CHEF-3010 repro cookbook/recipe

attributes_default.rb

default['appdeploy']['dir'] = '/srv/myapp'

default['app']['dbname'] = 'testdb'
default['app']['dbuser'] = 'sa'

recipes_default.rb

package 'git'
package 'httpd' # for centos

# Create a user 
user "appdeploy" do
  comment "App Deploy"
  uid 3001
  gid "users"
  home "/home/appdeploy"
end

# Deployment dirs
["#{node['appdeploy']['dir']}", 
 "#{node['appdeploy']['dir']}/shared",
 "#{node['appdeploy']['dir']}/shared/config",
 "#{node['appdeploy']['dir']}/shared/log"
 ].each do |subdir|
  directory subdir do
    action :create
    owner "appdeploy"
    group "apache"
  end
end

template "#{node['appdeploy']['dir']}/shared/deploy-ssh-wrapper" do
  source "deploy-ssh-wrapper.erb"
  owner "appdeploy"
  group "users"
  mode 0755
  variables(
    :deploy_key => "#{node['appdeploy']['dir']}/shared/id_deploy_appdeploy"
  )
end

# The shared config for this thing
template "#{node['appdeploy']['dir']}/shared/config/database.yml" do
  source "database.yml.erb"
  mode 0440
  owner "appdeploy"
  group "users"
  variables(
    :dbname       => node['app']['dbname'],
    :dbuser       => node['app']['dbuser']
  )
end

# This is the one that differs between permissions
cookbook_file "#{node['appdeploy']['dir']}/shared/id_deploy_appdeploy" do
  source "id_deploy_appdeploy"
  owner "apache"  # <===== If the permissions are set like this, `deploy` works, `deploy_revision` fails.
  group "users"
  mode 0600
  action :create
end

# Try and deploy a private repo
deploy_revision "#{node['appdeploy']['dir']}" do
  repo "git@github.com:MyCorp/privaterepo.git"
  revision "HEAD"
  user "appdeploy"
  group "apache"
  symlink_before_migrate  "config/database.yml" => "database.yml" # This is the shared env config
  shallow_clone true
  action :deploy
  restart_command "touch tmp/restart.txt"
  ssh_wrapper "#{node['appdeploy']['dir']}/shared/deploy-ssh-wrapper"
  scm_provider Chef::Provider::Git
end

templates_default_deploy-ssh-wrapper.erb

#!/usr/bin/env bash
# Deploy SSH Wrapper
# Rendered by Chef - local changes will be replaced

/usr/bin/env ssh -o "StrictHostKeyChecking=no" -i "<%= @deploy_key %>" $1 $2