-
Bug
-
Resolution: Done
-
Normal
-
Logging 5.7.z, Logging 5.6.z
-
False
-
None
-
False
-
NEW
-
NEW
-
-
-
Log Collection - Sprint 239, Log Collection - Sprint 240, Log Collection - Sprint 241
Description of problem:
Clone of the fix for 5.6 and 5.7
After updating the openshift logging operator from channel stable-5.5, the operator is mounting all secrets with AWS role ARN to the same collector-sts-token volume which makes it non-unique.
How reproducible:
Customer is using fluentd & forwarding logs from namespaces to CloudWatch from an STS enabled cluster (not using ES)
Steps to Reproduce:
- deploy STS enabled cluster
- install CLO 5.8
- successfully deploy ClusterLogForwarding from CloudWatch using fluentd
Actual results:
Multiple roles are no longer authenticated
Expected results:
Work the same as in the 5.5 version, allowing multiple roles to authenticate
- clones
-
LOG-4368 [release-5.7] sts cloudwatch issues after upgrading from 5.5
- Closed
- links to
- mentioned on