-
Epic
-
Resolution: Unresolved
-
Major
-
None
-
None
-
Layered Packages Telemetry
-
False
-
None
-
False
-
Not Selected
-
To Do
-
OCPSTRAT-1521 - Add MCO telemetry to track locally layered packages
-
OCPSTRAT-1521Add MCO telemetry to track locally layered packages
-
0% To Do, 8% In Progress, 92% Done
-
0
-
0
Description copied from attached feature card: https://issues.redhat.com/browse/OCPSTRAT-1521
Feature Overview (aka. Goal Summary)
Generally speaking, customers and partners should not be installing packages client-side, i.e. `rpm-ostree install $pkg` directly on the nodes. It's not officially supported outside of troubleshooting situations, but the documentation is not very explicit on this point and we have anecdotal data that customers and partners do in fact install packages directly on hosts.
Adding some telemetry to help understand how common this is among data-reporting clusters. Hopefully such data will help us understand how important it is to preserve this ability in the bootc-world. While it's not a pattern we want to encourage, we should be careful about dropping it without considering how to avoid breaking users' clusters in unexpected ways.
Goals (aka. expected user outcomes)
Understand what % of machines (or a proxy thereof) have locally layered packages which aren't CoreOS extensions.
Requirements (aka. Acceptance Criteria):
This needs to be backported to 4.14 so we have a better sense of the fleet as it is.
4.12 might be useful as well, but is optional.
Questions to Answer (Optional):
Why not simply block upgrades if there are locally layered packages?
That is indeed an option. This card is only about gathering data.
Customer Considerations
Some customers are known to layer packages locally but it's worse if the issue is a third party integration. In such a case, if the add-on breaks, the customer will call the 3rd party first because that's what appears to be broken. It may be a long, undelightful trip to get to a satisfying resolution. If they are blocked on upgrade due to that 3rd party integration they may not be able to upgrade the OCP y-version. That could be a lengthy delay.