Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-54423

MCP audit components are not cleaned up when auditing is disabled.

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • 4.15, 4.16, 4.17, 4.18, 4.19
    • HyperShift
    • None
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

          When auditing is disabled by setting the `None` API server profile in the hostedcluster resource. When dealing with individual clusters this should be fine, but with how resource intensive hypershift is at scale we are trying to cut down on as many resources as possible. In this case removing 4 configmaps from each cluster would help significantly in reducing our master etcd size. For our customers, we automatically disable auditing when a cluster is created and is enabled when the customer decides to enable it.

      Version-Release number of selected component (if applicable):

          

      How reproducible:

      Always reproducible

      Steps to Reproduce:

          1. Enable auditing on cluster (which is by default)
          2. Set kas audit profile to "None" through hostedcluster resource
          3. Watch audit-logs container be removed but apiserver volume/volume mounts remain in deployments and configmaps staying around.
          

      Actual results:

          

      Expected results:

          

      Additional info:

          

              Unassigned Unassigned
              joseph-goergen-2 Joseph Goergen
              None
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: