Add complimentary preflight for Security Tools detection #3015
Conversation
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
NoaheCampbell
changed the title
|
This PR has been released (on staging) and is available for download with a embedded-cluster-smoke-test-staging-app license ID. Online Installer: Airgap Installer (may take a few minutes before the airgap bundle is built): Happy debugging! |
| {{ "{{" }} .Detected {{ "}}" }} | ||
| These types of tools have been known to interfere with Kubernetes operation in various ways. If you experience an installation problem, you may need to disable these tools temporarily as part of the troubleshooting process to identify if any system administrator exceptions may be required to maintain necessary internal Kubernetes operations. | ||
| - systemPackages: |
There was a problem hiding this comment.
I see the collector attempts to collect multiple system packages, would this analyzer exactly message look correct if the collector finds more than one?
There was a problem hiding this comment.
Yeah youre right, it looks like it would render that message for each tool it detects, I'll make a commit that should render it as a single message
| The following antivirus or network security tools were detected: | ||
| {{ "{{" }} .Detected {{ "}}" }} | ||
| These types of tools have been known to interfere with Kubernetes operation in various ways. If you experience an installation problem, you may need to disable these tools temporarily as part of the troubleshooting process to identify if any system administrator exceptions may be required to maintain necessary internal Kubernetes operations. |
There was a problem hiding this comment.
@ajp-io should review the copy here.
| outcomes: | ||
| - warn: | ||
| when: '{{ "{{" }} .IsInstalled {{ "}}" }}' | ||
| message: Package {{ "{{" }} .Name {{ "}}" }} is installed. This tool can interfere with kubernetes operation. Ensure the tool is either disabled or configured to not interfere with kubernetes operation. |
There was a problem hiding this comment.
@ajp-io should review the copy here.
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
What this PR does / why we need it:
Mirrors the recent support bundle analyzer into the host preflight to better and more clearly show interference from antivirus tools before installation issues occur. This emits warnings (not failures) and includes the list of detected tools plus guidance.
Which issue(s) this PR fixes:
https://app.shortcut.com/replicated/story/129800/add-complimentary-preflight-for-security-tools-detection
Does this PR require a test?
NONE
Does this PR require a release note?
Does this PR require documentation?
NONE