Monitor cluster health with Red Hat Lightspeed advisor

Use the Red Hat Lightspeed advisor service to identify and solve issues with your OpenShift Container Platform clusters.

Red Hat Lightspeed advisor for OpenShift Container Platform
Copy link

You can use the Red Hat Lightspeed advisor service to assess and monitor the health of your OpenShift Container Platform clusters against a database of recommendations that identify risks to availability, fault tolerance, performance, and security.

Each recommendation describes a condition that can put your OpenShift Container Platform clusters at risk, and how to resolve it. The Lightspeed advisor service repeatedly checks the data that the Red Hat Lightspeed operator sends for these conditions. In the advisor service in Red Hat Hybrid Cloud Console, you can:

  • See the clusters that a specific recommendation affects.
  • Filter your results to focus on specific recommendations.
  • Learn about individual recommendations and the risks they present, and get resolutions tailored to your clusters.
  • Share results with other stakeholders.

To use the Lightspeed advisor service, register your clusters with OpenShift Cluster Manager, including disconnected clusters.

The Lightspeed operator doesn't collect identifying information, such as user names, passwords, or certificates.

Red Hat Lightspeed advisor recommendation attributes
Copy link

Red Hat Lightspeed advisor recommendations identify cluster states and configurations that can negatively affect availability, fault tolerance, performance, or security. Each recommendation includes the following:

  • Name: A concise description of the recommendation
  • Added: When the recommendation was published to the Lightspeed advisor archive
  • Category: Whether the issue has the potential to negatively affect service availability, fault tolerance, performance, or security
  • Total risk: A value derived from the likelihood that the condition will negatively affect your infrastructure, and the impact on operations if that were to happen
  • Clusters: A list of clusters on which a recommendation is detected
  • Link to associated topics: More information from Red Hat about the issue

CVEs in the Vulnerability dashboard
Copy link

You can use the Vulnerability dashboard to identify Common Vulnerabilities and Exposures (CVEs) that affect your OpenShift clusters and to understand the potential risks to your clusters.

Knowing which CVEs affect your clusters helps you prioritize your most critical issues.

Important
The Vulnerability dashboard doesn't contain every CVE in the MITRE CVE database. It includes only CVEs that have Red Hat Security Advisories (RHSAs).

Data collection and security
Copy link

Red Hat Lightspeed does not collect identifying information, such as user names, passwords, or certificates.

By default, every OpenShift Container Platform cluster registers to OpenShift Cluster Manager the first time it starts after installation. Registered clusters send health and usage data to Red Hat through Telemetry and the Red Hat Lightspeed operator. OpenShift Cluster Manager refers to these clusters as connected clusters. OpenShift Dedicated clusters send the same data through the same services.

The Lightspeed operator uploads a data archive from each connected cluster every two hours. Red Hat Lightspeed analyzes the archive, and you can view the resulting recommendations by clicking OpenShift > Fleet management > Advisor.

Red Hat Lightspeed protects your cluster data in the following ways:

Minimal data
Red Hat Lightspeed collects only the cluster metadata it needs to identify issues.
Encrypted communication
Your clusters communicate with Red Hat over encrypted channels that use transport layer security and mutual certificate authentication.
Limited retention
Red Hat stores only one uploaded data set for each cluster at a time.
Data review and obfuscation
You can review the data the operator collects and configure the operator to obfuscate data before it sends the data to Red Hat.
Organization-level access
Users can view only the clusters in their own Red Hat organization. Organization administrators can restrict access further with OCM roles and User Access groups.

Disconnected clusters do not send data to Red Hat Lightspeed.