summaryrefslogtreecommitdiff
path: root/lib/chef/dsl
diff options
context:
space:
mode:
authortyler-ball <tyleraball@gmail.com>2014-09-11 14:55:55 -0700
committertyler-ball <tyleraball@gmail.com>2014-09-29 08:31:08 -0700
commitd24ec65aced97b96188ffcc439f4f3cccdd41443 (patch)
tree7d22d0dc156d79650d289416a220af92685c4b74 /lib/chef/dsl
parent71f7c6e463220cf492d5ac38c2cfbeb96defbeba (diff)
downloadchef-d24ec65aced97b96188ffcc439f4f3cccdd41443.tar.gz
Refactoring duplicated code into a separate module. Also making CLI options more informative
Diffstat (limited to 'lib/chef/dsl')
-rw-r--r--lib/chef/dsl/data_query.rb31
1 files changed, 2 insertions, 29 deletions
diff --git a/lib/chef/dsl/data_query.rb b/lib/chef/dsl/data_query.rb
index 3dafbca6bf..e36784271a 100644
--- a/lib/chef/dsl/data_query.rb
+++ b/lib/chef/dsl/data_query.rb
@@ -20,6 +20,7 @@ require 'chef/search/query'
require 'chef/data_bag'
require 'chef/data_bag_item'
require 'chef/encrypted_data_bag_item'
+require 'chef/encrypted_data_bag_item/check_encrypted'
class Chef
module DSL
@@ -28,6 +29,7 @@ class Chef
# Provides DSL for querying data from the chef-server via search or data
# bag.
module DataQuery
+ include Chef::EncryptedDataBagItem::CheckEncrypted
def search(*args, &block)
# If you pass a block, or have at least the start argument, do raw result parsing
@@ -78,35 +80,6 @@ class Chef
raise
end
- private
-
- # Tries to autodetect if the item's raw hash appears to be encrypted.
- def encrypted?(raw_data)
- data = raw_data.reject { |k, _| k == "id" } # Remove the "id" key.
- # Assume hashes containing only the "id" key are not encrypted.
- # Otherwise, remove the keys that don't appear to be encrypted and compare
- # the result with the hash. If some entry has been removed, then some entry
- # doesn't appear to be encrypted and we assume the entire hash is not encrypted.
- data.empty? ? false : data.reject { |_, v| !looks_like_encrypted?(v) } == data
- end
-
- # Checks if data looks like it has been encrypted by
- # Chef::EncryptedDataBagItem::Encryptor::VersionXEncryptor. Returns
- # true only when there is an exact match between the VersionXEncryptor
- # keys and the hash's keys.
- def looks_like_encrypted?(data)
- return false unless data.is_a?(Hash) && data.has_key?("version")
- case data["version"]
- when 1
- Chef::EncryptedDataBagItem::Encryptor::Version1Encryptor.encryptor_keys.sort == data.keys.sort
- when 2
- Chef::EncryptedDataBagItem::Encryptor::Version2Encryptor.encryptor_keys.sort == data.keys.sort
- when 3
- Chef::EncryptedDataBagItem::Encryptor::Version3Encryptor.encryptor_keys.sort == data.keys.sort
- else
- false # version means something else... assume not encrypted.
- end
- end
end
end
end