Ansible copies applications, which are not supposed to be deployed for search-head nodes.

[yaroslav-nakonechnikov]

Hello,

we have our custom app, which collects specific information on deployer, and now we started to see next error.

01-24-2025 14:51:03.980 +0000 WARN  AppsDeployHandler [5609 TcpChannelThread] - Error while deploying apps to target=https://splunk-e-44782-search-head-0.splunk-e-44782-search-head-headless.splunk-operator.svc.cluster.local:8089 with members=3: Error while updating app=resmonitor on target=https://100.65.7.105:8089: Non-200/201 status_code=500; {"messages":[{"type":"ERROR","text":"\n In handler 'localapps': Error installing application: Failed to copy: /opt/splunk/var/run/splunk/bundle_tmp/28f328630e44b1de/resmonitor/bin to /opt/splunk/etc/apps/resmonitor/bin. 2 errors occurred. Description for first 2: [{operation:\"copying source to destination\", error:\"Text file busy\", src:\"/opt/splunk/var/run/splunk/bundle_tmp/28f328630e44b1de/resmonitor/bin/resource-monitor\", dest:\"/opt/splunk/etc/apps/resmonitor/bin/resource-monitor\"}, {operation:\"transfering contents from source to destination\", error:\"Text file busy\", src:\"/opt/splunk/var/run/splunk/bundle_tmp/28f328630e44b1de/resmonitor/bin\", dest:\"/opt/splunk/etc/apps/resmonitor/bin\"}]"}]}, Error while updating app=resmonitor on target=https://100.65.11.34:8089: Non-200/201 status_code=500; {"messages":[{"type":"ERROR","text":"\n In handler 'localapps': Error installing application: Failed to copy: /opt/splunk/var/run/splunk/bundle_tmp/c790abf0b9f3ac27/resmonitor/bin to /opt/splunk/etc/apps/resmonitor/bin. 2 errors occurred. Description for first 2: [{operation:\"copying source to destination\", error:\"Text file busy\", src:\"/opt/splunk/var/run/splunk/bundle_tmp/c790abf0b9f3ac27/resmonitor/bin/resource-monitor\", dest:\"/opt/splunk/etc/apps/resmonitor/bin/resource-monitor\"}, {operation:\"transfering contents from source to destination\", error:\"Text file busy\", src:\"/opt/splunk/var/run/splunk/bundle_tmp/c790abf0b9f3ac27/resmonitor/bin\", dest:\"/opt/splunk/etc/apps/resmonitor/bin\"}]"}]}, Error while updating app=resmonitor on target=https://100.65.2.41:8089: Non-200/201 status_code=500; {"messages":[{"type":"ERROR","text":"\n In handler 'localapps': Error installing application: Failed to copy: /opt/splunk/var/run/splunk/bundle_tmp/57117badc3ddd88b/resmonitor/bin to /opt/splunk/etc/apps/resmonitor/bin. 2 errors occurred. Description forfirst 2: [{operation:\"copying source to destination\", error:\"Text file busy\", src:\"/opt/splunk/var/run/splunk/bundle_tmp/57117badc3ddd88b/resmonitor/bin/resource-monitor\", dest:\"/opt/splunk/etc/apps/resmonitor/bin/resource-monitor\"}, {operation:\"transfering contents from source to destination\", error:\"Text file busy\", src:\"/opt/splunk/var/run/splunk/bundle_tmp/57117badc3ddd88b/resmonitor/bin\", dest:\"/opt/splunk/etc/apps/resmonitor/bin\"}]"}]}

it prevents playbook from finishing, so deployer never starts.

and looks like problem is there: https://github.com/splunk/splunk-ansible/blob/9.4.0/roles/splunk_common/tasks/copy_installed_apps.yml
as it copies everything from ets/apps to schcluster... Which, as i understand, should not be.