Actions
Architecture #15191
open
Separate remote-run server from policy server
Pull Request:
Effort required:
Name check:
To do
Fix check:
To do
Regression:
Description
There is a clash between cf-serverd usages between simple nodes and servers. It is part of agent (package, service, etc). but also acts as a server component, see #15188 for an example.
We could run two separate cf-serverd daemons, one for remote-run (aprt of the agent) and one as policy-server (part of server packages), probably on different ports. This would allow better service organization and avoid unexpected behaviour.
This would allow stricter security policies on each service, and being to disable them individually.
Updated by
Actions