Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-20126

TALM: CGU creates thousands of policies in a loop

XMLWordPrintable

    • Important
    • No
    • False
    • Hide

      None

      Show
      None

      Description of problem:

      CGU creates a huge number of enforced policies. The CGU does not report any state.
      
      The hub cluster started to have issues enforcing policies on a speficic managed cluster. Then, the SNO cluster was redeployed using ZTP, but the CGU got in a bad state and a huge number of policies was created.
      
      

      Version-Release number of selected component (if applicable):

       

      How reproducible:

      For now, only seen once on a specific managedcluster

      Steps to Reproduce:

      1. Once the issue is seen on a site. CGU does not enforces policies
      2. Redeploy it or create a CGU.
      
      

      Actual results:

      CGU does not have state and policies not enforced
      oc get cgu -A
      ztp-install   cloudransno-site4                     52m  
      
      number of policies on the managed cluster keeps growing.
      
      $ oc get policies -A | grep site4 | wc -l
      17849
      $ oc get policies -A | grep site4 | wc -l
      18635
                    

      Expected results:

      CGU has a state and enforces the right policies policies
      
      

      Additional info:

      System impact: One SNO cluster cannot be managed using TALM/GitOps properly. Number of policies is growing in an uncontrolled manner.
      
      
      

              jche@redhat.com Jun Chen
              rlopezma@redhat.com Rodrigo Lopez Manrique (Inactive)
              Yang Liu Yang Liu
              Rodrigo Lopez Manrique (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: