Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-16794

Add options to disable auth for maestro agent metrics

XMLWordPrintable

    • Icon: Spike Spike
    • Resolution: Done
    • Icon: Major Major
    • None
    • None
    • Maestro
    • False
    • None
    • False
    • Hide

      Provide the required acceptance criteria using this template.
      * ...
      Show
      Provide the required acceptance criteria using this template. * ...
    • ACM Maestro Train-23
    • None

      Value Statement

      Currently maestro agent metrics are protected, check the Maestro agent code (link) and its dependency (link), but unfortunately, there doesn't seem to be an option to disable authentication and authorization at runtime. The metrics require the same authorization as Kubernetes system metrics, which you can read about here. Access needs a user, group, or ServiceAccount with a ClusterRole to access /metrics.

      Definition of Done for Engineering Story Owner (Checklist)

      • Investigate if there are options to disable auth for metrics agent metrics
      •  

      Development Complete

      • The code is complete.
      • Functionality is working.
      • Any required downstream Docker file changes are made.

      Tests Automated

      • [ ] Unit/function tests have been automated and incorporated into the
        build.
      • [ ] 100% automated unit/function test coverage for new or changed APIs.

      Secure Design

      • [ ] Security has been assessed and incorporated into your threat model.

      Multidisciplinary Teams Readiness

      • [ ] Create an informative documentation issue using the Customer

      Portal Doc template that you can access from [The Playbook](

      https://docs.google.com/document/d/1YTqpZRH54Bnn4WJ2nZmjaCoiRtqmrc2w6DdQxe_yLZ8/edit#heading=h.9fvyr2rdriby),

      and ensure doc acceptance criteria is met.

      • Call out this sentence as it's own action:
      • [ ] Link the development issue to the doc issue.

      Support Readiness

      • [ ] The must-gather script has been updated.

              lcao@redhat.com Longlong Cao
              lcao@redhat.com Longlong Cao
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: