Bug 2034688
Summary: | Allow Prometheus/Thanos to return 401 or 403 when the request isn't authenticated | ||
---|---|---|---|
Product: | OpenShift Container Platform | Reporter: | Haoyu Sun <hasun> |
Component: | Monitoring | Assignee: | Haoyu Sun <hasun> |
Status: | CLOSED ERRATA | QA Contact: | hongyan li <hongyli> |
Severity: | medium | Docs Contact: | |
Priority: | low | ||
Version: | 4.9 | CC: | amuller, anpicker, aos-bugs |
Target Milestone: | --- | ||
Target Release: | 4.11.0 | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | No Doc Update | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2022-08-10 10:41:05 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Haoyu Sun
2021-12-21 17:15:40 UTC
The change is about a e2e test, not related to product. I accessed thanos-queries api without access and get 403. 401 is also ok for error code definition. $ host=$(oc -n openshift-monitoring get route thanos-querier -ojsonpath={.spec.host}) $ curl -k -L -o /dev/null -w %{http_code} "https://$host/api/v1/stores" % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 85124 0 85124 0 0 54899 0 --:--:-- 0:00:01 --:--:-- 55275 403 Tried with payload 4.11.0-0.nightly-2022-03-20-160505 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Important: OpenShift Container Platform 4.11.0 bug fix and security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2022:5069 |