Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-69679

[Telco RDS] Update cluster-compare collection requirements to eliminate false positives

XMLWordPrintable

    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • All
    • None
    • None
    • Proposed
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

       Current documented instructions for gathering data on Hub clusters (default oc adm must-gather) are insufficient for accurate RDS verification.Testing revealed that using the standard collection method results in a 35+ false positive rate for reported "missing files" . These objects actually exist but are not collected in the necessary granularity for the tool to detect them.

       

      Version-Release number of selected component (if applicable):

          

      How reproducible:

          

      Steps to Reproduce:

      1.Log in to a target Telco OCP Hub Cluster (e.g., OCP 4.18 / 4.19).     
      2.Follow the current RDS verification instructions and run the default: oc adm must-gather.
      3.Run the cluster-compare tool against this data using the RDS metadata.yaml reference. Observe the "Missing Files" section in the RDS compliance report.
           

      Actual results:

      The RDS compliance report flags 34+ missing files across critical categories (Storage, Registry, ACM, GitOps, Logging).
      Manual verification confirms these are 100% false positives; the resources are present on the cluster but were missed by the standard collection scope.

      Expected results:

      The resulting cluster-compare report should accurately reflect the cluster's state, showing only the real deviations and/or missing files for a compliant cluster, ensuring trust in the RDS Dashboard.    

      Additional info:

      Commands to include as part of the correct must-gather step prior to RDS analysis for OCP Hub 4.18+:
      
      # 1. Must-gather
      oc adm must-gather --all-images
      
      # 2. Cluster-scoped resources
      oc adm inspect clusterroles,clusterrolebindings,namespaces,nodes --dest-dir=./cluster-scoped
      
      # 3. Registry and operators
      oc adm inspect imagedigestmirrorset,imagetagmirrorset,catalogsource,clusterserviceversion,customresourcedefinition,operatorhub --dest-dir=./cluster-config

              jramsay1@redhat.com Jim Ramsay
              rh-ee-margonza Marco Gonzalez
              None
              None
              Yogesh Ahire Yogesh Ahire
              None
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: