Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-11532

Metrics are not available on GUI for Compliance Operator

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • Icon: Undefined Undefined
    • None
    • 4.13.z
    • Compliance Operator
    • No
    • False
    • Hide

      None

      Show
      None

      Description of problem:

      Metrics are not available on GUI for Compliance Operator on OCP 4.13 Power architecture. 

      Version-Release number of selected component (if applicable):

      4.13.0-rc.2 + compliance-operator.v1.0.0

      How reproducible:

      Always

      Steps to Reproduce:

      1. Deploy compliance operator v1.0.0
      2. Generate a compliancesuite through a new ScanSetting CR:
      # oc create -f - << EOF
      apiVersion: compliance.openshift.io/v1alpha1
      kind: ScanSettingBinding
      metadata:
        name: my-ssb-r
      profiles:
        - name: ocp4-cis
          kind: Profile
          apiGroup: compliance.openshift.io/v1alpha1
        - name: ocp4-cis-node
          kind: Profile
          apiGroup: compliance.openshift.io/v1alpha1
      settingsRef:
        name: default
        kind: ScanSetting
        apiGroup: compliance.openshift.io/v1alpha1
      EOF

      Actual results:

      Logging into the console, navigating to Monitoring -> Metrics, `compliance_operator_compliance_scan_status_total` 
      
      Unable to view metrics, getting message on UI- `No datapoints found.`

      Expected results:

      Metrics displayed on GUI

      Additional info:

      check the test-metrics with command line:
      
      # oc run --rm -i --restart=Never --image=registry.fedoraproject.org/fedora-minimal:latest -n openshift-compliance test-metrics -- bash -c 'curl -ks -H "Authorization: Bearer $(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" https://metrics.openshift-compliance.svc:8585/metrics-co' | grep compliance
      # HELP compliance_operator_compliance_remediation_status_total A counter for the total number of updates to the status of a ComplianceRemediation # TYPE compliance_operator_compliance_remediation_status_total counter compliance_operator_compliance_remediation_status_total{name="ocp4-cis-api-server-encryption-provider-cipher",state="NotApplied"} 2 compliance_operator_compliance_remediation_status_total{name="ocp4-cis-api-server-encryption-provider-cipher",state="Pending"} 1 compliance_operator_compliance_remediation_status_total{name="ocp4-cis-api-server-encryption-provider-config",state="NotApplied"} 2 compliance_operator_compliance_remediation_status_total{name="ocp4-cis-api-server-encryption-provider-config",state="Pending"} 1 # HELP compliance_operator_compliance_scan_status_total A counter for the total number of updates to the status of a ComplianceScan # TYPE compliance_operator_compliance_scan_status_total counter compliance_operator_compliance_scan_status_total{name="ocp4-cis",phase="AGGREGATING",result="NOT-AVAILABLE"} 4 compliance_operator_compliance_scan_status_total{name="ocp4-cis",phase="DONE",result="NON-COMPLIANT"} 1 compliance_operator_compliance_scan_status_total{name="ocp4-cis",phase="LAUNCHING",result="NOT-AVAILABLE"} 1 compliance_operator_compliance_scan_status_total{name="ocp4-cis",phase="PENDING",result=""} 1 compliance_operator_compliance_scan_status_total{name="ocp4-cis",phase="RUNNING",result="NOT-AVAILABLE"} 1 compliance_operator_compliance_scan_status_total{name="ocp4-cis-node-master",phase="AGGREGATING",result="NOT-AVAILABLE"} 3 compliance_operator_compliance_scan_status_total{name="ocp4-cis-node-master",phase="DONE",result="COMPLIANT"} 1 compliance_operator_compliance_scan_status_total{name="ocp4-cis-node-master",phase="LAUNCHING",result="NOT-AVAILABLE"} 1 compliance_operator_compliance_scan_status_total{name="ocp4-cis-node-master",phase="PENDING",result=""} 1 compliance_operator_compliance_scan_status_total{name="ocp4-cis-node-master",phase="RUNNING",result="NOT-AVAILABLE"} 1 compliance_operator_compliance_scan_status_total{name="ocp4-cis-node-worker",phase="AGGREGATING",result="NOT-AVAILABLE"} 3 compliance_operator_compliance_scan_status_total{name="ocp4-cis-node-worker",phase="DONE",result="COMPLIANT"} 1 compliance_operator_compliance_scan_status_total{name="ocp4-cis-node-worker",phase="LAUNCHING",result="NOT-AVAILABLE"} 1 compliance_operator_compliance_scan_status_total{name="ocp4-cis-node-worker",phase="PENDING",result=""} 1 compliance_operator_compliance_scan_status_total{name="ocp4-cis-node-worker",phase="RUNNING",result="NOT-AVAILABLE"} 1 # HELP compliance_operator_compliance_state A gauge for the compliance state of a ComplianceSuite. Set to 0 when COMPLIANT, 1 when NON-COMPLIANT, 2 when INCONSISTENT, and 3 when ERROR # TYPE compliance_operator_compliance_state gauge compliance_operator_compliance_state{name="my-ssb-r"} 1

      Must gather logs: https://drive.google.com/file/d/16uzVRRQ7oJrQpJlwtN0LXpd1EQgpu4wL/view?usp=share_link

      UI screenshot: https://drive.google.com/file/d/1a4CAqt6f5-4xjvlvlqvEnTX8li1Xi7wi/view?usp=share_link

            wsato@redhat.com Watson Sato
            vahirwad Varad Ahirwadkar
            Xiaojie Yuan Xiaojie Yuan
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: