Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-4104

[vector to splunk] validation is not disabled when tls.insecureSkipVerify=true

XMLWordPrintable

    • False
    • None
    • False
    • NEW
    • NEW
    • Hide

      1) Install RHOL 5.7 version with Vector as collector.

      2) Create a CLF instance sending logs to Splunk and with tls.insecureSkipVerify=true

      apiVersion: logging.openshift.io/v1
kind: ClusterLogForwarder
metadata:
  name: instance 
  namespace: openshift-logging 
spec:
  outputs:
  - name: splunk-receiver
    splunk: {}
    tls:
      insecureSkipVerify: true
    type: splunk
    url: https://localhost:8088/services/collector
  pipelines:
  - name: test
    inputRefs:
     - infrastructure
     - application
    outputRefs:
     - splunk-receiver

      3) Access to the Vector pod configuration and check that tls.verify_hostname and tls.verify_certificate parameters are not created (/etc/vector/vector.toml):

      sh-4.4# cat vector.toml | grep verify_certificate
sh-4.4# cat vector.toml | grep verify_hostname
      Show
      1) Install RHOL 5.7 version with Vector as collector. 2) Create a CLF instance sending logs to Splunk and with tls.insecureSkipVerify=true apiVersion: logging.openshift.io/v1 kind: ClusterLogForwarder metadata: name: instance namespace: openshift-logging spec: outputs: - name: splunk-receiver splunk: {} tls: insecureSkipVerify: true type: splunk url: https: //localhost:8088/services/collector pipelines: - name: test inputRefs: - infrastructure - application outputRefs: - splunk-receiver 3) Access to the Vector pod configuration and check that tls.verify_hostname and tls.verify_certificate parameters are not created (/etc/vector/vector.toml): sh-4.4# cat vector.toml | grep verify_certificate sh-4.4# cat vector.toml | grep verify_hostname
    • Log Collection - Sprint 236
    • Important

      Description of problem:

      Related to --> https://issues.redhat.com/browse/LOG-3445

      When tls.insecureSkipVerify=true is configured in ClusterLogForwarder, we should see tls.verify_hostname=false and tls.verify_certificate=false in Vector configuration.

      Version-Release number of selected component (if applicable):

      RHOL 5.7

      How reproducible:

      Always

            vparfono Vitalii Parfonov
            acandelp Adrian Candel
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: