No pruning of audit and revision-status ConfigMap in openshift-apiserver and openshift-oauth-apiserver on OpenShift Container Platform 4

Solution Verified - Updated -

Issue

  • In openshift-apiserver and openshift-oauth-apiserver namespaces we can see that audit and revision-status config maps have lots of versions. In openshift-kube-apiserver there is a revision-pruner cronjob, which seems to be missing in the above two namespaces.

    $ oc get cm -A | grep revision-status | cut -d ' ' -f1 | sort -h | uniq -c | sort -h
          5 openshift-etcd
          5 openshift-kube-apiserver
          5 openshift-kube-controller-manager
          6 openshift-kube-scheduler
          8 openshift-oauth-apiserver
         23 openshift-apiserver
    
    $ oc get cm -A | grep audit | cut -d ' ' -f1 | sort -h | uniq -c | sort -h
          1 openshift-monitoring
          6 openshift-kube-apiserver
          9 openshift-oauth-apiserver
         24 openshift-apiserver        
    

Environment

  • Red Hat OpenShift Container Platform (RHOCP) 4

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content