABCD:0876",
|
190
|
-
"3ffe:0b00:0000:0000:0001:0000:0000:000a",
|
191
|
-
"FF02:0000:0000:0000:0000:0000:0000:0001",
|
192
|
-
"0000:0000:0000:0000:0000:0000:0000:0001",
|
193
|
-
"0000:0000:0000:0000:0000:0000:0000:0000",
|
194
|
-
"::ffff:192.168.1.26",
|
195
|
-
"2::10",
|
196
|
-
"ff02::1",
|
197
|
-
"fe80::",
|
198
|
-
"2002::",
|
199
|
-
"2001:db8::",
|
200
|
-
"2001:0db8:1234::",
|
201
|
-
"::ffff:0:0",
|
202
|
-
"::1",
|
203
|
-
"::ffff:192.168.1.1",
|
204
|
-
"1:2:3:4:5:6:7:8",
|
205
|
-
"1:2:3:4:5:6::8",
|
206
|
-
"1:2:3:4:5::8",
|
207
|
-
"1:2:3:4::8",
|
208
|
-
"1:2:3::8",
|
209
|
-
"1:2::8",
|
210
|
-
"1::8",
|
211
|
-
"1::2:3:4:5:6:7",
|
212
|
-
"1::2:3:4:5:6",
|
213
|
-
"1::2:3:4:5",
|
214
|
-
"1::2:3:4",
|
215
|
-
"1::2:3",
|
216
|
-
"1::8",
|
217
|
-
"::2:3:4:5:6:7",
|
218
|
-
"::2:3:4:5:6",
|
219
|
-
"::2:3:4:5",
|
220
|
-
"::2:3:4",
|
221
|
-
"::2:3",
|
222
|
-
"::8",
|
223
|
-
"1:2:3:4:5:6::",
|
224
|
-
"1:2:3:4:5::",
|
225
|
-
"1:2:3:4::",
|
226
|
-
"1:2:3::",
|
227
|
-
"1:2::",
|
228
|
-
"1::",
|
229
|
-
"1:2:3:4:5::7:8",
|
230
|
-
"1:2:3:4::7:8",
|
231
|
-
"1:2:3::7:8",
|
232
|
-
"1:2::7:8",
|
233
|
-
"1::7:8",
|
234
|
-
"1:2:3:4:5:6:1.2.3.4",
|
235
|
-
"1:2:3:4:5::1.2.3.4",
|
236
|
-
"1:2:3:4::1.2.3.4",
|
237
|
-
"1:2:3::1.2.3.4",
|
238
|
-
"1:2::1.2.3.4",
|
239
|
-
"1::1.2.3.4",
|
240
|
-
"1:2:3:4::5:1.2.3.4",
|
241
|
-
"1:2:3::5:1.2.3.4",
|
242
|
-
"1:2::5:1.2.3.4",
|
243
|
-
"1::5:1.2.3.4",
|
244
|
-
"1::5:11.22.33.44",
|
245
|
-
"fe80::217:f2ff:254.7.237.98",
|
246
|
-
"fe80::217:f2ff:fe07:ed62",
|
247
|
-
"2001:DB8:0:0:8:800:200C:417A", # unicast, full
|
248
|
-
"FF01:0:0:0:0:0:0:101", # multicast, full
|
249
|
-
"0:0:0:0:0:0:0:1", # loopback, full
|
250
|
-
"0:0:0:0:0:0:0:0", # unspecified, full
|
251
|
-
"2001:DB8::8:800:200C:417A", # unicast, compressed
|
252
|
-
"FF01::101", # multicast, compressed
|
253
|
-
"::1", # loopback, compressed, non-routable
|
254
|
-
"::", # unspecified, compressed, non-routable
|
255
|
-
"0:0:0:0:0:0:13.1.68.3", # IPv4-compatible IPv6 address, full, deprecated
|
256
|
-
"0:0:0:0:0:FFFF:129.144.52.38", # IPv4-mapped IPv6 address, full
|
257
|
-
"::13.1.68.3", # IPv4-compatible IPv6 address, compressed, deprecated
|
258
|
-
"::FFFF:129.144.52.38", # IPv4-mapped IPv6 address, compressed
|
259
|
-
"2001:0DB8:0000:CD30:0000:0000:0000:0000/60", # full, with prefix
|
260
|
-
"2001:0DB8::CD30:0:0:0:0/60", # compressed, with prefix
|
261
|
-
"2001:0DB8:0:CD30::/60", # compressed, with prefix #2
|
262
|
-
"::/128", # compressed, unspecified address type, non-routable
|
263
|
-
"::1/128", # compressed, loopback address type, non-routable
|
264
|
-
"FF00::/8", # compressed, multicast address type
|
265
|
-
"FE80::/10", # compressed, link-local unicast, non-routable
|
266
|
-
"FEC0::/10", # compressed, site-local unicast, deprecated
|
267
|
-
"127.0.0.1", # standard IPv4, loopback, non-routable
|
268
|
-
"0.0.0.0", # standard IPv4, unspecified, non-routable
|
269
|
-
"255.255.255.255", # standard IPv4
|
270
|
-
"fe80:0000:0000:0000:0204:61ff:fe9d:f156",
|
271
|
-
"fe80:0:0:0:204:61ff:fe9d:f156",
|
272
|
-
"fe80::204:61ff:fe9d:f156",
|
273
|
-
"fe80:0000:0000:0000:0204:61ff:254.157.241.086",
|
274
|
-
"fe80:0:0:0:204:61ff:254.157.241.86",
|
275
|
-
"fe80::204:61ff:254.157.241.86",
|
276
|
-
"::1",
|
277
|
-
"fe80::",
|
278
|
-
"fe80::1"
|
279
|
-
].each { |ip|
|
280
|
-
describe "when the pattern is a valid IP such as #{ip}" do
|
281
|
-
before :each do
|
282
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow_ip,ip)
|
283
|
-
end
|
284
|
-
it "should match the specified IP" do
|
285
|
-
expect(@declaration).to be_match('www.testsite.org',ip)
|
286
|
-
end
|
287
|
-
it "should not match other IPs" do
|
288
|
-
expect(@declaration).not_to be_match('www.testsite.org','200.101.99.98')
|
289
|
-
end
|
290
|
-
end unless ip =~ /:.*\./ # Hybrid IPs aren't supported by ruby's ipaddr
|
291
|
-
}
|
292
|
-
|
293
|
-
[
|
294
|
-
"::2:3:4:5:6:7:8",
|
295
|
-
].each { |ip|
|
296
|
-
describe "when the pattern is a valid IP such as #{ip}" do
|
297
|
-
let(:declaration) do
|
298
|
-
Puppet::Network::AuthStore::Declaration.new(:allow_ip,ip)
|
299
|
-
end
|
300
|
-
|
301
|
-
issue_7477 = !(IPAddr.new(ip) rescue false)
|
302
|
-
|
303
|
-
describe "on rubies with a fix for issue [7477](https://goo.gl/Bb1LU)", :if => issue_7477
|
304
|
-
it "should match the specified IP" do
|
305
|
-
expect(declaration).to be_match('www.testsite.org',ip)
|
306
|
-
end
|
307
|
-
it "should not match other IPs" do
|
308
|
-
expect(declaration).not_to be_match('www.testsite.org','200.101.99.98')
|
309
|
-
end
|
310
|
-
end
|
311
|
-
}
|
312
|
-
|
313
|
-
{
|
314
|
-
'spirit.mars.nasa.gov' => 'a PQDN',
|
315
|
-
'ratchet.2ndsiteinc.com' => 'a PQDN with digits',
|
316
|
-
'a.c.ru' => 'a PQDN with short segments',
|
317
|
-
}.each {|pqdn,desc|
|
318
|
-
describe "when the pattern is #{desc}" do
|
319
|
-
before :each do
|
320
|
-
@host = pqdn
|
321
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow,@host)
|
322
|
-
end
|
323
|
-
it "should match the specified PQDN" do
|
324
|
-
expect(@declaration).to be_match(@host,'200.101.99.98')
|
325
|
-
end
|
326
|
-
it "should not match a similar FQDN" do
|
327
|
-
pending "FQDN consensus"
|
328
|
-
expect(@declaration).not_to be_match(@host+'.','200.101.99.98')
|
329
|
-
end
|
330
|
-
end
|
331
|
-
}
|
332
|
-
|
333
|
-
['abc.12seps.edu.phisher.biz','www.google.com','slashdot.org'].each { |host|
|
334
|
-
(1...(host.split('.').length)).each { |n|
|
335
|
-
describe "when the pattern is #{"*."+host.split('.')[-n,n].join('.')}" do
|
336
|
-
before :each do
|
337
|
-
@pattern = "*."+host.split('.')[-n,n].join('.')
|
338
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow,@pattern)
|
339
|
-
end
|
340
|
-
it "should match #{host}" do
|
341
|
-
expect(@declaration).to be_match(host,'1.2.3.4')
|
342
|
-
end
|
343
|
-
it "should not match www.testsite.gov" do
|
344
|
-
expect(@declaration).not_to be_match('www.testsite.gov','200.101.99.98')
|
345
|
-
end
|
346
|
-
it "should not match hosts that differ in the first non-wildcard segment" do
|
347
|
-
other = host.split('.')
|
348
|
-
other[-n].succ!
|
349
|
-
expect(@declaration).not_to be_match(other.join('.'),'1.2.3.4')
|
350
|
-
end
|
351
|
-
end
|
352
|
-
}
|
353
|
-
}
|
354
|
-
|
355
|
-
describe "when the pattern is a FQDN" do
|
356
|
-
before :each do
|
357
|
-
@host = 'spirit.mars.nasa.gov.'
|
358
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow,@host)
|
359
|
-
end
|
360
|
-
it "should match the specified FQDN" do
|
361
|
-
pending "FQDN consensus"
|
362
|
-
expect(@declaration).to be_match(@host,'200.101.99.98')
|
363
|
-
end
|
364
|
-
it "should not match a similar PQDN" do
|
365
|
-
expect(@declaration).not_to be_match(@host[0..-2],'200.101.99.98')
|
366
|
-
end
|
367
|
-
end
|
368
|
-
|
369
|
-
|
370
|
-
describe "when the pattern is an opaque string with a back reference" do
|
371
|
-
before :each do
|
372
|
-
@host = 'c216f41a-f902-4bfb-a222-850dd957bebb'
|
373
|
-
@item = "/catalog/#{@host}"
|
374
|
-
@pattern = %{^/catalog/([^/]+)$}
|
375
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow,'$1')
|
376
|
-
end
|
377
|
-
it "should match an IP with the appropriate interpolation" do
|
378
|
-
expect(@declaration.interpolate(@item.match(@pattern))).to be_match(@host,'10.0.0.5')
|
379
|
-
end
|
380
|
-
end
|
381
|
-
|
382
|
-
describe "when the pattern is an opaque string with a back reference and the matched data contains dots" do
|
383
|
-
before :each do
|
384
|
-
@host = 'admin.mgmt.nym1'
|
385
|
-
@item = "/catalog/#{@host}"
|
386
|
-
@pattern = %{^/catalog/([^/]+)$}
|
387
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow,'$1')
|
388
|
-
end
|
389
|
-
it "should match a name with the appropriate interpolation" do
|
390
|
-
expect(@declaration.interpolate(@item.match(@pattern))).to be_match(@host,'10.0.0.5')
|
391
|
-
end
|
392
|
-
end
|
393
|
-
|
394
|
-
describe "when the pattern is an opaque string with a back reference and the matched data contains dots with an initial prefix that looks like an IP address" do
|
395
|
-
before :each do
|
396
|
-
@host = '01.admin.mgmt.nym1'
|
397
|
-
@item = "/catalog/#{@host}"
|
398
|
-
@pattern = %{^/catalog/([^/]+)$}
|
399
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow,'$1')
|
400
|
-
end
|
401
|
-
it "should match a name with the appropriate interpolation" do
|
402
|
-
expect(@declaration.interpolate(@item.match(@pattern))).to be_match(@host,'10.0.0.5')
|
403
|
-
end
|
404
|
-
end
|
405
|
-
|
406
|
-
describe "when comparing patterns" do
|
407
|
-
before :each do
|
408
|
-
@ip = Puppet::Network::AuthStore::Declaration.new(:allow,'127.0.0.1')
|
409
|
-
@host_name = Puppet::Network::AuthStore::Declaration.new(:allow,'www.hard_knocks.edu')
|
410
|
-
@opaque = Puppet::Network::AuthStore::Declaration.new(:allow,'hey_dude')
|
411
|
-
end
|
412
|
-
it "should consider ip addresses before host names" do
|
413
|
-
expect(@ip < @host_name).to be_truthy
|
414
|
-
end
|
415
|
-
it "should consider ip addresses before opaque strings" do
|
416
|
-
expect(@ip < @opaque).to be_truthy
|
417
|
-
end
|
418
|
-
it "should consider host_names before opaque strings" do
|
419
|
-
expect(@host_name < @opaque).to be_truthy
|
420
|
-
end
|
421
|
-
end
|
422
|
-
end
|
@@ -1,57 +0,0 @@
|
|
1
|
-
require 'spec_helper'
|
2
|
-
|
3
|
-
require 'puppet/network/http'
|
4
|
-
|
5
|
-
describe Puppet::Network::HTTP::API::Master::V3::Authorization do
|
6
|
-
let(:response) { Puppet::Network::HTTP::MemoryResponse.new }
|
7
|
-
let(:authz) { Puppet::Network::HTTP::API::Master::V3::Authorization.new }
|
8
|
-
let(:noop_handler) {
|
9
|
-
lambda do |request, response|
|
10
|
-
end
|
11
|
-
}
|
12
|
-
|
13
|
-
it "accepts v3 api requests that match allowed authconfig entries" do
|
14
|
-
request = Puppet::Network::HTTP::Request.from_hash({
|
15
|
-
:path => "/v3/environments",
|
16
|
-
:method => "GET",
|
17
|
-
:params => { :authenticated => true, :node => "testing", :ip => "127.0.0.1" }
|
18
|
-
})
|
19
|
-
|
20
|
-
allow(authz).to receive(:authconfig).and_return(Puppet::Network::AuthConfigParser.new(<<-AUTH).parse)
|
21
|
-
path /v3/environments
|
22
|
-
method find
|
23
|
-
allow *
|
24
|
-
AUTH
|
25
|
-
|
26
|
-
handler = authz.wrap do
|
27
|
-
noop_handler
|
28
|
-
end
|
29
|
-
|
30
|
-
expect do
|
31
|
-
handler.call(request, response)
|
32
|
-
end.to_not raise_error
|
33
|
-
end
|
34
|
-
|
35
|
-
it "rejects v3 api requests that are disallowed by authconfig entries" do
|
36
|
-
request = Puppet::Network::HTTP::Request.from_hash({
|
37
|
-
:path => "/v3/environments",
|
38
|
-
:method => "GET",
|
39
|
-
:params => { :authenticated => true, :node => "testing", :ip => "127.0.0.1" }
|
40
|
-
})
|
41
|
-
|
42
|
-
allow(authz).to receive(:authconfig).and_return(Puppet::Network::AuthConfigParser.new(<<-AUTH).parse)
|
43
|
-
path /v3/environments
|
44
|
-
method find
|
45
|
-
auth any
|
46
|
-
deny testing
|
47
|
-
AUTH
|
48
|
-
|
49
|
-
handler = authz.wrap do
|
50
|
-
noop_handler
|
51
|
-
end
|
52
|
-
|
53
|
-
expect do
|
54
|
-
handler.call(request, response)
|
55
|
-
end.to raise_error(Puppet::Network::HTTP::Error::HTTPNotAuthorizedError, /Forbidden request/)
|
56
|
-
end
|
57
|
-
end
|