puppet 6.23.0 → 7.0.0

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of puppet might be problematic. Click here for more details.

Files changed (581) hide show
  1. checksums.yaml +4 -4
  2. data/CODEOWNERS +16 -2
  3. data/Gemfile +1 -3
  4. data/Gemfile.lock +34 -46
  5. data/README.md +1 -1
  6. data/conf/fileserver.conf +5 -10
  7. data/ext/build_defaults.yaml +1 -1
  8. data/ext/osx/file_mapping.yaml +0 -5
  9. data/ext/osx/puppet.plist +0 -2
  10. data/ext/project_data.yaml +1 -14
  11. data/ext/redhat/puppet.spec.erb +0 -1
  12. data/ext/windows/service/daemon.rb +6 -5
  13. data/install.rb +21 -17
  14. data/lib/puppet.rb +11 -20
  15. data/lib/puppet/application.rb +178 -108
  16. data/lib/puppet/application/agent.rb +4 -12
  17. data/lib/puppet/application/apply.rb +2 -4
  18. data/lib/puppet/application/device.rb +100 -106
  19. data/lib/puppet/application/filebucket.rb +13 -9
  20. data/lib/puppet/application/resource.rb +1 -2
  21. data/lib/puppet/application/script.rb +0 -2
  22. data/lib/puppet/application/ssl.rb +1 -12
  23. data/lib/puppet/application_support.rb +0 -7
  24. data/lib/puppet/configurer.rb +30 -45
  25. data/lib/puppet/configurer/downloader.rb +1 -2
  26. data/lib/puppet/configurer/plugin_handler.rb +21 -19
  27. data/lib/puppet/defaults.rb +100 -192
  28. data/lib/puppet/environments.rb +60 -74
  29. data/lib/puppet/face/facts.rb +5 -103
  30. data/lib/puppet/face/help.rb +1 -1
  31. data/lib/puppet/face/plugin.rb +5 -8
  32. data/lib/puppet/ffi/windows.rb +12 -0
  33. data/lib/puppet/ffi/windows/api_types.rb +311 -0
  34. data/lib/puppet/ffi/windows/constants.rb +404 -0
  35. data/lib/puppet/ffi/windows/functions.rb +628 -0
  36. data/lib/puppet/ffi/windows/structs.rb +338 -0
  37. data/lib/puppet/file_serving/configuration.rb +0 -5
  38. data/lib/puppet/file_serving/configuration/parser.rb +3 -32
  39. data/lib/puppet/file_serving/fileset.rb +2 -14
  40. data/lib/puppet/file_serving/http_metadata.rb +1 -1
  41. data/lib/puppet/file_serving/mount.rb +1 -2
  42. data/lib/puppet/file_system/memory_file.rb +1 -8
  43. data/lib/puppet/file_system/windows.rb +0 -2
  44. data/lib/puppet/forge/repository.rb +0 -1
  45. data/lib/puppet/functions/all.rb +1 -1
  46. data/lib/puppet/functions/camelcase.rb +1 -1
  47. data/lib/puppet/functions/capitalize.rb +2 -2
  48. data/lib/puppet/functions/downcase.rb +2 -2
  49. data/lib/puppet/functions/get.rb +5 -5
  50. data/lib/puppet/functions/group_by.rb +5 -13
  51. data/lib/puppet/functions/lest.rb +1 -1
  52. data/lib/puppet/functions/new.rb +100 -100
  53. data/lib/puppet/functions/partition.rb +4 -12
  54. data/lib/puppet/functions/require.rb +5 -5
  55. data/lib/puppet/functions/sort.rb +3 -3
  56. data/lib/puppet/functions/tree_each.rb +9 -7
  57. data/lib/puppet/functions/type.rb +4 -4
  58. data/lib/puppet/functions/upcase.rb +2 -2
  59. data/lib/puppet/generate/models/type/type.rb +4 -1
  60. data/lib/puppet/http.rb +22 -13
  61. data/lib/puppet/http/client.rb +164 -114
  62. data/lib/puppet/{network/resolver.rb → http/dns.rb} +2 -2
  63. data/lib/puppet/http/errors.rb +16 -0
  64. data/lib/puppet/http/external_client.rb +5 -7
  65. data/lib/puppet/{network/http → http}/factory.rb +8 -15
  66. data/lib/puppet/{network/http → http}/pool.rb +61 -26
  67. data/lib/puppet/{network/http/session.rb → http/pool_entry.rb} +2 -3
  68. data/lib/puppet/http/proxy.rb +137 -0
  69. data/lib/puppet/http/redirector.rb +4 -12
  70. data/lib/puppet/http/resolver.rb +5 -15
  71. data/lib/puppet/http/resolver/server_list.rb +10 -25
  72. data/lib/puppet/http/resolver/settings.rb +4 -7
  73. data/lib/puppet/http/resolver/srv.rb +7 -11
  74. data/lib/puppet/http/response.rb +36 -54
  75. data/lib/puppet/http/response_converter.rb +24 -0
  76. data/lib/puppet/http/response_net_http.rb +42 -0
  77. data/lib/puppet/http/retry_after_handler.rb +4 -13
  78. data/lib/puppet/http/service.rb +12 -26
  79. data/lib/puppet/http/service/ca.rb +11 -22
  80. data/lib/puppet/http/service/compiler.rb +22 -138
  81. data/lib/puppet/http/service/file_server.rb +19 -29
  82. data/lib/puppet/http/service/puppetserver.rb +26 -12
  83. data/lib/puppet/http/service/report.rb +8 -10
  84. data/lib/puppet/http/session.rb +11 -20
  85. data/lib/puppet/{network/http → http}/site.rb +1 -2
  86. data/lib/puppet/indirector/catalog/compiler.rb +0 -1
  87. data/lib/puppet/indirector/catalog/rest.rb +2 -4
  88. data/lib/puppet/indirector/facts/rest.rb +3 -22
  89. data/lib/puppet/indirector/file_bucket_file/rest.rb +3 -9
  90. data/lib/puppet/indirector/file_content/rest.rb +2 -6
  91. data/lib/puppet/indirector/file_metadata/rest.rb +3 -10
  92. data/lib/puppet/indirector/file_server.rb +1 -8
  93. data/lib/puppet/indirector/generic_http.rb +0 -11
  94. data/lib/puppet/indirector/node/rest.rb +2 -4
  95. data/lib/puppet/indirector/report/rest.rb +3 -8
  96. data/lib/puppet/indirector/request.rb +0 -101
  97. data/lib/puppet/indirector/rest.rb +12 -263
  98. data/lib/puppet/module_tool/applications.rb +0 -1
  99. data/lib/puppet/module_tool/applications/installer.rb +2 -48
  100. data/lib/puppet/module_tool/errors/shared.rb +2 -17
  101. data/lib/puppet/network/authconfig.rb +2 -96
  102. data/lib/puppet/network/authorization.rb +13 -35
  103. data/lib/puppet/network/formats.rb +0 -67
  104. data/lib/puppet/network/http.rb +3 -3
  105. data/lib/puppet/network/http/api/indirected_routes.rb +2 -20
  106. data/lib/puppet/network/http/api/master/v3.rb +11 -13
  107. data/lib/puppet/network/http/connection.rb +247 -316
  108. data/lib/puppet/network/http/handler.rb +0 -1
  109. data/lib/puppet/network/http_pool.rb +16 -34
  110. data/lib/puppet/node.rb +1 -30
  111. data/lib/puppet/pal/json_catalog_encoder.rb +4 -0
  112. data/lib/puppet/pal/pal_impl.rb +3 -1
  113. data/lib/puppet/parser/ast/leaf.rb +2 -3
  114. data/lib/puppet/parser/ast/pops_bridge.rb +0 -38
  115. data/lib/puppet/parser/compiler.rb +0 -198
  116. data/lib/puppet/parser/compiler/catalog_validator/relationship_validator.rb +14 -39
  117. data/lib/puppet/parser/functions/fqdn_rand.rb +6 -14
  118. data/lib/puppet/parser/resource.rb +0 -69
  119. data/lib/puppet/parser/templatewrapper.rb +1 -1
  120. data/lib/puppet/pops/evaluator/deferred_resolver.rb +3 -5
  121. data/lib/puppet/pops/evaluator/evaluator_impl.rb +0 -5
  122. data/lib/puppet/pops/evaluator/runtime3_resource_support.rb +3 -3
  123. data/lib/puppet/pops/evaluator/runtime3_support.rb +1 -1
  124. data/lib/puppet/pops/issues.rb +0 -5
  125. data/lib/puppet/pops/loader/ruby_legacy_function_instantiator.rb +6 -8
  126. data/lib/puppet/pops/model/ast.pp +0 -42
  127. data/lib/puppet/pops/model/ast.rb +0 -290
  128. data/lib/puppet/pops/model/ast_transformer.rb +1 -1
  129. data/lib/puppet/pops/model/factory.rb +0 -45
  130. data/lib/puppet/pops/model/model_label_provider.rb +0 -5
  131. data/lib/puppet/pops/model/model_tree_dumper.rb +0 -22
  132. data/lib/puppet/pops/model/pn_transformer.rb +0 -16
  133. data/lib/puppet/pops/parser/egrammar.ra +0 -56
  134. data/lib/puppet/pops/parser/eparser.rb +1520 -1712
  135. data/lib/puppet/pops/parser/lexer2.rb +4 -4
  136. data/lib/puppet/pops/parser/parser_support.rb +0 -5
  137. data/lib/puppet/pops/resource/resource_type_impl.rb +2 -24
  138. data/lib/puppet/pops/types/p_sem_ver_type.rb +2 -8
  139. data/lib/puppet/pops/types/p_sensitive_type.rb +0 -10
  140. data/lib/puppet/pops/types/type_calculator.rb +0 -7
  141. data/lib/puppet/pops/types/type_parser.rb +0 -4
  142. data/lib/puppet/pops/types/types.rb +0 -1
  143. data/lib/puppet/pops/validation/checker4_0.rb +9 -37
  144. data/lib/puppet/pops/validation/tasks_checker.rb +0 -12
  145. data/lib/puppet/pops/validation/validator_factory_4_0.rb +1 -2
  146. data/lib/puppet/property/list.rb +1 -1
  147. data/lib/puppet/provider.rb +0 -13
  148. data/lib/puppet/provider/group/groupadd.rb +8 -13
  149. data/lib/puppet/provider/nameservice.rb +0 -18
  150. data/lib/puppet/provider/package/apt.rb +2 -34
  151. data/lib/puppet/provider/package/aptitude.rb +0 -6
  152. data/lib/puppet/provider/package/dnfmodule.rb +1 -1
  153. data/lib/puppet/provider/package/dpkg.rb +0 -10
  154. data/lib/puppet/provider/package/gem.rb +23 -3
  155. data/lib/puppet/provider/package/nim.rb +6 -11
  156. data/lib/puppet/provider/package/pip.rb +0 -1
  157. data/lib/puppet/provider/package/pkg.rb +0 -4
  158. data/lib/puppet/provider/package/portage.rb +1 -1
  159. data/lib/puppet/provider/package/puppet_gem.rb +1 -4
  160. data/lib/puppet/provider/service/debian.rb +0 -2
  161. data/lib/puppet/provider/service/smf.rb +191 -73
  162. data/lib/puppet/provider/service/systemd.rb +4 -14
  163. data/lib/puppet/provider/service/windows.rb +0 -38
  164. data/lib/puppet/provider/user/aix.rb +2 -2
  165. data/lib/puppet/provider/user/directoryservice.rb +10 -33
  166. data/lib/puppet/provider/user/useradd.rb +8 -62
  167. data/lib/puppet/reference/configuration.rb +8 -7
  168. data/lib/puppet/reference/indirection.rb +1 -1
  169. data/lib/puppet/resource.rb +1 -89
  170. data/lib/puppet/resource/catalog.rb +1 -14
  171. data/lib/puppet/resource/type.rb +3 -119
  172. data/lib/puppet/resource/type_collection.rb +3 -48
  173. data/lib/puppet/runtime.rb +1 -2
  174. data/lib/puppet/settings.rb +73 -66
  175. data/lib/puppet/settings/environment_conf.rb +0 -1
  176. data/lib/puppet/settings/integer_setting.rb +17 -0
  177. data/lib/puppet/settings/port_setting.rb +15 -0
  178. data/lib/puppet/settings/priority_setting.rb +5 -4
  179. data/lib/puppet/ssl.rb +10 -6
  180. data/lib/puppet/ssl/base.rb +3 -5
  181. data/lib/puppet/ssl/certificate.rb +0 -6
  182. data/lib/puppet/ssl/certificate_request.rb +1 -12
  183. data/lib/puppet/ssl/certificate_signer.rb +6 -0
  184. data/lib/puppet/ssl/oids.rb +3 -1
  185. data/lib/puppet/ssl/ssl_provider.rb +17 -0
  186. data/lib/puppet/ssl/state_machine.rb +3 -1
  187. data/lib/puppet/ssl/verifier.rb +2 -0
  188. data/lib/puppet/test/test_helper.rb +1 -3
  189. data/lib/puppet/transaction.rb +1 -7
  190. data/lib/puppet/transaction/additional_resource_generator.rb +1 -1
  191. data/lib/puppet/transaction/report.rb +2 -4
  192. data/lib/puppet/type.rb +0 -76
  193. data/lib/puppet/type/file.rb +6 -26
  194. data/lib/puppet/type/file/checksum.rb +1 -1
  195. data/lib/puppet/type/file/selcontext.rb +1 -1
  196. data/lib/puppet/type/file/source.rb +1 -1
  197. data/lib/puppet/type/filebucket.rb +3 -3
  198. data/lib/puppet/type/package.rb +8 -16
  199. data/lib/puppet/type/service.rb +38 -18
  200. data/lib/puppet/type/tidy.rb +2 -21
  201. data/lib/puppet/type/user.rb +20 -38
  202. data/lib/puppet/util/autoload.rb +8 -1
  203. data/lib/puppet/util/execution.rb +0 -11
  204. data/lib/puppet/util/http_proxy.rb +2 -215
  205. data/lib/puppet/util/monkey_patches.rb +0 -53
  206. data/lib/puppet/util/posix.rb +5 -54
  207. data/lib/puppet/util/rdoc.rb +0 -7
  208. data/lib/puppet/util/retry_action.rb +1 -1
  209. data/lib/puppet/util/run_mode.rb +9 -1
  210. data/lib/puppet/util/selinux.rb +4 -30
  211. data/lib/puppet/util/windows.rb +3 -8
  212. data/lib/puppet/util/windows/adsi.rb +0 -46
  213. data/lib/puppet/util/windows/daemon.rb +360 -0
  214. data/lib/puppet/util/windows/error.rb +1 -0
  215. data/lib/puppet/util/windows/eventlog.rb +4 -9
  216. data/lib/puppet/util/windows/file.rb +8 -242
  217. data/lib/puppet/util/windows/monkey_patches/process.rb +414 -0
  218. data/lib/puppet/util/windows/principal.rb +2 -9
  219. data/lib/puppet/util/windows/process.rb +4 -226
  220. data/lib/puppet/util/windows/service.rb +9 -460
  221. data/lib/puppet/util/windows/sid.rb +2 -4
  222. data/lib/puppet/util/windows/string.rb +12 -13
  223. data/lib/puppet/util/yaml.rb +0 -22
  224. data/lib/puppet/vendor/require_vendored.rb +0 -1
  225. data/lib/puppet/version.rb +1 -1
  226. data/lib/puppet/x509.rb +5 -1
  227. data/lib/puppet/x509/cert_provider.rb +29 -1
  228. data/locales/puppet.pot +651 -1436
  229. data/man/man5/puppet.conf.5 +266 -354
  230. data/man/man8/puppet-agent.8 +2 -2
  231. data/man/man8/puppet-apply.8 +2 -2
  232. data/man/man8/puppet-catalog.8 +1 -1
  233. data/man/man8/puppet-config.8 +1 -1
  234. data/man/man8/puppet-describe.8 +1 -1
  235. data/man/man8/puppet-device.8 +2 -2
  236. data/man/man8/puppet-doc.8 +1 -1
  237. data/man/man8/puppet-epp.8 +1 -1
  238. data/man/man8/puppet-facts.8 +4 -47
  239. data/man/man8/puppet-filebucket.8 +4 -4
  240. data/man/man8/puppet-generate.8 +1 -1
  241. data/man/man8/puppet-help.8 +1 -1
  242. data/man/man8/puppet-lookup.8 +1 -1
  243. data/man/man8/puppet-module.8 +1 -58
  244. data/man/man8/puppet-node.8 +1 -1
  245. data/man/man8/puppet-parser.8 +1 -1
  246. data/man/man8/puppet-plugin.8 +1 -1
  247. data/man/man8/puppet-report.8 +1 -1
  248. data/man/man8/puppet-resource.8 +1 -1
  249. data/man/man8/puppet-script.8 +2 -2
  250. data/man/man8/puppet-ssl.8 +1 -5
  251. data/man/man8/puppet.8 +2 -2
  252. data/spec/fixtures/ssl/127.0.0.1-key.pem +57 -107
  253. data/spec/fixtures/ssl/127.0.0.1.pem +31 -52
  254. data/spec/fixtures/ssl/bad-basic-constraints.pem +35 -57
  255. data/spec/fixtures/ssl/bad-int-basic-constraints.pem +35 -57
  256. data/spec/fixtures/ssl/ca.pem +35 -57
  257. data/spec/fixtures/ssl/crl.pem +18 -28
  258. data/spec/fixtures/ssl/ec-key.pem +11 -11
  259. data/spec/fixtures/ssl/ec.pem +24 -33
  260. data/spec/fixtures/ssl/encrypted-ec-key.pem +12 -12
  261. data/spec/fixtures/ssl/encrypted-key.pem +58 -108
  262. data/spec/fixtures/ssl/intermediate-agent-crl.pem +19 -28
  263. data/spec/fixtures/ssl/intermediate-agent.pem +36 -57
  264. data/spec/fixtures/ssl/intermediate-crl.pem +21 -31
  265. data/spec/fixtures/ssl/intermediate.pem +36 -57
  266. data/spec/fixtures/ssl/pluto-key.pem +57 -107
  267. data/spec/fixtures/ssl/pluto.pem +30 -52
  268. data/spec/fixtures/ssl/request-key.pem +57 -107
  269. data/spec/fixtures/ssl/request.pem +26 -47
  270. data/spec/fixtures/ssl/revoked-key.pem +57 -107
  271. data/spec/fixtures/ssl/revoked.pem +30 -52
  272. data/spec/fixtures/ssl/signed-key.pem +57 -107
  273. data/spec/fixtures/ssl/signed.pem +30 -52
  274. data/spec/fixtures/ssl/tampered-cert.pem +30 -52
  275. data/spec/fixtures/ssl/tampered-csr.pem +26 -47
  276. data/spec/fixtures/ssl/unknown-127.0.0.1-key.pem +57 -107
  277. data/spec/fixtures/ssl/unknown-127.0.0.1.pem +29 -50
  278. data/spec/fixtures/ssl/unknown-ca-key.pem +57 -107
  279. data/spec/fixtures/ssl/unknown-ca.pem +33 -55
  280. data/spec/fixtures/unit/provider/service/smf/{svcs.out → svcs_instances.out} +0 -0
  281. data/spec/fixtures/unit/provider/user/aix/aix_passwd_file.out +0 -4
  282. data/spec/integration/application/agent_spec.rb +27 -171
  283. data/spec/integration/application/apply_spec.rb +1 -20
  284. data/spec/integration/application/filebucket_spec.rb +16 -16
  285. data/spec/integration/application/help_spec.rb +2 -0
  286. data/spec/integration/application/plugin_spec.rb +24 -2
  287. data/spec/integration/defaults_spec.rb +14 -3
  288. data/spec/integration/http/client_spec.rb +0 -12
  289. data/spec/integration/indirector/direct_file_server_spec.rb +3 -1
  290. data/spec/integration/network/http_pool_spec.rb +3 -21
  291. data/spec/integration/parser/catalog_spec.rb +0 -38
  292. data/spec/integration/parser/node_spec.rb +0 -9
  293. data/spec/integration/parser/pcore_resource_spec.rb +0 -37
  294. data/spec/integration/resource/type_collection_spec.rb +6 -2
  295. data/spec/integration/transaction_spec.rb +9 -4
  296. data/spec/integration/type/file_spec.rb +5 -4
  297. data/spec/integration/util/windows/adsi_spec.rb +1 -21
  298. data/spec/integration/util/windows/monkey_patches/process_spec.rb +231 -0
  299. data/spec/integration/util/windows/principal_spec.rb +0 -21
  300. data/spec/integration/util/windows/registry_spec.rb +10 -6
  301. data/spec/integration/util/windows/security_spec.rb +1 -1
  302. data/spec/lib/matchers/include.rb +27 -0
  303. data/spec/lib/matchers/include_spec.rb +32 -0
  304. data/spec/lib/puppet/test_ca.rb +2 -2
  305. data/spec/lib/puppet_spec/puppetserver.rb +1 -1
  306. data/spec/lib/puppet_spec/settings.rb +1 -0
  307. data/spec/spec_helper.rb +7 -12
  308. data/spec/unit/agent_spec.rb +6 -10
  309. data/spec/unit/application/agent_spec.rb +3 -7
  310. data/spec/unit/application/facts_spec.rb +12 -456
  311. data/spec/unit/application/filebucket_spec.rb +43 -39
  312. data/spec/unit/application/ssl_spec.rb +2 -25
  313. data/spec/unit/application_spec.rb +9 -51
  314. data/spec/unit/certificate_factory_spec.rb +1 -1
  315. data/spec/unit/configurer/downloader_spec.rb +6 -8
  316. data/spec/unit/configurer/plugin_handler_spec.rb +56 -18
  317. data/spec/unit/configurer_spec.rb +12 -32
  318. data/spec/unit/confine/feature_spec.rb +1 -1
  319. data/spec/unit/confine_spec.rb +2 -8
  320. data/spec/unit/context/trusted_information_spec.rb +2 -6
  321. data/spec/unit/defaults_spec.rb +68 -54
  322. data/spec/unit/environments_spec.rb +68 -224
  323. data/spec/unit/face/node_spec.rb +11 -0
  324. data/spec/unit/face/plugin_spec.rb +73 -33
  325. data/spec/unit/file_bucket/file_spec.rb +1 -1
  326. data/spec/unit/file_serving/configuration/parser_spec.rb +15 -18
  327. data/spec/unit/file_serving/configuration_spec.rb +6 -12
  328. data/spec/unit/file_serving/fileset_spec.rb +0 -60
  329. data/spec/unit/file_serving/metadata_spec.rb +3 -3
  330. data/spec/unit/file_serving/terminus_helper_spec.rb +4 -11
  331. data/spec/unit/file_system_spec.rb +0 -9
  332. data/spec/unit/forge/module_release_spec.rb +7 -2
  333. data/spec/unit/functions/camelcase_spec.rb +1 -1
  334. data/spec/unit/functions/capitalize_spec.rb +1 -1
  335. data/spec/unit/functions/downcase_spec.rb +1 -1
  336. data/spec/unit/functions/upcase_spec.rb +1 -1
  337. data/spec/unit/gettext/config_spec.rb +0 -12
  338. data/spec/unit/http/client_spec.rb +7 -8
  339. data/spec/unit/{network/resolver_spec.rb → http/dns_spec.rb} +3 -3
  340. data/spec/unit/http/external_client_spec.rb +4 -4
  341. data/spec/unit/{network/http → http}/factory_spec.rb +5 -30
  342. data/spec/unit/{network/http/session_spec.rb → http/pool_entry_spec.rb} +3 -3
  343. data/spec/unit/{network/http → http}/pool_spec.rb +12 -17
  344. data/spec/unit/{util/http_proxy_spec.rb → http/proxy_spec.rb} +2 -69
  345. data/spec/unit/http/resolver_spec.rb +13 -13
  346. data/spec/unit/http/service/compiler_spec.rb +0 -185
  347. data/spec/unit/http/service/file_server_spec.rb +3 -3
  348. data/spec/unit/http/service/puppetserver_spec.rb +34 -4
  349. data/spec/unit/http/service_spec.rb +0 -1
  350. data/spec/unit/http/session_spec.rb +16 -14
  351. data/spec/unit/{network/http → http}/site_spec.rb +3 -3
  352. data/spec/unit/indirector/catalog/compiler_spec.rb +10 -14
  353. data/spec/unit/indirector/face_spec.rb +1 -0
  354. data/spec/unit/indirector/facts/facter_spec.rb +3 -0
  355. data/spec/unit/indirector/file_bucket_file/file_spec.rb +5 -3
  356. data/spec/unit/indirector/file_bucket_file/selector_spec.rb +8 -26
  357. data/spec/unit/indirector/file_content/rest_spec.rb +0 -4
  358. data/spec/unit/indirector/file_metadata/rest_spec.rb +0 -4
  359. data/spec/unit/indirector/file_server_spec.rb +1 -15
  360. data/spec/unit/indirector/indirection_spec.rb +12 -8
  361. data/spec/unit/indirector/report/rest_spec.rb +2 -17
  362. data/spec/unit/indirector/request_spec.rb +0 -264
  363. data/spec/unit/indirector/rest_spec.rb +98 -752
  364. data/spec/unit/indirector_spec.rb +2 -2
  365. data/spec/unit/module_tool/applications/installer_spec.rb +0 -66
  366. data/spec/unit/network/authconfig_spec.rb +2 -129
  367. data/spec/unit/network/authorization_spec.rb +2 -55
  368. data/spec/unit/network/formats_spec.rb +4 -45
  369. data/spec/unit/network/http/api/indirected_routes_spec.rb +5 -92
  370. data/spec/unit/network/http/api/master/v3_spec.rb +28 -7
  371. data/spec/unit/network/http/api_spec.rb +10 -0
  372. data/spec/unit/network/http/connection_spec.rb +19 -41
  373. data/spec/unit/network/http/handler_spec.rb +0 -1
  374. data/spec/unit/network/http_pool_spec.rb +0 -4
  375. data/spec/unit/node/environment_spec.rb +33 -21
  376. data/spec/unit/node_spec.rb +2 -54
  377. data/spec/unit/parser/compiler_spec.rb +19 -3
  378. data/spec/unit/parser/functions/create_resources_spec.rb +2 -20
  379. data/spec/unit/parser/functions/fqdn_rand_spec.rb +1 -15
  380. data/spec/unit/parser/resource_spec.rb +8 -14
  381. data/spec/unit/parser/templatewrapper_spec.rb +3 -4
  382. data/spec/unit/pops/evaluator/evaluating_parser_spec.rb +4 -7
  383. data/spec/unit/pops/loaders/loaders_spec.rb +6 -21
  384. data/spec/unit/pops/parser/parse_application_spec.rb +4 -22
  385. data/spec/unit/pops/parser/parse_basic_expressions_spec.rb +0 -1
  386. data/spec/unit/pops/parser/parse_capabilities_spec.rb +8 -21
  387. data/spec/unit/pops/parser/parse_site_spec.rb +20 -24
  388. data/spec/unit/pops/resource/resource_type_impl_spec.rb +0 -71
  389. data/spec/unit/pops/serialization/to_from_hr_spec.rb +1 -1
  390. data/spec/unit/pops/types/p_sem_ver_type_spec.rb +0 -18
  391. data/spec/unit/pops/types/p_sensitive_type_spec.rb +0 -18
  392. data/spec/unit/pops/types/type_calculator_spec.rb +6 -6
  393. data/spec/unit/pops/types/type_factory_spec.rb +1 -1
  394. data/spec/unit/pops/validator/validator_spec.rb +61 -46
  395. data/spec/unit/pops/visitor_spec.rb +1 -1
  396. data/spec/unit/property_spec.rb +0 -1
  397. data/spec/unit/provider/group/groupadd_spec.rb +2 -5
  398. data/spec/unit/provider/nameservice_spec.rb +64 -122
  399. data/spec/unit/provider/package/apt_spec.rb +23 -28
  400. data/spec/unit/provider/package/aptitude_spec.rb +1 -1
  401. data/spec/unit/provider/package/base_spec.rb +5 -6
  402. data/spec/unit/provider/package/dnfmodule_spec.rb +1 -10
  403. data/spec/unit/provider/package/dpkg_spec.rb +0 -48
  404. data/spec/unit/provider/package/gem_spec.rb +32 -0
  405. data/spec/unit/provider/package/nim_spec.rb +0 -42
  406. data/spec/unit/provider/package/pacman_spec.rb +12 -18
  407. data/spec/unit/provider/package/pip_spec.rb +11 -6
  408. data/spec/unit/provider/package/pkgdmg_spec.rb +4 -0
  409. data/spec/unit/provider/package/puppet_gem_spec.rb +3 -2
  410. data/spec/unit/provider/service/init_spec.rb +0 -1
  411. data/spec/unit/provider/service/openwrt_spec.rb +1 -3
  412. data/spec/unit/provider/service/smf_spec.rb +401 -165
  413. data/spec/unit/provider/service/systemd_spec.rb +8 -53
  414. data/spec/unit/provider/service/windows_spec.rb +0 -203
  415. data/spec/unit/provider/user/aix_spec.rb +0 -5
  416. data/spec/unit/provider/user/directoryservice_spec.rb +35 -67
  417. data/spec/unit/provider/user/hpux_spec.rb +1 -1
  418. data/spec/unit/provider/user/pw_spec.rb +0 -2
  419. data/spec/unit/provider/user/useradd_spec.rb +3 -71
  420. data/spec/unit/provider_spec.rb +8 -18
  421. data/spec/unit/resource/catalog_spec.rb +1 -1
  422. data/spec/unit/resource/type_collection_spec.rb +2 -22
  423. data/spec/unit/resource/type_spec.rb +1 -1
  424. data/spec/unit/resource_spec.rb +10 -67
  425. data/spec/unit/settings/http_extra_headers_spec.rb +2 -4
  426. data/spec/unit/settings/integer_setting_spec.rb +42 -0
  427. data/spec/unit/settings/port_setting_spec.rb +31 -0
  428. data/spec/unit/settings/priority_setting_spec.rb +4 -4
  429. data/spec/unit/settings_spec.rb +23 -13
  430. data/spec/unit/ssl/base_spec.rb +37 -3
  431. data/spec/unit/ssl/certificate_request_spec.rb +15 -45
  432. data/spec/unit/ssl/certificate_spec.rb +2 -11
  433. data/spec/unit/ssl/ssl_provider_spec.rb +2 -5
  434. data/spec/unit/ssl/state_machine_spec.rb +5 -20
  435. data/spec/unit/ssl/verifier_spec.rb +0 -21
  436. data/spec/unit/transaction/additional_resource_generator_spec.rb +9 -3
  437. data/spec/unit/transaction/event_manager_spec.rb +11 -14
  438. data/spec/unit/transaction/report_spec.rb +0 -2
  439. data/spec/unit/transaction/resource_harness_spec.rb +2 -2
  440. data/spec/unit/transaction_spec.rb +55 -96
  441. data/spec/unit/type/file/checksum_spec.rb +6 -6
  442. data/spec/unit/type/file/content_spec.rb +2 -1
  443. data/spec/unit/type/file/ensure_spec.rb +1 -1
  444. data/spec/unit/type/file/mode_spec.rb +1 -1
  445. data/spec/unit/type/file/selinux_spec.rb +5 -3
  446. data/spec/unit/type/file/source_spec.rb +0 -1
  447. data/spec/unit/type/file_spec.rb +18 -6
  448. data/spec/unit/type/group_spec.rb +6 -13
  449. data/spec/unit/type/package_spec.rb +1 -1
  450. data/spec/unit/type/resources_spec.rb +7 -7
  451. data/spec/unit/type/service_spec.rb +189 -60
  452. data/spec/unit/type/tidy_spec.rb +8 -17
  453. data/spec/unit/type/user_spec.rb +0 -45
  454. data/spec/unit/type_spec.rb +22 -2
  455. data/spec/unit/util/at_fork_spec.rb +2 -2
  456. data/spec/unit/util/autoload_spec.rb +1 -5
  457. data/spec/unit/util/backups_spec.rb +2 -3
  458. data/spec/unit/util/execution_spec.rb +11 -44
  459. data/spec/unit/util/inifile_spec.rb +14 -6
  460. data/spec/unit/util/log_spec.rb +7 -8
  461. data/spec/unit/util/logging_spec.rb +3 -3
  462. data/spec/unit/util/monkey_patches_spec.rb +0 -6
  463. data/spec/unit/util/posix_spec.rb +15 -363
  464. data/spec/unit/util/run_mode_spec.rb +21 -121
  465. data/spec/unit/util/selinux_spec.rb +68 -163
  466. data/spec/unit/util/storage_spec.rb +1 -3
  467. data/spec/unit/util/suidmanager_spec.rb +41 -44
  468. data/spec/unit/util/windows/sid_spec.rb +0 -6
  469. data/spec/unit/util/windows/string_spec.rb +1 -3
  470. data/spec/unit/util/yaml_spec.rb +0 -54
  471. data/spec/unit/util_spec.rb +6 -31
  472. data/tasks/generate_cert_fixtures.rake +2 -2
  473. metadata +44 -181
  474. data/conf/auth.conf +0 -150
  475. data/lib/puppet/application/cert.rb +0 -76
  476. data/lib/puppet/application/key.rb +0 -4
  477. data/lib/puppet/application/man.rb +0 -4
  478. data/lib/puppet/application/status.rb +0 -4
  479. data/lib/puppet/face/key.rb +0 -16
  480. data/lib/puppet/face/man.rb +0 -145
  481. data/lib/puppet/face/module/build.rb +0 -14
  482. data/lib/puppet/face/module/generate.rb +0 -14
  483. data/lib/puppet/face/module/search.rb +0 -103
  484. data/lib/puppet/face/status.rb +0 -51
  485. data/lib/puppet/ffi/posix.rb +0 -10
  486. data/lib/puppet/ffi/posix/constants.rb +0 -14
  487. data/lib/puppet/ffi/posix/functions.rb +0 -24
  488. data/lib/puppet/indirector/certificate/file.rb +0 -9
  489. data/lib/puppet/indirector/certificate/rest.rb +0 -18
  490. data/lib/puppet/indirector/certificate_request/file.rb +0 -9
  491. data/lib/puppet/indirector/certificate_request/memory.rb +0 -7
  492. data/lib/puppet/indirector/certificate_request/rest.rb +0 -11
  493. data/lib/puppet/indirector/file_content/http.rb +0 -22
  494. data/lib/puppet/indirector/key/file.rb +0 -46
  495. data/lib/puppet/indirector/key/memory.rb +0 -7
  496. data/lib/puppet/indirector/ssl_file.rb +0 -162
  497. data/lib/puppet/indirector/status.rb +0 -3
  498. data/lib/puppet/indirector/status/local.rb +0 -12
  499. data/lib/puppet/indirector/status/rest.rb +0 -27
  500. data/lib/puppet/module_tool/applications/searcher.rb +0 -29
  501. data/lib/puppet/network/auth_config_parser.rb +0 -90
  502. data/lib/puppet/network/authstore.rb +0 -283
  503. data/lib/puppet/network/http/api/master/v3/authorization.rb +0 -18
  504. data/lib/puppet/network/http/api/master/v3/environment.rb +0 -88
  505. data/lib/puppet/network/http/base_pool.rb +0 -36
  506. data/lib/puppet/network/http/compression.rb +0 -127
  507. data/lib/puppet/network/http/connection_adapter.rb +0 -184
  508. data/lib/puppet/network/http/nocache_pool.rb +0 -28
  509. data/lib/puppet/network/rest_controller.rb +0 -2
  510. data/lib/puppet/network/rights.rb +0 -210
  511. data/lib/puppet/parser/compiler/catalog_validator/env_relationship_validator.rb +0 -66
  512. data/lib/puppet/parser/compiler/catalog_validator/site_validator.rb +0 -22
  513. data/lib/puppet/parser/environment_compiler.rb +0 -202
  514. data/lib/puppet/pops/types/enumeration.rb +0 -16
  515. data/lib/puppet/resource/capability_finder.rb +0 -154
  516. data/lib/puppet/rest/errors.rb +0 -15
  517. data/lib/puppet/rest/response.rb +0 -35
  518. data/lib/puppet/rest/route.rb +0 -85
  519. data/lib/puppet/rest/routes.rb +0 -135
  520. data/lib/puppet/settings/alias_setting.rb +0 -37
  521. data/lib/puppet/ssl/host.rb +0 -505
  522. data/lib/puppet/ssl/key.rb +0 -61
  523. data/lib/puppet/ssl/validator.rb +0 -61
  524. data/lib/puppet/ssl/validator/default_validator.rb +0 -209
  525. data/lib/puppet/ssl/validator/no_validator.rb +0 -22
  526. data/lib/puppet/ssl/verifier_adapter.rb +0 -58
  527. data/lib/puppet/status.rb +0 -40
  528. data/lib/puppet/util/connection.rb +0 -88
  529. data/lib/puppet/util/fact_dif.rb +0 -81
  530. data/lib/puppet/util/ssl.rb +0 -83
  531. data/lib/puppet/util/windows/api_types.rb +0 -309
  532. data/lib/puppet/util/windows/monkey_patches/dir.rb +0 -40
  533. data/lib/puppet/vendor/load_pathspec.rb +0 -1
  534. data/lib/puppet/vendor/pathspec/CHANGELOG.md +0 -2
  535. data/lib/puppet/vendor/pathspec/LICENSE +0 -201
  536. data/lib/puppet/vendor/pathspec/PUPPET_README.md +0 -6
  537. data/lib/puppet/vendor/pathspec/README.md +0 -53
  538. data/lib/puppet/vendor/pathspec/lib/pathspec.rb +0 -122
  539. data/lib/puppet/vendor/pathspec/lib/pathspec/gitignorespec.rb +0 -275
  540. data/lib/puppet/vendor/pathspec/lib/pathspec/regexspec.rb +0 -17
  541. data/lib/puppet/vendor/pathspec/lib/pathspec/spec.rb +0 -14
  542. data/man/man8/puppet-key.8 +0 -126
  543. data/man/man8/puppet-man.8 +0 -76
  544. data/man/man8/puppet-status.8 +0 -108
  545. data/spec/fixtures/integration/application/agent/cached_deferred_catalog.json +0 -91
  546. data/spec/fixtures/unit/provider/service/systemd/list_unit_files_services_vendor_preset +0 -9
  547. data/spec/integration/application/resource_spec.rb +0 -30
  548. data/spec/integration/network/authconfig_spec.rb +0 -256
  549. data/spec/integration/util/windows/monkey_patches/dir_spec.rb +0 -11
  550. data/spec/unit/application/man_spec.rb +0 -52
  551. data/spec/unit/capability_spec.rb +0 -414
  552. data/spec/unit/face/key_spec.rb +0 -9
  553. data/spec/unit/face/module/search_spec.rb +0 -231
  554. data/spec/unit/face/status_spec.rb +0 -9
  555. data/spec/unit/indirector/certificate/file_spec.rb +0 -14
  556. data/spec/unit/indirector/certificate/rest_spec.rb +0 -61
  557. data/spec/unit/indirector/certificate_request/file_spec.rb +0 -14
  558. data/spec/unit/indirector/certificate_request/rest_spec.rb +0 -25
  559. data/spec/unit/indirector/key/file_spec.rb +0 -78
  560. data/spec/unit/indirector/ssl_file_spec.rb +0 -305
  561. data/spec/unit/indirector/status/local_spec.rb +0 -10
  562. data/spec/unit/indirector/status/rest_spec.rb +0 -50
  563. data/spec/unit/module_tool/applications/searcher_spec.rb +0 -38
  564. data/spec/unit/network/auth_config_parser_spec.rb +0 -115
  565. data/spec/unit/network/authstore_spec.rb +0 -422
  566. data/spec/unit/network/http/api/master/v3/authorization_spec.rb +0 -57
  567. data/spec/unit/network/http/api/master/v3/environment_spec.rb +0 -185
  568. data/spec/unit/network/http/compression_spec.rb +0 -240
  569. data/spec/unit/network/http/nocache_pool_spec.rb +0 -64
  570. data/spec/unit/network/http_spec.rb +0 -9
  571. data/spec/unit/network/rights_spec.rb +0 -439
  572. data/spec/unit/parser/environment_compiler_spec.rb +0 -730
  573. data/spec/unit/pops/evaluator/deferred_resolver_spec.rb +0 -20
  574. data/spec/unit/pops/types/enumeration_spec.rb +0 -51
  575. data/spec/unit/resource/capability_finder_spec.rb +0 -148
  576. data/spec/unit/rest/route_spec.rb +0 -132
  577. data/spec/unit/ssl/host_spec.rb +0 -645
  578. data/spec/unit/ssl/key_spec.rb +0 -173
  579. data/spec/unit/ssl/validator_spec.rb +0 -278
  580. data/spec/unit/status_spec.rb +0 -45
  581. data/spec/unit/util/ssl_spec.rb +0 -91
@@ -1,30 +0,0 @@
1
- require 'spec_helper'
2
- require 'puppet_spec/files'
3
-
4
- describe "puppet resource", unless: Puppet::Util::Platform.jruby? do
5
- include PuppetSpec::Files
6
-
7
- let(:resource) { Puppet::Application[:resource] }
8
-
9
- describe "when handling file and tidy types" do
10
- let!(:dir) { dir_containing('testdir', 'testfile' => 'contents') }
11
-
12
- it 'does not raise when generating file resources' do
13
- resource.command_line.args = ['file', dir, 'ensure=directory', 'recurse=true']
14
-
15
- expect {
16
- resource.run
17
- }.to output(/ensure.+=> 'directory'/).to_stdout
18
- end
19
-
20
- it 'correctly cleans up a given path' do
21
- resource.command_line.args = ['tidy', dir, 'rmdirs=true', 'recurse=true']
22
-
23
- expect {
24
- resource.run
25
- }.to output(/Notice: \/File\[#{dir}\]\/ensure: removed/).to_stdout
26
-
27
- expect(Puppet::FileSystem.exist?(dir)).to be false
28
- end
29
- end
30
- end
@@ -1,256 +0,0 @@
1
- require 'spec_helper'
2
-
3
- require 'puppet/network/authconfig'
4
- require 'puppet/network/auth_config_parser'
5
-
6
- RSpec::Matchers.define :auth_allow do |params|
7
- match do |auth|
8
- begin
9
- auth.check_authorization(*params)
10
- true
11
- rescue Puppet::Network::AuthorizationError
12
- false
13
- end
14
- end
15
-
16
- failure_message do |instance|
17
- "expected #{params[2][:node]}/#{params[2][:ip]} to be allowed"
18
- end
19
-
20
- failure_message_when_negated do |instance|
21
- "expected #{params[2][:node]}/#{params[2][:ip]} to be forbidden"
22
- end
23
- end
24
-
25
- describe Puppet::Network::AuthConfig do
26
- include PuppetSpec::Files
27
-
28
- def add_rule(rule)
29
- parser = Puppet::Network::AuthConfigParser.new(
30
- "path /test\n#{rule}\n"
31
- )
32
- @auth = parser.parse
33
- end
34
-
35
- def add_regex_rule(regex, rule)
36
- parser = Puppet::Network::AuthConfigParser.new(
37
- "path ~ #{regex}\n#{rule}\n"
38
- )
39
- @auth = parser.parse
40
- end
41
-
42
- def add_raw_stanza(stanza)
43
- parser = Puppet::Network::AuthConfigParser.new(
44
- stanza
45
- )
46
- @auth = parser.parse
47
- end
48
-
49
- def request(args = {})
50
- args = {
51
- :key => 'key',
52
- :node => 'host.domain.com',
53
- :ip => '10.1.1.1',
54
- :authenticated => true
55
- }.merge(args)
56
- [:find, "/test/#{args[:key]}", args]
57
- end
58
-
59
- describe "allow" do
60
- it "should not match IP addresses" do
61
- add_rule("allow 10.1.1.1")
62
-
63
- expect(@auth).not_to auth_allow(request)
64
- end
65
-
66
- it "should not accept CIDR IPv4 address" do
67
- expect {
68
- add_rule("allow 10.0.0.0/8")
69
- }.to raise_error Puppet::ConfigurationError, /Invalid pattern 10\.0\.0\.0\/8/
70
- end
71
-
72
- it "should not match wildcard IPv4 address" do
73
- expect {
74
- add_rule("allow 10.1.1.*")
75
- }.to raise_error Puppet::ConfigurationError, /Invalid pattern 10\.1\.1\.*/
76
- end
77
-
78
- it "should not match IPv6 address" do
79
- expect {
80
- add_rule("allow 2001:DB8::8:800:200C:417A")
81
- }.to raise_error Puppet::ConfigurationError, /Invalid pattern 2001/
82
- end
83
-
84
- it "should support hostname" do
85
- add_rule("allow host.domain.com")
86
-
87
- expect(@auth).to auth_allow(request)
88
- end
89
-
90
- it "should support wildcard host" do
91
- add_rule("allow *.domain.com")
92
-
93
- expect(@auth).to auth_allow(request)
94
- end
95
-
96
- it 'should warn about missing path before allow_ip in stanza' do
97
- expect {
98
- add_raw_stanza("allow_ip 10.0.0.1\n")
99
- }.to raise_error Puppet::ConfigurationError, /Missing or invalid 'path' before right directive at \(line: .*\)/
100
- end
101
-
102
- it 'should warn about missing path before allow in stanza' do
103
- expect {
104
- add_raw_stanza("allow host.domain.com\n")
105
- }.to raise_error Puppet::ConfigurationError, /Missing or invalid 'path' before right directive at \(line: .*\)/
106
- end
107
-
108
- it "should support hostname backreferences" do
109
- add_regex_rule('^/test/([^/]+)$', "allow $1.domain.com")
110
-
111
- expect(@auth).to auth_allow(request(:key => 'host'))
112
- end
113
-
114
- it "should support opaque strings" do
115
- add_rule("allow this-is-opaque@or-not")
116
-
117
- expect(@auth).to auth_allow(request(:node => 'this-is-opaque@or-not'))
118
- end
119
-
120
- it "should support opaque strings and backreferences" do
121
- add_regex_rule('^/test/([^/]+)$', "allow $1")
122
-
123
- expect(@auth).to auth_allow(request(:key => 'this-is-opaque@or-not', :node => 'this-is-opaque@or-not'))
124
- end
125
-
126
- it "should support hostname ending with '.'" do
127
- pending('bug #7589')
128
- add_rule("allow host.domain.com.")
129
-
130
- expect(@auth).to auth_allow(request(:node => 'host.domain.com.'))
131
- end
132
-
133
- it "should support hostname ending with '.' and backreferences" do
134
- pending('bug #7589')
135
- add_regex_rule('^/test/([^/]+)$',"allow $1")
136
-
137
- expect(@auth).to auth_allow(request(:node => 'host.domain.com.'))
138
- end
139
-
140
- it "should support trailing whitespace" do
141
- add_rule('allow host.domain.com ')
142
-
143
- expect(@auth).to auth_allow(request)
144
- end
145
-
146
- it "should support inlined comments" do
147
- add_rule('allow host.domain.com # will it work?')
148
-
149
- expect(@auth).to auth_allow(request)
150
- end
151
-
152
- it "should deny non-matching host" do
153
- add_rule("allow inexistent")
154
-
155
- expect(@auth).not_to auth_allow(request)
156
- end
157
- end
158
-
159
- describe "allow_ip" do
160
- it "should not warn when matches against IP addresses fail" do
161
- add_rule("allow_ip 10.1.1.2")
162
-
163
- expect(@auth).not_to auth_allow(request)
164
-
165
- expect(@logs).not_to be_any {|log| log.level == :warning and log.message =~ /Authentication based on IP address is deprecated/}
166
- end
167
-
168
- it "should support IPv4 address" do
169
- add_rule("allow_ip 10.1.1.1")
170
-
171
- expect(@auth).to auth_allow(request)
172
- end
173
-
174
- it "should support CIDR IPv4 address" do
175
- add_rule("allow_ip 10.0.0.0/8")
176
-
177
- expect(@auth).to auth_allow(request)
178
- end
179
-
180
- it "should support wildcard IPv4 address" do
181
- add_rule("allow_ip 10.1.1.*")
182
-
183
- expect(@auth).to auth_allow(request)
184
- end
185
-
186
- it "should support IPv6 address" do
187
- add_rule("allow_ip 2001:DB8::8:800:200C:417A")
188
-
189
- expect(@auth).to auth_allow(request(:ip => '2001:DB8::8:800:200C:417A'))
190
- end
191
-
192
- it "should support hostname" do
193
- expect {
194
- add_rule("allow_ip host.domain.com")
195
- }.to raise_error Puppet::ConfigurationError, /Invalid IP pattern host.domain.com/
196
- end
197
- end
198
-
199
- describe "deny" do
200
- it "should deny denied hosts" do
201
- add_rule <<-EOALLOWRULE
202
- deny host.domain.com
203
- allow *.domain.com
204
- EOALLOWRULE
205
-
206
- expect(@auth).not_to auth_allow(request)
207
- end
208
-
209
- it "denies denied hosts after allowing them" do
210
- add_rule <<-EOALLOWRULE
211
- allow *.domain.com
212
- deny host.domain.com
213
- EOALLOWRULE
214
-
215
- expect(@auth).not_to auth_allow(request)
216
- end
217
-
218
- it "should not deny based on IP" do
219
- add_rule <<-EOALLOWRULE
220
- deny 10.1.1.1
221
- allow host.domain.com
222
- EOALLOWRULE
223
-
224
- expect(@auth).to auth_allow(request)
225
- end
226
-
227
- it "should not deny based on IP (ordering #2)" do
228
- add_rule <<-EOALLOWRULE
229
- allow host.domain.com
230
- deny 10.1.1.1
231
- EOALLOWRULE
232
-
233
- expect(@auth).to auth_allow(request)
234
- end
235
- end
236
-
237
- describe "deny_ip" do
238
- it "should deny based on IP" do
239
- add_rule <<-EOALLOWRULE
240
- deny_ip 10.1.1.1
241
- allow host.domain.com
242
- EOALLOWRULE
243
-
244
- expect(@auth).not_to auth_allow(request)
245
- end
246
-
247
- it "should deny based on IP (ordering #2)" do
248
- add_rule <<-EOALLOWRULE
249
- allow host.domain.com
250
- deny_ip 10.1.1.1
251
- EOALLOWRULE
252
-
253
- expect(@auth).not_to auth_allow(request)
254
- end
255
- end
256
- end
@@ -1,11 +0,0 @@
1
- require 'spec_helper'
2
-
3
- describe Dir, :if => Puppet::Util::Platform.windows? do
4
- it "should always have the PERSONAL constant defined" do
5
- expect(described_class).to be_const_defined(:PERSONAL)
6
- end
7
-
8
- it "should not raise any errors when accessing the PERSONAL constant" do
9
- expect { described_class::PERSONAL }.not_to raise_error
10
- end
11
- end
@@ -1,52 +0,0 @@
1
- require 'spec_helper'
2
- require 'puppet/face'
3
-
4
- describe Puppet::Face[:man, :current] do
5
- let(:pager) { '/path/to/our/pager' }
6
-
7
- around do |example|
8
- Puppet::Util.withenv('MANPAGER' => pager) do
9
- example.run
10
- end
11
- end
12
-
13
- it 'is deprecated' do
14
- expect(subject).to be_deprecated
15
- end
16
-
17
- it 'has a man action' do
18
- expect(subject).to be_action(:man)
19
- end
20
-
21
- it 'accepts a call with no arguments' do
22
- expect { subject.man }.to output(/USAGE: puppet man <action>/).to_stdout
23
- end
24
-
25
- it 'raises an ArgumentError when given too many arguments' do
26
- expect {
27
- subject.man(:man, 'agent', 'extra')
28
- }.to raise_error(ArgumentError)
29
- .and output(/USAGE: puppet man <action>/).to_stdout
30
- end
31
-
32
- it "exits with 0 when generating man documentation for each available application" do
33
- # turn off deprecation warning
34
- Puppet[:disable_warnings] = ['deprecations']
35
-
36
- allow(Puppet::Util).to receive(:which).with('ronn').and_return(nil)
37
- allow(Puppet::Util).to receive(:which).with(pager).and_return(pager)
38
-
39
- Puppet::Application.available_application_names.each do |name|
40
- next if %w{man face_base indirection_base}.include? name
41
-
42
- app = Puppet::Application[:man]
43
- app.command_line.args << 'man' << name
44
-
45
- expect {
46
- allow(IO).to receive(:popen).with(pager, 'w:UTF-8').and_yield($stdout)
47
- app.run
48
- }.to exit_with(0)
49
- .and output(/puppet-#{name}/m).to_stdout
50
- end
51
- end
52
- end
@@ -1,414 +0,0 @@
1
- require 'spec_helper'
2
- require 'puppet_spec/compiler'
3
-
4
- describe 'Capability types' do
5
- include PuppetSpec::Compiler
6
- let(:env) { Puppet::Node::Environment.create(:testing, []) }
7
- let(:node) { Puppet::Node.new('test', :environment => env) }
8
- let(:loaders) { Puppet::Pops::Loaders.new(env) }
9
-
10
- before(:each) do
11
- allow_any_instance_of(Puppet::Parser::Compiler).to receive(:loaders).and_return(loaders)
12
- Puppet.push_context({:loaders => loaders, :current_environment => env})
13
- Puppet::Type.newtype :cap, :is_capability => true do
14
- newparam :name
15
- newparam :host
16
- end
17
- end
18
-
19
- after(:each) do
20
- Puppet::Type.rmtype(:cap)
21
- Puppet.pop_context()
22
- end
23
-
24
- context 'annotations' do
25
- it "adds a blueprint for a produced resource" do
26
- catalog = compile_to_catalog(<<-MANIFEST, node)
27
- define test($hostname) {
28
- notify { "hostname ${hostname}":}
29
- }
30
-
31
- Test produces Cap {
32
- host => $hostname
33
- }
34
- MANIFEST
35
-
36
- krt = catalog.environment_instance.known_resource_types
37
- type = krt.definition(:test)
38
- expect(type.produces).to be_instance_of(Array)
39
- prd = type.produces.first
40
-
41
- expect(prd).to be_instance_of(Hash)
42
- expect(prd[:capability]).to eq("Cap")
43
- expect(prd[:mappings]).to be_instance_of(Hash)
44
- expect(prd[:mappings]["host"]).to be_instance_of(Puppet::Parser::AST::PopsBridge::Expression)
45
- end
46
-
47
- it "adds a blueprint for a consumed resource" do
48
- catalog = compile_to_catalog(<<-MANIFEST, node)
49
- define test($hostname) {
50
- notify { "hostname ${hostname}":}
51
- }
52
-
53
- Test consumes Cap {
54
- host => $hostname
55
- }
56
- MANIFEST
57
-
58
- krt = catalog.environment_instance.known_resource_types
59
- type = krt.definition(:test)
60
- expect(type.produces).to be_instance_of(Array)
61
- cns = type.consumes.first
62
-
63
- expect(cns).to be_instance_of(Hash)
64
- expect(cns[:capability]).to eq("Cap")
65
- expect(cns[:mappings]).to be_instance_of(Hash)
66
- expect(cns[:mappings]["host"]).to be_instance_of(Puppet::Parser::AST::PopsBridge::Expression)
67
- end
68
-
69
- it 'can place define and consumes/produces in separate manifests' do
70
- parse_results = []
71
- parser = Puppet::Parser::ParserFactory.parser
72
-
73
- parser.string = <<-MANIFEST
74
- define test($hostname) {
75
- notify { "hostname ${hostname}":}
76
- }
77
- MANIFEST
78
- parse_results << parser.parse
79
-
80
- parser.string = <<-MANIFEST
81
- Test consumes Cap {
82
- host => $hostname
83
- }
84
- MANIFEST
85
- parse_results << parser.parse
86
-
87
- main = Puppet::Parser::AST::Hostclass.new('', :code => Puppet::Parser::ParserFactory.code_merger.concatenate(parse_results))
88
- allow_any_instance_of(Puppet::Node::Environment).to receive(:perform_initial_import).and_return(main)
89
-
90
- type = compile_to_catalog(nil).environment_instance.known_resource_types.definition(:test)
91
- expect(type.produces).to be_instance_of(Array)
92
- cns = type.consumes.first
93
-
94
- expect(cns).to be_instance_of(Hash)
95
- expect(cns[:capability]).to eq('Cap')
96
- expect(cns[:mappings]).to be_instance_of(Hash)
97
- expect(cns[:mappings]['host']).to be_instance_of(Puppet::Parser::AST::PopsBridge::Expression)
98
- end
99
-
100
- it 'can place use a qualified name for defines that produces capabilities' do
101
- parse_results = []
102
- parser = Puppet::Parser::ParserFactory.parser
103
-
104
- parser.string = <<-MANIFEST
105
- class mod {
106
- define test($hostname) {
107
- notify { "hostname ${hostname}":}
108
- }
109
- }
110
- include mod
111
- MANIFEST
112
- parse_results << parser.parse
113
-
114
- parser.string = <<-MANIFEST
115
- Mod::Test consumes Cap {
116
- host => $hostname
117
- }
118
- MANIFEST
119
- parse_results << parser.parse
120
-
121
- main = Puppet::Parser::AST::Hostclass.new('', :code => Puppet::Parser::ParserFactory.code_merger.concatenate(parse_results))
122
- allow_any_instance_of(Puppet::Node::Environment).to receive(:perform_initial_import).and_return(main)
123
-
124
- type = compile_to_catalog(nil).environment_instance.known_resource_types.definition('Mod::Test')
125
- expect(type.produces).to be_instance_of(Array)
126
- cns = type.consumes.first
127
-
128
- expect(cns).to be_instance_of(Hash)
129
- expect(cns[:capability]).to eq('Cap')
130
- expect(cns[:mappings]).to be_instance_of(Hash)
131
- expect(cns[:mappings]['host']).to be_instance_of(Puppet::Parser::AST::PopsBridge::Expression)
132
- end
133
-
134
- it "does not allow operator '+>' in a mapping" do
135
- expect do
136
- compile_to_catalog(<<-MANIFEST, node)
137
- define test($hostname) {
138
- notify { "hostname ${hostname}":}
139
- }
140
-
141
- Test consumes Cap {
142
- host +> $hostname
143
- }
144
- MANIFEST
145
- end.to raise_error(Puppet::ParseErrorWithIssue, /Illegal \+> operation.*This operator can not be used in a Capability Mapping/)
146
- end
147
-
148
- it "does not allow operator '*=>' in a mapping" do
149
- expect do
150
- compile_to_catalog(<<-MANIFEST, node)
151
- define test($hostname) {
152
- notify { "hostname ${hostname}":}
153
- }
154
-
155
- Test consumes Cap {
156
- *=> { host => $hostname }
157
- }
158
- MANIFEST
159
- end.to raise_error(Puppet::ParseError, /The operator '\* =>' in a Capability Mapping is not supported/)
160
- end
161
-
162
- it "does not allow 'before' relationship to capability mapping" do
163
- expect do
164
- compile_to_catalog(<<-MANIFEST, node)
165
- define test() {
166
- notify { "hello":}
167
- }
168
-
169
- Test consumes Cap {}
170
-
171
- test { one: before => Cap[cap] }
172
- MANIFEST
173
- end.to raise_error(Puppet::Error, /'before' is not a valid relationship to a capability/)
174
- end
175
-
176
- ["produces", "consumes"].each do |kw|
177
- it "creates an error when #{kw} references nonexistent type" do
178
- manifest = <<-MANIFEST
179
- Test #{kw} Cap {
180
- host => $hostname
181
- }
182
- MANIFEST
183
-
184
- expect {
185
- compile_to_catalog(manifest, node)
186
- }.to raise_error(Puppet::Error,
187
- /#{kw} clause references nonexistent type Test/)
188
- end
189
- end
190
- end
191
-
192
- context 'exporting a capability' do
193
- it "does not add produced resources that are not exported" do
194
- manifest = <<-MANIFEST
195
- define test($hostname) {
196
- notify { "hostname ${hostname}":}
197
- }
198
-
199
- Test produces Cap {
200
- host => $hostname
201
- }
202
-
203
- test { one: hostname => "ahost" }
204
- MANIFEST
205
- catalog = compile_to_catalog(manifest, node)
206
- expect(catalog.resource("Test[one]")).to be_instance_of(Puppet::Resource)
207
- expect(catalog.resource_keys.find { |type, _| type == "Cap" }).to be_nil
208
- end
209
-
210
- it "adds produced resources that are exported" do
211
- manifest = <<-MANIFEST
212
- define test($hostname) {
213
- notify { "hostname ${hostname}":}
214
- }
215
-
216
- # The $hostname in the produces clause does not refer to this variable,
217
- # instead, it referes to the hostname property of the Test resource
218
- # that is producing the Cap
219
- $hostname = "other_host"
220
-
221
- Test produces Cap {
222
- host => $hostname
223
- }
224
-
225
- test { one: hostname => "ahost", export => Cap[two] }
226
- MANIFEST
227
- catalog = compile_to_catalog(manifest, node)
228
- expect(catalog.resource("Test[one]")).to be_instance_of(Puppet::Resource)
229
-
230
- caps = catalog.resource_keys.select { |type, _| type == "Cap" }
231
- expect(caps.size).to eq(1)
232
-
233
- cap = catalog.resource("Cap[two]")
234
- expect(cap).to be_instance_of(Puppet::Resource)
235
- expect(cap["require"]).to eq("Test[one]")
236
- expect(cap["host"]).to eq("ahost")
237
- expect(cap.resource_type).to eq(Puppet::Type::Cap)
238
- expect(cap.tags.any? { |t| t == 'producer:testing' }).to eq(true)
239
- end
240
- end
241
-
242
- context 'consuming a capability' do
243
- def make_catalog(instance)
244
- manifest = <<-MANIFEST
245
- define test($hostname = nohost) {
246
- notify { "hostname ${hostname}":}
247
- }
248
-
249
- Test consumes Cap {
250
- hostname => $host
251
- }
252
- MANIFEST
253
- compile_to_catalog(manifest + instance, node)
254
- end
255
-
256
- def mock_cap_finding
257
- cap = Puppet::Resource.new("Cap", "two")
258
- cap["host"] = "ahost"
259
- expect(Puppet::Resource::CapabilityFinder).to receive(:find).and_return(cap)
260
- cap
261
- end
262
-
263
- it "does not fetch a consumed resource when consume metaparam not set" do
264
- expect(Puppet::Resource::CapabilityFinder).not_to receive(:find)
265
- catalog = make_catalog("test { one: }")
266
- expect(catalog.resource_keys.find { |type, _| type == "Cap" }).to be_nil
267
- expect(catalog.resource("Test", "one")["hostname"]).to eq("nohost")
268
- end
269
-
270
- it "sets hostname from consumed capability" do
271
- cap = mock_cap_finding
272
- catalog = make_catalog("test { one: consume => Cap[two] }")
273
- expect(catalog.resource("Cap[two]")).to eq(cap)
274
- expect(catalog.resource("Cap[two]")["host"]).to eq("ahost")
275
- expect(catalog.resource("Test", "one")["hostname"]).to eq("ahost")
276
- end
277
-
278
- it "does not override explicit hostname property when consuming" do
279
- cap = mock_cap_finding
280
- catalog = make_catalog("test { one: hostname => other_host, consume => Cap[two] }")
281
- expect(catalog.resource("Cap[two]")).to eq(cap)
282
- expect(catalog.resource("Cap[two]")["host"]).to eq("ahost")
283
- expect(catalog.resource("Test", "one")["hostname"]).to eq("other_host")
284
- end
285
-
286
- it "fetches required capability" do
287
- cap = mock_cap_finding
288
- catalog = make_catalog("test { one: require => Cap[two] }")
289
- expect(catalog.resource("Cap[two]")).to eq(cap)
290
- expect(catalog.resource("Cap[two]")["host"]).to eq("ahost")
291
- expect(catalog.resource("Test", "one")["hostname"]).to eq("nohost")
292
- end
293
-
294
- ['export', 'consume'].each do |metaparam|
295
-
296
- it "validates that #{metaparam} metaparameter rejects values that are not resources" do
297
- expect { make_catalog("test { one: #{metaparam} => 'hello' }") }.to raise_error(Puppet::Error, /not a resource/)
298
- end
299
-
300
- it "validates that #{metaparam} metaparameter rejects resources that are not capability resources" do
301
- expect { make_catalog("notify{hello:} test { one: #{metaparam} => Notify[hello] }") }.to raise_error(Puppet::Error, /not a capability resource/)
302
- end
303
- end
304
-
305
- context 'producing/consuming resources' do
306
-
307
- let(:ral) do
308
- compile_to_ral(<<-MANIFEST, node)
309
- define producer() {
310
- notify { "producer":}
311
- }
312
-
313
- define consumer() {
314
- notify { $title:}
315
- }
316
-
317
- Producer produces Cap {}
318
-
319
- Consumer consumes Cap {}
320
-
321
- producer {x: export => Cap[cap]}
322
- consumer {x: consume => Cap[cap]}
323
- consumer {y: require => Cap[cap]}
324
- MANIFEST
325
- end
326
-
327
- let(:graph) do
328
- graph = Puppet::Graph::RelationshipGraph.new(Puppet::Graph::SequentialPrioritizer.new)
329
- graph.populate_from(ral)
330
- graph
331
- end
332
-
333
- let(:capability) { ral.resource('Cap[cap]') }
334
-
335
- it 'the produced resource depends on the producer' do
336
- expect(graph.dependencies(capability).map {|d| d.to_s }).to include('Producer[x]')
337
- end
338
-
339
- it 'the consumer depends on the consumed resource' do
340
- expect(graph.dependents(capability).map {|d| d.to_s }).to include('Consumer[x]')
341
- end
342
-
343
- it 'the consumer depends on the required resource' do
344
- expect(graph.dependents(capability).map {|d| d.to_s }).to include('Consumer[y]')
345
- end
346
- end
347
-
348
- context 'producing/consuming resources to/from classes' do
349
-
350
- let(:ral) do
351
- compile_to_ral(<<-MANIFEST, node)
352
- define test($hostname) {
353
- notify { $hostname:}
354
- }
355
-
356
- class producer($host) {
357
- notify { p: }
358
- }
359
-
360
- class consumer($host) {
361
- test { c: hostname => $host }
362
- }
363
-
364
- Class[producer] produces Cap {}
365
-
366
- Class[consumer] consumes Cap {}
367
-
368
- class { producer: host => 'produced.host', export => Cap[one]}
369
- class { consumer: consume => Cap[one]}
370
- MANIFEST
371
- end
372
-
373
- let(:graph) do
374
- graph = Puppet::Graph::RelationshipGraph.new(Puppet::Graph::SequentialPrioritizer.new)
375
- graph.populate_from(ral)
376
- graph
377
- end
378
-
379
- let(:capability) { ral.resource('Cap[one]') }
380
-
381
- it 'the produced resource depends on the producer' do
382
- expect(graph.dependencies(capability).map {|d| d.to_s }).to include('Class[Producer]')
383
- end
384
-
385
- it 'the consumer depends on the consumed resource' do
386
- expect(graph.dependents(capability).map {|d| d.to_s }).to include('Class[Consumer]')
387
- end
388
-
389
- it 'resource in the consumer class gets values from producer via the capability resource' do
390
- expect(graph.dependents(capability).map {|d| d.to_s }).to include('Notify[produced.host]')
391
- end
392
- end
393
- end
394
-
395
- context 'and aliased resources' do
396
- let(:drive) { Puppet::Util::Platform.windows? ? 'C:' : '' }
397
- let(:code) { <<-PUPPET }
398
- $dir='#{drive}/tmp/test'
399
- $same_dir='#{drive}/tmp/test/'
400
-
401
- file {$dir:
402
- ensure => directory
403
- }
404
-
405
- file { $same_dir:
406
- ensure => directory
407
- }
408
- PUPPET
409
-
410
- it 'fails if a resource is defined and then redefined using name that results in the same alias' do
411
- expect { compile_to_ral(code) }.to raise_error(/resource \["File", "#{drive}\/tmp\/test"\] already declared/)
412
- end
413
- end
414
- end