Exercise 1.14 - Examine Policies

Return to Workshop

What Are Policies?

In Red Hat CloudForms, Policy profiles are groupings of policies that you can apply to entities within CloudForms. Compliance policies check for a certain state in a host or VM. Control policies control a host or VM depending on certain criteria.

Examine Policies

Select ControlExplorer.

Control Explorer

Select the Policy Profiles accordion.

Policy Profile Accordion

Select All Policy ProfilesLinux Compliance CheckVM and Instance Compliance: Shell-Shock VulnerabilityVulnerable bash Package (ShellShock).

Shell-Shock Vulnerability

On the right, observe the Expression used for this policy.

Explore Events

Select the Events accordion.

Events Accordion

Select All EventsContainer Image Discovered.

Container Image Discovered

Observe that the imported policy shows up as assigned.

Explore Conditions

Select the Conditions accordion.

Conditions Accordion

Select All ConditionsAll VM and Instance ConditionsVulnerable bash Package (ShellShock)

Conditions ShellShock

Examine the Expression.

Explore Actions

Select the Actions accordion.

Actions Accordion

Select All ActionsSend Email to Security Team.

Send Email

Observe what this action does and the policies to which it is assigned.

Examine other actions and results.

Explore Alerts

Select the Alerts accordion.

Alerts Accordion

Select All AlertsVM Memory was decreased.

VM Memory Alerts

Review the Hardware Reconfigured Parameters section to see what this alert monitors.

Explore Alert Profiles

Select the Alert Profiles accordion.

Alerts Profile Accordion

Select All Alert ProfilesVM and Instance Alert Profiles.

All VM and Instance Alert Profiles

Add an alert profile:

  1. Click (Configuration) → Add a New VM and Instance Alert Profile.
  2. Enter VM Memory Decrease for Description.
  3. In Alert Selection, select VM Memory was decreased and click .
  4. Click Add.

Add Alert Profile

You cannot assign an alert directly to an entity; you must put alerts into an alert profile as you did here.
An alert profile can contain many alerts or just one.

Assign your alert profile:

  1. Select the new alert profile you just created.
  2. Click (Configuration) → Edit assignments for this Alert Profile.
  3. Choose Selected Cluster/Deployment Roles for Assign To.
  4. Check the Raleigh box.
  5. Click Save.

Assign Alert Profile

You have now assigned this alert to any VM in the Raleigh cluster.

Return to Workshop