puppet 6.19.1 → 7.0.0

data/lib/puppet/vendor/pathspec/lib/pathspec/regexspec.rb

@@ -1,17 +0,0 @@
-require 'pathspec/spec'
-
-class RegexSpec < Spec
-  def initialize(regex)
-    @regex = Regexp.compile regex
-
-    super
-  end
-
-  def inclusive?
-    true
-  end
-
-  def match(path)
-    @regex.match(path) if @regex
-  end
-end

data/lib/puppet/vendor/pathspec/lib/pathspec/spec.rb

@@ -1,14 +0,0 @@
-class Spec
-  attr_reader :regex
-
-  def initialize(*_)
-  end
-
-  def match(files)
-    raise "Unimplemented"
-  end
-
-  def inclusive?
-    true
-  end
-end

data/man/man8/puppet-key.8

@@ -1,126 +0,0 @@
-.\" generated with Ronn/v0.7.3
-.\" http://github.com/rtomayko/ronn/tree/0.7.3
-.
-.TH "PUPPET\-KEY" "8" "October 2020" "Puppet, Inc." "Puppet manual"
-.
-.SH "NAME"
-\fBpuppet\-key\fR \- Create, save, and remove certificate keys\.
-.
-.SH "SYNOPSIS"
-puppet key \fIaction\fR [\-\-terminus _TERMINUS] [\-\-extra HASH]
-.
-.SH "DESCRIPTION"
-This subcommand manages certificate private keys\. Keys are created automatically by puppet agent and when certificate requests are generated with \'puppet ssl submit_request\'; it should not be necessary to use this subcommand directly\.
-.
-.SH "OPTIONS"
-Note that any setting that\'s valid in the configuration file is also a valid long argument, although it may or may not be relevant to the present action\. For example, \fBserver\fR and \fBrun_mode\fR are valid settings, so you can specify \fB\-\-server <servername>\fR, or \fB\-\-run_mode <runmode>\fR as an argument\.
-.
-.P
-See the configuration file documentation at \fIhttps://puppet\.com/docs/puppet/latest/configuration\.html\fR for the full list of acceptable parameters\. A commented list of all configuration options can also be generated by running puppet with \fB\-\-genconfig\fR\.
-.
-.TP
-\-\-render\-as FORMAT
-The format in which to render output\. The most common formats are \fBjson\fR, \fBs\fR (string), \fByaml\fR, and \fBconsole\fR, but other options such as \fBdot\fR are sometimes available\.
-.
-.TP
-\-\-verbose
-Whether to log verbosely\.
-.
-.TP
-\-\-debug
-Whether to log debug information\.
-.
-.TP
-\-\-extra HASH
-A terminus can take additional arguments to refine the operation, which are passed as an arbitrary hash to the back\-end\. Anything passed as the extra value is just send direct to the back\-end\.
-.
-.TP
-\-\-terminus _TERMINUS
-Indirector faces expose indirected subsystems of Puppet\. These subsystems are each able to retrieve and alter a specific type of data (with the familiar actions of \fBfind\fR, \fBsearch\fR, \fBsave\fR, and \fBdestroy\fR) from an arbitrary number of pluggable backends\. In Puppet parlance, these backends are called terminuses\.
-.
-.IP
-Almost all indirected subsystems have a \fBrest\fR terminus that interacts with the puppet master\'s data\. Most of them have additional terminuses for various local data models, which are in turn used by the indirected subsystem on the puppet master whenever it receives a remote request\.
-.
-.IP
-The terminus for an action is often determined by context, but occasionally needs to be set explicitly\. See the "Notes" section of this face\'s manpage for more details\.
-.
-.SH "ACTIONS"
-.
-.TP
-\fBdestroy\fR \- Delete an object\.
-\fBSYNOPSIS\fR
-.
-.IP
-puppet key destroy [\-\-terminus _TERMINUS] [\-\-extra HASH] \fIkey\fR
-.
-.IP
-\fBDESCRIPTION\fR
-.
-.IP
-Delete an object\.
-.
-.TP
-\fBfind\fR \- Retrieve an object by name\.
-\fBSYNOPSIS\fR
-.
-.IP
-puppet key find [\-\-terminus _TERMINUS] [\-\-extra HASH] [\fIkey\fR]
-.
-.IP
-\fBDESCRIPTION\fR
-.
-.IP
-Retrieve an object by name\.
-.
-.TP
-\fBinfo\fR \- Print the default terminus class for this face\.
-\fBSYNOPSIS\fR
-.
-.IP
-puppet key info [\-\-terminus _TERMINUS] [\-\-extra HASH]
-.
-.IP
-\fBDESCRIPTION\fR
-.
-.IP
-Prints the default terminus class for this subcommand\. Note that different run modes may have different default termini; when in doubt, specify the run mode with the \'\-\-run_mode\' option\.
-.
-.TP
-\fBsave\fR \- API only: create or overwrite an object\.
-\fBSYNOPSIS\fR
-.
-.IP
-puppet key save [\-\-terminus _TERMINUS] [\-\-extra HASH] \fIkey\fR
-.
-.IP
-\fBDESCRIPTION\fR
-.
-.IP
-API only: create or overwrite an object\. As the Faces framework does not currently accept data from STDIN, save actions cannot currently be invoked from the command line\.
-.
-.TP
-\fBsearch\fR \- Search for an object or retrieve multiple objects\.
-\fBSYNOPSIS\fR
-.
-.IP
-puppet key search [\-\-terminus _TERMINUS] [\-\-extra HASH] \fIquery\fR
-.
-.IP
-\fBDESCRIPTION\fR
-.
-.IP
-Search for an object or retrieve multiple objects\.
-.
-.SH "NOTES"
-This subcommand is an indirector face, which exposes \fBfind\fR, \fBsearch\fR, \fBsave\fR, and \fBdestroy\fR actions for an indirected subsystem of Puppet\. Valid termini for this face include:
-.
-.IP "\(bu" 4
-\fBfile\fR
-.
-.IP "\(bu" 4
-\fBmemory\fR
-.
-.IP "" 0
-.
-.SH "COPYRIGHT AND LICENSE"
-Copyright 2011 by Puppet Inc\. Apache 2 license; see COPYING

data/man/man8/puppet-man.8

@@ -1,76 +0,0 @@
-.\" generated with Ronn/v0.7.3
-.\" http://github.com/rtomayko/ronn/tree/0.7.3
-.
-.TH "PUPPET\-MAN" "8" "October 2020" "Puppet, Inc." "Puppet manual"
-.
-.SH "NAME"
-\fBpuppet\-man\fR \- Display Puppet manual pages\.
-.
-.SH "SYNOPSIS"
-puppet man \fIaction\fR
-.
-.SH "DESCRIPTION"
-Please use the command \'puppet help \fIsubcommand\fR\' or the system manpage system \'man puppet\-\fIsubcommand\fR\' to display information about Puppet subcommands\. The deprecated man subcommand displays manual pages for all Puppet subcommands\. If the \fBronn\fR gem (\fIhttps://github\.com/rtomayko/ronn/\fR) is installed on your system, puppet man will display fully\-formatted man pages\. If \fBronn\fR is not available, puppet man will display the raw (but human\-readable) source text in a pager\.
-.
-.SH "OPTIONS"
-Note that any setting that\'s valid in the configuration file is also a valid long argument, although it may or may not be relevant to the present action\. For example, \fBserver\fR and \fBrun_mode\fR are valid settings, so you can specify \fB\-\-server <servername>\fR, or \fB\-\-run_mode <runmode>\fR as an argument\.
-.
-.P
-See the configuration file documentation at \fIhttps://puppet\.com/docs/puppet/latest/configuration\.html\fR for the full list of acceptable parameters\. A commented list of all configuration options can also be generated by running puppet with \fB\-\-genconfig\fR\.
-.
-.TP
-\-\-render\-as FORMAT
-The format in which to render output\. The most common formats are \fBjson\fR, \fBs\fR (string), \fByaml\fR, and \fBconsole\fR, but other options such as \fBdot\fR are sometimes available\.
-.
-.TP
-\-\-verbose
-Whether to log verbosely\.
-.
-.TP
-\-\-debug
-Whether to log debug information\.
-.
-.SH "ACTIONS"
-.
-.TP
-\fBman\fR \- Display the manual page for a Puppet subcommand\.
-\fBSYNOPSIS\fR
-.
-.IP
-puppet man \fIsubcommand\fR
-.
-.IP
-\fBDESCRIPTION\fR
-.
-.IP
-Display the manual page for a Puppet subcommand\.
-.
-.IP
-\fBRETURNS\fR
-.
-.IP
-The man data, in Markdown format, suitable for consumption by Ronn\.
-.
-.IP
-RENDERING ISSUES: To skip fancy formatting and output the raw Markdown text (e\.g\. for use in a pipeline), call this action with \'\-\-render\-as s\'\.
-.
-.SH "EXAMPLES"
-\fBman\fR
-.
-.P
-View the installed manual page for the subcommand \'config\':
-.
-.P
-$ man puppet\-config
-.
-.P
-(Deprecated) View the manual page for the subcommand \'config\':
-.
-.P
-$ puppet man config
-.
-.SH "NOTES"
-The pager used for display will be the first found of \fB$MANPAGER\fR, \fB$PAGER\fR, \fBless\fR, \fBmost\fR, or \fBmore\fR\.
-.
-.SH "COPYRIGHT AND LICENSE"
-Copyright 2011 by Puppet Inc\. Apache 2 license; see COPYING

data/man/man8/puppet-status.8

@@ -1,108 +0,0 @@
-.\" generated with Ronn/v0.7.3
-.\" http://github.com/rtomayko/ronn/tree/0.7.3
-.
-.TH "PUPPET\-STATUS" "8" "October 2020" "Puppet, Inc." "Puppet manual"
-.
-.SH "NAME"
-\fBpuppet\-status\fR \- View puppet server status\.
-.
-.SH "SYNOPSIS"
-puppet status \fIaction\fR [\-\-terminus _TERMINUS] [\-\-extra HASH]
-.
-.SH "OPTIONS"
-Note that any setting that\'s valid in the configuration file is also a valid long argument, although it may or may not be relevant to the present action\. For example, \fBserver\fR and \fBrun_mode\fR are valid settings, so you can specify \fB\-\-server <servername>\fR, or \fB\-\-run_mode <runmode>\fR as an argument\.
-.
-.P
-See the configuration file documentation at \fIhttps://puppet\.com/docs/puppet/latest/configuration\.html\fR for the full list of acceptable parameters\. A commented list of all configuration options can also be generated by running puppet with \fB\-\-genconfig\fR\.
-.
-.TP
-\-\-render\-as FORMAT
-The format in which to render output\. The most common formats are \fBjson\fR, \fBs\fR (string), \fByaml\fR, and \fBconsole\fR, but other options such as \fBdot\fR are sometimes available\.
-.
-.TP
-\-\-verbose
-Whether to log verbosely\.
-.
-.TP
-\-\-debug
-Whether to log debug information\.
-.
-.TP
-\-\-extra HASH
-A terminus can take additional arguments to refine the operation, which are passed as an arbitrary hash to the back\-end\. Anything passed as the extra value is just send direct to the back\-end\.
-.
-.TP
-\-\-terminus _TERMINUS
-Indirector faces expose indirected subsystems of Puppet\. These subsystems are each able to retrieve and alter a specific type of data (with the familiar actions of \fBfind\fR, \fBsearch\fR, \fBsave\fR, and \fBdestroy\fR) from an arbitrary number of pluggable backends\. In Puppet parlance, these backends are called terminuses\.
-.
-.IP
-Almost all indirected subsystems have a \fBrest\fR terminus that interacts with the puppet master\'s data\. Most of them have additional terminuses for various local data models, which are in turn used by the indirected subsystem on the puppet master whenever it receives a remote request\.
-.
-.IP
-The terminus for an action is often determined by context, but occasionally needs to be set explicitly\. See the "Notes" section of this face\'s manpage for more details\.
-.
-.SH "ACTIONS"
-.
-.TP
-\fBfind\fR \- Check status of puppet master server\.
-\fBSYNOPSIS\fR
-.
-.IP
-puppet status [\-\-terminus _TERMINUS] [\-\-extra HASH] [\fIkey\fR]
-.
-.IP
-\fBDESCRIPTION\fR
-.
-.IP
-Checks whether a Puppet server is properly receiving and processing HTTP requests\. This action is only useful when used with \'\-\-terminus rest\'; when invoked with the \fBlocal\fR terminus, \fBfind\fR will always return true\.
-.
-.IP
-Over REST, this action will query the configured puppet master by default\. To query other servers, including puppet agent nodes started with the \fI\-\-listen\fR option, you can set the global \fI\-\-server\fR and \fI\-\-serverport\fR options on the command line; note that agent nodes listen on port 8139\.
-.
-.IP
-\fBRETURNS\fR
-.
-.IP
-A "true" response or a low\-level connection error\. When used from the Ruby API: returns a Puppet::Status object\.
-.
-.IP
-\fBNOTES\fR
-.
-.IP
-This action requires that the server\'s \fBauth\.conf\fR file allow find access to the \fBstatus\fR REST terminus\. Puppet agent does not use this facility, and it is turned off by default\. See \fIhttps://puppet\.com/docs/puppet/latest/config_file_auth\.html\fR for more details\.
-.
-.TP
-\fBinfo\fR \- Print the default terminus class for this face\.
-\fBSYNOPSIS\fR
-.
-.IP
-puppet status info [\-\-terminus _TERMINUS] [\-\-extra HASH]
-.
-.IP
-\fBDESCRIPTION\fR
-.
-.IP
-Prints the default terminus class for this subcommand\. Note that different run modes may have different default termini; when in doubt, specify the run mode with the \'\-\-run_mode\' option\.
-.
-.SH "EXAMPLES"
-\fBfind\fR
-.
-.P
-Check the status of the configured puppet master:
-.
-.P
-$ puppet status find \-\-terminus rest
-.
-.SH "NOTES"
-This subcommand is an indirector face, which exposes \fBfind\fR, \fBsearch\fR, \fBsave\fR, and \fBdestroy\fR actions for an indirected subsystem of Puppet\. Valid termini for this face include:
-.
-.IP "\(bu" 4
-\fBlocal\fR
-.
-.IP "\(bu" 4
-\fBrest\fR
-.
-.IP "" 0
-.
-.SH "COPYRIGHT AND LICENSE"
-Copyright 2011 by Puppet Inc\. Apache 2 license; see COPYING

data/spec/integration/application/config_spec.rb

@@ -1,74 +0,0 @@
-# coding: utf-8
-require 'spec_helper'
-require 'puppet/application/config'
-
-#describe "puppet config" do
-describe Puppet::Face[:config, '0.0.1'] do
-  include PuppetSpec::Files
-
-  # different UTF-8 widths
-  # 1-byte A
-  # 2-byte ۿ - http://www.fileformat.info/info/unicode/char/06ff/index.htm - 0xDB 0xBF / 219 191
-  # 3-byte ᚠ - http://www.fileformat.info/info/unicode/char/16A0/index.htm - 0xE1 0x9A 0xA0 / 225 154 160
-  # 4-byte 𠜎 - http://www.fileformat.info/info/unicode/char/2070E/index.htm - 0xF0 0xA0 0x9C 0x8E / 240 160 156 142
-  MIXED_UTF8 = "A\u06FF\u16A0\u{2070E}" # Aۿᚠ𠜎
-
-  let(:tmp_config) { tmpfile('puppet.conf') }
-  let(:config) { Puppet::Application[:config] }
-
-  def read_utf8(path)
-    File.read(tmp_config, :encoding => 'UTF-8')
-  end
-
-  def write_utf8(path, content)
-    File.write(tmp_config, content, 0, :encoding => 'UTF-8')
-  end
-
-  it "reads a UTF-8 value" do
-    write_utf8(tmp_config, <<~EOF)
-      [main]
-      tags=#{MIXED_UTF8}
-    EOF
-
-    Puppet.initialize_settings(['--config', tmp_config])
-    config.command_line.args = ['print', 'tags' ]
-
-    expect {
-      config.run
-    }.to exit_with(0)
-     .and output("#{MIXED_UTF8}\n").to_stdout
-  end
-
-  it "sets a UTF-8 value" do
-    Puppet.initialize_settings(['--config', tmp_config])
-    config.command_line.args = ['set', 'tags', MIXED_UTF8 ]
-
-    expect {
-      config.run
-    }.to exit_with(0)
-
-    expect(read_utf8(tmp_config)).to eq(<<~EOF)
-      [main]
-      tags = #{MIXED_UTF8}
-    EOF
-  end
-
-  it "deletes a key" do
-    write_utf8(tmp_config, <<~EOF)
-      [main]
-      tags=#{MIXED_UTF8}
-    EOF
-
-    Puppet.initialize_settings(['--config', tmp_config])
-    config.command_line.args = ['delete', 'tags']
-
-    expect {
-      config.run
-    }.to exit_with(0)
-     .and output(/Deleted setting from 'main': 'tags=#{MIXED_UTF8}'/).to_stdout
-
-    expect(read_utf8(tmp_config)).to eq(<<~EOF)
-      [main]
-    EOF
-  end
-end

data/spec/integration/network/authconfig_spec.rb

@@ -1,256 +0,0 @@
-require 'spec_helper'
-
-require 'puppet/network/authconfig'
-require 'puppet/network/auth_config_parser'
-
-RSpec::Matchers.define :auth_allow do |params|
-  match do |auth|
-    begin
-      auth.check_authorization(*params)
-      true
-    rescue Puppet::Network::AuthorizationError
-      false
-    end
-  end
-
-  failure_message do |instance|
-    "expected #{params[2][:node]}/#{params[2][:ip]} to be allowed"
-  end
-
-  failure_message_when_negated do |instance|
-    "expected #{params[2][:node]}/#{params[2][:ip]} to be forbidden"
-  end
-end
-
-describe Puppet::Network::AuthConfig do
-  include PuppetSpec::Files
-
-  def add_rule(rule)
-    parser = Puppet::Network::AuthConfigParser.new(
-      "path /test\n#{rule}\n"
-    )
-    @auth = parser.parse
-  end
-
-  def add_regex_rule(regex, rule)
-    parser = Puppet::Network::AuthConfigParser.new(
-      "path ~ #{regex}\n#{rule}\n"
-    )
-    @auth = parser.parse
-  end
-
-  def add_raw_stanza(stanza)
-    parser = Puppet::Network::AuthConfigParser.new(
-      stanza
-    )
-    @auth = parser.parse
-  end
-
-  def request(args = {})
-    args = {
-      :key => 'key',
-      :node => 'host.domain.com',
-      :ip => '10.1.1.1',
-      :authenticated => true
-    }.merge(args)
-    [:find, "/test/#{args[:key]}", args]
-  end
-
-  describe "allow" do
-    it "should not match IP addresses" do
-      add_rule("allow 10.1.1.1")
-
-      expect(@auth).not_to auth_allow(request)
-    end
-
-    it "should not accept CIDR IPv4 address" do
-      expect {
-        add_rule("allow 10.0.0.0/8")
-      }.to raise_error Puppet::ConfigurationError, /Invalid pattern 10\.0\.0\.0\/8/
-    end
-
-    it "should not match wildcard IPv4 address" do
-      expect {
-        add_rule("allow 10.1.1.*")
-      }.to raise_error Puppet::ConfigurationError, /Invalid pattern 10\.1\.1\.*/
-    end
-
-    it "should not match IPv6 address" do
-      expect {
-        add_rule("allow 2001:DB8::8:800:200C:417A")
-      }.to raise_error Puppet::ConfigurationError, /Invalid pattern 2001/
-    end
-
-    it "should support hostname" do
-      add_rule("allow host.domain.com")
-
-      expect(@auth).to auth_allow(request)
-    end
-
-    it "should support wildcard host" do
-      add_rule("allow *.domain.com")
-
-      expect(@auth).to auth_allow(request)
-    end
-
-    it 'should warn about missing path before allow_ip in stanza' do
-      expect {
-        add_raw_stanza("allow_ip 10.0.0.1\n")
-      }.to raise_error Puppet::ConfigurationError, /Missing or invalid 'path' before right directive at \(line: .*\)/
-    end
-
-    it 'should warn about missing path before allow in stanza' do
-      expect {
-        add_raw_stanza("allow host.domain.com\n")
-      }.to raise_error Puppet::ConfigurationError, /Missing or invalid 'path' before right directive at \(line: .*\)/
-    end
-
-    it "should support hostname backreferences" do
-      add_regex_rule('^/test/([^/]+)$', "allow $1.domain.com")
-
-      expect(@auth).to auth_allow(request(:key => 'host'))
-    end
-
-    it "should support opaque strings" do
-      add_rule("allow this-is-opaque@or-not")
-
-      expect(@auth).to auth_allow(request(:node => 'this-is-opaque@or-not'))
-    end
-
-    it "should support opaque strings and backreferences" do
-      add_regex_rule('^/test/([^/]+)$', "allow $1")
-
-      expect(@auth).to auth_allow(request(:key => 'this-is-opaque@or-not', :node => 'this-is-opaque@or-not'))
-    end
-
-    it "should support hostname ending with '.'" do
-      pending('bug #7589')
-      add_rule("allow host.domain.com.")
-
-      expect(@auth).to auth_allow(request(:node => 'host.domain.com.'))
-    end
-
-    it "should support hostname ending with '.' and backreferences" do
-      pending('bug #7589')
-      add_regex_rule('^/test/([^/]+)$',"allow $1")
-
-      expect(@auth).to auth_allow(request(:node => 'host.domain.com.'))
-    end
-
-    it "should support trailing whitespace" do
-      add_rule('allow host.domain.com    ')
-
-      expect(@auth).to auth_allow(request)
-    end
-
-    it "should support inlined comments" do
-      add_rule('allow host.domain.com # will it work?')
-
-      expect(@auth).to auth_allow(request)
-    end
-
-    it "should deny non-matching host" do
-      add_rule("allow inexistent")
-
-      expect(@auth).not_to auth_allow(request)
-    end
-  end
-
-  describe "allow_ip" do
-    it "should not warn when matches against IP addresses fail" do
-      add_rule("allow_ip 10.1.1.2")
-
-      expect(@auth).not_to auth_allow(request)
-
-      expect(@logs).not_to be_any {|log| log.level == :warning and log.message =~ /Authentication based on IP address is deprecated/}
-    end
-
-    it "should support IPv4 address" do
-      add_rule("allow_ip 10.1.1.1")
-
-      expect(@auth).to auth_allow(request)
-    end
-
-    it "should support CIDR IPv4 address" do
-      add_rule("allow_ip 10.0.0.0/8")
-
-      expect(@auth).to auth_allow(request)
-    end
-
-    it "should support wildcard IPv4 address" do
-      add_rule("allow_ip 10.1.1.*")
-
-      expect(@auth).to auth_allow(request)
-    end
-
-    it "should support IPv6 address" do
-      add_rule("allow_ip 2001:DB8::8:800:200C:417A")
-
-      expect(@auth).to auth_allow(request(:ip => '2001:DB8::8:800:200C:417A'))
-    end
-
-    it "should support hostname" do
-      expect {
-        add_rule("allow_ip host.domain.com")
-      }.to raise_error Puppet::ConfigurationError, /Invalid IP pattern host.domain.com/
-    end
-  end
-
-  describe "deny" do
-    it "should deny denied hosts" do
-      add_rule <<-EOALLOWRULE
-        deny host.domain.com
-        allow *.domain.com
-      EOALLOWRULE
-
-      expect(@auth).not_to auth_allow(request)
-    end
-
-    it "denies denied hosts after allowing them" do
-      add_rule <<-EOALLOWRULE
-        allow *.domain.com
-        deny host.domain.com
-      EOALLOWRULE
-
-      expect(@auth).not_to auth_allow(request)
-    end
-
-    it "should not deny based on IP" do
-      add_rule <<-EOALLOWRULE
-        deny 10.1.1.1
-        allow host.domain.com
-      EOALLOWRULE
-
-      expect(@auth).to auth_allow(request)
-    end
-
-    it "should not deny based on IP (ordering #2)" do
-      add_rule <<-EOALLOWRULE
-        allow host.domain.com
-        deny 10.1.1.1
-      EOALLOWRULE
-
-      expect(@auth).to auth_allow(request)
-    end
-  end
-
-  describe "deny_ip" do
-    it "should deny based on IP" do
-      add_rule <<-EOALLOWRULE
-        deny_ip 10.1.1.1
-        allow host.domain.com
-      EOALLOWRULE
-
-      expect(@auth).not_to auth_allow(request)
-    end
-
-    it "should deny based on IP (ordering #2)" do
-      add_rule <<-EOALLOWRULE
-        allow host.domain.com
-        deny_ip 10.1.1.1
-      EOALLOWRULE
-
-      expect(@auth).not_to auth_allow(request)
-    end
-  end
-end