Bug 1947789
| Summary: | Console: check (see bug 1947801#c4 steps) audit log to find deprecated API access related to this component to ensure this component won't access APIs that trigger APIRemovedInNextReleaseInUse alert | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Stefan Schimanski <sttts> | ||||||
| Component: | Management Console | Assignee: | Jakub Hadvig <jhadvig> | ||||||
| Status: | CLOSED ERRATA | QA Contact: | Ke Wang <kewang> | ||||||
| Severity: | high | Docs Contact: | |||||||
| Priority: | high | ||||||||
| Version: | 4.8 | CC: | alegrand, anpicker, aos-bugs, erooth, hongyli, jhadvig, jokerman, juzhao, kakkoyun, kewang, lcosic, mfojtik, pkrupa, schituku, spadgett, surbania, xxia, yapei | ||||||
| Target Milestone: | --- | Keywords: | Reopened | ||||||
| Target Release: | 4.8.0 | ||||||||
| Hardware: | Unspecified | ||||||||
| OS: | Unspecified | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | 1947719 | Environment: | |||||||
| Last Closed: | 2021-07-27 22:58:26 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Bug Depends On: | |||||||||
| Bug Blocks: | 1947719 | ||||||||
| Attachments: |
|
||||||||
|
Description
Stefan Schimanski
2021-04-09 09:23:36 UTC
Now the deprecatedAPIInUse alerts are not displayed in the alerts Version: 4.8.0-0.nightly-2021-04-18-101412 @schituku, I still can see the alerts in web-console, the requests of the BZ https://bugzilla.redhat.com/show_bug.cgi?id=1947785#c0 are gone for the given component, you won't see the related alert in web-console. Verification steps, you can refer to https://bugzilla.redhat.com/show_bug.cgi?id=1947801#c4 Created attachment 1776939 [details]
Api removed in next release
version:
4.8.0-0.nightly-2021-04-26-151924
The initial verification was done for "DeprecatedAPIInUse" alerts and these are not there any more but still the overall issue is not resolved as there are still
"APIRemovedInNextReleaseInUse"
so re-opening the bug
attached screen shot
Siva, can you tell us what APIs specifically are being alerted on? Are they for resources in the console.openshift.io API group or another? There is a bug 1949593 - rename DeprecatedAPIInUse alert to APIRemovedInNextReleaseInUse. Does that mean that there is an naming issue? or that we are missing moving any resources from v1beta1 to v1? Im a bit confused here. Created attachment 1778952 [details]
Alert not referring to a resource
Also when checking a `4.8.0-0.nightly-2021-04-30-102231` cluster the alert does not make any sense to me, since its not referring to any particular resource.
Based on discussion with Stefan, the alert won't go away until all components in the system have been updated their manifests.
For verification we should look into audit logs:
```
$ oc adm node-logs ci-ln-cp5t82t-f76d1-v8r86-master-{0,1,2} --path=kube-apiserver/audit.log --raw | grep -e '"k8s.io/removed-release":"1.22"' > audit.json
$ cat audit.json | jq -r '.user.username+": "+.requestURI' | sort | uniq
```
and check that the console API requests are gone.
Refer to https://bugzilla.redhat.com/show_bug.cgi?id=1947801#c4, tried to verify on latest OCP4.8, $ oc get clusterversion NAME VERSION AVAILABLE PROGRESSING SINCE STATUS version 4.8.0-0.nightly-2021-05-13-002125 True False 76m Cluster version is 4.8.0-0.nightly-2021-05-13-002125 $ masters=$(oc get no -l node-role.kubernetes.io/master | sed '1d' | awk '{print $1}') $ oc adm node-logs $masters --path=kube-apiserver/audit.log --raw | grep -e '"k8s.io/removed-release":"1.22"' | tee dep.json $ cat dep.json | jq -r '.user.username+": "+.requestURI' | sort | uniq | grep 'console' No results found. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: OpenShift Container Platform 4.8.2 bug fix and security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2021:2438 The needinfo request[s] on this closed bug have been removed as they have been unresolved for 500 days |