Bug 1803090 - kube-apiserver 3.11: Unbounded valuesets for metric labels
Summary: kube-apiserver 3.11: Unbounded valuesets for metric labels
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: kube-apiserver
Version: 3.11.0
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: 3.11.z
Assignee: Stefan Schimanski
QA Contact: Ke Wang
URL:
Whiteboard:
: 1803091 (view as bug list)
Depends On: 1803088
Blocks: CVE-2020-8552 1798289
TreeView+ depends on / blocked
 
Reported: 2020-02-14 12:56 UTC by Stefan Schimanski
Modified: 2023-10-06 19:12 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1803088
Environment:
Last Closed: 2020-05-28 05:44:13 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift origin pull 24545 0 None closed Bug 1803090: 3.11: UPSTREAM: 87673: blank out value for unbounded client label 2020-08-29 14:58:04 UTC
Red Hat Product Errata RHBA-2020:2215 0 None None None 2020-05-28 05:44:30 UTC

Comment 1 Stefan Schimanski 2020-02-17 09:31:21 UTC
*** Bug 1803091 has been marked as a duplicate of this bug. ***

Comment 4 Stefan Schimanski 2020-05-20 08:53:52 UTC
PR is ready and soon merging.

Comment 7 Ke Wang 2020-05-22 06:50:00 UTC
Verified with following ENV,
# oc version
oc v3.11.217
kubernetes v1.11.0+d4cacc0
features: Basic-Auth GSSAPI Kerberos SPNEGO

Server https://ip-...-..-..-....ec2.internal:8443
openshift v3.11.219
kubernetes v1.11.0+d4cacc0

Open the prometheus web console, searching the following metrics, 

apiserver_request_count{code="200",contentType="application/json",endpoint="https",instance="1...:8443",job="apiserver",namespace="default",resource="alertmanagers",scope="cluster",service="kubernetes",verb="LIST"}

apiserver_request_latencies_bucket{endpoint="https",instance="1...:8443",job="apiserver",le="+Inf",namespace="default",resource="alertmanagers",scope="cluster",service="kubernetes",verb="LIST"}

apiserver_request_latencies_count{endpoint="https",instance="1...:8443",job="apiserver",namespace="default",resource="alertmanagers",scope="cluster",service="kubernetes",verb="LIST"}

apiserver_request_latencies_sum{endpoint="https",instance="1...:8443",job="apiserver",namespace="default",resource="alertmanagers",scope="cluster",service="kubernetes",verb="LIST"}

apiserver_request_latencies_summary{endpoint="https",instance="1...:8443",job="apiserver",namespace="default",quantile="0.5",resource="alertmanagers",scope="cluster",service="kubernetes",verb="LIST"}

apiserver_request_latencies_summary_count{endpoint="https",instance="1...:8443",job="apiserver",namespace="default",resource="alertmanagers",scope="cluster",service="kubernetes",verb="LIST"}

apiserver_request_latencies_summary_sum{endpoint="https",instance="1...:8443",job="apiserver",namespace="default",resource="alertmanagers",scope="cluster",service="kubernetes",verb="WATCH"}

From above we can see apiserver_request_count and apiserver_request_latencies at the prometheus  related metrics, the label ‘client’ was gone, it is as expected.

Comment 9 errata-xmlrpc 2020-05-28 05:44:13 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:2215

Comment 10 Ke Wang 2020-06-15 03:29:53 UTC
*** Bug 1798289 has been marked as a duplicate of this bug. ***


Note You need to log in before you can comment on or make changes to this bug.