Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-4104

[vector to splunk] validation is not disabled when tls.insecureSkipVerify=true

XMLWordPrintable

    • False
    • None
    • False
    • NEW
    • NEW
    • Hide

      1) Install RHOL 5.7 version with Vector as collector.

      2) Create a CLF instance sending logs to Splunk and with tls.insecureSkipVerify=true

      apiVersion: logging.openshift.io/v1
      kind: ClusterLogForwarder
      metadata:
        name: instance 
        namespace: openshift-logging 
      spec:
        outputs:
        - name: splunk-receiver
          splunk: {}
          tls:
            insecureSkipVerify: true
          type: splunk
          url: https://localhost:8088/services/collector
        pipelines:
        - name: test
          inputRefs:
           - infrastructure
           - application
          outputRefs:
           - splunk-receiver
      

      3) Access to the Vector pod configuration and check that tls.verify_hostname and tls.verify_certificate parameters are not created (/etc/vector/vector.toml):

      sh-4.4# cat vector.toml | grep verify_certificate
      sh-4.4# cat vector.toml | grep verify_hostname   
      
      Show
      1) Install RHOL 5.7 version with Vector as collector. 2) Create a CLF instance sending logs to Splunk and with tls.insecureSkipVerify=true apiVersion: logging.openshift.io/v1 kind: ClusterLogForwarder metadata: name: instance namespace: openshift-logging spec: outputs: - name: splunk-receiver splunk: {} tls: insecureSkipVerify: true type: splunk url: https: //localhost:8088/services/collector pipelines: - name: test inputRefs: - infrastructure - application outputRefs: - splunk-receiver 3) Access to the Vector pod configuration and check that tls.verify_hostname and tls.verify_certificate parameters are not created (/etc/vector/vector.toml): sh-4.4# cat vector.toml | grep verify_certificate sh-4.4# cat vector.toml | grep verify_hostname
    • Log Collection - Sprint 236
    • Important

      Description of problem:

      Related to --> https://issues.redhat.com/browse/LOG-3445

      When tls.insecureSkipVerify=true is configured in ClusterLogForwarder, we should see tls.verify_hostname=false and tls.verify_certificate=false in Vector configuration.

      Version-Release number of selected component (if applicable):

      RHOL 5.7

      How reproducible:

      Always

              vparfono Vitalii Parfonov
              acandelp Adrian Candel
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: