1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
|
#
# Author:: Adam Jacob (<adam@opscode.com>)
# Author:: Christopher Brown (<cb@opscode.com>)
# Author:: AJ Christensen (<aj@opscode.com>)
# Copyright:: Copyright (c) 2008 Opscode, Inc.
# License:: Apache License, Version 2.0
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
require 'chef/log'
require 'mixlib/config'
class Chef
class Config
extend Mixlib::Config
# Manages the chef secret session key
# === Returns
# <newkey>:: A new or retrieved session key
#
def self.manage_secret_key
newkey = nil
if Chef::FileCache.has_key?("chef_server_cookie_id")
newkey = Chef::FileCache.load("chef_server_cookie_id")
else
chars = ("a".."z").to_a + ("A".."Z").to_a + ("0".."9").to_a
newkey = ""
40.times { |i| newkey << chars[rand(chars.size-1)] }
Chef::FileCache.store("chef_server_cookie_id", newkey)
end
newkey
end
# Override the config dispatch to set the value of multiple server options simultaneously
#
# === Parameters
# url<String>:: String to be set for all of the chef-server-api URL's
#
config_attr_writer :chef_server_url do |url|
configure do |c|
[ :registration_url,
:openid_url,
:template_url,
:remotefile_url,
:search_url,
:chef_server_url,
:role_url ].each do |u|
c[u] = url
end
end
url
end
# When you are using ActiveSupport, they monkey-patch 'daemonize' into Kernel.
# So while this is basically identical to what method_missing would do, we pull
# it up here and get a real method written so that things get dispatched
# properly.
config_attr_writer :daemonize do |v|
configure do |c|
c[:daemonize] = v
end
end
# Override the config dispatch to set the value of log_location configuration option
#
# === Parameters
# location<IO||String>:: Logging location as either an IO stream or string representing log file path
#
config_attr_writer :log_location do |location|
if location.respond_to? :sync=
location
elsif location.respond_to? :to_str
f = File.new(location.to_str, "a")
f.sync = true
f
end
end
# Override the config dispatch to set the value of authorized_openid_providers when openid_providers (deprecated) is used
#
# === Parameters
# providers<Array>:: An array of openid providers that are authorized to login to the chef server
#
config_attr_writer :openid_providers do |providers|
configure { |c| c[:authorized_openid_providers] = providers }
providers
end
authorized_openid_identifiers nil
authorized_openid_providers nil
client_registration_retries 5
cookbook_path [ "/var/chef/cookbooks", "/var/chef/site-cookbooks" ]
cookbook_tarball_path "/var/chef/cookbook-tarballs"
couchdb_database "chef"
couchdb_url "http://localhost:5984"
couchdb_version nil
delay 0
executable_path ENV['PATH'] ? ENV['PATH'].split(File::PATH_SEPARATOR) : []
file_cache_path "/var/chef/cache"
file_backup_path nil
group nil
http_retry_count 5
http_retry_delay 5
interval nil
json_attribs nil
log_level :info
log_location STDOUT
verbose_logging nil
node_name nil
node_path "/var/chef/node"
openid_cstore_couchdb false
openid_cstore_path "/var/chef/openid/cstore"
openid_providers nil
openid_store_couchdb false
openid_store_path "/var/chef/openid/db"
openid_url "http://localhost:4001"
pid_file nil
queue_host "localhost"
queue_password ""
queue_port 61613
queue_retry_count 5
queue_retry_delay 5
queue_user ""
chef_server_url "http://localhost:4000"
registration_url "http://localhost:4000"
client_url "http://localhost:4042"
remotefile_url "http://localhost:4000"
rest_timeout 300
run_command_stderr_timeout 120
run_command_stdout_timeout 120
search_url "http://localhost:4000"
solo false
splay nil
ssl_client_cert ""
ssl_client_key ""
ssl_verify_mode :verify_none
ssl_ca_path nil
ssl_ca_file nil
template_url "http://localhost:4000"
umask 0022
user nil
validation_token nil
role_path "/var/chef/roles"
role_url "http://localhost:4000"
recipe_url nil
solr_url "http://localhost:8983"
solr_jetty_path "/var/chef/solr-jetty"
solr_data_path "/var/chef/solr/data"
solr_home_path "/var/chef/solr"
solr_heap_size "256M"
solr_java_opts nil
amqp_host '0.0.0.0'
amqp_port '5672'
amqp_user 'chef'
amqp_pass 'testing'
amqp_vhost '/chef'
# Setting this to a UUID string also makes the queue durable
# (persist across rabbitmq restarts)
amqp_consumer_id nil
client_key "/etc/chef/client.pem"
validation_key "/etc/chef/validation.pem"
validation_client_name "chef-validator"
web_ui_client_name "chef-webui"
web_ui_key "/etc/chef/webui.pem"
web_ui_admin_user_name "admin"
web_ui_admin_default_password "p@ssw0rd1"
# Server Signing CA
#
# In truth, these don't even have to change
signing_ca_cert "/var/chef/ca/cert.pem"
signing_ca_key "/var/chef/ca/key.pem"
signing_ca_user nil
signing_ca_group nil
signing_ca_country "US"
signing_ca_state "Washington"
signing_ca_location "Seattle"
signing_ca_org "Chef User"
signing_ca_domain "opensource.opscode.com"
signing_ca_email "opensource-cert@opscode.com"
# Checksum Cache
# Uses Moneta on the back-end
cache_type "BasicFile"
cache_options({ :path => "/var/chef/cache/checksums", :skip_expires => true })
end
end
|
