puppet 6.24.0-x64-mingw32 → 7.0.0-x64-mingw32
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of puppet might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/CODEOWNERS +16 -2
- data/CONTRIBUTING.md +5 -5
- data/Gemfile +1 -3
- data/Gemfile.lock +35 -47
- data/README.md +5 -5
- data/conf/fileserver.conf +5 -10
- data/ext/build_defaults.yaml +1 -1
- data/ext/osx/file_mapping.yaml +0 -5
- data/ext/osx/puppet.plist +0 -2
- data/ext/project_data.yaml +1 -15
- data/ext/redhat/puppet.spec.erb +0 -1
- data/ext/windows/service/daemon.rb +6 -5
- data/install.rb +21 -17
- data/lib/puppet.rb +14 -23
- data/lib/puppet/application.rb +178 -108
- data/lib/puppet/application/agent.rb +4 -12
- data/lib/puppet/application/apply.rb +2 -4
- data/lib/puppet/application/device.rb +100 -106
- data/lib/puppet/application/filebucket.rb +13 -10
- data/lib/puppet/application/resource.rb +3 -17
- data/lib/puppet/application/script.rb +0 -2
- data/lib/puppet/application/ssl.rb +1 -13
- data/lib/puppet/application_support.rb +0 -7
- data/lib/puppet/configurer.rb +30 -45
- data/lib/puppet/configurer/downloader.rb +1 -2
- data/lib/puppet/configurer/plugin_handler.rb +21 -19
- data/lib/puppet/defaults.rb +100 -192
- data/lib/puppet/environments.rb +60 -84
- data/lib/puppet/face/facts.rb +5 -103
- data/lib/puppet/face/help.rb +1 -1
- data/lib/puppet/face/help/action.erb +0 -1
- data/lib/puppet/face/help/face.erb +0 -1
- data/lib/puppet/face/node/clean.rb +0 -11
- data/lib/puppet/face/plugin.rb +5 -8
- data/lib/puppet/ffi/windows.rb +12 -0
- data/lib/puppet/ffi/windows/api_types.rb +311 -0
- data/lib/puppet/ffi/windows/constants.rb +404 -0
- data/lib/puppet/ffi/windows/functions.rb +628 -0
- data/lib/puppet/ffi/windows/structs.rb +338 -0
- data/lib/puppet/file_serving/configuration.rb +0 -5
- data/lib/puppet/file_serving/configuration/parser.rb +3 -32
- data/lib/puppet/file_serving/fileset.rb +2 -14
- data/lib/puppet/file_serving/http_metadata.rb +1 -1
- data/lib/puppet/file_serving/mount.rb +1 -2
- data/lib/puppet/file_system/file_impl.rb +1 -1
- data/lib/puppet/file_system/memory_file.rb +1 -8
- data/lib/puppet/file_system/windows.rb +2 -4
- data/lib/puppet/forge.rb +3 -3
- data/lib/puppet/forge/repository.rb +0 -1
- data/lib/puppet/functions/all.rb +1 -1
- data/lib/puppet/functions/camelcase.rb +1 -1
- data/lib/puppet/functions/capitalize.rb +2 -2
- data/lib/puppet/functions/downcase.rb +2 -2
- data/lib/puppet/functions/empty.rb +0 -8
- data/lib/puppet/functions/get.rb +5 -5
- data/lib/puppet/functions/group_by.rb +5 -13
- data/lib/puppet/functions/lest.rb +1 -1
- data/lib/puppet/functions/new.rb +100 -100
- data/lib/puppet/functions/partition.rb +4 -12
- data/lib/puppet/functions/require.rb +5 -5
- data/lib/puppet/functions/sort.rb +3 -3
- data/lib/puppet/functions/strftime.rb +0 -1
- data/lib/puppet/functions/tree_each.rb +9 -7
- data/lib/puppet/functions/type.rb +4 -4
- data/lib/puppet/functions/unwrap.rb +2 -17
- data/lib/puppet/functions/upcase.rb +2 -2
- data/lib/puppet/generate/models/type/type.rb +4 -1
- data/lib/puppet/http.rb +22 -13
- data/lib/puppet/http/client.rb +164 -114
- data/lib/puppet/{network/resolver.rb → http/dns.rb} +2 -2
- data/lib/puppet/http/errors.rb +16 -0
- data/lib/puppet/http/external_client.rb +5 -7
- data/lib/puppet/{network/http → http}/factory.rb +8 -15
- data/lib/puppet/{network/http → http}/pool.rb +61 -26
- data/lib/puppet/{network/http/session.rb → http/pool_entry.rb} +2 -3
- data/lib/puppet/http/proxy.rb +137 -0
- data/lib/puppet/http/redirector.rb +4 -12
- data/lib/puppet/http/resolver.rb +5 -15
- data/lib/puppet/http/resolver/server_list.rb +10 -25
- data/lib/puppet/http/resolver/settings.rb +4 -7
- data/lib/puppet/http/resolver/srv.rb +7 -11
- data/lib/puppet/http/response.rb +36 -54
- data/lib/puppet/http/response_converter.rb +24 -0
- data/lib/puppet/http/response_net_http.rb +42 -0
- data/lib/puppet/http/retry_after_handler.rb +4 -13
- data/lib/puppet/http/service.rb +12 -26
- data/lib/puppet/http/service/ca.rb +11 -22
- data/lib/puppet/http/service/compiler.rb +22 -138
- data/lib/puppet/http/service/file_server.rb +19 -29
- data/lib/puppet/http/service/puppetserver.rb +26 -12
- data/lib/puppet/http/service/report.rb +8 -10
- data/lib/puppet/http/session.rb +11 -20
- data/lib/puppet/{network/http → http}/site.rb +1 -2
- data/lib/puppet/indirector/catalog/compiler.rb +0 -1
- data/lib/puppet/indirector/catalog/rest.rb +2 -4
- data/lib/puppet/indirector/facts/rest.rb +3 -22
- data/lib/puppet/indirector/file_bucket_file/rest.rb +3 -9
- data/lib/puppet/indirector/file_content/rest.rb +2 -6
- data/lib/puppet/indirector/file_metadata/rest.rb +3 -10
- data/lib/puppet/indirector/file_server.rb +1 -8
- data/lib/puppet/indirector/generic_http.rb +0 -11
- data/lib/puppet/indirector/node/rest.rb +2 -4
- data/lib/puppet/indirector/report/rest.rb +3 -8
- data/lib/puppet/indirector/request.rb +0 -101
- data/lib/puppet/indirector/resource/ral.rb +1 -6
- data/lib/puppet/indirector/rest.rb +12 -263
- data/lib/puppet/interface/documentation.rb +0 -1
- data/lib/puppet/module_tool/applications.rb +0 -1
- data/lib/puppet/module_tool/applications/installer.rb +2 -52
- data/lib/puppet/module_tool/errors/shared.rb +2 -34
- data/lib/puppet/network/authconfig.rb +2 -96
- data/lib/puppet/network/authorization.rb +13 -35
- data/lib/puppet/network/formats.rb +0 -67
- data/lib/puppet/network/http.rb +3 -3
- data/lib/puppet/network/http/api/indirected_routes.rb +2 -20
- data/lib/puppet/network/http/api/master/v3.rb +11 -13
- data/lib/puppet/network/http/connection.rb +247 -316
- data/lib/puppet/network/http/handler.rb +0 -1
- data/lib/puppet/network/http_pool.rb +16 -34
- data/lib/puppet/node.rb +1 -30
- data/lib/puppet/pal/json_catalog_encoder.rb +4 -0
- data/lib/puppet/pal/pal_impl.rb +3 -1
- data/lib/puppet/parser/ast/leaf.rb +2 -3
- data/lib/puppet/parser/ast/pops_bridge.rb +0 -38
- data/lib/puppet/parser/compiler.rb +0 -198
- data/lib/puppet/parser/compiler/catalog_validator/relationship_validator.rb +14 -39
- data/lib/puppet/parser/functions/fqdn_rand.rb +6 -14
- data/lib/puppet/parser/resource.rb +0 -69
- data/lib/puppet/parser/templatewrapper.rb +1 -1
- data/lib/puppet/pops/evaluator/deferred_resolver.rb +3 -5
- data/lib/puppet/pops/evaluator/evaluator_impl.rb +0 -5
- data/lib/puppet/pops/evaluator/runtime3_resource_support.rb +3 -3
- data/lib/puppet/pops/evaluator/runtime3_support.rb +1 -1
- data/lib/puppet/pops/issues.rb +0 -5
- data/lib/puppet/pops/loader/ruby_legacy_function_instantiator.rb +6 -8
- data/lib/puppet/pops/model/ast.pp +0 -42
- data/lib/puppet/pops/model/ast.rb +0 -290
- data/lib/puppet/pops/model/ast_transformer.rb +1 -1
- data/lib/puppet/pops/model/factory.rb +0 -45
- data/lib/puppet/pops/model/model_label_provider.rb +0 -5
- data/lib/puppet/pops/model/model_tree_dumper.rb +0 -22
- data/lib/puppet/pops/model/pn_transformer.rb +0 -16
- data/lib/puppet/pops/parser/egrammar.ra +0 -56
- data/lib/puppet/pops/parser/eparser.rb +1520 -1712
- data/lib/puppet/pops/parser/lexer2.rb +4 -4
- data/lib/puppet/pops/parser/parser_support.rb +0 -5
- data/lib/puppet/pops/resource/resource_type_impl.rb +2 -24
- data/lib/puppet/pops/types/p_sem_ver_type.rb +2 -8
- data/lib/puppet/pops/types/p_sensitive_type.rb +0 -10
- data/lib/puppet/pops/types/type_calculator.rb +0 -7
- data/lib/puppet/pops/types/type_mismatch_describer.rb +1 -1
- data/lib/puppet/pops/types/type_parser.rb +0 -4
- data/lib/puppet/pops/types/types.rb +0 -1
- data/lib/puppet/pops/validation/checker4_0.rb +9 -37
- data/lib/puppet/pops/validation/tasks_checker.rb +0 -12
- data/lib/puppet/pops/validation/validator_factory_4_0.rb +1 -2
- data/lib/puppet/property/list.rb +1 -1
- data/lib/puppet/provider.rb +0 -13
- data/lib/puppet/provider/exec/posix.rb +4 -16
- data/lib/puppet/provider/group/groupadd.rb +8 -13
- data/lib/puppet/provider/nameservice.rb +0 -18
- data/lib/puppet/provider/package/apt.rb +2 -34
- data/lib/puppet/provider/package/aptitude.rb +0 -6
- data/lib/puppet/provider/package/dnfmodule.rb +1 -1
- data/lib/puppet/provider/package/dpkg.rb +0 -10
- data/lib/puppet/provider/package/gem.rb +23 -3
- data/lib/puppet/provider/package/nim.rb +6 -11
- data/lib/puppet/provider/package/pip.rb +3 -16
- data/lib/puppet/provider/package/pkg.rb +0 -4
- data/lib/puppet/provider/package/portage.rb +1 -1
- data/lib/puppet/provider/package/puppet_gem.rb +1 -4
- data/lib/puppet/provider/parsedfile.rb +0 -3
- data/lib/puppet/provider/service/debian.rb +0 -2
- data/lib/puppet/provider/service/smf.rb +191 -73
- data/lib/puppet/provider/service/systemd.rb +4 -14
- data/lib/puppet/provider/service/windows.rb +0 -38
- data/lib/puppet/provider/user/aix.rb +2 -2
- data/lib/puppet/provider/user/directoryservice.rb +10 -33
- data/lib/puppet/provider/user/useradd.rb +8 -62
- data/lib/puppet/reference/configuration.rb +8 -7
- data/lib/puppet/reference/indirection.rb +1 -1
- data/lib/puppet/resource.rb +1 -89
- data/lib/puppet/resource/catalog.rb +1 -14
- data/lib/puppet/resource/type.rb +3 -119
- data/lib/puppet/resource/type_collection.rb +3 -48
- data/lib/puppet/runtime.rb +1 -2
- data/lib/puppet/settings.rb +80 -96
- data/lib/puppet/settings/environment_conf.rb +0 -1
- data/lib/puppet/settings/integer_setting.rb +17 -0
- data/lib/puppet/settings/port_setting.rb +15 -0
- data/lib/puppet/settings/priority_setting.rb +5 -4
- data/lib/puppet/ssl.rb +10 -6
- data/lib/puppet/ssl/base.rb +3 -5
- data/lib/puppet/ssl/certificate.rb +0 -6
- data/lib/puppet/ssl/certificate_request.rb +1 -12
- data/lib/puppet/ssl/certificate_signer.rb +6 -0
- data/lib/puppet/ssl/oids.rb +3 -1
- data/lib/puppet/ssl/ssl_provider.rb +17 -0
- data/lib/puppet/ssl/state_machine.rb +3 -1
- data/lib/puppet/ssl/verifier.rb +2 -0
- data/lib/puppet/test/test_helper.rb +1 -3
- data/lib/puppet/transaction.rb +1 -7
- data/lib/puppet/transaction/additional_resource_generator.rb +1 -1
- data/lib/puppet/transaction/report.rb +2 -4
- data/lib/puppet/type.rb +0 -76
- data/lib/puppet/type/exec.rb +3 -16
- data/lib/puppet/type/file.rb +6 -26
- data/lib/puppet/type/file/checksum.rb +1 -1
- data/lib/puppet/type/file/mode.rb +0 -6
- data/lib/puppet/type/file/selcontext.rb +1 -1
- data/lib/puppet/type/file/source.rb +1 -1
- data/lib/puppet/type/filebucket.rb +3 -3
- data/lib/puppet/type/package.rb +8 -16
- data/lib/puppet/type/service.rb +38 -18
- data/lib/puppet/type/tidy.rb +3 -22
- data/lib/puppet/type/user.rb +20 -38
- data/lib/puppet/util/autoload.rb +8 -1
- data/lib/puppet/util/execution.rb +0 -11
- data/lib/puppet/util/http_proxy.rb +2 -215
- data/lib/puppet/util/monkey_patches.rb +0 -53
- data/lib/puppet/util/posix.rb +5 -54
- data/lib/puppet/util/rdoc.rb +0 -7
- data/lib/puppet/util/retry_action.rb +1 -1
- data/lib/puppet/util/run_mode.rb +9 -1
- data/lib/puppet/util/selinux.rb +4 -30
- data/lib/puppet/util/symbolic_file_mode.rb +17 -29
- data/lib/puppet/util/windows.rb +3 -8
- data/lib/puppet/util/windows/adsi.rb +0 -46
- data/lib/puppet/util/windows/daemon.rb +360 -0
- data/lib/puppet/util/windows/error.rb +1 -0
- data/lib/puppet/util/windows/eventlog.rb +4 -9
- data/lib/puppet/util/windows/file.rb +8 -242
- data/lib/puppet/util/windows/monkey_patches/process.rb +414 -0
- data/lib/puppet/util/windows/principal.rb +2 -9
- data/lib/puppet/util/windows/process.rb +4 -226
- data/lib/puppet/util/windows/service.rb +9 -460
- data/lib/puppet/util/windows/sid.rb +2 -6
- data/lib/puppet/util/windows/string.rb +12 -13
- data/lib/puppet/util/yaml.rb +0 -22
- data/lib/puppet/vendor/require_vendored.rb +0 -1
- data/lib/puppet/version.rb +1 -1
- data/lib/puppet/x509.rb +5 -1
- data/lib/puppet/x509/cert_provider.rb +29 -1
- data/locales/puppet.pot +722 -1527
- data/man/man5/puppet.conf.5 +266 -354
- data/man/man8/puppet-agent.8 +2 -2
- data/man/man8/puppet-apply.8 +2 -2
- data/man/man8/puppet-catalog.8 +9 -9
- data/man/man8/puppet-config.8 +1 -1
- data/man/man8/puppet-describe.8 +1 -1
- data/man/man8/puppet-device.8 +2 -2
- data/man/man8/puppet-doc.8 +1 -1
- data/man/man8/puppet-epp.8 +1 -1
- data/man/man8/puppet-facts.8 +8 -51
- data/man/man8/puppet-filebucket.8 +4 -4
- data/man/man8/puppet-generate.8 +1 -1
- data/man/man8/puppet-help.8 +1 -1
- data/man/man8/puppet-lookup.8 +1 -1
- data/man/man8/puppet-module.8 +1 -58
- data/man/man8/puppet-node.8 +5 -5
- data/man/man8/puppet-parser.8 +1 -1
- data/man/man8/puppet-plugin.8 +1 -1
- data/man/man8/puppet-report.8 +5 -5
- data/man/man8/puppet-resource.8 +1 -1
- data/man/man8/puppet-script.8 +2 -2
- data/man/man8/puppet-ssl.8 +1 -5
- data/man/man8/puppet.8 +2 -2
- data/spec/fixtures/ssl/127.0.0.1-key.pem +57 -107
- data/spec/fixtures/ssl/127.0.0.1.pem +31 -52
- data/spec/fixtures/ssl/bad-basic-constraints.pem +35 -57
- data/spec/fixtures/ssl/bad-int-basic-constraints.pem +35 -57
- data/spec/fixtures/ssl/ca.pem +35 -57
- data/spec/fixtures/ssl/crl.pem +18 -28
- data/spec/fixtures/ssl/ec-key.pem +11 -11
- data/spec/fixtures/ssl/ec.pem +24 -33
- data/spec/fixtures/ssl/encrypted-ec-key.pem +12 -12
- data/spec/fixtures/ssl/encrypted-key.pem +58 -108
- data/spec/fixtures/ssl/intermediate-agent-crl.pem +19 -28
- data/spec/fixtures/ssl/intermediate-agent.pem +36 -57
- data/spec/fixtures/ssl/intermediate-crl.pem +21 -31
- data/spec/fixtures/ssl/intermediate.pem +36 -57
- data/spec/fixtures/ssl/pluto-key.pem +57 -107
- data/spec/fixtures/ssl/pluto.pem +30 -52
- data/spec/fixtures/ssl/request-key.pem +57 -107
- data/spec/fixtures/ssl/request.pem +26 -47
- data/spec/fixtures/ssl/revoked-key.pem +57 -107
- data/spec/fixtures/ssl/revoked.pem +30 -52
- data/spec/fixtures/ssl/signed-key.pem +57 -107
- data/spec/fixtures/ssl/signed.pem +30 -52
- data/spec/fixtures/ssl/tampered-cert.pem +30 -52
- data/spec/fixtures/ssl/tampered-csr.pem +26 -47
- data/spec/fixtures/ssl/unknown-127.0.0.1-key.pem +57 -107
- data/spec/fixtures/ssl/unknown-127.0.0.1.pem +29 -50
- data/spec/fixtures/ssl/unknown-ca-key.pem +57 -107
- data/spec/fixtures/ssl/unknown-ca.pem +33 -55
- data/spec/fixtures/unit/provider/service/smf/{svcs.out → svcs_instances.out} +0 -0
- data/spec/fixtures/unit/provider/user/aix/aix_passwd_file.out +0 -4
- data/spec/integration/application/agent_spec.rb +27 -171
- data/spec/integration/application/apply_spec.rb +1 -20
- data/spec/integration/application/filebucket_spec.rb +16 -27
- data/spec/integration/application/help_spec.rb +2 -0
- data/spec/integration/application/module_spec.rb +0 -21
- data/spec/integration/application/plugin_spec.rb +24 -2
- data/spec/integration/defaults_spec.rb +14 -3
- data/spec/integration/environments/settings_interpolation_spec.rb +4 -0
- data/spec/integration/http/client_spec.rb +0 -12
- data/spec/integration/indirector/direct_file_server_spec.rb +3 -1
- data/spec/integration/indirector/facts/facter_spec.rb +36 -90
- data/spec/integration/network/http_pool_spec.rb +3 -21
- data/spec/integration/parser/catalog_spec.rb +0 -38
- data/spec/integration/parser/node_spec.rb +0 -9
- data/spec/integration/parser/pcore_resource_spec.rb +0 -37
- data/spec/integration/resource/type_collection_spec.rb +6 -2
- data/spec/integration/transaction_spec.rb +9 -4
- data/spec/integration/type/exec_spec.rb +45 -70
- data/spec/integration/type/file_spec.rb +5 -4
- data/spec/integration/util/windows/adsi_spec.rb +1 -21
- data/spec/integration/util/windows/monkey_patches/process_spec.rb +231 -0
- data/spec/integration/util/windows/principal_spec.rb +0 -21
- data/spec/integration/util/windows/registry_spec.rb +10 -6
- data/spec/integration/util/windows/security_spec.rb +1 -1
- data/spec/lib/matchers/include.rb +27 -0
- data/spec/lib/matchers/include_spec.rb +32 -0
- data/spec/lib/puppet/test_ca.rb +2 -7
- data/spec/lib/puppet_spec/puppetserver.rb +1 -1
- data/spec/lib/puppet_spec/settings.rb +1 -1
- data/spec/spec_helper.rb +7 -12
- data/spec/unit/agent_spec.rb +6 -10
- data/spec/unit/application/agent_spec.rb +3 -7
- data/spec/unit/application/facts_spec.rb +12 -456
- data/spec/unit/application/filebucket_spec.rb +43 -39
- data/spec/unit/application/ssl_spec.rb +2 -25
- data/spec/unit/application_spec.rb +9 -51
- data/spec/unit/certificate_factory_spec.rb +1 -1
- data/spec/unit/configurer/downloader_spec.rb +6 -8
- data/spec/unit/configurer/plugin_handler_spec.rb +56 -18
- data/spec/unit/configurer_spec.rb +12 -32
- data/spec/unit/confine/feature_spec.rb +1 -1
- data/spec/unit/confine_spec.rb +2 -8
- data/spec/unit/context/trusted_information_spec.rb +2 -6
- data/spec/unit/defaults_spec.rb +68 -54
- data/spec/unit/environments_spec.rb +68 -259
- data/spec/unit/face/node_spec.rb +11 -0
- data/spec/unit/face/plugin_spec.rb +73 -33
- data/spec/unit/file_bucket/file_spec.rb +1 -1
- data/spec/unit/file_serving/configuration/parser_spec.rb +15 -18
- data/spec/unit/file_serving/configuration_spec.rb +6 -12
- data/spec/unit/file_serving/fileset_spec.rb +0 -60
- data/spec/unit/file_serving/metadata_spec.rb +3 -3
- data/spec/unit/file_serving/terminus_helper_spec.rb +4 -11
- data/spec/unit/file_system_spec.rb +0 -15
- data/spec/unit/forge/module_release_spec.rb +7 -2
- data/spec/unit/functions/assert_type_spec.rb +1 -1
- data/spec/unit/functions/camelcase_spec.rb +1 -1
- data/spec/unit/functions/capitalize_spec.rb +1 -1
- data/spec/unit/functions/downcase_spec.rb +1 -1
- data/spec/unit/functions/empty_spec.rb +0 -10
- data/spec/unit/functions/unwrap_spec.rb +0 -8
- data/spec/unit/functions/upcase_spec.rb +1 -1
- data/spec/unit/functions4_spec.rb +2 -2
- data/spec/unit/gettext/config_spec.rb +0 -12
- data/spec/unit/http/client_spec.rb +7 -8
- data/spec/unit/{network/resolver_spec.rb → http/dns_spec.rb} +3 -3
- data/spec/unit/http/external_client_spec.rb +4 -4
- data/spec/unit/{network/http → http}/factory_spec.rb +5 -30
- data/spec/unit/{network/http/session_spec.rb → http/pool_entry_spec.rb} +3 -3
- data/spec/unit/{network/http → http}/pool_spec.rb +12 -17
- data/spec/unit/{util/http_proxy_spec.rb → http/proxy_spec.rb} +2 -69
- data/spec/unit/http/resolver_spec.rb +13 -13
- data/spec/unit/http/service/compiler_spec.rb +0 -185
- data/spec/unit/http/service/file_server_spec.rb +3 -3
- data/spec/unit/http/service/puppetserver_spec.rb +34 -4
- data/spec/unit/http/service_spec.rb +0 -1
- data/spec/unit/http/session_spec.rb +16 -14
- data/spec/unit/{network/http → http}/site_spec.rb +3 -3
- data/spec/unit/indirector/catalog/compiler_spec.rb +10 -14
- data/spec/unit/indirector/face_spec.rb +1 -0
- data/spec/unit/indirector/facts/facter_spec.rb +3 -0
- data/spec/unit/indirector/file_bucket_file/file_spec.rb +5 -3
- data/spec/unit/indirector/file_bucket_file/selector_spec.rb +8 -26
- data/spec/unit/indirector/file_content/rest_spec.rb +0 -4
- data/spec/unit/indirector/file_metadata/rest_spec.rb +0 -4
- data/spec/unit/indirector/file_server_spec.rb +1 -15
- data/spec/unit/indirector/indirection_spec.rb +12 -8
- data/spec/unit/indirector/report/rest_spec.rb +2 -17
- data/spec/unit/indirector/request_spec.rb +0 -264
- data/spec/unit/indirector/resource/ral_spec.rb +75 -40
- data/spec/unit/indirector/rest_spec.rb +98 -752
- data/spec/unit/indirector_spec.rb +2 -2
- data/spec/unit/module_tool/applications/installer_spec.rb +0 -78
- data/spec/unit/network/authconfig_spec.rb +2 -129
- data/spec/unit/network/authorization_spec.rb +2 -55
- data/spec/unit/network/formats_spec.rb +4 -45
- data/spec/unit/network/http/api/indirected_routes_spec.rb +5 -92
- data/spec/unit/network/http/api/master/v3_spec.rb +28 -7
- data/spec/unit/network/http/api_spec.rb +10 -0
- data/spec/unit/network/http/connection_spec.rb +19 -41
- data/spec/unit/network/http/handler_spec.rb +0 -1
- data/spec/unit/network/http_pool_spec.rb +0 -4
- data/spec/unit/node/environment_spec.rb +33 -21
- data/spec/unit/node_spec.rb +2 -54
- data/spec/unit/parser/compiler_spec.rb +19 -3
- data/spec/unit/parser/functions/create_resources_spec.rb +2 -20
- data/spec/unit/parser/functions/fqdn_rand_spec.rb +1 -15
- data/spec/unit/parser/resource_spec.rb +8 -14
- data/spec/unit/parser/templatewrapper_spec.rb +5 -16
- data/spec/unit/pops/evaluator/evaluating_parser_spec.rb +4 -7
- data/spec/unit/pops/loaders/loaders_spec.rb +6 -21
- data/spec/unit/pops/parser/parse_application_spec.rb +4 -22
- data/spec/unit/pops/parser/parse_basic_expressions_spec.rb +0 -1
- data/spec/unit/pops/parser/parse_capabilities_spec.rb +8 -21
- data/spec/unit/pops/parser/parse_site_spec.rb +20 -24
- data/spec/unit/pops/resource/resource_type_impl_spec.rb +0 -71
- data/spec/unit/pops/serialization/to_from_hr_spec.rb +1 -1
- data/spec/unit/pops/types/p_sem_ver_type_spec.rb +0 -18
- data/spec/unit/pops/types/p_sensitive_type_spec.rb +0 -18
- data/spec/unit/pops/types/type_calculator_spec.rb +6 -6
- data/spec/unit/pops/types/type_factory_spec.rb +1 -1
- data/spec/unit/pops/validator/validator_spec.rb +61 -46
- data/spec/unit/pops/visitor_spec.rb +1 -1
- data/spec/unit/property_spec.rb +0 -1
- data/spec/unit/provider/group/groupadd_spec.rb +2 -5
- data/spec/unit/provider/nameservice_spec.rb +64 -122
- data/spec/unit/provider/package/apt_spec.rb +23 -28
- data/spec/unit/provider/package/aptitude_spec.rb +1 -1
- data/spec/unit/provider/package/base_spec.rb +5 -6
- data/spec/unit/provider/package/dnfmodule_spec.rb +1 -10
- data/spec/unit/provider/package/dpkg_spec.rb +0 -48
- data/spec/unit/provider/package/gem_spec.rb +32 -0
- data/spec/unit/provider/package/nim_spec.rb +0 -42
- data/spec/unit/provider/package/pacman_spec.rb +12 -18
