topic how I can gather in which rule is defined a group object with ansible cp_mgmt_group_facts in Ansible

how I can gather in which rule is defined a group object with ansible cp_mgmt_group_facts

mbouri — Sun, 29 Dec 2019 15:38:22 GMT

Hello,

I'm using ansible to automate a lot of manual task, it works well for the moment but I'm not able to retrieve the information of rule name when I use cp_mgmt_group_facts (like whereused with smartdashboard), below the output of the json :

ok: [localhost] => {
"host_facts": {
"ansible_facts": {
"host": {
"color": "black",
"comments": "",
"domain": {
"domain-type": "domain",
"name": "SMC User",
"uid": "41e821a0-3720-11e3-aa6e-0800200c9fde"
},
"groups": [
{
"domain": {
"domain-type": "domain",
"name": "SMC User",
"uid": "41e821a0-3720-11e3-aa6e-0800200c9fde"
},
"name": "Demo",
"type": "group",
"uid": "8ab21516-39e7-4507-9312-636631d6c5de"
}
],
"icon": "Objects/host",
"interfaces": [],
"ipv4-address": "104.45.16.183",
"meta-info": {
"creation-time": {
"iso-8601": "2019-12-15T07:07+0100",
"posix": 1576390077465
},
"creator": "admin",
"last-modifier": "admin",
"last-modify-time": {
"iso-8601": "2019-12-15T07:07+0100",
"posix": 1576390077465
},
"lock": "unlocked",
"validation-state": "ok"
},
"name": "h-az-104.45.16.183",
"nat-settings": {
"auto-rule": false
},
"read-only": false,
"tags": [],
"type": "host",
"uid": "15e386c6-4ef3-4155-903d-579707171494"
}
},
"changed": false,
"failed": false
}
}

I test also with details_level : full

is there any simple way to retrieve this information without retrieving all the rule base and check on source and destination of each rule 😞

Regards

Re: how I can gather in which rule is defined a group object with ansible cp_mgmt_group_facts

PhoneBoy — Sun, 29 Dec 2019 17:42:36 GMT

I believe the rule name will be easier to parse out making the call with the option use-object-dictionary false.
To show the contents of each rule you may still need to query it directly.

Re: how I can gather in which rule is defined a group object with ansible cp_mgmt_group_facts

mbouri — Wed, 08 Jan 2020 13:43:18 GMT

Thank you for your reply, but we have migration project to change the some goup used on policy and duplicate the rule in order to use the new object and disable the old rule, and for that we need to know in which rule these group are used. the only solution I have for the moment is to parse all the policy rule (thousand of rule) and check for each rule if the group is configured on source and destination, I would like to know if this feature (specify on with rule the object is configured with the gather_fact module ) will be included on the new ansible release ?

Regards

Re: how I can gather in which rule is defined a group object with ansible cp_mgmt_group_facts

PhoneBoy — Wed, 08 Jan 2020 23:36:50 GMT

What is the precise playbook you’re using?

Re: how I can gather in which rule is defined a group object with ansible cp_mgmt_group_facts

mbouri — Fri, 10 Jan 2020 13:21:45 GMT

Hello,

I found solution with the command : where-used fo the module check_point_mgmt

Regards