@jonathan.newman / @steveax I found that for node groups with no rules, i.e., <https://www.puppet.com/docs/pe/2021.7/groups_endpoint.html#get-v1-groups-id-rules%7CGET /v1/groups/<id>/rules> returns

null

in the

rule

key, the translated rules are returned as

[ "=", "node_state", "active" ]

, which matches all nodes, exactly the opposite of what is shown in the PE Console under "Matching nodes". Is this a bug in the API?