Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-8250

RHACS: Advanced Cluster Security (ACS) Monitoring Alert Scope

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • None
    • rhacs
    • None
    • None
    • Product / Portfolio Work
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      The ACS documentation states that:
      "Monitoring with Red Hat OpenShift is enabled by default. No configuration is required for this default behavior."
      (Ref: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.8/html/configuring/monitor-acs#monitoring-custom-prometheus_monitor-acs )

      The scope of this alert is currently limited, covering only persistent volumes in the openshift-, kube-, and default namespaces.

      This non-coverage directly contradicts the messaging that monitoring is "enabled by default" and requires "No configuration," as a RHACS critical component is missed.

      The central-db PVC (which is critical for ACS Central) typically resides in a custom namespace (e.g., stackrox or rhacs-operator), and is thus not covered by the out-of-the-box alerts for volume filling.

              saledort@redhat.com Sabina Aledort
              rhn-support-smartand Saurabh Martande
              None
              Votes:
              1 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                None
                None