Bug 2014633

Summary: [release-4.9] obfuscation ovn clusters bug
Product: OpenShift Container Platform Reporter: Serhii Zakharov <szakharo>
Component: Insights OperatorAssignee: Serhii Zakharov <szakharo>
Status: CLOSED ERRATA QA Contact: Dmitry Misharov <dmisharo>
Severity: medium Docs Contact: Olivia Payne <opayne>
Priority: medium    
Version: 4.9CC: aos-bugs, inecas, mklika, opayne, tremes
Target Milestone: ---   
Target Release: 4.9.z   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Enhancement
Doc Text:
he current opt-in obfuscation will not work on clusters with OVN because the `hostsubnets.network.openshift.io` is not currently on OVN clusters.
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-11-10 21:02:40 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2011822    
Bug Blocks: 2014634    

Description Serhii Zakharov 2021-10-15 16:52:58 UTC
The current opt-in obfuscation doesn't work at clusters with OVN. It manifests as:

operator.go:112] Unable to create anonymizer, some data won't be anonymized(ipv4 and cluster base domain). The error is the server could not find the requested resource (get hostsubnets.network.openshift.io)

The problem is that the OVN clusters don't seem to have any "HostSubnet" resource. This is JIRA tracker for https://bugzilla.redhat.com/show_bug.cgi?id=2009322

Comment 4 Dmitry Misharov 2021-11-01 13:57:31 UTC
Verified on 4.9.0-0.ci-2021-10-30-115054.

1. Enable obfuscation https://docs.openshift.com/container-platform/4.9/support/remote_health_monitoring/remote-health-reporting-from-restricted-network.html
2. Restart Insights Operator
3. Check Insights Operator logs

There is no error "Unable to create anonymizer, some data won't be anonymized"

4. Check if "obfuscation-translation-table" secret exists in "openshift-insights" namespace.

Comment 7 errata-xmlrpc 2021-11-10 21:02:40 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.9.6 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:4119