New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
bug 1537857. Fix retrieving prometheus metrics #6903
bug 1537857. Fix retrieving prometheus metrics #6903
Conversation
@@ -0,0 +1,2 @@ | |||
"{{_user_name}}": |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
_user_name
and _user_passwd
may be too generic of variable names (possibly affected by creep).
Could you make this a little more specific? Maybe just prefix it with logging_passwd_file
@@ -391,6 +403,7 @@ | |||
es_container_security_context: "{{ _es_containers.elasticsearch.securityContext if _es_containers is defined and 'elasticsearch' in _es_containers and 'securityContext' in _es_containers.elasticsearch else None }}" | |||
deploy_type: "{{ openshift_logging_elasticsearch_deployment_type }}" | |||
es_replicas: 1 | |||
basic_auth_passwd: "{{ _logging_metrics_proxy_passwd | b64decode }}" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
we cant leave this encoded here and decode it on our side?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We could, but that means its encoded in the DC, base64 encoded again in the request. We would need to double decode it during the check. I put the decode here so it wasnt plan text in the log file when running the installer. I wanted to avoid bzs that might come up.
@@ -51,6 +51,7 @@ spec: | |||
- -client-id={{openshift_logging_elasticsearch_prometheus_sa}} | |||
- -client-secret-file=/var/run/secrets/kubernetes.io/serviceaccount/token | |||
- -cookie-secret={{ 16 | lib_utils_oo_random_word | b64encode }} | |||
- -basic-auth-password={{basic_auth_passwd | default('changeme')}} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
we probably don't need a default here if there's no way it can't be generated
79068e9
to
93814bd
Compare
/retest |
/test logging |
1 similar comment
/test logging |
/retest |
bot, retest this please |
/lgtm |
/test all [submit-queue is verifying that this PR is safe to merge] |
/retest |
/test install |
bot, retest this please |
/test gcp |
/retest |
/test all [submit-queue is verifying that this PR is safe to merge] |
@jcantrill: The following tests failed, say
Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here. |
flake |
/cherrypick release-3.7 |
@jcantrill: #6903 failed to apply on top of branch "release-3.7":
In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
Automatic merge from submit-queue. bug 1537857. Fix retrieving prometheus metrics This PR: * bumps openshift-elasticsearch-plugin to fix retrieving metrics * bumps the prometheus exporter to fix issue related to SG and plugin Depends on: * fabric8io/openshift-elasticsearch-plugin#119 * https://github.com/fvvanholl/elasticsearch-prometheus-exporter/pull/82 * openshift/openshift-ansible#6903
Automatic merge from submit-queue. [3.7] Fix promethus for logging 3.7 backport of #6903 for https://bugzilla.redhat.com/show_bug.cgi?id=1510320
This PR: