Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-31106

HyperShift: Minimize container ephemeral storage usage when auditing is enabled

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Undefined Undefined
    • 4.16.0
    • 4.15, 4.16
    • HyperShift
    • None
    • No
    • Hypershift Sprint 251
    • 1
    • False
    • Hide

      None

      Show
      None
    • Hide
      * With this update, the size is reduced for audit-log files that are stored in the `kube-apiserver`, `openshift-apiserver` and `oauth-apiserver` pods for hosted control planes. (link:https://issues.redhat.com/browse/OCPBUGS-31106[*OCPBUGS-31106*])
      Show
      * With this update, the size is reduced for audit-log files that are stored in the `kube-apiserver`, `openshift-apiserver` and `oauth-apiserver` pods for hosted control planes. (link: https://issues.redhat.com/browse/OCPBUGS-31106 [* OCPBUGS-31106 *])
    • Bug Fix
    • Done

      Description of problem:

          HyperShift control plane pods that support auditing (i.e. Kubernetes API server, OpenShift API server, and OpenShift oauth API server) maintain auditing log files that may consume many GB of container ephemeral storage in short period of time.

We need to reduce the size of logs in these containers by modifying audit-log-maxbackup and audit-log-maxsize. This should not change the functionality of the audit logs since all we do is output to stdout in the containerd logs.

      Version-Release number of selected component (if applicable):

      How reproducible:

      Steps to Reproduce:

          1.
    2.
    3.

      Actual results:

      Expected results:

      Additional info:

            joseph-goergen-2 Joseph Goergen
            joseph-goergen-2 Joseph Goergen
            Liangquan Li Liangquan Li
            Laura Hinson Laura Hinson
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: