Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-66186

Monitoring Deny-All Network Policy is causing ROSA jobs to fail

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Critical Critical
    • None
    • 4.21
    • Monitoring
    • None
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • Moderate
    • None
    • None
    • None
    • Proposed
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

      there is a critical issue blocking OpenShift TRT for 4.21. The deny all network policies introduced in this PR https://github.com/openshift/cluster-monitoring-operator/pull/2740 are causing ROSA workloads to fail and with that the 4.21 nightly builds.

      We are working on fixing this on our end by either introducing network policies for our workloads, or by moving our workloads to our own namespaces. In the meantime, would it be possible to revert the changes introduced in the context of https://issues.redhat.com/browse/MON-4297 and the PR https://github.com/openshift/cluster-monitoring-operator/pull/2740 or to remove the deny-all policy in order to get TRT unblocked while SRE works on a permanent fix?

      TRT issue: https://issues.redhat.com/browse/OHSS-48615
      SREP ticket with further details on the root cause: https://issues.redhat.com/browse/SREP-2784

      Version-Release number of selected component (if applicable):

      4.21

      Steps to Reproduce:

      1. Create 4.21 cluster
      2. Look at workloads in the openshift-monitoring namespace     

      Actual results:

      Jobs are failing    

      Expected results:

      Jobs are not failing

      Additional info:

      More context: https://redhat-internal.slack.com/archives/C07QEA1PDFX/p1764585182342889

              juzhao@redhat.com Junqi Zhao
              rkunkel.openshift Roland Kunkel
              None
              None
              Junqi Zhao Junqi Zhao
              None
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: