Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-4236

Users with cluster-admins previlages except kubeadmin cannot view logs in Loki if the total character length crosses limit of 5120.

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Major Major
    • None
    • Logging 5.7.z
    • Logging Build, Loki
    • False
    • None
    • False
    • NEW
    • NEW
    • Release Note Not Required

      Description of problem:

      Version-Release number of selected component (if applicable):

      Loki and CLO 5.7.2

      How reproducible:

      Steps to Reproduce:

      1. ON any cluster version 4.11+ install CLO and Loki version 5.7.2
      2. Create 90 project

      for i in $(seq -w 001 090); do oc new-project this-is-a-namespace-for-loki-query-tests-with-long-name$i; done

       

      Create Deployment

      for i in $(seq -w 001 090); do oc project this-is-a-namespace-for-loki-query-tests-with-long-name$i;oc create deployment hello-node --image=k8s.gcr.io/e2e-test-images/agnhost:2.33 – /agnhost serve-hostname ; done

      Deploy Extra Load

      for i in $(seq -w 001 090); do oc project this-is-a-namespace-for-loki-query-tests-with-long-name$i;oc new-app centos/ruby-22-centos7~https://github.com/openshift/ruby-ex.git ; done

            3 Check the application logs with kubeadmin 

            4 Create a new user with clusteradmin privileges 
      $ touch htpasswd
      $ htpasswd -Bb htpasswd username passwd
      $ oc --user=admin create secret generic htpasswd --from-file=htpasswd -n openshift-config

      $ Create File
      ~~~
      oc replace -f - <<API
      apiVersion: config.openshift.io/v1
      kind: OAuth
      metadata:
      name: cluster
      spec:
      identityProviders:

      • name: Local Password
        mappingMethod: claim
        type: HTPasswd
        htpasswd:
        fileData:
        name: htpasswd
        API
        ~~~

      $ oc adm policy add-cluster-role-to-user cluster-admin username

            5 Check if the newly created user with clusteradmin previlages is able to view the logs

            6 Delete a few project so the total characters of the project reduces below 5120

            7 Check the logs with new clusteradmin user now it will be visible

      Actual results:

      Cluster admin is not able to view the logs even if the value is more than 5120

      Expected results:

      Cluster admin should be able to view the logs even if the value is more than 5120

      Additional info:

            Unassigned Unassigned
            rhn-support-ssonigra Sonigra Saurab
            Votes:
            1 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: