Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Done-Errata
Priority: Normal
Fix Version/s: 4.15.0
Affects Version/s: 4.14
Component/s: Monitoring
Labels:
None

Regression:
No
Sprint:
MON Sprint 243
sprint_count:
1
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Release Note Text:
NA
Release Note Type:
Release Note Not Required
Release Note Status:
In Progress
Target Version:

4.15.0

SFDC Cases Counter:
SFDC Cases Links:

Description

Description of problem:

The ServiceAccounts for both in-cluster and UWM alertmanager set autoMountServiceAccountToken: true.
This should be improved and set at the pod level. Hence this will require a change in prometheus-operator and its configuration of Alertmanager pods.

A similar change for Prometheus pods was implemented in https://github.com/prometheus-operator/prometheus-operator/pull/4514.

https://github.com/openshift/cluster-monitoring-operator/blob/7702f6c7d6e1409dea9197e63dafcb0decbe60b9/assets/alertmanager-user-workload/service-account.yaml#L2

https://github.com/openshift/cluster-monitoring-operator/blob/7702f6c7d6e1409dea9197e63dafcb0decbe60b9/assets/alertmanager/service-account.yaml#L2