wip: testing agent deployment #3104
No reviewers
Labels
No labels
1week
2weeks
Failed compliance check
IP cameras
NATS
Possible security concern
Review effort 1/5
Review effort 2/5
Review effort 3/5
Review effort 4/5
Review effort 5/5
UI
aardvark
accessibility
amd64
api
arm64
auth
back-end
bgp
blog
bug
build
checkers
ci-cd
cleanup
cnpg
codex
core
dependencies
device-management
documentation
duplicate
dusk
ebpf
enhancement
eta 1d
eta 1hr
eta 3d
eta 3hr
feature
fieldsurvey
github_actions
go
good first issue
help wanted
invalid
javascript
k8s
log-collector
mapper
mtr
needs-triage
netflow
network-sweep
observability
oracle
otel
plug-in
proton
python
question
reddit
redhat
research
rperf
rperf-checker
rust
sdk
security
serviceradar-agent
serviceradar-agent-gateway
serviceradar-web
serviceradar-web-ng
siem
snmp
sysmon
topology
ubiquiti
wasm
wontfix
zen-engine
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
carverauto/serviceradar!3104
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "refs/pull/3104/head"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Imported from GitHub pull request.
Original GitHub pull request: #3106
Original author: @mfreeman451
Original URL: https://github.com/carverauto/serviceradar/pull/3106
Original created: 2026-03-31T03:07:05Z
Original updated: 2026-03-31T05:31:38Z
Original head: carverauto/serviceradar:updates/agent-deploy-fixes
Original base: staging
Original merged: 2026-03-31T05:31:37Z by @mfreeman451
IMPORTANT: Please sign the Developer Certificate of Origin
Thank you for your contribution to ServiceRadar. Please note, when contributing, the developer must include
a DCO sign-off statement indicating the DCO acceptance in one commit message. Here
is an example DCO Signed-off-by line in a commit message:
Describe your changes
Issue ticket number and link
Code checklist before requesting a review
Imported GitHub PR review comment.
Original author: @Copilot
Original URL: https://github.com/carverauto/serviceradar/pull/3106#discussion_r3013226444
Original created: 2026-03-31T03:12:10Z
Original path: elixir/web-ng/lib/serviceradar_web_ng_web/live/settings/agents_live/releases.ex
Original line: 193
In
create_rollout, the server-side validation does not block submissions whenpreview.release_missing?is true (e.g., user submits an unknown version or a version with surrounding whitespace). Becausebuild_rollout_preview/4treatsselected_release == nilas “all selected agents are compatible”,agent_idswill be non-empty and rollout creation can proceed for a release that isn’t actually published. Add an explicitpreview.release_missing?guard (and/or trim the version before lookup) to prevent creating rollouts for missing releases.Imported GitHub PR review comment.
Original author: @Copilot
Original URL: https://github.com/carverauto/serviceradar/pull/3106#discussion_r3013226471
Original created: 2026-03-31T03:12:10Z
Original path: elixir/web-ng/lib/serviceradar_web_ng_web/live/settings/agents_live/releases.ex
Original line: 1566
rollout_submission_metadata/2buildsskipped_unsupported_agent_idsfrompreview.unsupported_agents, butbuild_rollout_preview/4truncatesunsupported_agentsto 8 entries for display (Enum.take(unsupported_agents, 8)). This will silently drop skipped IDs when more than 8 unsupported agents are present. Keep a full list/ID list in the preview for metadata purposes, and only truncate the display list.Imported GitHub PR review comment.
Original author: @Copilot
Original URL: https://github.com/carverauto/serviceradar/pull/3106#discussion_r3013226492
Original created: 2026-03-31T03:12:10Z
Original path: helm/serviceradar/templates/agent-gateway.yaml
Original line: 123
The chart sets
DATASVC_ENABLEDto a hard-coded "true", which removes the ability to disable datasvc connectivity for the agent-gateway via values and can force the gateway to attempt datasvc connections in deployments where datasvc isn’t present. Consider making this conditional/configurable (e.g.,agentGateway.datasvc.enableddefaulting appropriately) and only emitting the DATASVC_* env vars when enabled.Imported GitHub PR review comment.
Original author: @Copilot
Original URL: https://github.com/carverauto/serviceradar/pull/3106#discussion_r3013226499
Original created: 2026-03-31T03:12:11Z
Original path: helm/serviceradar/templates/agent-gateway.yaml
Original line: 18
agent-gateway.yamlintroducesDATASVC_SEC_MODE(including potentialspiffe), but unlikeweb.yamlthere is no conditional configuration to mount the SPIRE agent socket / bundle or set SPIFFE-related env vars whensecModeisspiffe. As-is, configuringagentGateway.datasvc.secMode: spiffewill likely fail at runtime. Either document/limit supported modes here, or add the missing SPIFFE wiring similar toweb.yaml.