-
Bug
-
Resolution: Duplicate
-
Undefined
-
None
-
Logging 5.8.0
-
None
-
False
-
None
-
False
-
NEW
-
NEW
-
Bug Fix
-
-
Description of problem:
When running logging must-gather in a cluster which has FIPS enabled, get error message `POD 2023-10-23T05:16:43.952411918Z FIPS mode is enabled, but the required OpenSSL backend is unavailable`
$ oc adm must-gather --image=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:78060ae641d90a50abef4a384bb026c6738e749776b8c94da5b4737f39c71182 -- /usr/bin/gather [must-gather ] OUT Using must-gather plug-in image: registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:78060ae641d90a50abef4a384bb026c6738e749776b8c94da5b4737f39c71182 When opening a support case, bugzilla, or issue please include the following summary data along with any other requested information: ClusterID: abb7ad56-b3ba-4163-95df-2a1da09de8fc ClusterVersion: Stable at "4.13.0-0.nightly-2023-10-17-114326" ClusterOperators: All healthy and stable [must-gather ] OUT namespace/openshift-must-gather-tt65v created [must-gather ] OUT clusterrolebinding.rbac.authorization.k8s.io/must-gather-x75pv created [must-gather ] OUT pod for plug-in image registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:78060ae641d90a50abef4a384bb026c6738e749776b8c94da5b4737f39c71182 created [must-gather-tlxjd] POD 2023-10-23T05:16:43.224987951Z ..... Cluster Logging must-gather script started ..... [must-gather-tlxjd] POD 2023-10-23T05:16:43.225201009Z [must-gather-tlxjd] POD 2023-10-23T05:16:43.239721793Z must-gather logs are located at: '/must-gather/gather-debug.log' [must-gather-tlxjd] POD 2023-10-23T05:16:43.264369411Z FIPS mode is enabled, but the required OpenSSL backend is unavailable [must-gather-tlxjd] POD 2023-10-23T05:16:43.849973264Z FIPS mode is enabled, but the required OpenSSL backend is unavailable [must-gather-tlxjd] POD 2023-10-23T05:16:43.872143987Z FIPS mode is enabled, but the required OpenSSL backend is unavailable [must-gather-tlxjd] POD 2023-10-23T05:16:43.932518549Z FIPS mode is enabled, but the required OpenSSL backend is unavailable [must-gather-tlxjd] POD 2023-10-23T05:16:43.952411918Z FIPS mode is enabled, but the required OpenSSL backend is unavailable [must-gather-tlxjd] OUT waiting for gather to complete [must-gather-tlxjd] OUT downloading gather output [must-gather-tlxjd] OUT receiving file list ... done [must-gather-tlxjd] OUT ./ [must-gather-tlxjd] OUT gather-debug.log [must-gather-tlxjd] OUT cache-dir/ [must-gather-tlxjd] OUT [must-gather-tlxjd] OUT sent 50 bytes received 660 bytes 157.78 bytes/sec [must-gather-tlxjd] OUT total size is 6366 speedup is 8.97 [must-gather ] OUT namespace/openshift-must-gather-tt65v deleted [must-gather ] OUT clusterrolebinding.rbac.authorization.k8s.io/must-gather-x75pv deleted Reprinting Cluster State: When opening a support case, bugzilla, or issue please include the following summary data along with any other requested information: ClusterID: abb7ad56-b3ba-4163-95df-2a1da09de8fc ClusterVersion: Stable at "4.13.0-0.nightly-2023-10-17-114326" ClusterOperators: All healthy and stable
Nothing gathered:
$ ls -ltR must-gather.local.2879045434226075298 total 16 -rw-r--r-- 1 qitang staff 105 Oct 23 13:16 timestamp -rw-r--r-- 1 qitang staff 3336 Oct 23 13:16 event-filter.html drwxrwxrwx 4 qitang staff 128 Oct 23 13:16 brew-registry-redhat-io-openshift-logging-cluster-logging-rhel9-operator-sha256-0c91462002735a3213c41a9a11b67d381ccdfed081d7555d87c091b00808bad2 must-gather.local.2879045434226075298/brew-registry-redhat-io-openshift-logging-cluster-logging-rhel9-operator-sha256-0c91462002735a3213c41a9a11b67d381ccdfed081d7555d87c091b00808bad2: total 16 drwxr-xr-x 2 qitang staff 64 Oct 23 13:16 cache-dir -rw-r--r-- 1 qitang staff 6366 Oct 23 13:16 gather-debug.log must-gather.local.2879045434226075298/brew-registry-redhat-io-openshift-logging-cluster-logging-rhel9-operator-sha256-0c91462002735a3213c41a9a11b67d381ccdfed081d7555d87c091b00808bad2/cache-dir: total 0
Version-Release number of selected component (if applicable):
openshift-logging/cluster-logging-rhel9-operator/images/v5.8.0-194
How reproducible:
Always
Steps to Reproduce:
- Deploy logging on a cluster which has FIPS
- Run must-gather command
Actual results:
No info gathered
Expected results:
Must-gather should gather logging info.
Additional info:
No issue if the cluster doesn't have FIPS.
No issue when running `oc adm must-gather` in the same cluster.
- relates to
-
LOG-4403 CLO must-gather doesn't work on FIPS enabled cluster
- Closed