Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-31106

HyperShift: Minimize container ephemeral storage usage when auditing is enabled

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Undefined Undefined
    • 4.16.0
    • 4.15, 4.16
    • HyperShift
    • None
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • No
    • None
    • Hypershift Sprint 251
    • 1
    • Done
    • Bug Fix
    • Hide
      * With this update, the size is reduced for audit-log files that are stored in the `kube-apiserver`, `openshift-apiserver` and `oauth-apiserver` pods for hosted control planes. (link:https://issues.redhat.com/browse/OCPBUGS-31106[*OCPBUGS-31106*])
      Show
      * With this update, the size is reduced for audit-log files that are stored in the `kube-apiserver`, `openshift-apiserver` and `oauth-apiserver` pods for hosted control planes. (link: https://issues.redhat.com/browse/OCPBUGS-31106 [* OCPBUGS-31106 *])
    • None
    • None
    • None
    • None

      Description of problem:

          HyperShift control plane pods that support auditing (i.e. Kubernetes API server, OpenShift API server, and OpenShift oauth API server) maintain auditing log files that may consume many GB of container ephemeral storage in short period of time.

We need to reduce the size of logs in these containers by modifying audit-log-maxbackup and audit-log-maxsize. This should not change the functionality of the audit logs since all we do is output to stdout in the containerd logs.

      Version-Release number of selected component (if applicable):

      How reproducible:

      Steps to Reproduce:

          1.
    2.
    3.

      Actual results:

      Expected results:

      Additional info:

              joseph-goergen-2 Joseph Goergen
              joseph-goergen-2 Joseph Goergen
              None
              None
              Liangquan Li Liangquan Li
              Laura Hinson Laura Hinson
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: