Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-33082

Data not obfuscated in hosted cluster with OVN when obfuscation is enabled


    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Minor Minor
    • None
    • 4.16.0
    • Insights Operator
    • Low
    • No
    • 5
    • CCXDEV Sprint 115, CCXDEV Sprint 116, CCXDEV Sprint 117, CCXDEV Sprint 118 (ONSITE), CCXDEV Sprint 119
    • 5
    • False
    • Hide


    • In some Hypershift hosted clusters, the IO archive contained the hostname even with network obfuscation enabled.
    • Bug Fix
    • In Progress

      Description of problem:

      We have a test test_cluster_base_domain_obfuscation that checks that when we set the insights-config configmap with the obfuscation parameter set to "networking", we expect the archive to not have instance of the api_url or the base_hostname of the cluster.
      This is currently not happening in hypershift hosted clusters.

      Version-Release number of selected component (if applicable):


      How reproducible:


      Steps to Reproduce:

          1. Run test_cluster_base_domain_obfuscation
          1. Create insights_config configmap in the openshift-insights namespace, with 
         obfuscation: Networking
          2. wait until the obfuscation creation table exists
          3. Download the archive
          4. Check every path in the archive and search for instances of the api_url or the base_hostname (easier to do with automation than manually)

      Actual results:

      Instances are found. 

      Expected results:

      No instances are found since they've all been obfuscated.

      Additional info:


            rh-ee-ijimeno Isaac Jimeno
            jfula@redhat.com Joao Bastos Fula
            baiyang zhou baiyang zhou
            0 Vote for this issue
            5 Start watching this issue