-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
4.14, 4.15, 4.16
-
None
-
None
-
False
-
Compliance Operator Metrics Not Visible in Prometheus,
In Openshift on IBM Z, the compliance operator metrics are not showing up in Prometheus. However, when executing the command manually inside the Prometheus pod, these metrics are accessible.
I can see them from CLI but not in UI :
- oc exec n openshift-monitoring
c prometheus prometheus-k8s-0 – curl -k -H "Authorization: Bearer $(oc create token prometheus-k8s -n openshift-monitoring)" https://metrics.openshift-compliance.svc:8585/metrics-co | grep compliance % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 8116 0 8116 0 0 417k 0 --:decrement::decrement::decrement:417k # HELP compliance_operator_compliance_scan_error_total A counter for the total number of errors for a particular scan # TYPE compliance_operator_compliance_scan_error_total counter compliance_operator_compliance_scan_error_total{name="example-compliancescan-node"} 1 compliance_operator_compliance_scan_error_total{name="ocp4-cis"} 21 # HELP compliance_operator_compliance_scan_status_total A counter for the total number of updates to the status of a ComplianceScan # TYPE compliance_operator_compliance_scan_status_total counter compliance_operator_compliance_scan_status_total{name="example-compliancescan-node",phase="AGGREGATING",result="NOT-AVAILABLE"} 1 compliance_operator_compliance_scan_status_total{name="example-compliancescan-node",phase="DONE",result="ERROR"} 1 compliance_operator_compliance_scan_status_total{name="example-compliancescan-node",phase="LAUNCHING",result="NOT-AVAILABLE"} 1 compliance_operator_compliance_scan_status_total{name="example-compliancescan-node",phase="PENDING",result=""} 1 compliance_operator_compliance_scan_status_total{name="example-compliancescan-node",phase="RUNNING",result="NOT-AVAILABLE"} 1 compliance_operator_compliance_scan_status_total{name="ocp4-cis",phase="AGGREGATING",result="NOT-AVAILABLE"} 3 compliance_operator_compliance_scan_status_total{name="ocp4-cis",phase="DONE",result="NON-COMPLIANT"} 1 compliance_operator_compliance_scan_status_total{name="ocp4-cis",phase="LAUNCHING",result="NOT-AVAILABLE"} 9 compliance_operator_compliance_scan_status_total{name="ocp4-cis",phase="PENDING",result=""} 2 compliance_operator_compliance_scan_status_total{name="ocp4-cis",phase="PENDING",result="NOT-AVAILABLE"} 7 compliance_operator_compliance_scan_status_total{name="ocp4-cis",phase="RUNNING",result="NOT-AVAILABLE"} 9 # HELP compliance_operator_compliance_state A gauge for the compliance state of a ComplianceSuite. Set to 0 when COMPLIANT, 1 when NON-COMPLIANT, 2 when INCONSISTENT, and 3 when ERROR # TYPE compliance_operator_compliance_state gauge compliance_operator_compliance_state{name="nist-cis-compliance"} 3
For IBM P too observing the metrics service available through CLI but metrics can be seen through UI dashboard
CLI:
# oc get svc NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE metrics ClusterIP 172.30.44.173 <none> 8383/TCP,8585/TCP 3m51s
Dashboard:
Doesn't shows set of metrics upon entering the query {name=~"compliance.*"} . Shows as No datapoints found
How reproducible:
Steps to Reproduce:
1. 2. 3.
Actual results:
Expected results:
Additional info: