Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-12592

Globalhub grafana can't be opened after enabled FIPS in the env

XMLWordPrintable

    • 1
    • False
    • None
    • False
    • GH Train-17 1
    • Critical
    • No

      Create an informative issue (See each section, incomplete templates/issues won't be triaged)

      Using the current documentation as a model, please complete the issue template. 

      Note: Doc team updates the current version and the two previous versions (n-2). For earlier versions, we will address only high-priority, customer-reported issues for releases in support.

      Prerequisite: Start with what we have

      Always look at the current documentation to describe the change that is needed. Use the source or portal link for Step 4:

       - Use the Customer Portal: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes

       - Use the GitHub link to find the staged docs in the repository: https://github.com/stolostron/rhacm-docs 

      Describe the changes in the doc and link to your dev story

      Provide info for the following steps:

      1. - [x] Mandatory Add the required version to the Fix version/s field.

      2. - [x] Mandatory Choose the type of documentation change.

            - [ ] New topic in an existing section or new section

            - [x] Update to an existing topic
               https://github.com/stolostron/rhacm-docs/blob/2.10_prod/release_notes/known_issues_global.adoc

        1. Cannot access Grafana in OCP 4.16

      If the global hub is running in OCP 4.16, the Grafana console cannot be accessed due to the wrong oauth-proxy image. ACM 2.10.4 starts to support OCP 4.16, so that we can get the oauth-proxy from ACM 2.10.4. Here is steps how to workaround:

      1. get the correct oauth-proxy image from mch-image-manifest-xxx:

      oc get cm -n open-cluster-management mch-image-manifest-xxx -ojsonpath={.data.oauth_proxy_416_and_up} 

      2. update the deployment image in global hub csv with the correct one.

      oc edit csv multicluster-global-hub-operator-rh.v1.1.1 -n multicluster-global-hub 

      Find `RELATED_IMAGE_OAUTH_PROXY` and replace the value with the output of step 1. 

       

      3. - [ ] Mandatory for GA content:
                  
             - [ ] Add steps and/or other important conceptual information here: 
             
                  
             - [ ] Add Required access level for the user to complete the task here:
             

             - [ ] Add verification at the end of the task, how does the user verify success (a command to run or a result to see?)
           
           
             - [ ] Add link to dev story here:

      4. - [ ] Mandatory for bugs: What is the diff? Clearly define what the problem is, what the change is, and link to the current documentation:

      Description of problem:

      We will have the same issue as described in https://issues.redhat.com/browse/ACM-12455

      Since ACM 2.10.4 has supported OCP 4.16 and Global hub 1.1 support ACM 2.10, if the customer upgrades OCP to 4.16 and ACM to 2.10 in FIPs enabled environment, the global hub grafana has issue to open.

      Version-Release number of selected component (if applicable):

      How reproducible:

      Steps to Reproduce:

      1.  
      2.  
      3. ...

      Actual results:

      Expected results:

      Additional info:

            jberger@redhat.com Jacob Berger
            clyang82 Chunlin Yang
            Hui Chen Hui Chen
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: