class PuppetHttps
Attributes
auth_method[R]
token_path[R]
Public Class Methods
new(settings)
click to toggle source
# File lib/puppet_https.rb, line 7 def initialize(settings) # Settings hash: # - ca_certificate_path # - certificate_path (optional) # - private_key_path (optional) # - read_timeout (optional) # - token_path (default: $HOME/.puppetlabs/token) # - token (optional, takes precedence over token_path) # # token auth takes precedence over cert auth (in the case that both methods are provided) default_token_path = ENV['HOME'].nil? ? nil : File.join(ENV['HOME'], '.puppetlabs', 'token') ca_cert_path = settings['ca_certificate_path'] cert_path = settings['certificate_path'] pkey_path = settings['private_key_path'] @ca_file = settings['ca_certificate_path'] if ca_cert_path and File.exists?(ca_cert_path) @read_timeout = settings['read_timeout'] || 90 # A default timeout value in seconds @auth_method = case when (settings['token'] or settings['token_path']) 'token' when (cert_path and pkey_path) 'cert' when default_token_path && File.exists?(default_token_path) 'token' else nil end unless @auth_method raise RuntimeError, "No authentication methods available." end case @auth_method when 'token' @token = settings['token'] @token_path = (settings['token_path'] || default_token_path) unless @token # Make sure we have a token and it's not empty case when (@token and @token.empty?) raise RuntimeError, "Received an empty string for token" when (not @token and not File.exists?(@token_path)) raise RuntimeError, "Token file not found at [#{@token_path}]" when (not @token and File.zero?(@token_path)) raise RuntimeError, "Token file at [#{@token_path}] is empty" end when 'cert' if File.exists?(cert_path) and File.exists?(pkey_path) @cert = OpenSSL::X509::Certificate.new(File.read(cert_path)) @key = OpenSSL::PKey::RSA.new(File.read(pkey_path)) else raise RuntimeError, "Certificate auth requested but certificate or private key cannot be found." end end end
Public Instance Methods
auth_header()
click to toggle source
# File lib/puppet_https.rb, line 141 def auth_header token = self.token header = token ? {"X-Authentication" => token} : {} end
delete(url)
click to toggle source
# File lib/puppet_https.rb, line 120 def delete(url) url = URI.parse(url) request = Net::HTTP::Delete.new(url.request_uri, self.auth_header) request.content_type = 'application/json' res = make_ssl_request(url, request) res end
get(url)
click to toggle source
# File lib/puppet_https.rb, line 98 def get(url) url = URI.parse(url) accept = 'application/json' req = Net::HTTP::Get.new("#{url.path}?#{url.query}", {"Accept" => accept}.merge(self.auth_header)) res = make_ssl_request(url, req) res end
make_ssl_request(url, req)
click to toggle source
# File lib/puppet_https.rb, line 67 def make_ssl_request(url, req) connection = Net::HTTP.new(url.host, url.port) # connection.set_debug_output $stderr connection.use_ssl = true connection.ssl_version = :TLSv1_2 connection.verify_mode = OpenSSL::SSL::VERIFY_PEER connection.ca_file = @ca_file if @ca_file connection.read_timeout = @read_timeout if @auth_method == 'cert' connection.cert = @cert connection.key = @key end connection.start { |http| http.request(req) } end
post(url, request_body=nil)
click to toggle source
# File lib/puppet_https.rb, line 106 def post(url, request_body=nil) url = URI.parse(url) request = Net::HTTP::Post.new(url.request_uri, self.auth_header) request.content_type = 'application/json' unless request_body.nil? request.body = request_body end res = make_ssl_request(url, request) res end
put(url, request_body=nil)
click to toggle source
# File lib/puppet_https.rb, line 86 def put(url, request_body=nil) url = URI.parse(url) req = Net::HTTP::Put.new(url.path, self.auth_header) req.content_type = 'application/json' unless request_body.nil? req.body = request_body end res = make_ssl_request(url, req) end
token()
click to toggle source
private
# File lib/puppet_https.rb, line 132 def token return @token if @token if @token_path and File.exists?(@token_path) @token = File.read(@token_path) return @token end return nil end