Bug 1958790

Summary:	Store translation table in a secret
Product:	OpenShift Container Platform	Reporter:	Marcell Sevcsik <msevcsik>
Component:	Insights Operator	Assignee:	Serhii Zakharov <szakharo>
Status:	CLOSED DUPLICATE	QA Contact:	Dmitry Misharov <dmisharo>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	4.8	CC:	aos-bugs, ctauchen, dmisharo, inecas, mklika, tremes
Target Milestone:	---
Target Release:	4.8.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-10-14 06:48:24 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Marcell Sevcsik 2021-05-10 07:22:54 UTC

Description of problem:
The anonymizer has a translation-table about the obfuscated IP addresses. As of right now its inaccessible, so this change would store the translation-table in a Secret in the openshift-insights namespace.
On the Web UI you can easily find the secrets under Workloads -> Secrets, the name of the secret is obfuscation-translation-table.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 2 Pavel Šimovec 2021-06-10 13:30:37 UTC

verification failed:
I have enabled obfuscation in support secret, by setting enableGlobalObfuscation key to true.

0610 10:31:37.379677       1 anonymizer.go:277] Failed to delete translation table secret. err: secrets "obfuscation-translation-table" is forbidden: User "system:serviceaccount:openshift-insights:gather" cannot delete resource "secrets" in API group "" in the namespace "openshift-insights"                                                 
E0610 10:31:37.389146       1 anonymizer.go:297] Failed to create the translation table secret. err: secrets is forbidden: User "system:serviceaccount:openshift-insights:gather" cannot create resource "secrets" in API group "" in the namespace "openshift-insights"

Comment 3 Dmitry Misharov 2021-06-14 14:30:16 UTC

Tested on 4.8.0-fc.9. I've got the same errors as in https://bugzilla.redhat.com/show_bug.cgi?id=1958790#c2.

Comment 10 Dmitry Misharov 2021-10-14 06:48:24 UTC


*** This bug has been marked as a duplicate of bug 1977342 ***