Re: updates to update mechanisms and cf_promises_validated

Speaking of custom update mechanisms, Valentin, I wanted to make sure
you're aware of our policy channels framework (
https://gitlab.com/vsa-cfengine/policy-channels).  I don't know what your
use case is, this framework was developed at an enterprise site and allows
you to publish multiple versions of policy and to control which hosts get
which version when.  Very useful for phased deployment (gradual rollout) of
changes.

Best,
Aleksey

-- 
Founder
Vertical Sysadmin, Inc.
Achieve real learning.


On Thu, May 20, 2021 at 10:30 AM 'Nick Anderson' via help-cfengine <
[email protected]> wrote:

> Hi Valentin,
>
> By default the update policy only updates inputs to clients when
> validated_updates_ready is defined. By default, this happens when
> cf_promises_validated in inputs is repaired.
>
>
> https://github.com/cfengine/masterfiles/blob/2f0ba2892d3ad7eea7284ba6dfedcba5171612d0/cfe_internal/update/update_policy.cf#L235-L245
>
> cf-agent updates $(sys.masterdir)/cf_promises_validated when it validates
> new policy in inputs. When this happens on the hub, then remote agents will
> see that a policy update is available. However, cf-agent doesn't currently
> consider any change to inputs a change to policy. Instead of relying on
> this automatic realization of new policy, it's more reliable to explicitly
> tag the policy when you change it (cf-promises --tag-release). The
> masterfiles-stage tooling to automatically deploy from from a version
> control repository does this, you might consider using that.
>
>    -
>    https://github.com/cfengine/core/tree/master/contrib/masterfiles-stage
>    -
>    https://docs.cfengine.com/docs/master/enterprise-cfengine-guide-hub_administration-policy-deployment.html
>    - https://www.youtube.com/watch?v=nsx5LT8iFjA
>
> --
> You received this message because you are subscribed to the Google Groups
> "help-cfengine" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/help-cfengine/87tumxia8j.fsf%40northern.tech
> <https://groups.google.com/d/msgid/help-cfengine/87tumxia8j.fsf%40northern.tech?utm_medium=email&utm_source=footer>
> .
> --
> Nick Anderson | Doer of Things | (+1) 785-550-1767 | https://northern.tech
>
> --
> You received this message because you are subscribed to the Google Groups
> "help-cfengine" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/help-cfengine/87tumxia8j.fsf%40northern.tech
> .
>

-- 
You received this message because you are subscribed to the Google Groups "help-cfengine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion on the web visit https://groups.google.com/d/msgid/help-cfengine/CANNWuVU3ASHjoPhrP%2BEo962do%2B4nauWK-jdT6rQuuHLffeC4cQ%40mail.gmail.com.