Bug #12324: Root server can be disable with node lifecycle "ignore" "set empty policies" - Rudder - Issue Tracker

Actions

Copy link

Bug #12324

closed

Root server can be disable with node lifecycle "ignore" "set empty policies"

Added by Nicolas CHARLES over 6 years ago. Updated over 6 years ago.

Status:

Released

Priority:

N/A

Assignee:

François ARMAND

Category:

Server components

Target version:

4.3.0

Pull Request:

https://github.com/Normation/rudder/p...

Severity:

UX impact:

User visibility:

Effort required:

Priority:

Name check:

Fix check:

Regression:

Description

We can disable the policies for Rudder Root server - so no new policies will be set, and so new nodes cannot fetch their policies
We ought to have some kind on limits on what state can be put on the Root Server

Actions

Copy link

Updated by Vincent MEMBRÉ over 6 years ago

Target version changed from 4.3.0~rc2 to 4.3.0~rc3

Actions

Copy link

Updated by François ARMAND over 6 years ago

Translation missing: en.field_tag_list set to Blocking 4.3
Subject changed from We can ignore or set empty policies for Rudder Root server, which is probably not what we want to Root server can be disable with node lifecycle "ignore" "set empty policies"
Assignee set to François ARMAND

In fact, we should not be able to change root server lifecycle at all.

Actions

Copy link

Updated by François ARMAND over 6 years ago

Status changed from New to In progress

Actions

Copy link

Updated by Vincent MEMBRÉ over 6 years ago

Target version changed from 4.3.0~rc3 to 4.3.0

Actions

Copy link

Updated by François ARMAND over 6 years ago

Status changed from In progress to Pending technical review
Assignee changed from François ARMAND to Vincent MEMBRÉ
Pull Request set to https://github.com/Normation/rudder/pull/1894

PR https://github.com/Normation/rudder/pull/1894

Actions

Copy link

Updated by François ARMAND over 6 years ago

I think we should keep the possibility to change lifecycle for other policy servers or rudder component.
At least, for realy servers, we must have it. We want to be able to keep only system policy on a relay (to make it works as a relay even if a user rule is not correct), or disable it, or whatever.
For Rudder component, it is less clear, but I don't see real problem on keeping it.

Actions

Copy link