mirror of
https://github.com/fleetdm/fleet
synced 2026-05-23 00:49:03 +00:00
remove puppet PoC (#12317)
The puppet module lives in https://github.com/fleetdm/fleet/tree/main/ee/tools/puppet/fleetdm, I'm removing this PoC to avoid any confusion
This commit is contained in:
Roberto Dip
GitHub
parent
8bed1f2890
commit
5f30add863
8 changed files with 0 additions and 232 deletions
|
|
@ -1,81 +0,0 @@
|
|||
$template = @(END)
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
||||
<plist version="1.0">
|
||||
<dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string
|
||||
>This profile configuration is designed to apply the CIS Benchmark for
|
||||
macOS 10.14 (v2.0.0), 10.15 (v2.0.0), 11.0 (v2.0.0), and 12.0
|
||||
(v1.0.0)</string
|
||||
>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>CIS - Bluetooth Sharing</string>
|
||||
<key>PayloadEnabled</key>
|
||||
<true />
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>cis.macOSBenchmark.section2.BluetoothSharing</string>
|
||||
<key>PayloadScope</key>
|
||||
<string>System</string>
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>5CEBD712-28EB-432B-84C7-AA28A5A383D8</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
<true />
|
||||
<key>PayloadContent</key>
|
||||
<array>
|
||||
<dict>
|
||||
<key>PayloadContent</key>
|
||||
<dict>
|
||||
<key>com.apple.Bluetooth</key>
|
||||
<dict>
|
||||
<key>Forced</key>
|
||||
<array>
|
||||
<dict>
|
||||
<key>mcx_preference_settings</key>
|
||||
<dict>
|
||||
<key>PrefKeyServicesEnabled</key>
|
||||
<false />
|
||||
</dict>
|
||||
</dict>
|
||||
</array>
|
||||
</dict>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Disables Bluetooth Sharing</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Custom</string>
|
||||
<key>PayloadEnabled</key>
|
||||
<true />
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>0240DD1C-70DC-4766-9018-04322BFEEAD1</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.ManagedClient.preferences</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>0240DD1C-70DC-4766-9018-04322BFEEAD1</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
</array>
|
||||
</dict>
|
||||
</plist>
|
||||
END
|
||||
|
||||
node default {
|
||||
fleet::add_to_team{ 'Workstations': }
|
||||
|
||||
fleet::add_profiles {'Workstations':
|
||||
profiles => [
|
||||
inline_template($template)
|
||||
]
|
||||
}
|
||||
|
||||
# fleet::with_team { 'Workstations':
|
||||
# profiles => [
|
||||
# profile::cis_bt_sharing,
|
||||
# ]
|
||||
# }
|
||||
}
|
||||
|
|
@ -1,13 +0,0 @@
|
|||
# frozen_string_literal: true
|
||||
|
||||
require_relative '../util/fleet_client'
|
||||
|
||||
Puppet::Functions.create_function(:add_host_to_team) do
|
||||
def add_host_to_team(host_uuid, team_name, fleet_host, fleet_token)
|
||||
client = Puppet::Util::FleetClient.new(fleet_host, fleet_token)
|
||||
team_resp = client.team_id_from_name(team_name)
|
||||
return team_resp if team_resp['error']
|
||||
|
||||
client.transfer_host(team_resp['output']['teams'][0]['id'], host_uuid)
|
||||
end
|
||||
end
|
||||
|
|
@ -1,12 +0,0 @@
|
|||
# frozen_string_literal: true
|
||||
|
||||
require 'base64'
|
||||
require_relative '../util/fleet_client'
|
||||
|
||||
Puppet::Functions.create_function(:batch_send_profiles) do
|
||||
def batch_send_profiles(team_name, profiles, fleet_host, fleet_token)
|
||||
enc = profiles.map { |p| Base64.encode64(p) }
|
||||
client = Puppet::Util::FleetClient.new(fleet_host, fleet_token)
|
||||
client.batch_send_profiles(team_name, enc)
|
||||
end
|
||||
end
|
||||
|
|
@ -1,70 +0,0 @@
|
|||
# frozen_string_literal: true
|
||||
|
||||
require 'net/http'
|
||||
require 'net/https'
|
||||
require 'uri'
|
||||
require 'json'
|
||||
|
||||
module Puppet
|
||||
module Util
|
||||
class FleetClient
|
||||
def initialize(host, token)
|
||||
@host = host
|
||||
@token = token
|
||||
end
|
||||
|
||||
def transfer_host(_team_id, host_uuid)
|
||||
uri = URI.parse("#{@host}/api/v1/fleet/hosts/transfer/filter")
|
||||
req = Net::HTTP::Post.new(uri.request_uri)
|
||||
# TODO(roperzh): last minute I refactored this into a module and
|
||||
# the team_id is coming as nil, figure out why and adjust instead
|
||||
# of hardcoding.
|
||||
data = {
|
||||
'filters' => { query: host_uuid },
|
||||
'team_id' => 1
|
||||
}
|
||||
req.body = data.to_json
|
||||
send(uri, req)
|
||||
end
|
||||
|
||||
def team_id_from_name(team_name)
|
||||
uri = URI.parse("#{@host}/api/v1/fleet/teams?query=#{team_name}")
|
||||
req = Net::HTTP::Get.new(uri.request_uri)
|
||||
send(uri, req)
|
||||
end
|
||||
|
||||
def batch_send_profiles(team_name, profiles)
|
||||
uri = URI.parse("#{@host}/api/latest/fleet/mdm/apple/profiles/batch?team_name=#{team_name}")
|
||||
req = Net::HTTP::Post.new(uri.request_uri)
|
||||
data = { 'profiles' => profiles }
|
||||
req.body = data.to_json
|
||||
send(uri, req)
|
||||
end
|
||||
|
||||
def send(uri, req)
|
||||
output = {}
|
||||
output['error'] = false
|
||||
output['error_message'] = ''
|
||||
http = Net::HTTP.new(uri.host, uri.port)
|
||||
http.use_ssl = true
|
||||
req['Authorization'] = "Bearer #{@token}"
|
||||
|
||||
begin
|
||||
response = http.request(req)
|
||||
rescue StandardError => e
|
||||
output['error'] = true
|
||||
output['error_message'] = e
|
||||
end
|
||||
|
||||
if response.is_a?(Net::HTTPSuccess) || response.is_a?(Net::HTTPNoContent)
|
||||
output['output'] = response.body unless response.body.nil?
|
||||
else
|
||||
output['error'] = true
|
||||
output['error_message'] = response.code
|
||||
end
|
||||
|
||||
output
|
||||
end
|
||||
end
|
||||
end
|
||||
end
|
||||
|
|
@ -1,12 +0,0 @@
|
|||
define fleet::add_profiles ($profiles) {
|
||||
$fleet_host = lookup('fleet::host', String)
|
||||
$fleet_token = lookup('fleet::token', String)
|
||||
|
||||
$out = batch_send_profiles($name, $profiles, $fleet_host, $fleet_token)
|
||||
$error = $out['error']
|
||||
if $error {
|
||||
notify{"Error pushing profiles for team ${name}: ${error_message}": loglevel => 'err'}
|
||||
} else {
|
||||
notify{"Team ${name} profiles updated": }
|
||||
}
|
||||
}
|
||||
|
|
@ -1,13 +0,0 @@
|
|||
define fleet::add_to_team () {
|
||||
$fleet_host = lookup('fleet::host', String)
|
||||
$fleet_token = lookup('fleet::token', String)
|
||||
|
||||
$udid = $facts['system_profiler']['hardware_uuid']
|
||||
$out = add_host_to_team($udid, $name, $fleet_host, $fleet_token)
|
||||
$error = $out['error']
|
||||
if $error {
|
||||
notify{"Error adding host ${name} to team ${team}: ${error_message}": loglevel => 'err'}
|
||||
} else {
|
||||
notify{"Added host ${udid} to team ${name}": }
|
||||
}
|
||||
}
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
define fleet::profile() {
|
||||
notify{"profile content ${name}": }
|
||||
}
|
||||
|
|
@ -1,28 +0,0 @@
|
|||
{
|
||||
"name": "puppet-fleet",
|
||||
"author": "",
|
||||
"license": "",
|
||||
"version": "0.0.0-beta.0",
|
||||
"summary": "Puppet Module for managing macOS Configuration Profiles",
|
||||
"source": "",
|
||||
"project_page": "",
|
||||
"issues_url": "",
|
||||
"tags": [
|
||||
"macOS",
|
||||
"OS X",
|
||||
"mobileconfig",
|
||||
"profiles"
|
||||
],
|
||||
"requirements": [
|
||||
{
|
||||
"name": "puppet",
|
||||
"version_requirement": ">= 4.4.0"
|
||||
}
|
||||
],
|
||||
"dependencies": [
|
||||
{
|
||||
"name": "puppetlabs/stdlib",
|
||||
"version_requirement": ">= 2.3.1"
|
||||
}
|
||||
]
|
||||
}
|
||||
Loading…
Reference in a new issue