Giters

cyberark / conjur-service-broker

Implementation of the Open Service Broker API for Conjur

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Conjur health check validates policy branch

izgeri opened this issue · comments

commented

We received a report that a customer couldn't create a service instance in a given org/space and was seeing errors of the form

# cf create-service cyberark-conjur community conjur
Creating service instance conjur in org security-pam / space cyberark-dap as …
The service broker returned an invalid response for the request to https://conjur-service-broker.apps-eb..com/v2/service_instances/97cf0bbf-1620-4320-b21f-d33ce0157901?accepts_incomplete=true. Status Code: 500 Internal Server Error, Body: {“status”:500,“error”:“Internal Server Error”}
FAILED

The errors were due to the service broker having an invalid policy branch in its configuration. We should update the health check to validate the policy branch from the configuration to enable the service broker to "fail fast" on install rather than wait for an error to appear on service instance creation because the policy branch does not exist.