Project

General

Profile

User story #1808

Add an Audit mode to Rudder: only check properties, no modification on nodes

Added by Nicolas CHARLES about 5 years ago. Updated 19 days ago.

Status:
Released
Priority:
N/A
Assignee:
-
Category:
Web - Config management
Target version:
Start date:
2015-09-21
Due date:
% Done:

100%

Pull Request:
Tags: Blocking 4.0

Description

It would be neat if we could define a PI in a "dry-run" mode where nothing would be done, but just reports of what should be changed
It could be :
1. define the PI as dry-run
2. The PI would be included in the hosts promises, but not in the bundlesequence
3. A remote execution would be done, with the dry-run mode, and selecting the bundles. We would then get reports for experts that would tell what would be changed by the PI
(maybe it could be a plugin)


Subtasks

User story #7207: Select and display agent mode (verify/enforce)ReleasedVincent MEMBRÉ

User story #7219: Add dry-run support to system techniquesRejected

User story #9351: Create a dedicated abort report when enforce is used in place of auditReleasedBenoît PECCATTE

User story #9353: Adapt compliance computing to process abort messageReleasedNicolas CHARLES

Bug #9521: If we are in non-compliance only report mode, we don't get the wrong mode error message, and node in is "no answer" in the interfaceNew

User story #7221: Set dry-run mode on each directive callReleasedVincent MEMBRÉ

User story #9227: Generation must fail if a node has non compatible audit/enforce mode on multi-instance techniqueReleasedVincent MEMBRÉ

Bug #9297: When generation failed due to mixed mode on one technique, error says "plop"ReleasedNicolas CHARLES

User story #8924: Policy mode API (Global, Directive, Node) ReleasedFrançois ARMAND

User story #9204: Clean up unused NodeXXXModified eventsReleasedVincent MEMBRÉ

User story #9258: Rename to audit instead of verify in backendReleasedFrançois ARMAND

Bug #9060: Specified action bodies override the dry-run policy - Techniques partReleasedNicolas CHARLES

User story #9241: Add new audit reports type to rudder commandReleasedBenoît PECCATTE

User story #9255: Add the bodydefault capability to 4.0 agentReleasedBenoît PECCATTE

User story #9261: "change only" reporting mode is not accurate for "audit" policy mode ReleasedVincent MEMBRÉ

Bug #9265: Add support for audit_* reports in rudder stdlibReleasedBenoît PECCATTE

Bug #9307: Syntax error in Add support for audit_* reportsReleasedBenoît PECCATTE

Bug #9356: Change rudder_common_report to automatically convert the report type based on audit modeReleasedNicolas CHARLES

Bug #9463: Change rudder_common_report to automatically convert the report type based on audit modeReleasedAlexis MOUSSET

User story #9273: Process audit reports and adapt compliance displaying for audit modeReleasedFrançois ARMAND

Bug #9314: Correct display of compliance for compliance error, non complianceReleasedVincent MEMBRÉ

Bug #9425: When a component value is on mixed mode, the message goes out of the compliance tableReleasedVincent MEMBRÉ

Architecture #9315: Update DB schema of expected reports to store policy modeReleasedNicolas CHARLES

User story #9380: Migration script for adding table nodeconfigurationsReleasedNicolas CHARLES

Architecture #9417: Correct test on expected reports and clean codeReleasedVincent MEMBRÉ

Bug #9282: Setting API has hardcoded context "/rudder/" in its urls pathReleasedFrançois ARMAND

Bug #9295: The old bundlesequence system variable contains contains Bundle(...)ReleasedNicolas CHARLES

Bug #9303: Policy Mode is not used to know if a node configuration changedReleasedNicolas CHARLES

Bug #9333: If we change the global policy mode, promises are not generated if we click on "update policies"ReleasedNicolas CHARLES

Bug #9401: Deleting a node should close its expected configurationReleasedNicolas CHARLES

Bug #9415: Nodes have several open nodeconfigurationsReleasedNicolas CHARLES

User story #9420: Define the _abort_rudder bundle that will be called in ncfReleasedBenoît PECCATTE

Bug #9449: Syntax error in promises.cfReleasedBenoît PECCATTE

User story #9421: Add the Rudder abort handler to ncf.confReleasedBenoît PECCATTE

User story #9450: Add a migration script fir ncf.conf abort_handlersRejectedAlexis MOUSSET

Bug #9455: Changed compliance mode to allow overridable mode, but promises where not regenerated, and reporting was invalidReleasedFrançois ARMAND

Bug #9458: Invalid display in compliance for non-compliant report: shows "Not applicable" when not complianceReleasedFrançois ARMAND

Bug #9465: Super slow query on dashboard loadingReleasedFrançois ARMAND

Bug #9475: Create the tables for archived nodeconfigurationReleasedFrançois ARMAND

Bug #9476: Add in packaging the migration scripts for databaseReleasedBenoît PECCATTE

Bug #9479: non-compliant-reports.log does not contain audit logsReleasedFrançois ARMAND

Bug #9480: Add a special case in fileAlterationMonitoring for non-compliance reporting in audit mode.ReleasedBenoît PECCATTE


Related issues

Related to ncf - Bug #8956: Specified action bodies override the dry-run policy Released 2016-09-14

History

#1 Updated by François ARMAND about 5 years ago

  • Target version changed from 18 to 24

#2 Updated by François ARMAND over 4 years ago

  • Target version changed from 24 to 48

#3 Updated by Jonathan CLARKE over 4 years ago

  • Target version changed from 48 to 24

#4 Updated by Nicolas CHARLES almost 4 years ago

  • Target version changed from 24 to Ideas (not version specific)

#5 Updated by Benoît PECCATTE over 1 year ago

  • Category set to Agent

#7 Updated by Jonathan CLARKE 11 months ago

  • Target version changed from Ideas (not version specific) to 4.0.0~rc2

#8 Updated by François ARMAND 3 months ago

#9 Updated by François ARMAND 3 months ago

#10 Updated by François ARMAND 3 months ago

  • Related to Bug #8956: Specified action bodies override the dry-run policy added

#11 Updated by Alexis MOUSSET about 2 months ago

  • Tags set to Blocking 4.0

#12 Updated by François ARMAND about 2 months ago

  • Subject changed from Dry-run execution to Add an Audit mode to Rudder: only check properties, no modification on nodes
  • Status changed from New to Pending technical review

#13 Updated by François ARMAND about 2 months ago

  • Status changed from Pending technical review to Pending merge

#14 Updated by François ARMAND about 2 months ago

  • Category changed from Agent to Web - Config management
  • Status changed from Pending merge to Pending release

#15 Updated by Vincent MEMBRÉ about 1 month ago

  • Target version changed from 4.0.0~rc2 to 4.0.0~rc1

#16 Updated by Alexis MOUSSET 19 days ago

  • Status changed from Pending release to Released

This bug has been fixed in Rudder 4.0.0 which was released the 10th November 2016.

Also available in: Atom PDF