Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-5298

[2.7]Policy compliance status is truncated

XMLWordPrintable

    • 2
    • False
    • None
    • False
    • Telco Telco:RAN
    • GRC Sprint 2023-06
    • Moderate
    • ?
    • No

      Description of problem:

      The status message for non compliant policy is truncated with "..." when the policy has multiple objectTemplates or a namespace. This leaves the user unable to determine why the policy is non compliant.

      Example with multiple objectTemplates:

            message: NonCompliant; notification - namespaces [test-cnfdf17] found as specified,                 
              therefore this Object template is compliant; notification - consoles [cluster]                                         
              found as specified, therefore this Object template is compliant; notification              
              - clusterlogforwarders [instance] in namespace openshift-logging found as
              specified, therefore this Object template is compliant; notification - clusterloggings
              [instance] in namespace openshift-logging found as specified, therefore this
              Object template is compliant; notification - ptpconfigs [du-ptp-slave] in
              namespace openshift-ptp found as specified, therefore this Object template
              is compliant; notification - sriovoperatorconfigs [default] in namespace openshift-sriov-network-operator
              found as specified, therefore this Object template is compliant; notification
              - localvolumes [local-disks] in namespace openshift-local-storage found as
              specified, therefore this Object template is compliant; notification - networks
              [cluster] found as specified, therefore this Object template is... 

      Example with namespace

            message: NonCompliant; notification - namespaces [assisted-installer, cnfdf17,                                           
              default, kube-node-lease, kube-public, kube-system, open-cluster-management-agent,         
              open-cluster-management-agent-addon, openshift, openshift-apiserver, openshift-apiserver-operator,                     
              openshift-authentication, openshift-authentication-operator, openshift-cloud-controller-manager,  
              openshift-cloud-controller-manager-operator, openshift-cloud-credential-operator,                                      
              openshift-cloud-network-config-controller, openshift-cluster-csi-drivers,                  
              openshift-cluster-machine-approver, openshift-cluster-node-tuning-operator,                                            
              openshift-cluster-samples-operator, openshift-cluster-storage-operator, openshift-cluster-version,
              openshift-config, openshift-config-managed, openshift-config-operator, openshift-console,         
              openshift-console-operator, openshift-console-user-settings, openshift-controller-manager,                             
              openshift-controller-manager-operator, openshift-dns, openshift-dns-operator,             
              openshift-etcd, openshift-etcd-operator, openshift-host-network, openshift-image-r...        

      Version-Release number of selected component (if applicable):

      2.7.0

      How reproducible:

      Always

      Steps to Reproduce:

      1. Create policy with multiple objectTemplates
      2. enforce policy
      3. observe status while non compliant

      Actual results:

      Expected results:

      Additional info:

            yikim@redhat.com Yi Rae Kim
            rhn-support-imiller Ian Miller
            Derek Ho Derek Ho
            ACM GRC & Gatekeeper
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: