Loading...

XML

Word

Printable

Release Note Status:
In Progress
Release Note Type:
Bug Fix
Release Note Text:

Hide
Before this update, the '/metrics/usage' endpoint was recently updated to require authentication, which included Cross-Site Request Forgery (CSRF) protections. Requests made to the endpoint began failing with a “forbidden” response because the requests did not include the newly required CSRF token in the cookie. With this release, a CSRF token was added to the request cookie for all calls to the '/metrics/usage' endpoint eliminating the “forbidden” errors. (link:https://issues.redhat.com/browse/OCPBUGS-58365[~~OCPBUGS-58365~~])

Show
Before this update, the '/metrics/usage' endpoint was recently updated to require authentication, which included Cross-Site Request Forgery (CSRF) protections. Requests made to the endpoint began failing with a “forbidden” response because the requests did not include the newly required CSRF token in the cookie. With this release, a CSRF token was added to the request cookie for all calls to the '/metrics/usage' endpoint eliminating the “forbidden” errors. (link: https://issues.redhat.com/browse/OCPBUGS-58365 [ OCPBUGS-58365 ])

This is a clone of issue OCPBUGS-52835. The following is the description of the original issue:
—
Description of problem:

We see console-telemetry-plugin: unable to track usage: Forbidden error in latest 4.19 nightly

Version-Release number of selected component (if applicable):

4.19.0-0.nightly-2025-03-09-063419

How reproducible:

Always

Steps to Reproduce:

    1.
    2.
    3.

Actual results:

Expected results:

Additional info:

clones

OCPBUGS-58364 [release-4.18] console-telemetry-plugin: unable to track usage: Forbidden

depends on

OCPBUGS-58364 [release-4.18] console-telemetry-plugin: unable to track usage: Forbidden

links to