1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
|
#
# Author:: Adam Jacob (<adam@opscode.com>)
# Author:: Seth Falcon (<seth@opscode.com>)
# Copyright:: Copyright (c) 2010 Opscode, Inc.
# License:: Apache License, Version 2.0
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
require 'chef/knife'
class Chef
class Knife
class DataBagFromFile < Knife
deps do
require 'chef/data_bag'
require 'chef/data_bag_item'
require 'chef/knife/core/object_loader'
require 'chef/json_compat'
require 'chef/encrypted_data_bag_item'
end
banner "knife data bag from file BAG FILE|FOLDER [FILE|FOLDER..] (options)"
category "data bag"
option :secret,
:short => "-s SECRET",
:long => "--secret ",
:description => "The secret key to use to encrypt data bag item values"
option :secret_file,
:long => "--secret-file SECRET_FILE",
:description => "A file containing the secret key to use to encrypt data bag item values"
option :all,
:short => "-a",
:long => "--all",
:description => "Upload all data bags or all items for specified data bags"
def read_secret
if config[:secret]
config[:secret]
else
Chef::EncryptedDataBagItem.load_secret(config[:secret_file])
end
end
def use_encryption
if config[:secret] && config[:secret_file]
ui.fatal("please specify only one of --secret, --secret-file")
exit(1)
end
config[:secret] || config[:secret_file]
end
def loader
@loader ||= Knife::Core::ObjectLoader.new(DataBagItem, ui)
end
def run
if config[:all] == true
load_all_data_bags(@name_args)
else
if @name_args.size < 2
ui.msg(opt_parser)
exit(1)
end
@data_bag = @name_args.shift
load_data_bag_items(@data_bag, @name_args)
end
end
private
def data_bags_path
@data_bag_path ||= "data_bags"
end
def find_all_data_bags
loader.find_all_object_dirs("./#{data_bags_path}")
end
def find_all_data_bag_items(data_bag)
loader.find_all_objects("./#{data_bags_path}/#{data_bag}")
end
def load_all_data_bags(args)
data_bags = args.empty? ? find_all_data_bags : [args.shift]
data_bags.each do |data_bag|
load_data_bag_items(data_bag)
end
end
def load_data_bag_items(data_bag, items = nil)
items ||= find_all_data_bag_items(data_bag)
item_paths = normalize_item_paths(items)
item_paths.each do |item_path|
item = loader.load_from("#{data_bags_path}", data_bag, item_path)
item = if use_encryption
secret = read_secret
Chef::EncryptedDataBagItem.encrypt_data_bag_item(item, secret)
else
item
end
dbag = Chef::DataBagItem.new
dbag.data_bag(data_bag)
dbag.raw_data = item
dbag.save
ui.info("Updated data_bag_item[#{dbag.data_bag}::#{dbag.id}]")
end
end
def normalize_item_paths(args)
paths = Array.new
args.each do |path|
if File.directory?(path)
paths.concat(Dir.glob(File.join(path, "*.json")))
else
paths << path
end
end
paths
end
end
end
end
|
