Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-33082

Data not obfuscated in hosted cluster with OVN when obfuscation is enabled

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Minor Minor
    • None
    • 4.16.0
    • Insights Operator
    • Low
    • No
    • 5
    • CCXDEV Sprint 115, CCXDEV Sprint 116, CCXDEV Sprint 117, CCXDEV Sprint 118 (ONSITE), CCXDEV Sprint 119
    • 5
    • False
    • Hide

      None

      Show
      None
    • Hide
      * Previously, in some Hypershift hosted cluster, the IO archive contained the hostname even with network obfuscation enabled. This issue has been resolved, and IO acrhives no longer contain hostnames when they are obfuscated. (link:https://issues.redhat.com/browse/OCPBUGS-33082[*OCPBUGS-33082*])
      Show
      * Previously, in some Hypershift hosted cluster, the IO archive contained the hostname even with network obfuscation enabled. This issue has been resolved, and IO acrhives no longer contain hostnames when they are obfuscated. (link: https://issues.redhat.com/browse/OCPBUGS-33082 [* OCPBUGS-33082 *])
    • Bug Fix
    • Done

      Description of problem:

      We have a test test_cluster_base_domain_obfuscation that checks that when we set the insights-config configmap with the obfuscation parameter set to "networking", we expect the archive to not have instance of the api_url or the base_hostname of the cluster.
      This is currently not happening in hypershift hosted clusters.

      Version-Release number of selected component (if applicable):

          

      How reproducible:

      Always

      Steps to Reproduce:

          1. Run test_cluster_base_domain_obfuscation
          Or
          1. Create insights_config configmap in the openshift-insights namespace, with 
      dataReporting: 
         obfuscation: Networking
          2. wait until the obfuscation creation table exists
          3. Download the archive
          4. Check every path in the archive and search for instances of the api_url or the base_hostname (easier to do with automation than manually)
          

      Actual results:

      Instances are found. 

      Expected results:

      No instances are found since they've all been obfuscated.

      Additional info:

          

              rh-ee-ijimeno Isaac Jimeno
              jfula@redhat.com Joao Bastos Fula
              baiyang zhou baiyang zhou
              Steven Smith Steven Smith
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: