Project

General

Profile

Actions

User story #4514

open

Feature request - Having group out of the compliance check

Added by Olivier Mauras about 10 years ago. Updated almost 9 years ago.

Status:
New
Priority:
N/A
Assignee:
-
Category:
Web - Compliance & node report
UX impact:
Suggestion strength:
User visibility:
Effort required:
Name check:
Fix check:
Regression:

Description

It may be interesting to have some machines out of the compliance scope.
For example i may want to have some servers that won't be connected all the time, but will be connected once a week/month/year for a maintenance check.
Rudder sole purpose would be to enforce rules at first installation and during maintenance period where the server could get a refresh of its rules.

Would that be an easy feature to implement?

Actions #1

Updated by Dennis Cabooter about 10 years ago

I would like that too. In our case we're dealing with user desktops. And some users will turn their desktops off regularly, at least when they go on holidays. :)

+1

Actions #2

Updated by Dennis Cabooter about 10 years ago

Related to http://www.rudder-project.org/redmine/issues/4234 as it is a better solution to the same problem.

olivier gave some more explanation on IRC which I don;'t see in this ticket:

< coredumb> would be nice to have a dedicated group: "No compliance check" 
< coredumb> which shows only last compliance known
Actions #3

Updated by François ARMAND about 10 years ago

We are thinking to an evolution of Rudder that would make the "compliance" mode a by-node choice, and that the default mode will become a report-only one.

More preciselly, in the default mode, we will only report last know state for node, and don't check for missing reports, plus have an health-check of the node (something along the "say you are alive every X minutes/hours/days). Reports would be send only on a configuration change or in case or repaired / error.
That will allow to simply change the frequency of the rudder agent on nodes, to enormously reduce the quantity of messages send in the network, and to no mark nodes regularly deconected from the network as in error (as in fact, we really want to know what was the last state).

The compliance mode would be what is done today (await for exepected reports, and in case they don't come, mark the node in "no answer").

So, it is not exactly what is depicted here, but the goals seems to be aligns, so it seemed to make sense to talk about it.

Actions #4

Updated by Olivier Mauras about 10 years ago

Cuuld be nice if the "(something along the "say you are alive every X minutes/hours/days)" is not mandatory.

Actions #5

Updated by François ARMAND about 10 years ago

Olivier Mauras wrote:

Cuuld be nice if the "(something along the "say you are alive every X minutes/hours/days)" is not mandatory.

You're right and it was the idea, thanks to have clarify it

Actions #6

Updated by Olivier Mauras about 10 years ago

Nice then :)
Can we hope to have that in 2.10 ?

Actions #7

Updated by Olivier Mauras about 10 years ago

Also it would be nice to have an option to remove/disable the cron script.
It would make sense to not have cf-agent running all the time for some particular setups.

Actions #8

Updated by Dennis Cabooter almost 10 years ago

Any updates on this one?

Actions #9

Updated by Benoît PECCATTE almost 9 years ago

  • Category set to Web - Compliance & node report
  • Target version set to Ideas (not version specific)
Actions

Also available in: Atom PDF