Details
-
Task
-
Resolution: Done
-
Normal
-
None
-
None
-
- JIRALERT{d31535af726fa629e23d1f14dbd25567cc02d5373fccc80f247dfbb926dec3f370c7523975fc20cc4b2d0cbe212ea053224a0c1c5fc71212be308485384899dd}
- alertname=deployment_validation_operator_default_service_account
- app=clair
- cluster=app-sre-stage-01
- job=deployment-validation-operator-metrics
- service=deployment-validation-operator
- triaged
-
False
-
None
-
False
-
0
Description
Alert[0]: deployment_validation_operator_default_service_account Validation error for clair: Indicates when pods use the default service account.
Annotations:
- dashboard = https://grafana.app-sre.devshift.net/d/dashdotdb/dash-db?orgId=1&var-datasource=dashdotdb-rds&var-cluster=app-sre-stage-01&var-namespace=clair-stage
- html_url = https://gitlab.cee.redhat.com/service/app-interface/blob/master/resources/services/deployment-validation-operator/prometheusrules-default_service_account.yaml.j2
- runbook = Create a dedicated service account for your pod. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ for details.
Labels:
- alertname = deployment_validation_operator_default_service_account
- app = clair
- check_description = Indicates when pods use the default service account.
- check_remediation = Create a dedicated service account for your pod. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ for details.
- cluster = app-sre-stage-01
- endpoint = http-metrics
- environment = staging
- exported_namespace = clair-stage
- instance = 10.129.4.28:8383
- jiralert = PROJQUAY
- job = deployment-validation-operator-metrics
- kind = Deployment
- name = clair-matcher
- namespace = deployment-validation-operator
- pod = deployment-validation-operator-6cbcbbbfd5-gjjvs
- prometheus = openshift-customer-monitoring/app-sre
- service = deployment-validation-operator
- severity = medium
Source: Prometheus
Alert[1]: deployment_validation_operator_default_service_account Validation error for clair: Indicates when pods use the default service account.
Annotations:
- dashboard = https://grafana.app-sre.devshift.net/d/dashdotdb/dash-db?orgId=1&var-datasource=dashdotdb-rds&var-cluster=app-sre-stage-01&var-namespace=clair-stage
- html_url = https://gitlab.cee.redhat.com/service/app-interface/blob/master/resources/services/deployment-validation-operator/prometheusrules-default_service_account.yaml.j2
- runbook = Create a dedicated service account for your pod. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ for details.
Labels:
- alertname = deployment_validation_operator_default_service_account
- app = clair
- check_description = Indicates when pods use the default service account.
- check_remediation = Create a dedicated service account for your pod. Refer to https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/ for details.
- cluster = app-sre-stage-01
- endpoint = http-metrics
- environment = staging
- exported_namespace = clair-stage
- instance = 10.129.4.28:8383
- jiralert = PROJQUAY
- job = deployment-validation-operator-metrics
- kind = StatefulSet
- name = clair-indexer
- namespace = deployment-validation-operator
- pod = deployment-validation-operator-6cbcbbbfd5-gjjvs
- prometheus = openshift-customer-monitoring/app-sre
- service = deployment-validation-operator
- severity = medium
Source: Prometheus
Note: This issue was generated automatically by the AppSRE team. Moving this issue to a different project will result in the ticket being recreated in the current project. If you believe that this issue was created in the incorrect project, please reach out to AppSRE.
Attachments
Issue Links
- is duplicated by
-
PROJQUAY-3492 Clair indexer and matcher are running with the default SA
- Closed