From eea428e6249fe4962929eeebdbb2ab6ef6b4023f Mon Sep 17 00:00:00 2001
From: Ioannis Karasavvaidis <ioannis@puppet.com>
Date: Thu, 29 Aug 2024 14:58:43 +0100
Subject: [PATCH] feat(convert): add check for legacy compilers

- Introduced a new task `check_legacy_compilers.rb` to verify legacy compilers.
- Updated `convert.pp` to run the new task and display warnings if legacy compilers are detected.
---
 plans/convert.pp                | 11 ++++++
 tasks/check_legacy_compilers.rb | 67 +++++++++++++++++++++++++++++++++
 2 files changed, 78 insertions(+)
 create mode 100755 tasks/check_legacy_compilers.rb

diff --git a/plans/convert.pp b/plans/convert.pp
index f452e81c..e697e87d 100644
--- a/plans/convert.pp
+++ b/plans/convert.pp
@@ -309,5 +309,16 @@
     run_task('peadm::puppet_runonce', $all_targets)
   }
 
+  if $legacy_compilers {
+# lint:ignore:strict_indent
+    $warning_msg = run_task('peadm::check_legacy_compilers', $primary_host, legacy_compilers => $legacy_compilers.join(',') ).first.message
+        if $warning_msg.length > 0 {
+      out::message(@("WARN"/L))
+      WARNING: ${warning_msg}
+      | WARN
+    }
+# lint:endignore
+  }
+
   return("Conversion to peadm Puppet Enterprise ${arch['architecture']} completed.")
 }
diff --git a/tasks/check_legacy_compilers.rb b/tasks/check_legacy_compilers.rb
new file mode 100755
index 00000000..eadb4fbc
--- /dev/null
+++ b/tasks/check_legacy_compilers.rb
@@ -0,0 +1,67 @@
+#!/opt/puppetlabs/puppet/bin/ruby
+# frozen_string_literal: true
+
+require 'json'
+require 'uri'
+require 'net/http'
+require 'puppet'
+
+# CheckLegacyCompilers task class
+class CheckLegacyCompilers
+  def initialize(params)
+    @nodes = params['legacy_compilers'].split(',') if params['legacy_compilers'].is_a?(String)
+  end
+
+  def execute!
+    pinned_nodes = []
+    @nodes.each do |node|
+      node_classification = get_node_classification(node)
+      pinned = false
+      node_classification['groups'].each do |group|
+        if group['name'] == 'PE Master'
+          pinned_nodes << node
+          pinned = true
+        end
+      end
+      next if pinned
+      next unless node_classification.key?('parameters')
+      next unless node_classification['parameters'].key?('pe_master')
+      if node_classification['parameters']['pe_master']
+        pinned_nodes << node
+      end
+    end
+
+    return unless !pinned_nodes.empty?
+    puts 'The following legacy compilers are classified as Puppet primary:'
+    puts pinned_nodes.join(', ')
+    puts 'You will not be able to upgrade if you dont remediate this.'
+  end
+
+  def https(port)
+    https = Net::HTTP.new('localhost', port)
+    https.use_ssl = true
+    https.cert = @cert ||= OpenSSL::X509::Certificate.new(File.read(Puppet.settings[:hostcert]))
+    https.key = @key ||= OpenSSL::PKey::RSA.new(File.read(Puppet.settings[:hostprivkey]))
+    https.verify_mode = OpenSSL::SSL::VERIFY_NONE
+    https
+  end
+
+  def get_node_classification(certname)
+    pdb = https(4433)
+    pdb_request = Net::HTTP::Post.new('/classifier-api/v2/classified/nodes/' + certname)
+    pdb_request['Content-Type'] = 'application/json'
+
+    response = JSON.parse(pdb.request(pdb_request).body)
+
+    response
+  end
+end
+
+# Run the task unless an environment flag has been set, signaling not to. The
+# environment flag is used to disable auto-execution and enable Ruby unit
+# testing of this task.
+unless ENV['RSPEC_UNIT_TEST_MODE']
+  Puppet.initialize_settings
+  task = CheckLegacyCompilers.new(JSON.parse(STDIN.read))
+  task.execute!
+end