Bug 1743455

Summary: console get error on polling promethus data against proxy enablement cluster
Product: OpenShift Container Platform Reporter: shahan <hasha>
Component: Management ConsoleAssignee: Jakub Hadvig <jhadvig>
Status: CLOSED ERRATA QA Contact: Yadan Pei <yapei>
Severity: high Docs Contact:
Priority: high    
Version: 4.2.0CC: aos-bugs, jokerman, juzhao, spadgett
Target Milestone: ---Keywords: TestBlocker
Target Release: 4.2.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-10-16 06:36:35 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
proxy
none
502 Bad Gateway for Alerts/Silences
none
access log none

Description shahan 2019-08-20 03:04:20 UTC
Created attachment 1605937 [details]
proxy

Description of problem:
 console get error on polling promethus data against proxy enablement cluster

Version-Release number of selected component (if applicable):
4.2.0-0.nightly-2019-08-18-054211

How reproducible:
Always

Steps to Reproduce:
1. create resources under a project
2.Check workload->pod page, project->detail page, compute->node page
3.

Actual results:
All chart shows 'no datapoints found' and promethus query request got 502 502 Bad Gateway

Expected results:
should polling promethus data as expected.

Additional info:
see attachment

Comment 1 Junqi Zhao 2019-08-20 03:25:01 UTC
Created attachment 1605938 [details]
502 Bad Gateway for Alerts/Silences

same "502 Bad Gateway" to list Alerts/Silences

Comment 4 Junqi Zhao 2019-08-20 03:41:00 UTC
Created attachment 1605943 [details]
access log

"prometheus-k8s.openshift-monitoring.svc:9091" and "prometheus-k8s.openshift-monitoring.svc:9092" are accessed via the proxy

Comment 5 Samuel Padgett 2019-08-20 13:27:48 UTC
We need to make sure no services are accessed through the proxy, only the OAuth server.

Comment 6 Samuel Padgett 2019-08-21 16:19:56 UTC
See also https://github.com/openshift/console/issues/2435

Comment 7 Samuel Padgett 2019-08-21 19:03:24 UTC
https://github.com/openshift/cluster-network-operator/pull/295 adds `.svc` to the no proxy list, which should address this problem.

Comment 9 shahan 2019-08-23 05:38:14 UTC
Now console can poll data from promethus service on clusters with proxy
Verified this bug
4.2.0-0.nightly-2019-08-23-004712

Comment 10 errata-xmlrpc 2019-10-16 06:36:35 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:2922