Project

General

Profile

Actions

Bug #10623

closed

Hooks content/permissions are changed during Rudder upgrade (for ex /opt/rudder/etc/hooks.d/policy-generation-node-ready/10-cf-promise-check is replaced)

Added by Nicolas CHARLES about 7 years ago. Updated over 4 years ago.

Status:
Released
Priority:
N/A
Category:
Packaging
Target version:
Severity:
Major - prevents use of part of Rudder | no simple workaround
UX impact:
User visibility:
Operational - other Techniques | Rudder settings | Plugins
Effort required:
Priority:
43
Name check:
Fix check:
To do
Regression:

Description

I upgraded Rudder from 4.1.0 to 4.1.1 and I had a custom /opt/rudder/etc/hooks.d/policy-generation-node-ready/10-cf-promise-check file
after upgrading, file was restored to default content, which was super surprising

it should at least be documented so that I know it might punch me.

In fact, we should distinguish between several hooks provided by Rudder:

- 1/ the one absolutly needed to make Rudder works, like `policy-generation-node-ready/90-change-perm`. These one need to be updated by rudder at each upgrade and made executable. And we should make it clear in them that an user should not change them,
- 2/ the one that a user can enable/disable. We still don't want the content to be modifiable by an user (to allow update and bug correction), but an user should be allowed to change its perm, like in the example in that ticket. In fact, Rudder should even provide an UI setting to allow the user to change the hook perms.
- 3/ the one that we allow the user to modify.

For case 3/, in fact, we don't want any like that, because by allowing it, we forbid forever bug correction. So for that case, we should advice the user to provide his own hook and fill a bug upstream. If we want the user to be able to parametrize a hook, the parameter must be in a non executable file "XX-hook-name.properties" (which should be sourced by the hook).

Case 1/ is the current behavior (modulo the warning in hook content about the fact that the hook will be reseted on next upgrade).

Case 2/ need to be handled.


Subtasks 1 (0 open1 closed)

Bug #15687: check if hook-upgrades path existsReleasedAlexis MoussetActions

Related issues 1 (0 open1 closed)

Related to Rudder - Bug #14331: Trigger agent update and run after policy server has finished policy generationReleasedAlexis MoussetActions
Actions

Also available in: Atom PDF