Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-7799

Policy template changes cause strange merges or not-reacting controler

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Normal Normal
    • ACM 2.7.10
    • ACM 2.7.4
    • GRC
    • 3
    • False
    • None
    • False
    • GRC Sprint 2023-18
    • Moderate
    • Customer Facing
    • +
    • No

      Description of problem:

      if you then manually modify the project request template on the cluster, when the policy reconciles it mixes all the objects and it duplicates different values or some changes are not propagated.

      Version-Release number of selected component (if applicable):

      How reproducible:

      always

      Steps to Reproduce:

      1.  create policy template
      2.  try to update it.
      3. ...

      Actual results:

       

      weird merging 

      Expected results:

      Additional info:

      First of all, it seems that the engineering team has got the same weird behavior we noticed (strange merges, and not reacting controller if you change the template on the managed cluster).
      But, maybe we managed to define a better WA, it seems that if you use the application management component of RHACM, enforcing the template as if it was an application manifest by the use of a RHACM subscription (with apps.open-cluster-management.io/reconcile-option: replace), the behavior is correct, indeed, if you try to change the template on the managed cluster, ACM does enforce the right template within seconds, and even if the template is already present, RHACM enforces the app manifest as expected, without any strange merge, using a replace strategy.
      We believe that this one is an important information for the engineering team, because if the application controller can enforce the template in the right way as we experimented, it means that a bug inside governance policy controller should be present, when it comes the management of "mustonlyhave" compliance type.

              dhaiduce Dale Haiducek
              rhn-support-mheppler Michal Heppler
              Derek Ho Derek Ho
              Votes:
              2 Vote for this issue
              Watchers:
              9 Start watching this issue

                Created:
                Updated:
                Resolved: