Bug 2014633 - [release-4.9] obfuscation ovn clusters bug
Summary: [release-4.9] obfuscation ovn clusters bug
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Insights Operator
Version: 4.9
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: 4.9.z
Assignee: Serhii Zakharov
QA Contact: Dmitry Misharov
Olivia Payne
URL:
Whiteboard:
Depends On: 2011822
Blocks: 2014634
TreeView+ depends on / blocked
 
Reported: 2021-10-15 16:52 UTC by Serhii Zakharov
Modified: 2021-11-12 14:34 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
he current opt-in obfuscation will not work on clusters with OVN because the `hostsubnets.network.openshift.io` is not currently on OVN clusters.
Clone Of:
Environment:
Last Closed: 2021-11-10 21:02:40 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift insights-operator pull 522 0 None open [release-4.9] Bug 2014633: obfuscation ovn clusters bug 2021-10-18 12:29:44 UTC
Red Hat Product Errata RHBA-2021:4119 0 None None None 2021-11-10 21:02:54 UTC

Description Serhii Zakharov 2021-10-15 16:52:58 UTC
The current opt-in obfuscation doesn't work at clusters with OVN. It manifests as:

operator.go:112] Unable to create anonymizer, some data won't be anonymized(ipv4 and cluster base domain). The error is the server could not find the requested resource (get hostsubnets.network.openshift.io)

The problem is that the OVN clusters don't seem to have any "HostSubnet" resource. This is JIRA tracker for https://bugzilla.redhat.com/show_bug.cgi?id=2009322

Comment 4 Dmitry Misharov 2021-11-01 13:57:31 UTC
Verified on 4.9.0-0.ci-2021-10-30-115054.

1. Enable obfuscation https://docs.openshift.com/container-platform/4.9/support/remote_health_monitoring/remote-health-reporting-from-restricted-network.html
2. Restart Insights Operator
3. Check Insights Operator logs

There is no error "Unable to create anonymizer, some data won't be anonymized"

4. Check if "obfuscation-translation-table" secret exists in "openshift-insights" namespace.

Comment 7 errata-xmlrpc 2021-11-10 21:02:40 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.9.6 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:4119


Note You need to log in before you can comment on or make changes to this bug.