[Bug] Auto Scan toggle state is not synchronized between Dashboard and Assets -> Nodes page

[leotseng-suse]

Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

The components show conflicting states. For example, the Dashboard shows "Vulnerability auto-scanning is OFF" (grey toggle), while the Assets -> Nodes page simultaneously shows the Auto Scan toggle as ON (green toggle).

dashboard_auto_scan_not_sync.mov

Expected Behavior

The "Auto Scan" toggle should rely on a centralized state. If Auto Scan is enabled or disabled on the Dashboard, that exact state should be reflected immediately on the Nodes page (and vice versa).

Steps To Reproduce

1. Log in to the NeuVector UI.
2. Navigate to the Dashboard and locate the "How to Reduce Exploit Risk" panel. Observe the state of the Auto Scan toggle (e.g., it is toggled OFF).
3. Navigate to Assets -> Nodes using the left-hand navigation menu.
4. Observe the state of the Auto Scan toggle at the top of the Nodes table (e.g., it is toggled ON).
5. Toggle the setting on one page and navigate back to the other to see that the state does not dynamically update/sync across components.

Environment

- NeuVector: 5.5.0

Anything else?

No response

[xingzhang-suse]

If this behavior is in 5.5.1-rc1, if should be another issue.
It looks like the backend does not sync the value.
Could you please work with @rushk014 and @williamlin-suse for this case, they own the FE/BE feature?
Thank you!

[williamlin-suse]

It's by design, not a bug.
Please see https://jira.suse.com/browse/NVSHAS-9826
enable_auto_scan_workload/enable_auto_scan_host(if specified) have higher priority than auto_scan when controller decides auto-scan is enabled or not for workloads/nodes. (auto-scan for platform is always enabled)
If it's confusing/misleading, UI could adjust the Auto Scan display on dashboard page by the response payload of GET(/v1/scan/config) request

[xingzhang-suse]

Now I can see a issue in https://github.com/neuvector/manager/blob/main/admin/src/main/scala/com/neu/model/PolicyJsonProtocol.scala#L276-L279

the auto_scan is not in the class, but the API call to /v1/scan/config is using this model.
So now, when I turn on the auto scan in dashboard page, and refresh the page, the status is not changed.
@rushk014 Could you please confirm it? Thanks

[xingzhang-suse]

nv-build-manager/4304/