- data/spec/unit/provider/package/pip_spec.rb +11 -43
- data/spec/unit/provider/package/pkgdmg_spec.rb +4 -0
- data/spec/unit/provider/package/puppet_gem_spec.rb +3 -2
- data/spec/unit/provider/parsedfile_spec.rb +0 -10
- data/spec/unit/provider/service/init_spec.rb +0 -1
- data/spec/unit/provider/service/openwrt_spec.rb +1 -3
- data/spec/unit/provider/service/smf_spec.rb +401 -165
- data/spec/unit/provider/service/systemd_spec.rb +8 -53
- data/spec/unit/provider/service/windows_spec.rb +0 -203
- data/spec/unit/provider/user/aix_spec.rb +0 -5
- data/spec/unit/provider/user/directoryservice_spec.rb +35 -67
- data/spec/unit/provider/user/hpux_spec.rb +1 -1
- data/spec/unit/provider/user/pw_spec.rb +0 -2
- data/spec/unit/provider/user/useradd_spec.rb +3 -71
- data/spec/unit/provider_spec.rb +8 -18
- data/spec/unit/resource/catalog_spec.rb +1 -1
- data/spec/unit/resource/type_collection_spec.rb +2 -22
- data/spec/unit/resource/type_spec.rb +1 -1
- data/spec/unit/resource_spec.rb +10 -67
- data/spec/unit/settings/http_extra_headers_spec.rb +2 -4
- data/spec/unit/settings/integer_setting_spec.rb +42 -0
- data/spec/unit/settings/port_setting_spec.rb +31 -0
- data/spec/unit/settings/priority_setting_spec.rb +4 -4
- data/spec/unit/settings_spec.rb +79 -110
- data/spec/unit/ssl/base_spec.rb +37 -3
- data/spec/unit/ssl/certificate_request_spec.rb +15 -45
- data/spec/unit/ssl/certificate_spec.rb +2 -11
- data/spec/unit/ssl/ssl_provider_spec.rb +2 -5
- data/spec/unit/ssl/state_machine_spec.rb +5 -20
- data/spec/unit/ssl/verifier_spec.rb +0 -21
- data/spec/unit/transaction/additional_resource_generator_spec.rb +9 -3
- data/spec/unit/transaction/event_manager_spec.rb +11 -14
- data/spec/unit/transaction/report_spec.rb +0 -2
- data/spec/unit/transaction/resource_harness_spec.rb +2 -2
- data/spec/unit/transaction_spec.rb +55 -96
- data/spec/unit/type/exec_spec.rb +29 -76
- data/spec/unit/type/file/checksum_spec.rb +6 -6
- data/spec/unit/type/file/content_spec.rb +2 -1
- data/spec/unit/type/file/ensure_spec.rb +1 -1
- data/spec/unit/type/file/mode_spec.rb +1 -1
- data/spec/unit/type/file/selinux_spec.rb +5 -3
- data/spec/unit/type/file/source_spec.rb +4 -5
- data/spec/unit/type/file_spec.rb +18 -6
- data/spec/unit/type/group_spec.rb +6 -13
- data/spec/unit/type/package_spec.rb +1 -1
- data/spec/unit/type/resources_spec.rb +7 -7
- data/spec/unit/type/service_spec.rb +189 -60
- data/spec/unit/type/tidy_spec.rb +8 -24
- data/spec/unit/type/user_spec.rb +0 -45
- data/spec/unit/type_spec.rb +22 -2
- data/spec/unit/util/at_fork_spec.rb +2 -2
- data/spec/unit/util/autoload_spec.rb +1 -5
- data/spec/unit/util/backups_spec.rb +2 -3
- data/spec/unit/util/execution_spec.rb +11 -44
- data/spec/unit/util/inifile_spec.rb +14 -6
- data/spec/unit/util/log_spec.rb +7 -8
- data/spec/unit/util/logging_spec.rb +3 -3
- data/spec/unit/util/monkey_patches_spec.rb +0 -6
- data/spec/unit/util/posix_spec.rb +15 -363
- data/spec/unit/util/run_mode_spec.rb +21 -121
- data/spec/unit/util/selinux_spec.rb +68 -163
- data/spec/unit/util/storage_spec.rb +1 -3
- data/spec/unit/util/suidmanager_spec.rb +41 -44
- data/spec/unit/util/windows/sid_spec.rb +0 -41
- data/spec/unit/util/windows/string_spec.rb +1 -3
- data/spec/unit/util/yaml_spec.rb +0 -54
- data/spec/unit/util_spec.rb +6 -31
- data/tasks/generate_cert_fixtures.rake +3 -12
- metadata +45 -253
- data/conf/auth.conf +0 -150
- data/lib/puppet/application/cert.rb +0 -76
- data/lib/puppet/application/key.rb +0 -4
- data/lib/puppet/application/man.rb +0 -4
- data/lib/puppet/application/status.rb +0 -4
- data/lib/puppet/face/key.rb +0 -16
- data/lib/puppet/face/man.rb +0 -145
- data/lib/puppet/face/module/build.rb +0 -14
- data/lib/puppet/face/module/generate.rb +0 -14
- data/lib/puppet/face/module/search.rb +0 -103
- data/lib/puppet/face/status.rb +0 -51
- data/lib/puppet/ffi/posix.rb +0 -10
- data/lib/puppet/ffi/posix/constants.rb +0 -14
- data/lib/puppet/ffi/posix/functions.rb +0 -24
- data/lib/puppet/indirector/certificate/file.rb +0 -9
- data/lib/puppet/indirector/certificate/rest.rb +0 -18
- data/lib/puppet/indirector/certificate_request/file.rb +0 -9
- data/lib/puppet/indirector/certificate_request/memory.rb +0 -7
- data/lib/puppet/indirector/certificate_request/rest.rb +0 -11
- data/lib/puppet/indirector/file_content/http.rb +0 -22
- data/lib/puppet/indirector/key/file.rb +0 -46
- data/lib/puppet/indirector/key/memory.rb +0 -7
- data/lib/puppet/indirector/ssl_file.rb +0 -162
- data/lib/puppet/indirector/status.rb +0 -3
- data/lib/puppet/indirector/status/local.rb +0 -12
- data/lib/puppet/indirector/status/rest.rb +0 -27
- data/lib/puppet/module_tool/applications/searcher.rb +0 -29
- data/lib/puppet/network/auth_config_parser.rb +0 -90
- data/lib/puppet/network/authstore.rb +0 -283
- data/lib/puppet/network/http/api/master/v3/authorization.rb +0 -18
- data/lib/puppet/network/http/api/master/v3/environment.rb +0 -88
- data/lib/puppet/network/http/base_pool.rb +0 -36
- data/lib/puppet/network/http/compression.rb +0 -127
- data/lib/puppet/network/http/connection_adapter.rb +0 -184
- data/lib/puppet/network/http/nocache_pool.rb +0 -28
- data/lib/puppet/network/rest_controller.rb +0 -2
- data/lib/puppet/network/rights.rb +0 -210
- data/lib/puppet/parser/compiler/catalog_validator/env_relationship_validator.rb +0 -66
- data/lib/puppet/parser/compiler/catalog_validator/site_validator.rb +0 -22
- data/lib/puppet/parser/environment_compiler.rb +0 -202
- data/lib/puppet/pops/types/enumeration.rb +0 -16
- data/lib/puppet/resource/capability_finder.rb +0 -154
- data/lib/puppet/rest/errors.rb +0 -15
- data/lib/puppet/rest/response.rb +0 -35
- data/lib/puppet/rest/route.rb +0 -85
- data/lib/puppet/rest/routes.rb +0 -135
- data/lib/puppet/settings/alias_setting.rb +0 -37
- data/lib/puppet/ssl/host.rb +0 -505
- data/lib/puppet/ssl/key.rb +0 -61
- data/lib/puppet/ssl/validator.rb +0 -61
- data/lib/puppet/ssl/validator/default_validator.rb +0 -209
- data/lib/puppet/ssl/validator/no_validator.rb +0 -22
- data/lib/puppet/ssl/verifier_adapter.rb +0 -58
- data/lib/puppet/status.rb +0 -40
- data/lib/puppet/util/connection.rb +0 -88
- data/lib/puppet/util/fact_dif.rb +0 -81
- data/lib/puppet/util/ssl.rb +0 -83
- data/lib/puppet/util/windows/api_types.rb +0 -309
- data/lib/puppet/util/windows/monkey_patches/dir.rb +0 -40
- data/lib/puppet/vendor/load_pathspec.rb +0 -1
- data/lib/puppet/vendor/pathspec/CHANGELOG.md +0 -2
- data/lib/puppet/vendor/pathspec/LICENSE +0 -201
- data/lib/puppet/vendor/pathspec/PUPPET_README.md +0 -6
- data/lib/puppet/vendor/pathspec/README.md +0 -53
- data/lib/puppet/vendor/pathspec/lib/pathspec.rb +0 -122
- data/lib/puppet/vendor/pathspec/lib/pathspec/gitignorespec.rb +0 -275
- data/lib/puppet/vendor/pathspec/lib/pathspec/regexspec.rb +0 -17
- data/lib/puppet/vendor/pathspec/lib/pathspec/spec.rb +0 -14
- data/man/man8/puppet-key.8 +0 -126
- data/man/man8/puppet-man.8 +0 -76
- data/man/man8/puppet-status.8 +0 -108
- data/spec/fixtures/integration/application/agent/cached_deferred_catalog.json +0 -91
- data/spec/fixtures/ssl/oid-key.pem +0 -117
- data/spec/fixtures/ssl/oid.pem +0 -69
- data/spec/fixtures/ssl/trusted_oid_mapping.yaml +0 -5
- data/spec/fixtures/unit/provider/service/systemd/list_unit_files_services_vendor_preset +0 -9
- data/spec/integration/application/resource_spec.rb +0 -64
- data/spec/integration/application/ssl_spec.rb +0 -20
- data/spec/integration/network/authconfig_spec.rb +0 -256
- data/spec/integration/util/windows/monkey_patches/dir_spec.rb +0 -11
- data/spec/unit/application/man_spec.rb +0 -52
- data/spec/unit/capability_spec.rb +0 -414
- data/spec/unit/face/key_spec.rb +0 -9
- data/spec/unit/face/module/search_spec.rb +0 -231
- data/spec/unit/face/status_spec.rb +0 -9
- data/spec/unit/indirector/certificate/file_spec.rb +0 -14
- data/spec/unit/indirector/certificate/rest_spec.rb +0 -61
- data/spec/unit/indirector/certificate_request/file_spec.rb +0 -14
- data/spec/unit/indirector/certificate_request/rest_spec.rb +0 -25
- data/spec/unit/indirector/key/file_spec.rb +0 -78
- data/spec/unit/indirector/ssl_file_spec.rb +0 -305
- data/spec/unit/indirector/status/local_spec.rb +0 -10
- data/spec/unit/indirector/status/rest_spec.rb +0 -50
- data/spec/unit/module_tool/applications/searcher_spec.rb +0 -38
- data/spec/unit/network/auth_config_parser_spec.rb +0 -115
- data/spec/unit/network/authstore_spec.rb +0 -422
- data/spec/unit/network/http/api/master/v3/authorization_spec.rb +0 -57
- data/spec/unit/network/http/api/master/v3/environment_spec.rb +0 -185
- data/spec/unit/network/http/compression_spec.rb +0 -240
- data/spec/unit/network/http/nocache_pool_spec.rb +0 -64
- data/spec/unit/network/http_spec.rb +0 -9
- data/spec/unit/network/rights_spec.rb +0 -439
- data/spec/unit/parser/environment_compiler_spec.rb +0 -730
- data/spec/unit/pops/evaluator/deferred_resolver_spec.rb +0 -20
- data/spec/unit/pops/types/enumeration_spec.rb +0 -51
- data/spec/unit/resource/capability_finder_spec.rb +0 -148
- data/spec/unit/rest/route_spec.rb +0 -132
- data/spec/unit/ssl/host_spec.rb +0 -645
- data/spec/unit/ssl/key_spec.rb +0 -173
- data/spec/unit/ssl/validator_spec.rb +0 -278
- data/spec/unit/status_spec.rb +0 -45
- data/spec/unit/util/ssl_spec.rb +0 -91
@@ -1,10 +0,0 @@
|
|
1
|
-
require 'spec_helper'
|
2
|
-
|
3
|
-
require 'puppet/indirector/status/local'
|
4
|
-
|
5
|
-
describe Puppet::Indirector::Status::Local do
|
6
|
-
it "should set the puppet version" do
|
7
|
-
Puppet::Status.indirection.terminus_class = :local
|
8
|
-
expect(Puppet::Status.indirection.find('*').version).to eq(Puppet.version)
|
9
|
-
end
|
10
|
-
end
|
@@ -1,50 +0,0 @@
|
|
1
|
-
require 'spec_helper'
|
2
|
-
|
3
|
-
require 'puppet/indirector/status/rest'
|
4
|
-
|
5
|
-
describe Puppet::Indirector::Status::Rest do
|
6
|
-
let(:certname) { 'ziggy' }
|
7
|
-
let(:uri) { %r{/puppet/v3/status/ziggy} }
|
8
|
-
let(:formatter) { Puppet::Network::FormatHandler.format(:json) }
|
9
|
-
|
10
|
-
before :each do
|
11
|
-
Puppet[:server] = 'compiler.example.com'
|
12
|
-
Puppet[:serverport] = 8140
|
13
|
-
|
14
|
-
described_class.indirection.terminus_class = :rest
|
15
|
-
end
|
16
|
-
|
17
|
-
def status_response(node)
|
18
|
-
{ body: formatter.render(node), headers: {'Content-Type' => formatter.mime } }
|
19
|
-
end
|
20
|
-
|
21
|
-
it 'finds server status' do
|
22
|
-
node = Puppet::Status.new(certname)
|
23
|
-
|
24
|
-
stub_request(:get, uri).to_return(**status_response(node))
|
25
|
-
|
26
|
-
expect(described_class.indirection.find(certname)).to be_a(Puppet::Status)
|
27
|
-
end
|
28
|
-
|
29
|
-
it 'returns nil if the node does not exist' do
|
30
|
-
stub_request(:get, uri).to_return(status: 404, headers: { 'Content-Type' => 'application/json' }, body: "{}")
|
31
|
-
|
32
|
-
expect(described_class.indirection.find(certname)).to be_nil
|
33
|
-
end
|
34
|
-
|
35
|
-
it 'raises if fail_on_404 is specified' do
|
36
|
-
stub_request(:get, uri).to_return(status: 404, headers: { 'Content-Type' => 'application/json' }, body: "{}")
|
37
|
-
|
38
|
-
expect{
|
39
|
-
described_class.indirection.find(certname, fail_on_404: true)
|
40
|
-
}.to raise_error(Puppet::Error, %r{Find /puppet/v3/status/ziggy resulted in 404 with the message: {}})
|
41
|
-
end
|
42
|
-
|
43
|
-
it 'raises Net::HTTPError on 500' do
|
44
|
-
stub_request(:get, uri).to_return(status: 500)
|
45
|
-
|
46
|
-
expect{
|
47
|
-
described_class.indirection.find(certname)
|
48
|
-
}.to raise_error(Net::HTTPError, %r{Error 500 on SERVER: })
|
49
|
-
end
|
50
|
-
end
|
@@ -1,38 +0,0 @@
|
|
1
|
-
require 'spec_helper'
|
2
|
-
require 'puppet/module_tool/applications'
|
3
|
-
require 'puppet_spec/modules'
|
4
|
-
|
5
|
-
describe Puppet::ModuleTool::Applications::Searcher do
|
6
|
-
include PuppetSpec::Files
|
7
|
-
|
8
|
-
describe "when searching" do
|
9
|
-
let(:forge) { double('forge', :host => 'http://nowhe.re') }
|
10
|
-
let(:searcher) do
|
11
|
-
described_class.new('search_term', forge)
|
12
|
-
end
|
13
|
-
|
14
|
-
it "should return results from a forge query when successful" do
|
15
|
-
results = 'mock results'
|
16
|
-
expect(forge).to receive(:search).with('search_term').and_return(results)
|
17
|
-
|
18
|
-
search_result = searcher.run
|
19
|
-
expect(search_result).to eq({
|
20
|
-
:result => :success,
|
21
|
-
:answers => results,
|
22
|
-
})
|
23
|
-
end
|
24
|
-
|
25
|
-
it "should return an error when the forge query throws an exception" do
|
26
|
-
expect(forge).to receive(:search).with('search_term').and_raise(Puppet::Forge::Errors::ForgeError.new("something went wrong"))
|
27
|
-
|
28
|
-
search_result = searcher.run
|
29
|
-
expect(search_result).to eq({
|
30
|
-
:result => :failure,
|
31
|
-
:error => {
|
32
|
-
:oneline => 'something went wrong',
|
33
|
-
:multiline => 'something went wrong',
|
34
|
-
},
|
35
|
-
})
|
36
|
-
end
|
37
|
-
end
|
38
|
-
end
|
@@ -1,115 +0,0 @@
|
|
1
|
-
require 'spec_helper'
|
2
|
-
require 'puppet/network/auth_config_parser'
|
3
|
-
require 'puppet/network/authconfig'
|
4
|
-
|
5
|
-
describe Puppet::Network::AuthConfigParser do
|
6
|
-
include PuppetSpec::Files
|
7
|
-
|
8
|
-
let(:fake_authconfig) do
|
9
|
-
"path ~ ^/catalog/([^/])\nmethod find\nallow *\n"
|
10
|
-
end
|
11
|
-
|
12
|
-
describe "Basic Parser" do
|
13
|
-
it "should accept a string by default" do
|
14
|
-
expect(described_class.new(fake_authconfig).parse).to be_a_kind_of Puppet::Network::AuthConfig
|
15
|
-
end
|
16
|
-
end
|
17
|
-
|
18
|
-
describe "when parsing rights" do
|
19
|
-
it "skips comments" do
|
20
|
-
expect(described_class.new(' # comment\n').parse_rights).to be_empty
|
21
|
-
end
|
22
|
-
|
23
|
-
it "increments line number even on commented lines" do
|
24
|
-
expect(described_class.new(" # comment\npath /").parse_rights['/'].line).to eq(2)
|
25
|
-
end
|
26
|
-
|
27
|
-
it "skips blank lines" do
|
28
|
-
expect(described_class.new(' ').parse_rights).to be_empty
|
29
|
-
end
|
30
|
-
|
31
|
-
it "increments line number even on blank lines" do
|
32
|
-
expect(described_class.new(" \npath /").parse_rights['/'].line).to eq(2)
|
33
|
-
end
|
34
|
-
|
35
|
-
it "does not throw an error if the same path appears twice" do
|
36
|
-
expect {
|
37
|
-
described_class.new("path /hello\npath /hello").parse_rights
|
38
|
-
}.to_not raise_error
|
39
|
-
end
|
40
|
-
|
41
|
-
it "should create a new right for each found path line" do
|
42
|
-
expect(described_class.new('path /certificates').parse_rights['/certificates']).to be
|
43
|
-
end
|
44
|
-
|
45
|
-
it "should create a new right for each found regex line" do
|
46
|
-
expect(described_class.new('path ~ .rb$').parse_rights['.rb$']).to be
|
47
|
-
end
|
48
|
-
|
49
|
-
it "should strip whitespace around ACE" do
|
50
|
-
expect_any_instance_of(Puppet::Network::Rights::Right).to receive(:allow).with('127.0.0.1')
|
51
|
-
expect_any_instance_of(Puppet::Network::Rights::Right).to receive(:allow).with('172.16.10.0')
|
52
|
-
|
53
|
-
described_class.new("path /\n allow 127.0.0.1 , 172.16.10.0 ").parse_rights
|
54
|
-
end
|
55
|
-
|
56
|
-
it "should allow ACE inline comments" do
|
57
|
-
expect_any_instance_of(Puppet::Network::Rights::Right).to receive(:allow).with('127.0.0.1')
|
58
|
-
|
59
|
-
described_class.new("path /\n allow 127.0.0.1 # will it work?").parse_rights
|
60
|
-
end
|
61
|
-
|
62
|
-
it "should create an allow ACE on each subsequent allow" do
|
63
|
-
expect_any_instance_of(Puppet::Network::Rights::Right).to receive(:allow).with('127.0.0.1')
|
64
|
-
|
65
|
-
described_class.new("path /\nallow 127.0.0.1").parse_rights
|
66
|
-
end
|
67
|
-
|
68
|
-
it "should create a deny ACE on each subsequent deny" do
|
69
|
-
expect_any_instance_of(Puppet::Network::Rights::Right).to receive(:deny).with('127.0.0.1')
|
70
|
-
|
71
|
-
described_class.new("path /\ndeny 127.0.0.1").parse_rights
|
72
|
-
end
|
73
|
-
|
74
|
-
it "should inform the current ACL if we get the 'method' directive" do
|
75
|
-
expect_any_instance_of(Puppet::Network::Rights::Right).to receive(:restrict_method).with('search')
|
76
|
-
expect_any_instance_of(Puppet::Network::Rights::Right).to receive(:restrict_method).with('find')
|
77
|
-
|
78
|
-
described_class.new("path /certificates\nmethod search,find").parse_rights
|
79
|
-
end
|
80
|
-
|
81
|
-
it "should inform the current ACL if we get the 'environment' directive" do
|
82
|
-
expect_any_instance_of(Puppet::Network::Rights::Right).to receive(:restrict_environment).with('production')
|
83
|
-
expect_any_instance_of(Puppet::Network::Rights::Right).to receive(:restrict_environment).with('development')
|
84
|
-
|
85
|
-
described_class.new("path /certificates\nenvironment production,development").parse_rights
|
86
|
-
end
|
87
|
-
|
88
|
-
it "should inform the current ACL if we get the 'auth' directive" do
|
89
|
-
expect_any_instance_of(Puppet::Network::Rights::Right).to receive(:restrict_authenticated).with('yes')
|
90
|
-
|
91
|
-
described_class.new("path /certificates\nauth yes").parse_rights
|
92
|
-
end
|
93
|
-
|
94
|
-
it "should also allow the long form 'authenticated' directive" do
|
95
|
-
expect_any_instance_of(Puppet::Network::Rights::Right).to receive(:restrict_authenticated).with('yes')
|
96
|
-
|
97
|
-
described_class.new("path /certificates\nauthenticated yes").parse_rights
|
98
|
-
end
|
99
|
-
end
|
100
|
-
|
101
|
-
describe "when parsing rights from files" do
|
102
|
-
it "can read UTF-8" do
|
103
|
-
rune_path = "/\u16A0\u16C7\u16BB" # ᚠᛇᚻ
|
104
|
-
config = tmpfile('config')
|
105
|
-
|
106
|
-
File.open(config, 'w', :encoding => 'utf-8') do |file|
|
107
|
-
file.puts <<-EOF
|
108
|
-
path #{rune_path}
|
109
|
-
EOF
|
110
|
-
end
|
111
|
-
|
112
|
-
expect(described_class.new_from_file(config).parse_rights[rune_path]).to be
|
113
|
-
end
|
114
|
-
end
|
115
|
-
end
|
@@ -1,422 +0,0 @@
|
|
1
|
-
require 'spec_helper'
|
2
|
-
require 'rbconfig'
|
3
|
-
|
4
|
-
require 'puppet/network/authconfig'
|
5
|
-
|
6
|
-
describe Puppet::Network::AuthStore do
|
7
|
-
before :each do
|
8
|
-
@authstore = Puppet::Network::AuthStore.new
|
9
|
-
@authstore.reset_interpolation
|
10
|
-
end
|
11
|
-
|
12
|
-
describe "when checking if the acl has some entries" do
|
13
|
-
it "should be empty if no ACE have been entered" do
|
14
|
-
expect(@authstore).to be_empty
|
15
|
-
end
|
16
|
-
|
17
|
-
it "should not be empty if it is a global allow" do
|
18
|
-
@authstore.allow('*')
|
19
|
-
|
20
|
-
expect(@authstore).not_to be_empty
|
21
|
-
end
|
22
|
-
|
23
|
-
it "should not be empty if at least one allow has been entered" do
|
24
|
-
@authstore.allow_ip('1.1.1.*')
|
25
|
-
|
26
|
-
expect(@authstore).not_to be_empty
|
27
|
-
end
|
28
|
-
|
29
|
-
it "should not be empty if at least one deny has been entered" do
|
30
|
-
@authstore.deny_ip('1.1.1.*')
|
31
|
-
|
32
|
-
expect(@authstore).not_to be_empty
|
33
|
-
end
|
34
|
-
end
|
35
|
-
|
36
|
-
describe "when checking global allow" do
|
37
|
-
it "should not be enabled by default" do
|
38
|
-
expect(@authstore).not_to be_globalallow
|
39
|
-
expect(@authstore).not_to be_allowed('foo.bar.com', '192.168.1.1')
|
40
|
-
end
|
41
|
-
|
42
|
-
it "should always allow when enabled" do
|
43
|
-
@authstore.allow('*')
|
44
|
-
|
45
|
-
expect(@authstore).to be_globalallow
|
46
|
-
expect(@authstore).to be_allowed('foo.bar.com', '192.168.1.1')
|
47
|
-
end
|
48
|
-
end
|
49
|
-
|
50
|
-
describe "when checking a regex type of allow" do
|
51
|
-
before :each do
|
52
|
-
@authstore.allow('/^(test-)?host[0-9]+\.other-domain\.(com|org|net)$|some-domain\.com/')
|
53
|
-
@ip = '192.168.1.1'
|
54
|
-
end
|
55
|
-
['host5.other-domain.com', 'test-host12.other-domain.net', 'foo.some-domain.com'].each { |name|
|
56
|
-
it "should allow the host #{name}" do
|
57
|
-
expect(@authstore).to be_allowed(name, @ip)
|
58
|
-
end
|
59
|
-
}
|
60
|
-
['host0.some-other-domain.com',''].each { |name|
|
61
|
-
it "should not allow the host #{name}" do
|
62
|
-
expect(@authstore).not_to be_allowed(name, @ip)
|
63
|
-
end
|
64
|
-
}
|
65
|
-
end
|
66
|
-
end
|
67
|
-
|
68
|
-
describe Puppet::Network::AuthStore::Declaration do
|
69
|
-
|
70
|
-
['100.101.99.98','100.100.100.100','1.2.3.4','11.22.33.44'].each { |ip|
|
71
|
-
describe "when the pattern is a simple numeric IP such as #{ip}" do
|
72
|
-
before :each do
|
73
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow_ip,ip)
|
74
|
-
end
|
75
|
-
it "should match the specified IP" do
|
76
|
-
expect(@declaration).to be_match('www.testsite.org',ip)
|
77
|
-
end
|
78
|
-
it "should not match other IPs" do
|
79
|
-
expect(@declaration).not_to be_match('www.testsite.org','200.101.99.98')
|
80
|
-
end
|
81
|
-
end
|
82
|
-
|
83
|
-
(1..3).each { |n|
|
84
|
-
describe "when the pattern is an IP mask with #{n} numeric segments and a *" do
|
85
|
-
before :each do
|
86
|
-
@ip_pattern = ip.split('.')[0,n].join('.')+'.*'
|
87
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow_ip,@ip_pattern)
|
88
|
-
end
|
89
|
-
it "should match an IP in the range" do
|
90
|
-
expect(@declaration).to be_match('www.testsite.org',ip)
|
91
|
-
end
|
92
|
-
it "should not match other IPs" do
|
93
|
-
expect(@declaration).not_to be_match('www.testsite.org','200.101.99.98')
|
94
|
-
end
|
95
|
-
it "should not match IPs that differ in the last non-wildcard segment" do
|
96
|
-
other = ip.split('.')
|
97
|
-
other[n-1].succ!
|
98
|
-
expect(@declaration).not_to be_match('www.testsite.org',other.join('.'))
|
99
|
-
end
|
100
|
-
end
|
101
|
-
}
|
102
|
-
}
|
103
|
-
|
104
|
-
describe "when the pattern is a numeric IP with a back reference" do
|
105
|
-
pending("implementation of backreferences for IP") do
|
106
|
-
before :each do
|
107
|
-
@ip = '100.101.$1'
|
108
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow_ip,@ip).interpolate('12.34'.match(/(.*)/))
|
109
|
-
end
|
110
|
-
it "should match an IP with the appropriate interpolation" do
|
111
|
-
@declaration.should be_match('www.testsite.org',@ip.sub(/\$1/,'12.34'))
|
112
|
-
end
|
113
|
-
it "should not match other IPs" do
|
114
|
-
@declaration.should_not be_match('www.testsite.org',@ip.sub(/\$1/,'66.34'))
|
115
|
-
end
|
116
|
-
end
|
117
|
-
end
|
118
|
-
|
119
|
-
[
|
120
|
-
"02001:0000:1234:0000:0000:C1C0:ABCD:0876",
|
121
|
-
"2001:0000:1234:0000:00001:C1C0:ABCD:0876",
|
122
|
-
" 2001:0000:1234:0000:0000:C1C0:ABCD:0876 0",
|
123
|
-
"2001:0000:1234: 0000:0000:C1C0:ABCD:0876",
|
124
|
-
"3ffe:0b00:0000:0001:0000:0000:000a",
|
125
|
-
"FF02:0000:0000:0000:0000:0000:0000:0000:0001",
|
126
|
-
"3ffe:b00::1::a",
|
127
|
-
"1:2:3::4:5::7:8",
|
128
|
-
"12345::6:7:8",
|
129
|
-
"1::5:400.2.3.4",
|
130
|
-
"1::5:260.2.3.4",
|
131
|
-
"1::5:256.2.3.4",
|
132
|
-
"1::5:1.256.3.4",
|
133
|
-
"1::5:1.2.256.4",
|
134
|
-
"1::5:1.2.3.256",
|
135
|
-
"1::5:300.2.3.4",
|
136
|
-
"1::5:1.300.3.4",
|
137
|
-
"1::5:1.2.300.4",
|
138
|
-
"1::5:1.2.3.300",
|
139
|
-
"1::5:900.2.3.4",
|
140
|
-
"1::5:1.900.3.4",
|
141
|
-
"1::5:1.2.900.4",
|
142
|
-
"1::5:1.2.3.900",
|
143
|
-
"1::5:300.300.300.300",
|
144
|
-
"1::5:3000.30.30.30",
|
145
|
-
"1::400.2.3.4",
|
146
|
-
"1::260.2.3.4",
|
147
|
-
"1::256.2.3.4",
|
148
|
-
"1::1.256.3.4",
|
149
|
-
"1::1.2.256.4",
|
150
|
-
"1::1.2.3.256",
|
151
|
-
"1::300.2.3.4",
|
152
|
-
"1::1.300.3.4",
|
153
|
-
"1::1.2.300.4",
|
154
|
-
"1::1.2.3.300",
|
155
|
-
"1::900.2.3.4",
|
156
|
-
"1::1.900.3.4",
|
157
|
-
"1::1.2.900.4",
|
158
|
-
"1::1.2.3.900",
|
159
|
-
"1::300.300.300.300",
|
160
|
-
"1::3000.30.30.30",
|
161
|
-
"::400.2.3.4",
|
162
|
-
"::260.2.3.4",
|
163
|
-
"::256.2.3.4",
|
164
|
-
"::1.256.3.4",
|
165
|
-
"::1.2.256.4",
|
166
|
-
"::1.2.3.256",
|
167
|
-
"::300.2.3.4",
|
168
|
-
"::1.300.3.4",
|
169
|
-
"::1.2.300.4",
|
170
|
-
"::1.2.3.300",
|
171
|
-
"::900.2.3.4",
|
172
|
-
"::1.900.3.4",
|
173
|
-
"::1.2.900.4",
|
174
|
-
"::1.2.3.900",
|
175
|
-
"::300.300.300.300",
|
176
|
-
"::3000.30.30.30",
|
177
|
-
"2001:DB8:0:0:8:800:200C:417A:221", # unicast, full
|
178
|
-
"FF01::101::2" # multicast, compressed
|
179
|
-
].each { |invalid_ip|
|
180
|
-
describe "when the pattern is an invalid IPv6 address such as #{invalid_ip}" do
|
181
|
-
it "should raise an exception" do
|
182
|
-
expect { Puppet::Network::AuthStore::Declaration.new(:allow,invalid_ip) }.to raise_error(Puppet::AuthStoreError, /Invalid pattern/)
|
183
|
-
end
|
184
|
-
end
|
185
|
-
}
|
186
|
-
|
187
|
-
[
|
188
|
-
"1.2.3.4",
|
189
|
-
"2001:0000:1234:0000:0000:C1C0:ABCD:0876",
|
190
|
-
"3ffe:0b00:0000:0000:0001:0000:0000:000a",
|
191
|
-
"FF02:0000:0000:0000:0000:0000:0000:0001",
|
192
|
-
"0000:0000:0000:0000:0000:0000:0000:0001",
|
193
|
-
"0000:0000:0000:0000:0000:0000:0000:0000",
|
194
|
-
"::ffff:192.168.1.26",
|
195
|
-
"2::10",
|
196
|
-
"ff02::1",
|
197
|
-
"fe80::",
|
198
|
-
"2002::",
|
199
|
-
"2001:db8::",
|
200
|
-
"2001:0db8:1234::",
|
201
|
-
"::ffff:0:0",
|
202
|
-
"::1",
|
203
|
-
"::ffff:192.168.1.1",
|
204
|
-
"1:2:3:4:5:6:7:8",
|
205
|
-
"1:2:3:4:5:6::8",
|
206
|
-
"1:2:3:4:5::8",
|
207
|
-
"1:2:3:4::8",
|
208
|
-
"1:2:3::8",
|
209
|
-
"1:2::8",
|
210
|
-
"1::8",
|
211
|
-
"1::2:3:4:5:6:7",
|
212
|
-
"1::2:3:4:5:6",
|
213
|
-
"1::2:3:4:5",
|
214
|
-
"1::2:3:4",
|
215
|
-
"1::2:3",
|
216
|
-
"1::8",
|
217
|
-
"::2:3:4:5:6:7",
|
218
|
-
"::2:3:4:5:6",
|
219
|
-
"::2:3:4:5",
|
220
|
-
"::2:3:4",
|
221
|
-
"::2:3",
|
222
|
-
"::8",
|
223
|
-
"1:2:3:4:5:6::",
|
224
|
-
"1:2:3:4:5::",
|
225
|
-
"1:2:3:4::",
|
226
|
-
"1:2:3::",
|
227
|
-
"1:2::",
|
228
|
-
"1::",
|
229
|
-
"1:2:3:4:5::7:8",
|
230
|
-
"1:2:3:4::7:8",
|
231
|
-
"1:2:3::7:8",
|
232
|
-
"1:2::7:8",
|
233
|
-
"1::7:8",
|
234
|
-
"1:2:3:4:5:6:1.2.3.4",
|
235
|
-
"1:2:3:4:5::1.2.3.4",
|
236
|
-
"1:2:3:4::1.2.3.4",
|
237
|
-
"1:2:3::1.2.3.4",
|
238
|
-
"1:2::1.2.3.4",
|
239
|
-
"1::1.2.3.4",
|
240
|
-
"1:2:3:4::5:1.2.3.4",
|
241
|
-
"1:2:3::5:1.2.3.4",
|
242
|
-
"1:2::5:1.2.3.4",
|
243
|
-
"1::5:1.2.3.4",
|
244
|
-
"1::5:11.22.33.44",
|
245
|
-
"fe80::217:f2ff:254.7.237.98",
|
246
|
-
"fe80::217:f2ff:fe07:ed62",
|
247
|
-
"2001:DB8:0:0:8:800:200C:417A", # unicast, full
|
248
|
-
"FF01:0:0:0:0:0:0:101", # multicast, full
|
249
|
-
"0:0:0:0:0:0:0:1", # loopback, full
|
250
|
-
"0:0:0:0:0:0:0:0", # unspecified, full
|
251
|
-
"2001:DB8::8:800:200C:417A", # unicast, compressed
|
252
|
-
"FF01::101", # multicast, compressed
|
253
|
-
"::1", # loopback, compressed, non-routable
|
254
|
-
"::", # unspecified, compressed, non-routable
|
255
|
-
"0:0:0:0:0:0:13.1.68.3", # IPv4-compatible IPv6 address, full, deprecated
|
256
|
-
"0:0:0:0:0:FFFF:129.144.52.38", # IPv4-mapped IPv6 address, full
|
257
|
-
"::13.1.68.3", # IPv4-compatible IPv6 address, compressed, deprecated
|
258
|
-
"::FFFF:129.144.52.38", # IPv4-mapped IPv6 address, compressed
|
259
|
-
"2001:0DB8:0000:CD30:0000:0000:0000:0000/60", # full, with prefix
|
260
|
-
"2001:0DB8::CD30:0:0:0:0/60", # compressed, with prefix
|
261
|
-
"2001:0DB8:0:CD30::/60", # compressed, with prefix #2
|
262
|
-
"::/128", # compressed, unspecified address type, non-routable
|
263
|
-
"::1/128", # compressed, loopback address type, non-routable
|
264
|
-
"FF00::/8", # compressed, multicast address type
|
265
|
-
"FE80::/10", # compressed, link-local unicast, non-routable
|
266
|
-
"FEC0::/10", # compressed, site-local unicast, deprecated
|
267
|
-
"127.0.0.1", # standard IPv4, loopback, non-routable
|
268
|
-
"0.0.0.0", # standard IPv4, unspecified, non-routable
|
269
|
-
"255.255.255.255", # standard IPv4
|
270
|
-
"fe80:0000:0000:0000:0204:61ff:fe9d:f156",
|
271
|
-
"fe80:0:0:0:204:61ff:fe9d:f156",
|
272
|
-
"fe80::204:61ff:fe9d:f156",
|
273
|
-
"fe80:0000:0000:0000:0204:61ff:254.157.241.086",
|
274
|
-
"fe80:0:0:0:204:61ff:254.157.241.86",
|
275
|
-
"fe80::204:61ff:254.157.241.86",
|
276
|
-
"::1",
|
277
|
-
"fe80::",
|
278
|
-
"fe80::1"
|
279
|
-
].each { |ip|
|
280
|
-
describe "when the pattern is a valid IP such as #{ip}" do
|
281
|
-
before :each do
|
282
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow_ip,ip)
|
283
|
-
end
|
284
|
-
it "should match the specified IP" do
|
285
|
-
expect(@declaration).to be_match('www.testsite.org',ip)
|
286
|
-
end
|
287
|
-
it "should not match other IPs" do
|
288
|
-
expect(@declaration).not_to be_match('www.testsite.org','200.101.99.98')
|
289
|
-
end
|
290
|
-
end unless ip =~ /:.*\./ # Hybrid IPs aren't supported by ruby's ipaddr
|
291
|
-
}
|
292
|
-
|
293
|
-
[
|
294
|
-
"::2:3:4:5:6:7:8",
|
295
|
-
].each { |ip|
|
296
|
-
describe "when the pattern is a valid IP such as #{ip}" do
|
297
|
-
let(:declaration) do
|
298
|
-
Puppet::Network::AuthStore::Declaration.new(:allow_ip,ip)
|
299
|
-
end
|
300
|
-
|
301
|
-
issue_7477 = !(IPAddr.new(ip) rescue false)
|
302
|
-
|
303
|
-
describe "on rubies with a fix for issue [7477](https://goo.gl/Bb1LU)", :if => issue_7477
|
304
|
-
it "should match the specified IP" do
|
305
|
-
expect(declaration).to be_match('www.testsite.org',ip)
|
306
|
-
end
|
307
|
-
it "should not match other IPs" do
|
308
|
-
expect(declaration).not_to be_match('www.testsite.org','200.101.99.98')
|
309
|
-
end
|
310
|
-
end
|
311
|
-
}
|
312
|
-
|
313
|
-
{
|
314
|
-
'spirit.mars.nasa.gov' => 'a PQDN',
|
315
|
-
'ratchet.2ndsiteinc.com' => 'a PQDN with digits',
|
316
|
-
'a.c.ru' => 'a PQDN with short segments',
|
317
|
-
}.each {|pqdn,desc|
|
318
|
-
describe "when the pattern is #{desc}" do
|
319
|
-
before :each do
|
320
|
-
@host = pqdn
|
321
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow,@host)
|
322
|
-
end
|
323
|
-
it "should match the specified PQDN" do
|
324
|
-
expect(@declaration).to be_match(@host,'200.101.99.98')
|
325
|
-
end
|
326
|
-
it "should not match a similar FQDN" do
|
327
|
-
pending "FQDN consensus"
|
328
|
-
expect(@declaration).not_to be_match(@host+'.','200.101.99.98')
|
329
|
-
end
|
330
|
-
end
|
331
|
-
}
|
332
|
-
|
333
|
-
['abc.12seps.edu.phisher.biz','www.google.com','slashdot.org'].each { |host|
|
334
|
-
(1...(host.split('.').length)).each { |n|
|
335
|
-
describe "when the pattern is #{"*."+host.split('.')[-n,n].join('.')}" do
|
336
|
-
before :each do
|
337
|
-
@pattern = "*."+host.split('.')[-n,n].join('.')
|
338
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow,@pattern)
|
339
|
-
end
|
340
|
-
it "should match #{host}" do
|
341
|
-
expect(@declaration).to be_match(host,'1.2.3.4')
|
342
|
-
end
|
343
|
-
it "should not match www.testsite.gov" do
|
344
|
-
expect(@declaration).not_to be_match('www.testsite.gov','200.101.99.98')
|
345
|
-
end
|
346
|
-
it "should not match hosts that differ in the first non-wildcard segment" do
|
347
|
-
other = host.split('.')
|
348
|
-
other[-n].succ!
|
349
|
-
expect(@declaration).not_to be_match(other.join('.'),'1.2.3.4')
|
350
|
-
end
|
351
|
-
end
|
352
|
-
}
|
353
|
-
}
|
354
|
-
|
355
|
-
describe "when the pattern is a FQDN" do
|
356
|
-
before :each do
|
357
|
-
@host = 'spirit.mars.nasa.gov.'
|
358
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow,@host)
|
359
|
-
end
|
360
|
-
it "should match the specified FQDN" do
|
361
|
-
pending "FQDN consensus"
|
362
|
-
expect(@declaration).to be_match(@host,'200.101.99.98')
|
363
|
-
end
|
364
|
-
it "should not match a similar PQDN" do
|
365
|
-
expect(@declaration).not_to be_match(@host[0..-2],'200.101.99.98')
|
366
|
-
end
|
367
|
-
end
|
368
|
-
|
369
|
-
|
370
|
-
describe "when the pattern is an opaque string with a back reference" do
|
371
|
-
before :each do
|
372
|
-
@host = 'c216f41a-f902-4bfb-a222-850dd957bebb'
|
373
|
-
@item = "/catalog/#{@host}"
|
374
|
-
@pattern = %{^/catalog/([^/]+)$}
|
375
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow,'$1')
|
376
|
-
end
|
377
|
-
it "should match an IP with the appropriate interpolation" do
|
378
|
-
expect(@declaration.interpolate(@item.match(@pattern))).to be_match(@host,'10.0.0.5')
|
379
|
-
end
|
380
|
-
end
|
381
|
-
|
382
|
-
describe "when the pattern is an opaque string with a back reference and the matched data contains dots" do
|
383
|
-
before :each do
|
384
|
-
@host = 'admin.mgmt.nym1'
|
385
|
-
@item = "/catalog/#{@host}"
|
386
|
-
@pattern = %{^/catalog/([^/]+)$}
|
387
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow,'$1')
|
388
|
-
end
|
389
|
-
it "should match a name with the appropriate interpolation" do
|
390
|
-
expect(@declaration.interpolate(@item.match(@pattern))).to be_match(@host,'10.0.0.5')
|
391
|
-
end
|
392
|
-
end
|
393
|
-
|
394
|
-
describe "when the pattern is an opaque string with a back reference and the matched data contains dots with an initial prefix that looks like an IP address" do
|
395
|
-
before :each do
|
396
|
-
@host = '01.admin.mgmt.nym1'
|
397
|
-
@item = "/catalog/#{@host}"
|
398
|
-
@pattern = %{^/catalog/([^/]+)$}
|
399
|
-
@declaration = Puppet::Network::AuthStore::Declaration.new(:allow,'$1')
|
400
|
-
end
|
401
|
-
it "should match a name with the appropriate interpolation" do
|
402
|
-
expect(@declaration.interpolate(@item.match(@pattern))).to be_match(@host,'10.0.0.5')
|
403
|
-
end
|
404
|
-
end
|
405
|
-
|
406
|
-
describe "when comparing patterns" do
|
407
|
-
before :each do
|
408
|
-
@ip = Puppet::Network::AuthStore::Declaration.new(:allow,'127.0.0.1')
|
409
|
-
@host_name = Puppet::Network::AuthStore::Declaration.new(:allow,'www.hard_knocks.edu')
|
410
|
-
@opaque = Puppet::Network::AuthStore::Declaration.new(:allow,'hey_dude')
|
411
|
-
end
|
412
|
-
it "should consider ip addresses before host names" do
|
413
|
-
expect(@ip < @host_name).to be_truthy
|
414
|
-
end
|
415
|
-
it "should consider ip addresses before opaque strings" do
|
416
|
-
expect(@ip < @opaque).to be_truthy
|
417
|
-
end
|
418
|
-
it "should consider host_names before opaque strings" do
|
419
|
-
expect(@host_name < @opaque).to be_truthy
|
420
|
-
end
|
421
|
-
end
|
422
|
-
end
|