Bug 1603144 - Installing prometheus should update iptable rules for node-exporter
Summary: Installing prometheus should update iptable rules for node-exporter
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Monitoring
Version: 3.9.0
Hardware: Unspecified
OS: Unspecified
Target Milestone: ---
: 3.9.z
Assignee: Simon Pasquier
QA Contact: Junqi Zhao
Depends On: 1563888
Blocks: 1600562
TreeView+ depends on / blocked
Reported: 2018-07-19 09:58 UTC by Simon Pasquier
Modified: 2021-12-10 16:42 UTC (History)
10 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Cause: the 9100 port is blocked on all nodes by default. Consequence: Prometheus can't scrape the node_exporter service running on the other nodes and which listens on port 9100. Fix: the firewall configuration is modified to allow incoming TCP traffic for the 9000-1000 port range. Result: Prometheus can scrape the node_exporter services.
Clone Of: 1563888
Last Closed: 2018-08-29 14:42:32 UTC
Target Upstream Version:

Attachments (Terms of Use)

System ID Private Priority Status Summary Last Updated
Github openshift openshift-ansible issues 7999 0 None None None 2018-07-19 09:58:18 UTC
Github openshift openshift-ansible pull 9258 0 None None None 2018-07-19 09:58:18 UTC
Red Hat Product Errata RHBA-2018:2549 0 None None None 2018-08-29 14:43:24 UTC

Comment 2 Junqi Zhao 2018-08-22 05:33:51 UTC
node-exporter 9100 port is open on nodes which node-exporter pods are running at, for example:
# netstat -anlp | grep 9100
tcp6       0      0 :::9100                 :::*                    LISTEN      54236/node_exporter 
tcp6       0      0       ESTABLISHED 54236/node_exporter 

and node-exporter target could be accessed without error


# openshift version
openshift v3.9.41
kubernetes v1.9.1+a0ce1bc657
etcd 3.2.16

Comment 4 errata-xmlrpc 2018-08-29 14:42:32 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.