Need help with Action Configuration - Manual default but select containers Auto

[begunfx]

I'm looking to implement the following update scenario:
Default: Containers are manually updated
Select Containers: Updated Automatically

I'm struggling to get this scenario to work

For my Drydock controller I have the following (Datavault is the name of my server):

• DD_ACTION_DOCKER_DATAVAULT_AUTO=false

(I have the same for my agents but with their respective server names)

For the containers I want to auto-update, I have the following label:
labels:
- "dd.action.auto=datavault"

Any ideas on what I'm doing wrong would be greatly appreciated

[junkerderprovinz]

AUTO=false is what stops it. drydock maps it to none, which makes every container manual-only and ignores dd.action.auto entirely, because that label is only read when the trigger runs in onauto mode. Set DD_ACTION_DOCKER_DATAVAULT_AUTO=onauto (on each agent too, where the label has to name that agent's trigger) and keep dd.action.auto=datavault on the containers you want updated automatically. Under onauto a container without any label is blocked rather than manual, so give the ones you want to update by hand dd.action.include=datavault. One catch: dd.action.auto and onauto only exist in the 1.7.0 release candidates. On 1.6.0, drop the _AUTO=false line instead and put dd.action.include=datavault on the containers you want auto-updated, since in 1.6 that label only controls automatic updates.

[begunfx]

Thanks for the response @junkerderprovinz. The issue I have with this "Under onauto a container without any label is blocked rather than manual, so give the ones you want to update by hand dd.action.include=datavault"

is that means I have to add a .include action to every container that I want to manually update which seems like overkill - plus any future containers I want to manually update I would also have to include that label. @scttbnsn is there any functional way to just default all containers to manual and only add labels for the containers I would like to auto update? That way I don't have to constantly manage labels for all containers only the ones I want to auto update. One could argue the opposite scenario would be helpful if not already possible - set all containers to auto and just exclude ones that you want to be manual.

Thanks!

[scttbnsn]

You can't get that with one Docker action today. You're right about the gap: onauto requires labels for manual access too.

On the 1.7 release candidates, there is a two-action workaround. On DataVault, keep the automatic action and add a separate manual fallback:

DD_ACTION_DOCKER_DATAVAULT_AUTO=onauto
DD_ACTION_DOCKER_MANUAL_AUTO=false

Then keep dd.action.auto=datavault only on the containers you want updated automatically. Unlabeled containers can use the manual action without an include label. Set the global update mode to auto; global manual would prevent the selected containers from updating automatically too.

Repeat the two actions on each agent, using that host's action name in the auto label. Actions need to be configured on the instance that watches the container.

I've checked the policy selection in both registration orders: unlabeled containers get manual access, and the automatic path selects the opted-in action. This is a code-level check, not a live update test. It does emit the equally-specific-actions warning, and registration order can affect which action the UI shows for an opted-in container.

That's a workaround with rough edges. I've put the single-action manual-default gap on the roadmap.

[begunfx]

Thanks, @scttbnsn. I'll give that combo a try. I'm running the latest 1.7. Also appreciate closing the gap with a single action for those scenarios. I'll keep an eye out for them on future releases.

[scttbnsn]

I tested the two-action setup on the published rc.24 image with real local Docker containers. The labeled container updated automatically, the unlabeled one waited for a manual update, and a container excluded from both actions stayed blocked.

The single-action option is now merged for v1.8 in #1369, still unreleased:

DD_ACTION_DOCKER_DATAVAULT_AUTO=onauto
DD_ACTION_DOCKER_DATAVAULT_MANUAL=all

Keep the global mode at auto and add dd.action.auto=datavault only to the containers you want updated automatically. Traditional agents need v1.8 and this configuration on the agent. On 1.7, keep the two-action setup above.