HostGroup defined in a child zone gets applied to hosts in a different zone

Icinga 2
1

Hello folks,

I am observing an unsual behaviour while assigning HostGroups using apply rules.

I have a simple parent-child layout for my endpoints and zones:

  • One parent zone
  • One global zone for templates and such
  • Several child zones containing host objects

I have now begun defining HostGroups in the child zones.

My assign rules for these HostGroups are rather generic, e.g.:
assign where "notify-mail" in host.vars.tags, so there are definitely cases, where hosts from other zones also match that criteria.

I’d have expected that these groups would only match in their respective zone (since they are defined in that very zone), but it seems that they match globally for any host in any zone which fulfills the specified condition(s).

Can somebody confirm this behaviour? Is this intended behaviour?

I’m running Icinga r2.14.0-1 on CentOS 7.

Best regards,
Markus

2

My current workaround is to use something like assign where host.zone == "child-zone1" && "notify-mail" in host.vars.tags but I find this approach unnecessarily clunky