Red Hat Bugzilla – Bug 536214
RFE: support "locking" configuration properties
Last modified: 2015-02-01 18:29:12 EST
support "locking" of resource configuration properties and plugin configuration properties. once a property is marked locked, the JON Server will keep track of incoming changes. if there is an attempt to make a change to a "locked" property, the JON Server will send a request back down to the agent to override the resourceConfig / pluginConfig as appropriate (with whatever value the locked properties were locked with, merged with the recent/previous update from the agent).
This is a pretty decent sized feature. Push to scoping process.
This bug was previously known as http://jira.rhq-project.org/browse/RHQ-589
Mazz, what would be required to get this in?
Created attachment 440703 [details]
patch to introduce resource config remediation
The attached patch is something I coded up in December of 2009 that performs resource configuration remeditation. When a configuration changes and the agent reports that change, the server can detect that a locked config changed and immediately tell the agent to revert the configuration back to what it was. I blogged (with a demo) this functionality here: http://management-platform.blogspot.com/2009/12/configuration-remediation.html
This could be useful if we get more into applying policy.
FYI: here's the demo of the prototype I wrote a long time ago: