Uploaded image for project: 'OpenShift CFE'
  1. OpenShift CFE
  2. CFE-424

Add metric in cluster-kube-apiserver-operator if system:authenticated has SCC

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • None
    • auth
    • CFE Sprint 219, CFE Sprint 220
    • 0

      A new metric should be added to cluster-kube-apiserver-operator. The metric is a simple Gauge which indicates if any non-default SCC has been associated with the system:authenticated group.

      The system:authenticated group can be modified in 2 ways:

      1. It is added to the groups of the anyuid SCC.
      2. The use verb is granted to the anyuid group through a ClusterRole

      A single metric can be indicate if either of the above conditions is true. In the case of the gauge it can be a 0 or 1.

      AC:

      • New metric added to the operator
      • E2E test where the SCC is modified and the group has a clusterrole bound to it. This should change the metric. Reverting the configuration should reset the metric.

            dshikhar Dhriti Shikhar (Inactive)
            anaik.openshift Arjun Naik (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: