set_classif.sh

set_classif.sh

#!/bin/bash

# simple 3.7 NC classifier commands

declare -x PE_CERT=$(/opt/puppet/bin/puppet agent --configprint hostcert)
declare -x PE_KEY=$(/opt/puppet/bin/puppet agent --configprint hostprivkey)
declare -x PE_CA=$(/opt/puppet/bin/puppet agent --configprint localcacert)
declare -x PE_CERTNAME=$(/opt/puppet/bin/puppet agent --configprint certname)

declare -x NC_CURL_OPT="-s --cacert $PE_CA --cert $PE_CERT --key $PE_KEY --insecure"

find_guid()
{
  echo $(curl $NC_CURL_OPT --insecure https://localhost:4433/classifier-api/v1/groups| python -m json.tool |grep -C 2 "$1" | grep "id" | cut -d: -f2 | sed 's/[\", ]//g')
}


read -r -d '' PE_LINUX_GROUP << LINUX_JSON
{
    "classes": {
      "profile::pe_env": {},
      "profile::repos": {
        "offline": "false"
      },
      "ntp": {}
    },
    "environment": "production",
    "environment_trumps": false,
    "name": "Linux Servers2",
    "parent": "00000000-0000-4000-8000-000000000000",
    "rule": [
           "and",
        [
            "not",
            [
                "=",
                [
                    "fact",
                    "clientcert"
                ],
                "$PE_CERTNAME"
            ]
        ],
        [
            "=",
            [
                "fact",
                "kernel"
            ],
            "Linux"
        ]
    ],
    "variables": {}
}
LINUX_JSON


curl -X POST -H 'Content-Type: application/json' -d "$PE_LINUX_GROUP" $NC_CURL_OPT --insecure https://localhost:4433/classifier-api/v1/groups