Changing the name of a DDM configuration profile caused a stuck remove operation

[mason-buettner]

Fleet version: 4.77.0

Web browser and operating system: MacOS

---

💥  Actual behavior

Customer-Starchik reports that after using the /configuration_profiles/batch API endpoint to change the name of a profile (specifically to update the capitalization of the display name) they see thousands of pending remove operations for the previous profile name.

🛠️ To fix

Timeboxing to try to repro and either fix or come back with more information since the root cause is not fully understood and attempts to repro have failed so far

Changing the name of a configuration profile but not its identifier or contents should not result in it being "stuck" removing

🧑‍💻  Steps to reproduce

These steps:

• Have been confirmed to consistently lead to reproduction in multiple Fleet instances.
• Describe the workflow that led to the error, but have not yet been reproduced in multiple Fleet instances.

1. Upload a DDM profile to any team
2. See the profile gets verified/verifying on at least a single host
3. Use the API endpoint directly, to update the display_name, and ONLY the casing.
4. See new install/verified entry, and stuck remove/pending.

There is another situtation I saw in my testing:

1. Upload a DDM profile
2. Make it go to install/verified
3. Remove the profile simply
4. See it seems to be stuck in pending/remove.

🕯️ More info (optional)

Internal thread discussing the issue: https://fleetdm.slack.com/archives/C019WG4GH0A/p1771600486408069

Thread with Starchik: https://fleetdm.slack.com/archives/C04JZ9JQS4U/p1771543468955899

Notes on fix:
Once reproed with stale entry of remove/pending, run on the fix branch, and see the profile should self-heal within 30-60 seconds when the DDM reconciler runs.

[JordanMontgomery]

I tried reproducing this last week during my oncall rotation and it was not clear what caused it. More investigation is needed

[zayhanlon]

@JordanMontgomery have you had a chance to look at this again recently? would you be free for me to schedule a call with customer-starchik and show you how they are reproducing it?

[zayhanlon]

@georgekarrv requesting that we p2 this as it's been sitting without progress for a bit

[georgekarrv]

We can bring it in next sprint but without being able to reproduce it will make it tough to solve.