Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-4475

The normal user couldn't find any Elasticsearch data when ES is deployed on OCP 4.14 Hypershift Management cluster

XMLWordPrintable

    • False
    • None
    • False
    • NEW
    • NEW
    • Bug Fix
    • Log Storage - Sprint 242, Log Storage - Sprint 244

      Description of problem:

      When elasticsearch is deployed on the Openshift 4.14 hypershift management cluster, the kibana normal user can not fetch any data from elasticsearch.
      No such issue on the other non-hypershift 4.14 cluster.
      No such issue on Openshift 4.13 hypershift management cluster
      Cluster-admin can display the app logs

      Version-Release number of selected component (if applicable):

      Openshift 4.14

      How reproducible:

      On the Openshift 4.14 hypershift management cluster, the kibana normal user can not fetch any data from elasticsearch.
      No such issue on the other non-hypershift 4.14 cluster.
      No such issue on Opensihft 4.13 hypershift management cluster
      Cluster-admin can display the app logs

      Steps to Reproduce:

      1. Deploy Logging 5.8 on Openshift 4.14 hypershift management cluster
      2. Forward logs to elasticsearch.
      3. testuser1 create some pods
      $oc get pods -n test-log-user1-1692848093
      centos-logtest-hz2jg 1/1 Running 0 4h25m

      4. testuser1 login kibana to create an index pattern.
      5. cluster-admin login kibana to create index patterns.

      Actual results:

      testuser1 can not display logs of pod centos-logtest-hz2jg.

      Expected results:

      testuser1 can display logs of pod centos-logtest-hz2jg.

      Additional info:

      $ kubectl auth can-i get pods/log -n test-log-user1-1692848093
      yes
      $ kubectl auth can-i get pods --subresource=log -n test-log-user1-1692848093
      yes

            ptsiraki@redhat.com Periklis Tsirakidis
            rhn-support-anli Anping Li
            Anping Li Anping Li
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: