File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed
keps/sig-auth/3221-structured-authorization-configuration Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -631,18 +631,18 @@ Or, they can look at the metrics exposed by `kube-apiserver`.
631
631
# ##### How can someone using this feature know that it is working for their instance?
632
632
633
633
- [x] Other
634
- - Details : They can look at the metrics if `apiserver_authorization_step_invocations_total ` is increasing.
634
+ - Details : They can look at the metrics if `apiserver_authorization_decisions_total ` is increasing.
635
635
636
636
# ##### What are the reasonable SLOs (Service Level Objectives) for the enhancement?
637
637
638
- The amount of errors denoted by `apiserver_authorization_step_webhook_error_total`
638
+ The total number of `apiserver_authorization_step_webhook_error_total` metric with failure code
639
639
is within reasonable limits. A rising value indicates issues with either the
640
640
authorizer chain or the webhook itself.
641
641
642
642
# ##### What are the SLIs (Service Level Indicators) an operator can use to determine the health of the service?
643
643
644
644
- [x] Metrics
645
- - Metric name : ` apiserver_authorization_step_invocations_total `
645
+ - Metric name : ` apiserver_authorization_decisions_total `
646
646
- Components exposing the metric : kube-apiserver
647
647
648
648
If the cluster administrator has defined an authorizer chain and the above metric
You can’t perform that action at this time.
0 commit comments