Rudder

Currently the agents are unable to update their policies right after a change in the policies. It seems that the cf-serverd service on the Rudder server is always restarted after a change in the configuration. A restart can take up to ~10sec and if the agents try to update themselves in this time window, they will be unable to fetch their policies and so, will report on outdated policies, breaking the compliance.

error: No suitable server found
R: *********************************************************************************
* rudder-agent could not get an updated configuration from the policy server. *
* This can be caused by: *
* * an agent key that has been changed *
* * if this node is not accepted or deleted node on the Rudder root server *
* * if this node has changed policy server without sending a new inventory *
* Any existing configuration policy will continue to be applied without change. *
*********************************************************************************
error: No suitable server found
error: No suitable server found
R: *********************************************************************************
* rudder-agent could not get an updated configuration from the policy server. *
* This can be caused by: *
* * a networking issue *
* * an unavailable server *
* * the node changed policy server without running
* 'rudder agent server-keys-reset'
* * if the node's IP in not if the allowed networks of its policy server. *
* Any existing configuration policy will continue to be applied without change. *
*********************************************************************************
error: Rudder agent policies could not be updated.

And a grep of the restart on a short period of time:

Mar 25 09:19:36 server cf-serverd[31605]: CFEngine(server) rudder Doing a Graceful restart
Mar 25 09:19:36 server cf-serverd[31605]: rudder     info: Doing a Graceful restart
Mar 25 09:30:36 server cf-serverd[31961]: CFEngine(server) rudder Doing a Graceful restart
Mar 25 09:30:36 server cf-serverd[31961]: rudder     info: Doing a Graceful restart
Mar 25 09:33:29 server cf-serverd[2006]: rudder     info: Doing a Graceful restart
Mar 25 09:33:29 server cf-serverd[2006]: CFEngine(server) rudder Doing a Graceful restart
Mar 25 09:34:43 server cf-serverd[2534]: CFEngine(server) rudder Doing a Graceful restart
Mar 25 09:34:43 server cf-serverd[2534]: rudder     info: Doing a Graceful restart
Mar 25 09:49:40 server cf-serverd[2890]: CFEngine(server) rudder Doing a Graceful restart
Mar 25 09:49:40 server cf-serverd[2890]: rudder     info: Doing a Graceful restart
Mar 25 09:53:10 server cf-serverd[5634]: CFEngine(server) rudder Doing a Graceful restart
Mar 25 09:53:10 server cf-serverd[5634]: rudder     info: Doing a Graceful restart