Bug 1925350

Summary: prometheus, alertmanager and node-exporter images which use in the latest Ceph Storage have the "D" health index.
Product: [Red Hat Storage] Red Hat Ceph Storage Reporter: Hiroyuki Kaneko <hkaneko>
Component: Ceph-AnsibleAssignee: Guillaume Abrioux <gabrioux>
Status: CLOSED ERRATA QA Contact: Sunil Angadi <sangadi>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 4.2CC: anharris, aschoen, branto, ceph-eng-bugs, dsavinea, epuertat, gabrioux, gmeno, lithomas, nthomas, sangadi, sostapov, tserlin, vereddy, ykaul
Target Milestone: ---Keywords: BetaBlocker
Target Release: 4.2z1   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: ceph-ansible-4.0.47-1.el8cp, ceph-ansible-4.0.47-1.el7cp Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-04-28 20:13:18 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Hiroyuki Kaneko 2021-02-04 23:44:16 UTC
Description of problem:
The following container images which Ceph Storage uses have the "D" health index and have stopped updating them since 10 months ago. Those images should keep using the latest images which have the "A" health index.
- Prometheus
- Node exporter
- AlertManager

Version-Release number of selected component (if applicable):
- v4.2

How reproducible:
Those are shown in Ansible Group vars file which is provided by ceph-ansible.

Steps to Reproduce:
1. Install ceph-ansible with the latest version
2. open the file /usr/share/ceph-ansible/group_vars/all.yml.sample

Actual results:
Following parameters are appeared in the file all.yml.sample

- node_exporter_container_image: registry.redhat.io/openshift4/ose-prometheus-node-exporter:v4.1
- prometheus_container_image: registry.redhat.io/openshift4/ose-prometheus:4.1
- alertmanager_container_image: registry.redhat.io/openshift4/ose-prometheus-alertmanager:4.1

Expected results:
Red Hat Container Catalog have the latest images which is version v4.6 and I expected those are available in Ceph Storage.

- node_exporter_container_image: registry.redhat.io/openshift4/ose-prometheus-node-exporter:v4.6
- prometheus_container_image: registry.redhat.io/openshift4/ose-prometheus:4.6
- alertmanager_container_image: registry.redhat.io/openshift4/ose-prometheus-alertmanager:4.6


Additional info:

Comment 1 RHEL Program Management 2021-02-04 23:44:23 UTC
Please specify the severity of this bug. Severity is defined here:
https://bugzilla.redhat.com/page.cgi?id=fields.html#bug_severity.

Comment 2 Hiroyuki Kaneko 2021-02-05 08:05:05 UTC
Due to including an important CVE, changed the Severity to Medium.

Comment 6 Yaniv Kaul 2021-02-11 06:49:21 UTC
Yes, this is a blocker. We have to fix it promptly.

Comment 8 Scott Ostapovicz 2021-02-11 14:42:36 UTC
Make a change to Ceph-ansible upstream.  When you have tagged that version, assign to Ernesto for testing.  Do not wait for this to be ON_QA.

Comment 20 errata-xmlrpc 2021-04-28 20:13:18 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Red Hat Ceph Storage security, bug fix, and enhancement Update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:1452