>> Does the exporter module work, and what is the testcase?

> It's meant to expose performance counters via the Prometheus endpoint.
We have tested that this works via the PPA, yes.

Could you please update the SRU test case to include testing this?
Testing should ensure the user-visible behaviour is fixed (ie: that the
daemon perf counters are exposed) rather than an implementation detail.

>> Does the Security Team know we are using the vendored boost library
instead of the distro packaged one?

> We haven't notified them of this. Since Ceph vendors in the same
libraries that are shipped with our distros, we didn't think it was
necessary.

We should certainly notify security that a new parser library is being
used; they will need to be able to track any CVEs it receives. This
might require packaging changes, I'm not sure what process they will
request.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2100625

Title:
  [SRU] ceph 17.2.9

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/2100625/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to