Skip to content

Commit d48ffca

Browse files
Merge pull request #120544 from ritazh/kmsv2-reload-bugbackport
kmsv2: reload metrics bug fix backport Kubernetes-commit: de7e8547c80bf07fdb0b6ce014a6c6bc129f85c9
2 parents ef77af0 + 7577990 commit d48ffca

File tree

1 file changed

+10
-3
lines changed

1 file changed

+10
-3
lines changed

pkg/server/options/encryptionconfig/config.go

Lines changed: 10 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -43,12 +43,13 @@ import (
4343
"k8s.io/apiserver/pkg/apis/config/validation"
4444
"k8s.io/apiserver/pkg/features"
4545
"k8s.io/apiserver/pkg/server/healthz"
46+
"k8s.io/apiserver/pkg/server/options/encryptionconfig/metrics"
4647
storagevalue "k8s.io/apiserver/pkg/storage/value"
4748
aestransformer "k8s.io/apiserver/pkg/storage/value/encrypt/aes"
4849
"k8s.io/apiserver/pkg/storage/value/encrypt/envelope"
4950
envelopekmsv2 "k8s.io/apiserver/pkg/storage/value/encrypt/envelope/kmsv2"
5051
kmstypes "k8s.io/apiserver/pkg/storage/value/encrypt/envelope/kmsv2/v2"
51-
"k8s.io/apiserver/pkg/storage/value/encrypt/envelope/metrics"
52+
envelopemetrics "k8s.io/apiserver/pkg/storage/value/encrypt/envelope/metrics"
5253
"k8s.io/apiserver/pkg/storage/value/encrypt/identity"
5354
"k8s.io/apiserver/pkg/storage/value/encrypt/secretbox"
5455
utilfeature "k8s.io/apiserver/pkg/util/feature"
@@ -104,6 +105,12 @@ const (
104105
kmsReloadHealthCheckName = "kms-providers"
105106
)
106107

108+
func init() {
109+
metrics.RegisterMetrics()
110+
storagevalue.RegisterMetrics()
111+
envelopemetrics.RegisterMetrics()
112+
}
113+
107114
type kmsPluginHealthzResponse struct {
108115
err error
109116
received time.Time
@@ -445,10 +452,10 @@ func (h *kmsv2PluginProbe) isKMSv2ProviderHealthyAndMaybeRotateDEK(ctx context.C
445452
}
446453

447454
if errCode, err := envelopekmsv2.ValidateKeyID(response.KeyID); err != nil {
448-
metrics.RecordInvalidKeyIDFromStatus(h.name, string(errCode))
455+
envelopemetrics.RecordInvalidKeyIDFromStatus(h.name, string(errCode))
449456
errs = append(errs, fmt.Errorf("got invalid KMSv2 KeyID hash %q: %w", envelopekmsv2.GetHashIfNotEmpty(response.KeyID), err))
450457
} else {
451-
metrics.RecordKeyIDFromStatus(h.name, response.KeyID)
458+
envelopemetrics.RecordKeyIDFromStatus(h.name, response.KeyID)
452459
// unconditionally append as we filter out nil errors below
453460
errs = append(errs, h.rotateDEKOnKeyIDChange(ctx, response.KeyID, string(uuid.NewUUID())))
454461
}

0 commit comments

Comments
 (0)