Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-8065

Autoscaling is ignoring prometheusTLS field

XMLWordPrintable

    • 3
    • False
    • Hide

      None

      Show
      None
    • False
    • ?
    • ?
    • ?
    • ?
    • CloudOps 2024 Sprint 14
    • Low

      • impact analysis 
      • related compose
        • Downstream current-podified
      • _How reproducible
        _
        • everytime
      • Steps to reproduce
        • Deploy RHOSO
        • Deploy a Prometheus without TLS (manualy)
        • Set the "prometheusHost" and "prometheusPort" to point to the deployed prometheus
        • Set "prometheusTLS" to false
      • Expected result
        • Aodh can connect to Prometheus without TLS. Alarms work. Observabilityclient inside aodh-evaluator is configured to not use TLS
      • Actual results
        • Aodh can't connect to Prometheus - it's trying to use TLS. Alarms have insufficient data. Observabilityclient inside aodh-evaluator is configured to use TLS
      • Additional info:
        • Deployed autoscaling CR
        • apiVersion: v1
          items:
          - apiVersion: telemetry.openstack.org/v1beta1
            kind: Autoscaling
            metadata:
              creationTimestamp: "2024-06-27T08:23:38Z"
              finalizers:
              - openstack.org/autoscaling
              generation: 2
              name: autoscaling
              namespace: openstack
              ownerReferences:
              - apiVersion: telemetry.openstack.org/v1beta1
                blockOwnerDeletion: true
                controller: true
                kind: Telemetry
                name: telemetry
                uid: e9218db2-2a00-4893-8abf-6e7d5ec24858
              resourceVersion: "1201416"
              uid: a72f58cb-4687-43be-a712-dacb070a3dff
            spec:
              aodh:
                apiImage: images.paas.redhat.com/podified-rhos18-rhel9/openstack-aodh-api:current-podified
                customServiceConfig: '# add your customization here'
                databaseAccount: aodh
                databaseInstance: openstack
                evaluatorImage: images.paas.redhat.com/podified-rhos18-rhel9/openstack-aodh-evaluator:current-podified
                listenerImage: images.paas.redhat.com/podified-rhos18-rhel9/openstack-aodh-listener:current-podified
                notifierImage: images.paas.redhat.com/podified-rhos18-rhel9/openstack-aodh-notifier:current-podified
                override:
                  service:
                    internal:
                      metadata:
                        labels:
                          osctlplane: ""
                          osctlplane-service: telemetry
                    public:
                      endpointURL: https://aodh-public-openstack.apps-crc.testing
                      metadata:
                        labels:
                          osctlplane: ""
                          osctlplane-service: telemetry
                passwordSelector:
                  aodhService: AodhPassword
                  ceilometerService: CeilometerPassword
                preserveJobs: false
                rabbitMqClusterName: rabbitmq
                secret: osp-secret
                serviceUser: aodh
                tls:
                  api:
                    internal:
                      secretName: cert-aodh-internal-svc
                    public:
                      secretName: cert-aodh-public-svc
                  caBundleSecretName: combined-ca-bundle
              heatInstance: heat
              prometheusHost: prometheus-prom-0.openstack.svc
              prometheusPort: 9090
              prometheusTLS: false 

          Deployed Prometheus CR

        •   spec:
              alerting:
                alertmanagers:
                - name: alertmanager
                  namespace: default
                  port: web
              evaluationInterval: 30s
              portName: web
              replicas: 1
              scrapeInterval: 30s
              serviceAccountName: prometheus
              serviceMonitorSelector:
                matchLabels:
                  service: ceilometer 

          The wrong configuration generated for observabilityclient

        • ]$ oc extract secret/aodh-config-data --keys=prometheus.yaml --to=-
          # prometheus.yaml
          host: prometheus-prom-0.openstack.svc
          port: 9090
          ca_cert: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem 

            rh-ee-jwysogla Jaromir Wysoglad
            rh-ee-jwysogla Jaromir Wysoglad
            rhos-dfg-cloudops
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: