cmdbsyncer 4.4.0__tar.gz → 4.4.2__tar.gz

{cmdbsyncer-4.4.0 → cmdbsyncer-4.4.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cmdbsyncer
-Version: 4.4.0
+Version: 4.4.2
 Summary: Rule-based modular synchronizer for Checkmk, Netbox, Ansible, I-DOIT, Jira CMDB and 15+ other CMDB/monitoring systems
 Author-email: Kuhn & Ruess GmbH <info@kuhn-ruess.de>
 Maintainer-email: Bastian Kuhn <mail@bastian-kuhn.de>

cmdbsyncer-4.4.2/application/buildinfo.txt

@@ -0,0 +1 @@
+BUILD_DATE=2026-11-10T09:35:59Z

{cmdbsyncer-4.4.0 → cmdbsyncer-4.4.2}/application/changelog/v4.3.md

@@ -17,6 +17,7 @@
 - FIX: An import source delivering a hostname that is not text now reports a readable error instead of a traceback
 - FIX: Inventorize runs only write a host to the database when an attribute really changed, which noticeably speeds up large Netbox inventories
 - FIX: A database problem while looking up CMDB templates is written to the log instead of silently looking like "no template matched"
+- FIX: A Checkmk "Move to Folder" or "Create Empty Folder" value wrapped in a Jinja condition, like `{% if var is defined %}/{{var}}|{'title': '{{var}}'}{% endif %}`, can be saved again instead of being rejected as invalid folder options
 
 ## Version 4.3.5
 - FIX: Inventorize applied `rewrite_hostname` twice for CSV, JSON, REST, YML, MySQL, ODBC, JDisc and LDAP accounts, so a template that appends something to the name, a domain for example, missed the host the import had created

{cmdbsyncer-4.4.0 → cmdbsyncer-4.4.2}/application/changelog/v4.4.md

@@ -1,5 +1,44 @@
 # Version 4.4
 
+## Version 4.4.2
+- SEC: Netbox Dataflow: the API token only goes to the address of the account; a page link of the answer pointing to another host no longer gets it
+- FIX: Cron Groups: after a restart of the container a group no longer stays marked as running, when another process got the number of its old run
+- FIX: Accounts: a change, like the master flag, reaches every process of the web interface and REST API within a minute; before, some kept the old account until a restart
+- FIX: Checkmk: a host export with --limit creates a host that a rule turns into a cluster right away; before, the host was deleted and only came back as cluster with the next full run
+- FIX: Checkmk DCD Rules: Restrict Source Hosts renders Jinja like the other fields, e.g. {{ HOSTNAME }}; a line that renders empty is left out
+- FIX: Checkmk: rule export: a rule with a stored password, for example Kubernetes on Checkmk 2.5, is no longer updated on every run
+- FIX: Ansible: playbooks started from the web interface find ansible-playbook in the Syncer's venv, also when the web server runs under systemd without the venv on its PATH
+- FIX: Checkmk: Manage OMD Server creates a missing site again, including the initial cmkadmin password, instead of failing on the update step
+
+## Version 4.4.1
+- FIX: REST import: entries without the hostname field are skipped instead of aborting the whole import
+- FIX: Checkmk users: an empty row under Roles or Contact Groups is no longer sent to Checkmk, which rejected the user because of it
+- FIX: Checkmk Site Pools: the member sites of a switched-off pool are readable again in the dark themes
+- FIX: Rules with a Pasted List: switching the rule source to the list no longer hides the Enabled and Last Match checkboxes
+- FIX: Host list: the page is about a fifth smaller for hosts with many labels and loads faster
+- FIX: Checkmk host export: a folder Checkmk refuses to create is reported in the terminal with Checkmk's reason — before, only the hosts in it failed later with "folder could not be found"
+- FIX: Exports to Checkmk, Netbox, i-doit, VMware and Jira write each host once per run instead of once per rule set and keep less in memory on large host counts
+- FIX: Checkmk rule export: CMDB templates are read once per run instead of once for every host
+- FIX: Ansible Checkmk agent playbook: a failed host creation, agent download, registration or discovery shows the error message instead of only "the output has been hidden", with the automation secret masked
+- FIX: Ansible Checkmk agent playbook: hosts without any agent step switched on are skipped before Ansible connects to them
+- FIX: Ansible inventory: several times faster and with considerably less memory on large host counts
+- FIX: Ansible projects no longer hand out each other's cached variables, each project computes its own
+- FIX: `ansible update_cache` rebuilds the whole Ansible cache instead of reusing the old values
+- FIX: Checkmk rule export: a rule with Keep Value is no longer deleted and created again on every run when its comment in Checkmk differs, so the value adjusted in Checkmk, including a password, is kept
+- FIX: Checkmk rule export: correcting the description of a rule no longer replaces a password in its value with the masked `******` Checkmk shows
+- FIX: Checkmk rule export: when several Setup Rules produce the very same Checkmk rule, it is created only once and its description no longer changes on every run
+- FIX: Checkmk rule export: when Checkmk holds an outdated copy of a rule next to the current one, the outdated copy is deleted instead of first being updated and the current one deleted as a duplicate
+- FIX: Checkmk rule export: an update of a rule that runs into the request timeout is no longer sent to Checkmk a second time, so a slow Checkmk costs one timeout per rule instead of two and the update is not applied twice
+- FIX: The host list shows the Search options button only once again; after a search it appeared a second time next to the filters
+- FIX: The Checkmk Settings offer the editions of Checkmk 2.5 (Community, Pro, Ultimate, Ultimate with Multi-Tenancy), so the Ansible site management can install and update 2.5 sites
+- FIX: The Ansible site update updates sites to Checkmk 2.5 without stopping at its version and edition questions, and stops on a failed pre-flight check instead of continuing with a broken site
+- FIX: The searchable Checkmk ruleset picker in the Setup rule form now also lists the rulesets when the Syncer was installed with pip, the ruleset lists were missing from the package
+- FIX: CMDB templates are listed alphabetically in the Templates view and in every template selection, like Set Template on the host list
+- FIX: Searching or filtering the host list by a label or inventory value now also finds numbers, e.g. `vlan:5` for a label stored as the number 5, including partial matches and regex
+- FIX: A Checkmk "Move to Folder" or "Create Empty Folder" value wrapped in a Jinja condition, like `{% if var is defined %}/{{var}}|{'title': '{{var}}'}{% endif %}`, can be saved again instead of being rejected as invalid folder options
+- FIX: Host Debug page now lists every condition that matched for an "ALL must match" rule instead of only one, and the hint for a matching rule without a new outcome no longer claims an earlier rule set the value when the outcome was simply empty
+- FIX: The host action "Redistribute Site Pool" now really moves the selected hosts: the next export assigns them the least-loaded site of their pool again instead of keeping the old one
+
 ## Version 4.4.0
 
 ### Setup

{cmdbsyncer-4.4.0 → cmdbsyncer-4.4.2}/application/helpers/get_account.py

@@ -2,6 +2,7 @@
 Helper to get Account
 """
 import copy
+import time
 from contextlib import contextmanager
 from contextvars import ContextVar
 
@@ -67,11 +68,13 @@ _CHILD_OWNED_FIELDS = ('typ', 'username', 'password', 'address', 'object_type')
 # Internal serialisation artefacts that never leave this layer.
 _INTERNAL_FIELDS = ('custom_fields', 'password_crypted', 'plugin_settings')
 
-# In-process cache: ``{(lookup_key, is_id): account_dict}``. Sync runs read
-# the same handful of accounts for every host/rule, so caching keeps Mongo
-# and the secrets-manager hook off the hot path. Invalidated on Account
-# save/delete via mongoengine signals so the web app picks up edits
-# without a process restart.
+# In-process cache: ``{(lookup_key, is_id): (loaded_at, account_dict)}``.
+# Sync runs read the same handful of accounts for every host/rule, so
+# caching keeps Mongo and the secrets-manager hook off the hot path.
+# Account save/delete clears it through mongoengine signals, but only in
+# the process that saved; the other web workers read the account again
+# after ACCOUNT_CACHE_SECONDS.
+ACCOUNT_CACHE_SECONDS = 60
 _account_cache = {}
 
 
@@ -177,10 +180,12 @@ def get_account_by_name(name, is_id=False):
     Get Account by Name or Return False
     """
     cache_key = (str(name), is_id)
-    cached = _account_cache.get(cache_key)
-    if cached is None:
+    entry = _account_cache.get(cache_key)
+    if entry and time.monotonic() - entry[0] < ACCOUNT_CACHE_SECONDS:
+        cached = entry[1]
+    else:
         cached = _build_account_dict(name, is_id)
-        _account_cache[cache_key] = cached
+        _account_cache[cache_key] = (time.monotonic(), cached)
     # Defensive copy — callers must not mutate the cached entry.
     return copy.deepcopy(cached)
 

{cmdbsyncer-4.4.0 → cmdbsyncer-4.4.2}/application/models/account.py

@@ -1,6 +1,8 @@
 """
 Account
 """
+import time
+
 from bson.errors import InvalidId
 from mongoengine import DENY
 from mongoengine.errors import ValidationError
@@ -230,6 +232,7 @@ class Account(db.Document):
         return f"{self.name} ({self.typ})"
 
 
+IS_MASTER_CACHE_SECONDS = 60
 _IS_MASTER_CACHE = {}
 
 # Hosts an import had to leave alone because a master account owns them.
@@ -273,13 +276,17 @@ def account_is_master(account_id):
     Whether the account with *account_id* is flagged as master.
 
     An import asks this once per host it does not own, so the answer is
-    cached for the lifetime of the process. Unknown or malformed ids
-    (legacy data) count as "not master".
+    cached for IS_MASTER_CACHE_SECONDS; a change of the flag reaches a
+    running process (web workers) within that time. Unknown or malformed
+    ids (legacy data) count as "not master".
     """
-    if account_id not in _IS_MASTER_CACHE:
-        try:
-            account = Account.objects(id=account_id).only('is_master').first()
-        except (ValidationError, InvalidId):
-            account = None
-        _IS_MASTER_CACHE[account_id] = bool(account and account.is_master)
-    return _IS_MASTER_CACHE[account_id]
+    entry = _IS_MASTER_CACHE.get(account_id)
+    if entry and time.monotonic() - entry[0] < IS_MASTER_CACHE_SECONDS:
+        return entry[1]
+    try:
+        account = Account.objects(id=account_id).only('is_master').first()
+    except (ValidationError, InvalidId):
+        account = None
+    is_master = bool(account and account.is_master)
+    _IS_MASTER_CACHE[account_id] = (time.monotonic(), is_master)
+    return is_master

{cmdbsyncer-4.4.0 → cmdbsyncer-4.4.2}/application/models/host.py

@@ -310,12 +310,16 @@ class Host(HostLabelsMixin, db.Document):
         Return all Hosts eligible for export. Only rows that are not
         soft-deleted and whose lifecycle_state is 'active' (or missing
         for legacy rows) are returned.
+
+        Like the other export helpers below, the queryset does not cache
+        its documents: an export walks every host once, a cached queryset
+        held all of them in memory until the run ended.
         """
         return Host.objects(
             Host.active_q()
             & Q(is_object__ne=True)
             & Q(deleted_at__exists=False)
-        )
+        ).no_cache()
 
     @staticmethod
     def objects_by_filter(object_list):
@@ -327,9 +331,9 @@ class Host(HostLabelsMixin, db.Document):
         active = Host.active_q() & Q(deleted_at__exists=False)
         if not object_list:
             logger.debug("HOST FILTER OFF")
-            return Host.objects(active & Q(is_object__ne=True))
+            return Host.objects(active & Q(is_object__ne=True)).no_cache()
         logger.debug("HOST FILTER %s", object_list)
-        return Host.objects(active & Q(object_type__in=object_list))
+        return Host.objects(active & Q(object_type__in=object_list)).no_cache()
 
     @staticmethod
     def active_non_template():
@@ -343,7 +347,7 @@ class Host(HostLabelsMixin, db.Document):
             Host.active_q()
             & Q(deleted_at__exists=False)
             & Q(object_type__ne='template')
-        )
+        ).no_cache()
 
 
     @staticmethod

{cmdbsyncer-4.4.0 → cmdbsyncer-4.4.2}/application/models/host_templates.py

@@ -26,20 +26,57 @@ def parse_cmdb_match(cmdb_match):
     return key, value
 
 
-def active_templates(host):
+def active_templates(host, cache=None):
     """
     The templates a host carries that still contribute something. An
     archived (soft-deleted) template keeps its assignment so a restore
     brings it back, but it must not feed an export or be presented as
     contributing in the meantime.
 
+    ``cache`` is a dict the caller keeps over a run of many hosts. Reading
+    ``host.cmdb_templates`` loads the template documents from the
+    database for every single host; with the cache each template is
+    loaded once.
+
     Returns:
         list: the host's non-archived templates.
     """
-    return [tmpl for tmpl in (host.cmdb_templates or [])
+    if cache is None:
+        templates = host.cmdb_templates or []
+    else:
+        templates = _cached_templates(host, cache)
+    return [tmpl for tmpl in templates
             if not getattr(tmpl, 'deleted_at', None)]
 
 
+def _cached_templates(host, cache):
+    """
+    The templates of ``host`` out of ``cache`` (template id -> template),
+    the missing ones loaded with one query. Reads the references as
+    stored, so the host does not load them itself.
+    """
+    raw = getattr(host, '_data', None)
+    if not isinstance(raw, dict):
+        return host.cmdb_templates or []
+    template_ids = []
+    for ref in raw.get('cmdb_templates') or []:
+        # A DBRef as loaded, or a template document once assigned/read
+        template_id = getattr(ref, 'pk', None) or getattr(ref, 'id', None)
+        if template_id is None:
+            return host.cmdb_templates or []
+        template_ids.append(template_id)
+    missing = [tid for tid in template_ids if tid not in cache]
+    if missing:
+        # pylint: disable-next=import-outside-toplevel,cyclic-import
+        from application.models.host import Host
+        for template in Host.objects(pk__in=missing):
+            cache[template.pk] = template
+        for template_id in missing:
+            # A deleted template: nothing to contribute
+            cache.setdefault(template_id, None)
+    return [cache[tid] for tid in template_ids if cache[tid] is not None]
+
+
 def merged_attribute_keys():
     """
     The attribute keys configured as merged in the System Config.
@@ -99,7 +136,7 @@ def get_template(template_name):
 
 def assignable_templates(template_names=None):
     """
-    Queryset of the active CMDB templates, optionally narrowed to
+    Queryset of the active CMDB templates, ordered by name, optionally narrowed to
     ``template_names`` — the allowlist of a template-restricted user
     (``User.template_scope()``). ``None`` means unrestricted.
 
@@ -111,7 +148,7 @@ def assignable_templates(template_names=None):
     query = Host.objects(object_type='template', deleted_at__exists=False)
     if template_names is not None:
         query = query.filter(hostname__in=list(template_names))
-    return query
+    return query.order_by('hostname')
 
 
 def template_ids_for_names(template_names):

{cmdbsyncer-4.4.0 → cmdbsyncer-4.4.2}/application/modules/plugin.py

@@ -222,6 +222,10 @@ class Plugin():
     # on first use and then kept for the whole run.
     merged_attributes = None
 
+    # CMDB templates by id, loaded on first use and then kept for the
+    # whole run (see active_templates()).
+    template_cache = None
+
 
 
     name = "Undefined"
@@ -607,7 +611,7 @@ class Plugin():
         for a host that carries a template at all — an export run must
         not query the config document per host.
         """
-        templates = active_templates(db_host)
+        templates = self.host_templates(db_host)
         if not templates:
             return
         if self.merged_attributes is None:
@@ -632,6 +636,15 @@ class Plugin():
                     value = merge_attribute_values(attributes[key], value)
                 attributes[key] = value
 
+    def host_templates(self, db_host):
+        """
+        The active CMDB templates of the host, each template loaded once
+        per plugin instance instead of once per host.
+        """
+        if self.template_cache is None:
+            self.template_cache = {}
+        return active_templates(db_host, self.template_cache)
+
     @staticmethod
     def flush_host_cache(db_host):
         """
@@ -664,6 +677,21 @@ class Plugin():
             setattr(db_host, '_cache_dirty', True)
 
     def get_attributes(self, db_host, cache, persist_cache=True):
+        """
+        Retrieve and process host attributes with caching support, see
+        _compute_attributes().
+
+        The custom attribute, rewrite and filter engines and the attribute
+        set itself each write a cache slot. They are collected and the host
+        is saved once — unless ``persist_cache=False``, then the caller
+        flushes them itself (see flush_host_cache()).
+        """
+        attributes = self._compute_attributes(db_host, cache)
+        if persist_cache:
+            self.flush_host_cache(db_host)
+        return attributes
+
+    def _compute_attributes(self, db_host, cache):
         """
         Retrieve and process host attributes with caching support.
         
@@ -694,7 +722,7 @@ class Plugin():
                 # earlier run left in it goes, or it would be served again
                 # the day the timestamp leaves the rules.
                 if db_host.cache.pop(cache, None) is not None:
-                    self._persist_cache(db_host, persist_cache)
+                    self._persist_cache(db_host, False)
                 cache = False
             else:
                 db_host.cache.setdefault(cache, {})
@@ -730,7 +758,7 @@ class Plugin():
             self.custom_attributes.get_outcomes(
                 db_host,
                 attributes,
-                persist_cache=persist_cache,
+                persist_cache=False,
             )
         )
 
@@ -739,7 +767,7 @@ class Plugin():
             for rewrite, value in self.rewrite.get_outcomes(
                 db_host,
                 attributes,
-                persist_cache=persist_cache,
+                persist_cache=False,
             ).items():
                 realname = rewrite[4:]
                 if rewrite.startswith('add_'):
@@ -760,17 +788,17 @@ class Plugin():
             attributes_filtered = self.filter.get_outcomes(
                 db_host,
                 attributes,
-                persist_cache=persist_cache,
+                persist_cache=False,
             )
             data['filtered'] = attributes_filtered
             if attributes_filtered.get('ignore_host') and cache:
                 db_host.cache[cache]['attributes'] = data
-                self._persist_cache(db_host, persist_cache)
+                self._persist_cache(db_host, False)
                 return False
 
         if cache:
             db_host.cache[cache]['attributes'] = data
-            self._persist_cache(db_host, persist_cache)
+            self._persist_cache(db_host, False)
         return data
 
     def _attributes_depend_on_time(self):

{cmdbsyncer-4.4.0 → cmdbsyncer-4.4.2}/application/modules/rule/rule.py

@@ -396,14 +396,16 @@ class Rule():
             conditions = rule['conditions']
 
             no_match_reason = None
-            match_reason = None
+            # Every condition that made the rule hit: the one that matched
+            # for 'any' rules, all of them for 'all' rules.
+            match_reasons = []
             if condition_typ == 'any':
                 for condition in conditions:
                     if self.handle_match(condition, hostname):
                         rule_hit = True
                         no_match_reason = None
                         if self.debug:
-                            match_reason = dict(condition)
+                            match_reasons = [dict(condition)]
                         break # We have a hit, no need to check more
                     if self.debug:
                         no_match_reason = dict(condition)
@@ -416,10 +418,10 @@ class Rule():
                         if self.debug:
                             no_match_reason = dict(condition)
                         break # One was no hit, no need for loop
-                if self.debug and rule_hit and conditions:
-                    # All conditions matched — surface the last one as the
-                    # representative match (mirrors no_match_reason shape).
-                    match_reason = dict(conditions[-1])
+                if self.debug and rule_hit:
+                    # The rule only hits because every condition matched,
+                    # so all of them are the reason, not just one.
+                    match_reasons = [dict(c) for c in conditions]
 
             elif condition_typ == 'anyway':
                 rule_hit = True
@@ -430,18 +432,20 @@ class Rule():
                     "group": self.name,
                     "hit": rule_hit,
                     'no_match_reason': no_match_reason,
-                    'match_reason': match_reason,
+                    'match_reasons': match_reasons,
                     "condition_type": _RULE_DESCRIPTIONS[condition_typ],
                     "name": rule['name'],
                     "id": str(rule['_id']),
                     "last_match": str(rule['last_match']),
                 }
                 self.debug_lines.append(debug_data)
-                # Show WHY the rule hit or missed: for 'all' rules the first
-                # failing condition, for 'any' rules the matching one (on a
-                # miss, the last condition checked — all of them failed).
+                # Show WHY the rule hit or missed: on a hit every condition
+                # that matched (all of them for 'all' rules, the matching one
+                # for 'any' rules), on a miss the first failing condition of
+                # an 'all' rule or the last checked one of an 'any' rule.
                 if rule_hit:
-                    deciding = format_condition(match_reason)
+                    deciding = " AND ".join(
+                        format_condition(c) for c in match_reasons)
                     if deciding:
                         deciding = f"matched: {deciding}"
                 else:

{cmdbsyncer-4.4.0 → cmdbsyncer-4.4.2}/application/modules/search_parser.py

@@ -288,6 +288,31 @@ def _dict_match_expr(field_name, regex_str, target):
     }}
 
 
+def value_regex_query(path, regex_str):
+    """
+    Case-insensitive regex match on one label/inventory value, numbers
+    included. `$regex` alone only ever matches strings, so `vlan:5`
+    missed a label stored as the integer 5. The `$expr` branch matches
+    the value converted to a string (numbers, booleans); a missing,
+    null or non-convertible value converts to null and never matches.
+    The plain `$regex` branch stays for list values, whose elements
+    `$regex` matches one by one.
+    """
+    return {'$or': [
+        {path: {'$regex': regex_str, '$options': 'i'}},
+        {'$expr': {'$regexMatch': {
+            'input': {'$convert': {
+                'input': f'${path}',
+                'to': 'string',
+                'onError': None,
+                'onNull': None,
+            }},
+            'regex': regex_str,
+            'options': 'i',
+        }}},
+    ]}
+
+
 _DATE_TERM_RE = re.compile(r'^(?P<operator>>=|<=|>|<)?\s*(?P<date>\S+)$')
 _ISO_DATE_RE = re.compile(r'^(?P<year>\d{4})-(?P<month>\d{1,2})-(?P<day>\d{1,2})$')
 
@@ -423,11 +448,11 @@ def _leaf_to_mongo(field, value, mode, tzinfo):
         return {'hostname': {'$regex': regex_str, '$options': 'i'}}
 
     if field.startswith('labels.') or field.startswith('inventory.'):
-        return {field: {'$regex': regex_str, '$options': 'i'}}
+        return value_regex_query(field, regex_str)
 
     return {'$or': [
-        {f'labels.{field}': {'$regex': regex_str, '$options': 'i'}},
-        {f'inventory.{field}': {'$regex': regex_str, '$options': 'i'}},
+        value_regex_query(f'labels.{field}', regex_str),
+        value_regex_query(f'inventory.{field}', regex_str),
     ]}
 
 

{cmdbsyncer-4.4.0 → cmdbsyncer-4.4.2}/application/plugins/ansible/__init__.py

@@ -72,6 +72,7 @@ def load_rules(project=None):
             AnsibleRewriteAttributesRule.objects(**rule_filter).order_by('sort_field')
 
     ansible_rules = AnsibleVariableRule()
+    ansible_rules.cache_name = f'ansible_variables{project_suffix}'
     ansible_rules.rules = \
             AnsibleCustomVariablesRule.objects(**rule_filter).order_by('sort_field')
 
@@ -79,6 +80,7 @@ def load_rules(project=None):
         'filter': attribute_filter,
         'rewrite': attribute_rewrite,
         'actions': ansible_rules,
+        'cache_key': f'ansible{project_suffix}',
     }
 #.
 #   .-- Debug Host — shared backend for CLI + HTML debug page
@@ -112,7 +114,7 @@ def get_ansible_debug_data(hostname, project_name=None):
     if not db_host:
         return None, None, None
 
-    attributes = syncer.get_attributes(db_host, 'ansible')
+    attributes = syncer.get_attributes(db_host, rules['cache_key'])
     extra_attributes = {}
     if attributes:
         hidden_fields = ('ansible_password', 'ansible_ssh_pass')
@@ -148,7 +150,7 @@ def debug_ansible_rules(hostname, project_name, debug):  # pylint: disable=unuse
     if not db_host:
         return
 
-    attributes = syncer.get_attributes(db_host, 'ansible')
+    attributes = syncer.get_attributes(db_host, rules['cache_key'])
 
     if not attributes:
         print(f"{ColorCodes.FAIL}THIS HOST IS IGNORED BY RULE{ColorCodes.ENDC}")
@@ -168,6 +170,24 @@ def debug_ansible_rules(hostname, project_name, debug):  # pylint: disable=unuse
 #.
 #   .-- Ansible Cache
 
+def clear_ansible_cache():
+    """
+    Drop every Ansible cache slot of every host: the attribute set, the
+    filter, rewrite and variable outcomes of all projects, and the custom
+    attributes they are computed from.
+    """
+    slot_names = Host.objects.aggregate([
+        {'$project': {'slot': {'$objectToArray': '$cache'}}},
+        {'$unwind': '$slot'},
+        {'$group': {'_id': '$slot.k'}},
+    ])
+    slots = [entry['_id'] for entry in slot_names
+             if entry['_id'].lower().startswith('ansible')
+             or entry['_id'] == 'CustomAttributeRule']
+    if slots:
+        Host.objects(cache__ne={}).update(
+            **{f'unset__cache__{slot}': 1 for slot in slots})
+
 def _inner_update_cache(account=False):
     """
     Update Cache of Ansible
@@ -175,14 +195,10 @@ def _inner_update_cache(account=False):
     # pylint: disable=unused-argument
     # Account Variable needed because of cronjobs
     print(f"{ColorCodes.OKGREEN}Delete current Cache{ColorCodes.ENDC}")
-    Host.objects.filter(cache__ansible__exists=True).update(unset__cache__ansible=1)
+    clear_ansible_cache()
     print(f"{ColorCodes.OKGREEN}Build new Cache{ColorCodes.ENDC}")
-    rules = load_rules()
-    syncer = AnsibleInventory()
+    syncer = _build_ansible_provider()
     syncer.name = "Rebuild Ansible Cache"
-    syncer.filter = rules['filter']
-    syncer.rewrite = rules['rewrite']
-    syncer.actions = rules['actions']
     # Do the action which triggers the caches
     syncer.get_full_inventory(show_status=True)
 
@@ -320,6 +336,7 @@ def _build_ansible_provider(project=None):
     syncer.filter = rules['filter']
     syncer.rewrite = rules['rewrite']
     syncer.actions = rules['actions']
+    syncer.cache_key = rules['cache_key']
     return syncer