Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-20590

[release-4.14] Capture APIServer.config.openshift.io from fleet

XMLWordPrintable

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • No
    • None
    • None
    • CCXDEV Sprint 101
    • 1
    • None
    • Feature
    • Hide
      Feature: APIServer.config.openshift.io is now tracked by Insights Operator

      Reason: Access to audit profiles would help to understand what audit policy is common practice, what profiles are most commonly used, what differences there are between industries, and what kind of customisation is applied.

      Result: After running the Insights Operator, a new file is now available in the archive in the path config/apiserver.json with the information about the audit profile.
      Show
      Feature: APIServer.config.openshift.io is now tracked by Insights Operator Reason: Access to audit profiles would help to understand what audit policy is common practice, what profiles are most commonly used, what differences there are between industries, and what kind of customisation is applied. Result: After running the Insights Operator, a new file is now available in the archive in the path config/apiserver.json with the information about the audit profile.
    • None
    • None
    • None
    • None

      This is a clone of issue OCPBUGS-19695. The following is the description of the original issue:
      —
      Description of problem:

      Capture spec.audit from APIServer.config.openshift.io to better understand what Audit policy is a common practice, and what profiles are used most often.

      Version-Release number of selected component (if applicable):

       

      How reproducible:

       

      Steps to Reproduce:

      1. Run Insights Operator
2. Check file in config/apiserver.json path

      Actual results:

      -

      Expected results:

      {
    "metadata": {
      "name": "cluster",
      "uid": "fa053692-3123-4df1-8e3d-1875d820035f",
      "resourceVersion": "894",
      "generation": 1,
      "creationTimestamp": "2023-09-21T13:47:51Z",
      "annotations": {
        "include.release.openshift.io/ibm-cloud-managed": "true",
        "include.release.openshift.io/self-managed-high-availability": "true",
        "include.release.openshift.io/single-node-developer": "true",
        "oauth-apiserver.openshift.io/secure-token-storage": "true",
        "release.openshift.io/create-only": "true"
      },
      "ownerReferences": [
        {
          "apiVersion": "config.openshift.io/v1",
          "kind": "ClusterVersion",
          "name": "version",
          "uid": "02631234-a2cb-4cd1-b444-032d8c0456ae"
        }
      ]
    },
    "spec": {
      "servingCerts": {},
      "clientCA": {
        "name": ""
      },
      "encryption": {},
      "audit": {
        "profile": "Default"
      }
    },
    "status": {}
  }

      Additional info:

       

              rh-ee-ijimeno Isaac Jimeno
              openshift-crt-jira-prow OpenShift Prow Bot
              None
              None
              Joao Bastos Fula Joao Bastos Fula
              None
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: