This topic discusses best practices around staging and policy management for development, test, and production.
A single staging Integration Service and a single Central Monitoring Administration instance can be used to support multiple BMC ProactiveNet Servers. The following diagram illustrates how this is designed for BMC ProactiveNet development, test, production environments.
All policies include agent selection criteria that allow you to completely control the policies that are applied to any and all PATROL Agents across the entire environment spanning development, test, and production. This allows you to install a single Central Monitoring Administration instance for the entire environment, and eliminates the need to recreate policies in production after they have been created in development and tested. One or more of the following agent assignment configurations in the policies is defined and edited to accomplish this:
The easiest method is to include the appropriate BMC ProactiveNet Servers in the agent selection criteria at the proper time for the policy as shown in the following figure:
Simply add the test and production BMC ProactiveNet Servers to the policy agent selection criteria when you are ready to apply the policy to those environments. This simplifies the process of moving configuration from QA to test, and finally to production. It also ensures that a policy is not applied to any agents in production until it has been tested and validated.
The following outlines the process as an example referencing the preceding screen shot.
Phase 1 – Only the BMC ProactiveNet Server named “BPPMRHEL62-HM-QA” is included in the agent selection criteria when the policy is first created.
Phase 2 – The BMC ProactiveNet Server named “BPPMRHEL62-HM-TEST” is added to the agent selection criteria with an OR after the policy has been validated in the QA environment.
Phase 3 – The BMC ProactiveNet Server named “BPPMRHEL62-HM-PROD” is added to the agent selection criteria with an OR after the policy has been tested and validated in the BPPMRHEL62-HM-TEST environment and is ready to be applied in the production environment.
At least one BMC ProactiveNet Server must be included in the agent selection criteria in order to control which BMC ProactiveNet environment(s) the policy is applied to. If you do not include at least one BMC ProactiveNet Server, the policy is applied to all agents, across all BMC ProactiveNet Servers that match the agent selection criteria of the policy. Additionally, multiple BMC ProactiveNet Server values must be grouped () and related with a boolean “OR” as in the preceding screen shot. If you use a boolean “AND” to relate the agent selection criterion, the policy is not applied because an agent cannot register with multiple BMC ProactiveNet Servers.
Leveraging BMC ProactiveNet Servers in the agent selection criteria is powerful and has far reaching, global implications. If you add a production BMC ProactiveNet Server to the agent selection criteria for a policy by mistake, the policy might be unintentionally applied to hundreds or thousands of agents in production. Therefore, it is extremely important that this process be managed carefully.
Updates and deletion of existing policies apply to all agents that match the policy’s agent selection criteria. Consequently, it is not possible to test edits to policies that currently apply to production without impacting production using the process outlined above. Separate policies must be created to test edits in the development and test environments leveraging the export/import utility.
Leveraging tags in policies can also be used to further control the agents that the policies are applied to. Tags must be used to provide a second level of protection to prevent policies still in development or test from being applied to production accidentally. Leveraging tags this way forces users to not only add the appropriate BMC ProactiveNet Server to the policy selection criteria, but also add the appropriate tag. This helps prevent users from accidentally picking the production BMC ProactiveNet Server and saving the policy when they did not mean to. Additionally, tags can be used to provide greater granularity for policy assignment when the other agent selection criteria is not enough.
BMC recommends leveraging precedence in policies so that production policies have the highest precedence and are not superseded by development or test policies. If you follow this recommendation, you will also have to adjust the policy precedence when you want to move it from development to test, and finally from test to production.
The policy export/import utility is used to move policies between environments that have multiple Central Monitoring Administration instances. The following diagram illustrates how this is designed in the BMC ProactiveNet Server development, test, and production environments.
In a multiple Central Monitoring Administration deployment, you do not have to specify BMC ProactiveNet Servers in the agent selection criteria in the development and test environments. This is not needed because the environments are completely separated and do not share a common Central Monitoring Administration instance with the production environment.