Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-4580

Add validation for secret used with the Splunk output in CLF

    XMLWordPrintable

Details

    • False
    • None
    • False
    • NEW
    • VERIFIED
    • Hide
      Prior to this fix, if the "hecToken" key was missing or misspelled in the secret specified for a Splunk output, there was no diagnostic issued and Vector forwarded logs to Splunk without a token, which rightfully failed.
      With this fix in place, the ClusterLogForwarder in the above case fails validation with a status item "A non-empty hecToken entry is required".
      Show
      Prior to this fix, if the "hecToken" key was missing or misspelled in the secret specified for a Splunk output, there was no diagnostic issued and Vector forwarded logs to Splunk without a token, which rightfully failed. With this fix in place, the ClusterLogForwarder in the above case fails validation with a status item "A non-empty hecToken entry is required".
    • Bug Fix
    • Log Collection - Sprint 243, Log Collection - Sprint 244
    • Moderate

    Description

      Description of problem:

      If the hecToken secret key is missing or misspelled for the Splunk output, Vector sends HTTP requests to Splunk without the token in the authorization header

      authorization: Splunk <blank>

      that rightfully get rejected.

      Version-Release number of selected component (if applicable):

      5.8, 5.7.z

      How reproducible:

      Always

      Steps to Reproduce:

      1. Create a secret for the Splunk output, misspell the name of the hecToken key
      2. Create a CLF with a Splunk output, with the secret created in the previous step
      3. Instantiate the CLF

      Actual results:

      Vector forwards logs to Splunk without a token in the authorization header, gets rejected

      Expected results:

      CLO fails CLF validation, sets the status with a message about missing hecToken key

      Attachments

        Activity

          People

            syedriko_sub@redhat.com Sergey Yedrikov
            syedriko_sub@redhat.com Sergey Yedrikov
            Kabir Bharti Kabir Bharti
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: