Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-11066

telemetry-power-monitoring role in edpm-ansible does not open the 8888 port in the firewall for Kepler

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Major Major
    • rhos-18.0.6
    • rhos-18.0.3
    • telemetry-operator
    • None
    • 0
    • False
    • Hide

      None

      Show
      None
    • False
    • ?
    • telemetry-operator-container-1.0.5-3
    • None
    • Hide
      .Scrape Kepler metrics without manual intervention (Technology Preview)

      Before this update, a firewall was not applied to Compute nodes, which allowed port 8888 to be open. However, access to port 8888 might be lost unexpectedly if a firewall is enabled.
      With this update, the ansible role checks whether the firewall is enabled and then opens port 8888. As a result, Prometheus can scrape Kepler metrics without manual intervention.
      Show
      .Scrape Kepler metrics without manual intervention (Technology Preview) Before this update, a firewall was not applied to Compute nodes, which allowed port 8888 to be open. However, access to port 8888 might be lost unexpectedly if a firewall is enabled. With this update, the ansible role checks whether the firewall is enabled and then opens port 8888. As a result, Prometheus can scrape Kepler metrics without manual intervention.
    • Bug Fix
    • Done
    • CloudOps 2024 Sprint 23, CloudOps 2024 Sprint 24
    • 2
    • Important

      Currently, in a default deployment there was a bug where the firewall was never applied on compute nodes, and thats why we could scan port 8888, but this can be fixed (apparently it changed upstream already) at any moment and we will loose the access.

      The ansible role must check if firewall is enabled and then open the 8888 port.

      An example is: https://github.com/openstack-k8s-operators/edpm-ansible/blob/31a252934d2ac5d47e1b7643b56018aeca4b1fd9/roles/edpm_ovn/tasks/firewall.yml#L19

              myadla1 Muneesha Yadla
              ykulkarn@redhat.com Yadnesh Kulkarni
              Leonid Natapov Leonid Natapov
              rhos-conplat-observability
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: