Bug 1340978

Summary: Smart State Analysis for OpenStack Instances including scanning file contents
Product: Red Hat CloudForms Management Engine Reporter: Andrew Spurrier <aspurrie>
Component: SmartState AnalysisAssignee: Rich Oliveri <roliveri>
Status: CLOSED NOTABUG QA Contact: Dave Johnson <dajohnso>
Severity: high Docs Contact:
Priority: unspecified    
Version: 5.5.0CC: aspurrie, jhardy, obarenbo
Target Milestone: GA   
Target Release: 5.7.0   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-06-09 05:24:44 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Andrew Spurrier 2016-05-31 03:26:53 UTC
Description of problem:
Smart State Analysis for OpenStack Instances does not work with Glance storage and even on Nova it cannot scan file contents.

Version-Release number of selected component (if applicable):
5.5.3.4

How reproducible:
Always

Steps to Reproduce:
1.  Create a compliance policy that attempts to detect the string "Root" in /etc/ssh/sshd_config.

Actual results:
Fails

Expected results:
Pass

Additional info:
CF needs to be able to work with all the storage types offered to OSP instances.


   2. Who is the customer behind the request?  
    Account: name and acct #   https://access.redhat.com/support/cases/01643369
      
    TAM customer: yes 
    SRM customer: yes  
    Strategic: yes  
      
      
    4. Why does the customer need this? (List the business requirements here)  
CloudForms is managing OpenStack.  Security Compliance reporting is a massive requirement of the instances being managed.
      
    5. How would the customer like to achieve this? (List the functional requirements here)  
Same as the other Providers already supported by CloudForms.
      
      
    7. Is there already an existing RFE upstream or in Red Hat Bugzilla?  
I know this bug is on the list for future releases and we want to ensure it is prioritised correctly for the world wide customers' demand.
      
    8. Does the customer have any specific timeline dependencies and which release would they like to target (i.e. RHEL5, RHEL6)?  
No, the next release.
      
    9. Is the sales team involved in this request and do they have any additional input?  
Yes, this is a very strategic customer.
      
    10. List any affected packages or components.  
Automation Engine, State Machines.
      
    11. Would the customer be able to assist in testing this functionality if implemented?  
Yes.

Comment 2 Rich Oliveri 2016-05-31 04:47:30 UTC
Andrew,

For OpenStack providers, SmartState uses the Glance API to access the data we require, so I can't see how SmartState does not work with Glance storage.

Did the SmartState task in question fail? If so, what was the error? If the SmartState task didn't fail, did it fail to retrieve the file: /etc/ssh/sshd_config?

If the SSA task didn't fail, then the issue isn't with Glance storage, but there could be an issue in retrieving the file in question.