Uploaded image for project: 'Network Observability'
  1. Network Observability
  2. NETOBSERV-1087

Support certificate verification in FLP ServiceMonitor when certificates are provided by the user

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Normal
    • netobserv-1.4
    • netobserv-1.3, netobserv-1.2
    • None
    • None
    • False
    • None
    • False
    • Hide
      Previously, using user provided CA certificate for metrics TLS was not supported forcing the use of insecureSkipVerify option.
      Now there is a new field for the user to provide CaCertificate to have certificate verification.
      Show
      Previously, using user provided CA certificate for metrics TLS was not supported forcing the use of insecureSkipVerify option. Now there is a new field for the user to provide CaCertificate to have certificate verification.
    • NetObserv - Sprint 237, NetObserv - Sprint 238, NetObserv - Sprint 239, NetObserv - Sprint 240, NetObserv - Sprint 241

    Description

      The ServiceMonitor for FLP metrics currently does not verify the certificate when we use the PROVIDED mode.

      To enable certificate verification we needs to add field in our CRD so the user can provide the CA certificate.

      Attachments

        Issue Links

          causes

          Bug - A problem that impairs or prevents the functions of the product. NETOBSERV-1293 flowcollector status oscillates between DeploymentInProgress and Ready

          • Normal - To be worked after urgent and high priorities are resolved. This term is chosen when the severity of an issue is relatively close to the level of effort to fix it. The existence of an easily implemented workaround can also lead to this priority level instead of a higher priority.
          • Closed

          Bug - A problem that impairs or prevents the functions of the product. NETOBSERV-1295 FLP volume set up fails for metrics when different NS is used.

          • Undefined - Priority not specified.
          • Closed
          is depended on by

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. NETOBSERV-1072 Update OCP-54043, OCP-50504 automation and test case

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. NETOBSERV-1093 update test case OCP-54043 for FLP metrics PROVIDED mode

          • Minor - To be worked after urgent, high, and medium priorities are resolved. This term is chosen when the severity of the issue is low, or the complexity or effort to correct it may be higher, relatively speaking. For low priority issues, known workarounds exist or are not needed due to the trivial effort needed to address the issue.
          • Closed
          links to

          GitHub netobserv/network-observability-operator#365: NETOBSERV-1070: Fix reconcile from DISABLED to AUTO configuration

          GitHub netobserv/network-observability-operator#379: NETOBSERV-1087: Added fields for ca certificate configuration

          GitHub openshift/openshift-docs#60893: Netobserv 1.3 rel notes

          mentioned on

          GitLab Merge request - Updated 4 upstream sources

          GitLab Merge request - Updated 4 upstream sources

          Activity

            People

              ocazade@redhat.com Olivier Cazade
              ocazade@redhat.com Olivier Cazade
              Olivier Cazade
              Mehul Modi Mehul Modi
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: