Chef-client 3.0.0 and proxies

Alex_Kiernan · June 12, 2013, 9:51am

I’m just looking through chef-client 3.0.0 and its proxy support - one of
the outstanding local patches I had was for https_proxy and no_proxy
support which the config stuff looks like it addresses (and is documented
in the README for those).

The bit I can’t spot is if there’s any support for https_proxy and no_proxy
environment variables so gems work correctly - client.rb.erb addresses the
http_proxy one but not the other two.

Is it somewhere and I’m just not spotting it?

–
Alex Kiernan

Steven_Danna · June 13, 2013, 6:37am

Hi,

On 6/12/13 2:51 AM, Alex Kiernan wrote:

The bit I can't spot is if there's any support for https_proxy and
no_proxy environment variables so gems work correctly - client.rb.erb
addresses the http_proxy one but not the other two.

I believe you are correct and that we don't currently set the
environment variables for these items. I don't see an open bug for this
issue in JIRA: http://tickets.opscode.com/browse/COOK but it does seem
like a reasonable addition to the cookbook.

One nice new feature, however, that will let you add this to your config
easily without modifying the chef-client cookbook directly is the
addition of an /etc/chef/client.d/ directory. See the "Configuration
Includes" section of the README for details.

Sincerely,

Steven

Steven Danna
Systems Engineer, Opscode, Inc
GPG Key: http://stevendanna.github.com/downloads/code/public.key

Alex_Kiernan · June 13, 2013, 7:55am

On 13 Jun 2013 07:38, "Steven Danna" steve@opscode.com wrote:

Hi,

On 6/12/13 2:51 AM, Alex Kiernan wrote:

The bit I can't spot is if there's any support for https_proxy and
no_proxy environment variables so gems work correctly - client.rb.erb
addresses the http_proxy one but not the other two.

I believe you are correct and that we don't currently set the
environment variables for these items. I don't see an open bug for this
issue in JIRA: http://tickets.opscode.com/browse/COOK but it does seem
like a reasonable addition to the cookbook.

Thanks for the confirmation. I'll get a ticket opened and code up a pull
request.

One nice new feature, however, that will let you add this to your config
easily without modifying the chef-client cookbook directly is the
addition of an /etc/chef/client.d/ directory. See the "Configuration
Includes" section of the README for details.

Yeah I saw that, though I wasn't sure if that was just for config items or
if you could inject arbitrary assignments. Actually now I stop and think
about it there's no real difference is there.

Joshua_Timberman · June 13, 2013, 2:06pm

Doesn't this unless block have it covered?

github.com

chef-boneyard/chef-client/blob/main/templates/default/client.rb.erb#L27


      
            <% when 'log_level', 'ssl_verify_mode', 'audit_mode' -%>
          <%= option %> <%= @chef_config[option].to_s.gsub(/^:/, '').to_sym.inspect %>
            <% when 'log_location' -%>
            <%   if (@chef_config[option].instance_of? String) && @chef_config[option].match(/^(STDOUT|STDERR)$/) -%>
          <%= option %> <%= @chef_config[option] %>
            <%   elsif (@chef_config[option].instance_of? String) && @chef_config[option].match(/^:?(syslog|win_evt)$/) -%>
          <%= option %> <%= @chef_config[option].to_s.gsub(/^:/, '').to_sym.inspect %>
            <%   else -%>
          <%= option %> <%= @chef_config[option].inspect %>
            <%   end -%>
            <% else -%>
          <%= option %> <%= @chef_config[option].inspect %>
            <% end -%>
          <% end -%>
          <% if @chef_config['node_name'] -%>
          node_name <%= @chef_config['node_name'].inspect %>
          <% else -%>
          # Using default node name (fqdn)
          <% end -%>
          <% unless node["chef_client"]["config"]["http_proxy"].nil? -%>
          # set the proxy env variable so rubygems works correctly

--
Joshua Timberman

On Thursday, June 13, 2013 at 1:55, Alex Kiernan wrote:

On 13 Jun 2013 07:38, "Steven Danna" <steve@opscode.com (mailto:steve@opscode.com)> wrote:

Hi,

On 6/12/13 2:51 AM, Alex Kiernan wrote:

The bit I can't spot is if there's any support for https_proxy and
no_proxy environment variables so gems work correctly - client.rb.erb
addresses the http_proxy one but not the other two.

I believe you are correct and that we don't currently set the
environment variables for these items. I don't see an open bug for this
issue in JIRA: http://tickets.opscode.com/browse/COOK but it does seem
like a reasonable addition to the cookbook.

Thanks for the confirmation. I'll get a ticket opened and code up a pull request.

One nice new feature, however, that will let you add this to your config
easily without modifying the chef-client cookbook directly is the
addition of an /etc/chef/client.d/ directory. See the "Configuration
Includes" section of the README for details.

Yeah I saw that, though I wasn't sure if that was just for config items or if you could inject arbitrary assignments. Actually now I stop and think about it there's no real difference is there.

Steven_Danna · June 13, 2013, 3:07pm

On 6/13/13 7:06 AM, Joshua Timberman wrote:

Doesn't this unless block have it covered?
chef-client/templates/default/client.rb.erb at main · chef-boneyard/chef-client · GitHub

That covers http_proxy, but not https_proxy or no_proxy.

--
Joshua Timberman

On Thursday, June 13, 2013 at 1:55, Alex Kiernan wrote:

On 13 Jun 2013 07:38, "Steven Danna" <steve@opscode.com
mailto:steve@opscode.com> wrote:

Hi,

On 6/12/13 2:51 AM, Alex Kiernan wrote:

The bit I can't spot is if there's any support for https_proxy and
no_proxy environment variables so gems work correctly - client.rb.erb
addresses the http_proxy one but not the other two.

I believe you are correct and that we don't currently set the
environment variables for these items. I don't see an open bug for this
issue in JIRA: http://tickets.opscode.com/browse/COOK but it does seem
like a reasonable addition to the cookbook.

Thanks for the confirmation. I'll get a ticket opened and code up a
pull request.

One nice new feature, however, that will let you add this to your config
easily without modifying the chef-client cookbook directly is the
addition of an /etc/chef/client.d/ directory. See the "Configuration
Includes" section of the README for details.

Yeah I saw that, though I wasn't sure if that was just for config
items or if you could inject arbitrary assignments. Actually now I
stop and think about it there's no real difference is there.

--
Steven Danna
Systems Engineer, Opscode, Inc
GPG Key: http://stevendanna.github.com/downloads/code/public.key

Joshua_Timberman · June 14, 2013, 4:38pm

On Jun 13, 2013, at 9:07 AM, Steven Danna steve@opscode.com wrote:

On 6/13/13 7:06 AM, Joshua Timberman wrote:

Doesn't this unless block have it covered?
chef-client/templates/default/client.rb.erb at main · chef-boneyard/chef-client · GitHub

That covers http_proxy, but not https_proxy or no_proxy.

Ah indeed.

Dropping off a file in the client.d is the right thing here, IMO.

Alex_Kiernan · June 15, 2013, 11:21am

On Fri, Jun 14, 2013 at 5:38 PM, Joshua Timberman joshua@opscode.com wrote:

On Jun 13, 2013, at 9:07 AM, Steven Danna steve@opscode.com wrote:

On 6/13/13 7:06 AM, Joshua Timberman wrote:

Doesn't this unless block have it covered?
chef-client/templates/default/client.rb.erb at main · chef-boneyard/chef-client · GitHub

That covers http_proxy, but not https_proxy or no_proxy.

Ah indeed.

Dropping off a file in the client.d is the right thing here, IMO.

Personally I'd rather have first class support - proxy configuration
is a pain which those of us who have it inflicted on us spend hours
tracking down all the places you need to configure it, having one less
place to ensure it gets injected because it arrives our of the box
would be benefit to me. If nothing else the lack of consistency
between http and https seems wrong.

I've most of a patch but I'm just struggling to ensure it's adequately
tested - your ChefSpec blog post was a big help though!

--
Alex Kiernan

Topic		Replies	Views
Proxy Chef Infra (archive)	0	268	March 25, 2015
Ruby, Chef, proxies Chef Infra (archive)	0	407	October 23, 2014
Issue with chef, ruby, and restclient Chef Infra (archive)	2	500	August 15, 2013
Client.rb Documentation on HTTPS Proxy Setting Chef Infra (archive)	2	1990	March 10, 2014
Chef-client && no_proxy Chef Infra (archive)	0	272	April 20, 2015

Chef-client 3.0.0 and proxies

Steven

Related topics