Actions
Bug #21924
closedPolicy generation broken when defining a group with invert result of inclusion of another group
Status:
Released
Priority:
N/A
Assignee:
Category:
Web - Config management
Target version:
Pull Request:
Severity:
Critical - prevents main use of Rudder | no workaround | data loss | security
UX impact:
It bothers me each time
User visibility:
Operational - other Techniques | Rudder settings | Plugins
Effort required:
Priority:
111
Name check:
To do
Fix check:
Checked
Regression:
No
Description
I created this group
and policy generation broke
No properties are definied by these groups (but an update campain is defined on the passiv group)
Error is
[2022-10-06 16:46:53+0200] ERROR policy.generation - Error while building target configuration node for node 'c8e2c037-78df-4530-8f3a-db7d337517c9' which is one of the target of rules. Ignoring it for the rest of the process <- Inconsistency: Error when looking for parent group '57e9a28c-8e0c-41f1-b7fa-2847c19f35d4' of group 'Active group' [191510ea-c276-4e19-9c34-3 ba03dc49587]. Please check criterium for that group.
happen in 7.2, maybe in earlier versions
Workaround: you can implement that behavior as rule site in place of at group site, by having in the include
part of the rule "all nodes" and in the exclude
part of the rule the group which was in the group criteria inverted.
analysis: the error is during node properties resolution. The code says "I don't find the group in the property hierarchy for which we told to NOT look for (invert). So in that case, we should just say "that group does not take part of property inheritance".
Files
Actions