-
Bug
-
Resolution: Not a Bug
-
Major
-
None
-
Logging 5.7.z
-
False
-
None
-
False
-
NEW
-
NEW
-
Release Note Not Required
-
-
Description of problem:
Version-Release number of selected component (if applicable):
Loki and CLO 5.7.2
How reproducible:
Steps to Reproduce:
- ON any cluster version 4.11+ install CLO and Loki version 5.7.2
- Create 90 project
for i in $(seq -w 001 090); do oc new-project this-is-a-namespace-for-loki-query-tests-with-long-name$i; done
Create Deployment
for i in $(seq -w 001 090); do oc project this-is-a-namespace-for-loki-query-tests-with-long-name$i;oc create deployment hello-node --image=k8s.gcr.io/e2e-test-images/agnhost:2.33 – /agnhost serve-hostname ; done
Deploy Extra Load
for i in $(seq -w 001 090); do oc project this-is-a-namespace-for-loki-query-tests-with-long-name$i;oc new-app centos/ruby-22-centos7~https://github.com/openshift/ruby-ex.git ; done
3 Check the application logs with kubeadmin
4 Create a new user with clusteradmin privileges
$ touch htpasswd
$ htpasswd -Bb htpasswd username passwd
$ oc --user=admin create secret generic htpasswd --from-file=htpasswd -n openshift-config
$ Create File
~~~
oc replace -f - <<API
apiVersion: config.openshift.io/v1
kind: OAuth
metadata:
name: cluster
spec:
identityProviders:
- name: Local Password
mappingMethod: claim
type: HTPasswd
htpasswd:
fileData:
name: htpasswd
API
~~~
$ oc adm policy add-cluster-role-to-user cluster-admin username
5 Check if the newly created user with clusteradmin previlages is able to view the logs
6 Delete a few project so the total characters of the project reduces below 5120
7 Check the logs with new clusteradmin user now it will be visible
Actual results:
Cluster admin is not able to view the logs even if the value is more than 5120
Expected results:
Cluster admin should be able to view the logs even if the value is more than 5120
Additional info:
- is related to
-
OBSDOCS-323 Disclaimer required in the starting of Loki Documentation
- Closed
-
OBSDA-296 Better control over access to logs in LokiStack for enterprise environments
- Closed
- links to