Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-18907

GRC dryrun command cannot show the full diff

XMLWordPrintable

    • Product / Portfolio Work
    • 2
    • False
    • Hide

      None

      Show
      None
    • False
    • GRC Sprint 2025-07
    • Moderate
    • None

      Description of problem:

      ACM dryrun command should either show the full diff or should provide a way to see the full diff.  Running dryrun should not have the runtime etcd concern which limits the diff stored in the ConfigurationPolicy.

      Version-Release number of selected component (if applicable):

      How reproducible:

      Always

      Steps to Reproduce:

      1. Just have a big policy with lots of diffs
      2.  
      3. ...

      Actual results:

      Here's the output I see, which is truncated right in the middle of showing the next diff:

      $ dryrun --status-path out.yaml --recursive --mappings-file mappings/mappings.yaml -p policies/policy-mce.yaml resources/
      # Diffs:
      operators.coreos.com/v1alpha1 ClusterServiceVersion multicluster-engine/multicluster-engine.v2.8.0:
      # Truncated: showing 50/299 diff lines:
      --- multicluster-engine/multicluster-engine.v2.8.0 : existing
      +++ multicluster-engine/multicluster-engine.v2.8.0 : updated
      @@ -23,33 +23,36 @@
           olm.targetNamespaces: multicluster-engine
           operatorframework.io/initialization-resource: '{"apiVersion":"multicluster.openshift.io/v1",
             "kind":"MultiClusterEngine","metadata":{"name":"engine"},"spec": {}}'
           operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"multicluster.openshift.io","kind":"MultiClusterEngine","version":"v1"}},{"type":"olm.package","value":{"packageName":"multicluster-engine","version":"2.8.0"}}]}'
           operatorframework.io/suggested-namespace: multicluster-engine
      +    operators.coreos.com/multicluster-engine.multicluster-engine: working
           operators.openshift.io/infrastructure-features: '["disconnected", "proxy-aware",
             "fips"]'
           operators.openshift.io/valid-subscription: '["OpenShift Kubernetes Engine", "OpenShift
             Container Platform", "OpenShift Platform Plus"]'
           support: Red Hat
         finalizers:
         - operators.coreos.com/csv-cleanup
      -  labels:
      -    olm.managed: "true"
      -    operatorframework.io/arch.amd64: supported
      -    operatorframework.io/arch.arm64: supported
      -    operatorframework.io/arch.ppc64le: supported
      -    operatorframework.io/arch.s390x: supported
      -    operatorframework.io/os.linux: supported
      -    operators.coreos.com/multicluster-engine.multicluster-engine: ""
         name: multicluster-engine.v2.8.0
         namespace: multicluster-engine
       spec:
         apiservicedefinitions: {}
         cleanup:
      -    enabled: false
      +    enabled: true
         customresourcedefinitions:
           owned:
      +    - displayName: MultiCluster Engine
      +      kind: MCE
      +      name: multiclusterengines.multicluster.openshift
      +      specDescriptors:
      +      - description: 'Specifies deployment replication for improved availability.
      +          Options are: Basic and High'
      +        displayName: Availability Configurat
      +        path: availabilityConfig
      +      - description: Developer Overrides
      +        displayName: Developer Overrides
           - description: MultiClusterEngine defines the configuration for an instance of
               a multicluster engine, a central point providing the foundational components
               for managing multiple Kubernetes-based clusters. The deployment of the multicluster
               engine components is determined based on the configuration that is defined
               in this resource.
      @@ -2950,21 +2953,19 @@
         selector:
           matchLabels:
             app: multicluster-engine
         version: 2.8.0
      # Compliance messages:
      NonCompliant; violation - clusterserviceversions [multicluster-engine.v2.8.0] found but not as specified in namespace multicluster-engine
      Error: policy is NonCompliant

      Expected results:

       

      Additional info:

              jkulikau@redhat.com Justin Kulikauskas
              gparvin-redhat Gus Parvin
              Derek Ho Derek Ho
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: