Disable the "insight" cluster capability by default on OKD-SCOS ?

[titou10titou10]

IMHO the "insight" cluster capability should be disabled on OKD-SCOS clusters as it is not permit to specify a RH pull-secret on installation and the insight capability is directly linked to the cloud OCP console

Ref:
https://docs.okd.io/latest/installing/overview/cluster-capabilities.html
https://docs.okd.io/latest/installing/overview/cluster-capabilities.html#insights-operator_cluster-capabilities

If you let the insight capability enabled without a RH secret, this alert is raised and stays forever:

InsightsDisabled

Insights operator is disabled. In order to enable Insights and benefit from recommendations specific to your cluster, please follow steps listed in the documentation: https://docs.openshift.com/container-platform/latest/support/remote_health_monitoring/enabling-remote-health-reporting.html

[BeardOverflow]

It is certainly an annoying alert. You could mute the alert, but ideally there should be a way to fine-customize the dashboard and alerts. For example, insights is a bare plugin in the console front-end, but I think it could be a dynamic console-plugin like networking or monitoring.

[titou10titou10]

@BeardOverflow disabling the insight capability on install (As I do..) solves the problem.
As said, as it is not "legal" (?) now to install OKD with a RH linked account and the insight capability is the link between OKD and RH, this capability should not even be possible to activate in OKD IMHO.
Or I miss something?

[BeardOverflow]

disabling the insight capability on install (As I do..) solves the problem.

Oh, good one! The sad part is that it is not possible to disable it on existing clusters or, even, an upgrade would silently enable it.

I will reference the docs for other users who could able are reading us: https://docs.okd.io/4.17/installing/overview/cluster-capabilities.html#viewing-cluster-capabilities_cluster-capabilities

Also, I found you can create the following ConfigMap to disable alerts related Insights capability (which is better than mute it):

apiVersion: v1
kind: ConfigMap
metadata:
  name: insights-config
  namespace: openshift-insights
data:
  config.yaml: |
    alerting:
       disabled: true

As said, as it is not "legal" (?) now to install OKD with a RH linked account and the insight capability is the link between OKD and RH

I am not the most appropriate person to answer your question about legal issues, but I understand that the main problem is mixing Red Hat operators in OKD:

Can I use a Red Hat pull secret to enable OCP-related content such as operators?
A. No, this would be a violation of Red Hat's Terms of Service.

Source: https://okd.io/docs/project/scos-migration-faq#redhat-pull-secrets

But the following issue partially contradicts, at least partially?, the above statement:

If you do not use the pull secret from the Red Hat Hybrid Cloud Console site:

• Red Hat Operators are not available.
• The Telemetry and Insights operators do not send data to Red Hat.
• Content from the Red Hat Container Catalog registry, such as image streams and Operators, are not available.

Source: #107

Under my knowledge, you must not use Red Hat Operators, but Community Operators so as not to violate the legal terms. In the another side, Insights operator is naturally integrated on OKD ecosystem and, according to the OKD's docs, you can register your Red Hat Hybrid Cloud Console account on it.

The Insights Operator gathers OKD configuration data and sends it to Red Hat. The data is used to produce insights about potential issues that a cluster might be exposed to.

Source: https://docs.okd.io/4.17/support/remote_health_monitoring/about-remote-health-monitoring.html#about-remote-health-monitoring

You can use Insights Advisor to assess and monitor the health of your OKD clusters. Whether you are concerned about individual clusters, or with your whole infrastructure, it is important to be aware of the exposure of your cluster infrastructure to issues that can affect service availability, fault tolerance, performance, or security.

Source: https://docs.okd.io/4.17/support/remote_health_monitoring/using-insights-to-identify-issues-with-your-cluster.html

As a community user, I think we need a strong statement about the scope of the legal terms, well-documented, updated and easy to consult.

[JaimeMagiera]

The product docs are auto-generated from OCP source and as such may have some inaccuracies. We're working to remedy that by sifting through them, but could use more volunteers. If you see something that is questionable, please put in a separate issue labeled as docs. Even better, if you'd like to volunteer for OKD, we could use the help.

The legal terms are this: Don't use a Red Hat pull secret. Any operator that doesn't work without a Red Hat pull secret should be considered non-functional on OKD. If you want to see that operator available on OKD, please put in a separate issue labeled as operator request. Even better, if you'd like to volunteer for OKD, we could use the help.

You can see what operators are being worked on here: https://github.com/orgs/okd-project/projects/2