summaryrefslogtreecommitdiff
path: root/lib/chef/client.rb
Commit message (Collapse)AuthorAgeFilesLines
* convert cli argument to int, tidy exception messageClaire McQuin2014-05-061-6/+1
|
* add option to abandon chef run if blocked by another for too longClaire McQuin2014-05-051-4/+8
|
* Check SSL configuration once per client run.danielsdeleo2014-03-241-4/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We want to ensure users see this. Also add a longer description of the risks of the verify_none setting and a pointer to `knife ssl check` for troubleshooting help. The warning message looks like this: * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * SSL validation of HTTPS requests is disabled. HTTPS connections are still encrypted, but chef is not able to detect forged replies or man in the middle attacks. To fix this issue add an entry like this to your configuration file: ``` # Verify all HTTPS connections (recommended) ssl_verify_mode :verify_peer # OR, Verify only connections to chef-server verify_api_cert true ``` To check your SSL configuration, or troubleshoot errors, you can use the `knife ssl check` command like so: ``` knife ssl check -c /etc/chef/client.rb ``` * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * ** * * * *
* use local config var in #registerLamont Granquist2014-03-241-1/+1
|
* CHEF-5134: Warn on no SSL verificationLamont Granquist2014-03-241-0/+4
| | | | | | | | | | only checking before we register the node to avoid spamming SSL verification errors on every single connection. because its in register it shouldn't warn in solo/apply use cases (you still can use remote_file in those so maybe we should also warn there? i decided that'd be more annoying than typically useful, YMMV...)
* move exception message into objectLamont Granquist2014-03-051-4/+1
|
* add ohai[:machinename]Lamont Granquist2014-03-051-1/+1
| | | | | | | | | | | | this is an ohai 7 attribute that == the output of /bin/hostname - if the FQDN exists we still prefer that, but requires correct DNS - if the machinename exists then we use that, but requires ohai 7 - then we default to the hostname which should exist on ohai 6, (but sometimes doesn't on some distros?) machinename should always be set on ohai 7, so we should entirely stop seeing CannotDetermineNodeName after it rolls out.
* Add permanent run list modification option to Chef::Clientdanielsdeleo2014-02-201-11/+15
|
* Modernize and organize Chef::Client specsdanielsdeleo2014-02-201-1/+9
|
* - Adding X-Remote-Request-Id to the set of headers for every request from ↵PrajaktaPurohit2014-02-071-0/+6
| | | | | | | | | | CCR and knife that will be sent to erchef - Each knife request has a different X-Remote-Request-Id, where as it remains the same for all requests originating from the same chef-client run. - Adding and fixing tests
* [CHEF-3506] suppress final node save when using override run listdanielsdeleo2014-02-031-5/+5
|
* Delegate sync_cookbooks to policy_builder, subclasses rely on itdanielsdeleo2014-02-031-0/+4
|
* Add public API for expanding run_list in Chef::Clientdanielsdeleo2014-01-231-0/+24
| | | | | External projects like chefspec need to do this separately so they can inject custom behavior before/after.
* Return node from Chef::Client#build_nodedanielsdeleo2014-01-231-0/+1
|
* Add indirection to allow switching policy builder implementationsdanielsdeleo2014-01-211-1/+1
|
* Extract policy building concerns from Chef::Clientdanielsdeleo2014-01-141-152/+16
| | | | | | Chef::Client has too many responsibilities that are difficult to test in isolation. Refactor them out to an implementation class. This is a prerequsite for providing alternative policy building strategies.
* Add ability to run recipes directly from chef-client command lineJohn Keiser2013-12-061-0/+6
|
* Modify a message when any cookbook is not found.Ryota Arai2013-11-261-1/+1
|
* Raise an error if any directory of `cookbook_path` contains no cookbook.Ryota Arai2013-11-261-9/+6
|
* Raise CookbookNotFound error if any directory of cookbook_path contains no ↵Ryota Arai2013-11-261-11/+8
| | | | cookbook.
* Improve an error message "No cookbook found".Ryota Arai2013-11-261-2/+5
|
* compute elapsed time without altering public apiRanjib Dey2013-11-061-2/+2
|
* pass elapsed time along with node/exception in event hanldersRanjib Dey2013-11-061-2/+2
|
* Stacktrace should be hidden by defaultdanielsdeleo2013-10-241-2/+2
| | | | | In testing, some errors were showing a full stacktrace when not using -l debug.
* Make waiting for the release of the lock optional in RunLock class.sersut2013-10-071-0/+1
|
* Start chef-client in new process when it is run as a service on windowsMukta A2013-10-041-0/+1
|
* Do not require client_key to be specified for chef-client when chef-zero is ↵John Keiser2013-10-021-1/+4
| | | | enabled
* Report error when chef-client throws an exceptionJohn Keiser2013-10-021-0/+1
|
* Use Chef::Config defaults for lockfile defaultJohn Keiser2013-09-161-1/+1
|
* avoid appearing very, very wrongMike Fiedler2013-08-281-1/+1
|
* Exit worker process on INT/TERMdanielsdeleo2013-07-051-1/+2
|
* Print debug stacktraces from within a forked workerdanielsdeleo2013-07-051-6/+27
| | | | | | | | | | | | | | | | | | | | | Fixes CHEF-4357: http://tickets.opscode.com/browse/CHEF-4357 Rescue exceptions from within a forker worker and feed them to `Chef::Application.debug_stacktrace()`, then exit non-zero. This fixes an issue where Chef would spew ruby stacktraces with forking enabled (stacktraces should only be printed to console with `-l debug`). Additionally fixes an issue where a generic exception was passed to `debug_stacktrace`, leaving a stacktrace.out file with no useful information. In addition to the above fixes, includes the following improvements: * Update the forked worker's argv0 to clearly indicate it's the worker process, and include ppid and run start time. * When reaping the worker process, include more useful information when the worker exited non-successfully, such as exit code or signal that killed the process. In particular, OOM kill (e.g., when running resource intensive code compile, etc. on small machine) should be a little more obvious.
* Don't call fork when chef is running on windows.sersut2013-06-131-3/+6
|
* [CHEF-4157] split Platform to prune dep graphdanielsdeleo2013-05-031-1/+1
| | | | | | | Many files/classes depend on Chef::Platform just to use the `windows?` method. The part of Chef::Platform that maps providers to platforms has very heavy dependencies (which may trigger circular deps when loading some files) which are not needed for most users of Chef::Platform.
* Adding the run_started callbackPrajaktaPurohit2013-04-241-0/+1
|
* CHEF-4010 Ensure lock release for all operationsGregoire Seux2013-04-111-10/+10
|
* [CHEF-3919] Removed Chef::Version::Cookbook code and replaced by a ↵Xabier de Zuazo2013-04-111-1/+1
| | | | Chef::Version::Platform class, reverting Chef::Version class changes
* [CHEF-3919] cookbook version specific code factored out from Chef::Version, ↵Xabier de Zuazo2013-04-111-1/+1
| | | | new classes created: Chef::Version::Cookbook and Chef::VersionConstraint::Cookbook
* Fix typo: privilage -> privilegesersut2013-01-221-6/+6
|
* Include windows admin privilege check in chef-solo as well.sersut2013-01-221-1/+1
|
* Tests for the windows admin privilege check logic.sersut2013-01-221-21/+24
|
* Actual logic for doing administrator privilege check for windows.sersut2013-01-221-1/+5
|
* Introducing windows_admin_check and config option to make it fatal.sersut2013-01-221-0/+21
|
* CHEF-3571 add chef-recipe commandBryan Berry2013-01-171-2/+2
|
* [CHEF-3689] use ApiClient::Registration to registerdanielsdeleo2012-12-181-1/+2
|
* Change default output to formatters when in consoledanielsdeleo2012-11-201-10/+32
|
* [OC-3564] move core Chef to the repo root \o/ \m/Seth Chisamore2012-10-301-0/+505
| | | | The opscode/chef repository now only contains the core Chef library code used by chef-client, knife and chef-solo!
* big refactor of the repo layout. move to a chef gem and a chef-server gem ↵Ezra Zygmuntowicz2008-10-081-277/+0
| | | | all with proper deps
* Fixing searching in recipes to use the RESTful server, instead of the local ↵Adam Jacob2008-10-051-1/+10
| | | | index. Adding debugging
* No need for this - leftovers from prototypingAdam Jacob2008-10-021-2/+0
|