Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-4705

must-gather can't gather logging resources when the cluster has FIPS.

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Undefined Undefined
    • None
    • Logging 5.8.0
    • Log Collection
    • None
    • False
    • None
    • False
    • NEW
    • NEW
    • Bug Fix

      Description of problem:

      When running logging must-gather in a cluster which has FIPS enabled, get error message `POD 2023-10-23T05:16:43.952411918Z FIPS mode is enabled, but the required OpenSSL backend is unavailable`

      $ oc adm must-gather --image=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:78060ae641d90a50abef4a384bb026c6738e749776b8c94da5b4737f39c71182 -- /usr/bin/gather
      [must-gather      ] OUT Using must-gather plug-in image: registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:78060ae641d90a50abef4a384bb026c6738e749776b8c94da5b4737f39c71182
      When opening a support case, bugzilla, or issue please include the following summary data along with any other requested information:
      ClusterID: abb7ad56-b3ba-4163-95df-2a1da09de8fc
      ClusterVersion: Stable at "4.13.0-0.nightly-2023-10-17-114326"
      ClusterOperators:
      	All healthy and stable
      
      
      
      
      [must-gather      ] OUT namespace/openshift-must-gather-tt65v created
      [must-gather      ] OUT clusterrolebinding.rbac.authorization.k8s.io/must-gather-x75pv created
      [must-gather      ] OUT pod for plug-in image registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:78060ae641d90a50abef4a384bb026c6738e749776b8c94da5b4737f39c71182 created
      [must-gather-tlxjd] POD 2023-10-23T05:16:43.224987951Z ..... Cluster Logging must-gather script started .....
      [must-gather-tlxjd] POD 2023-10-23T05:16:43.225201009Z 
      [must-gather-tlxjd] POD 2023-10-23T05:16:43.239721793Z must-gather logs are located at: '/must-gather/gather-debug.log'
      [must-gather-tlxjd] POD 2023-10-23T05:16:43.264369411Z FIPS mode is enabled, but the required OpenSSL backend is unavailable
      [must-gather-tlxjd] POD 2023-10-23T05:16:43.849973264Z FIPS mode is enabled, but the required OpenSSL backend is unavailable
      [must-gather-tlxjd] POD 2023-10-23T05:16:43.872143987Z FIPS mode is enabled, but the required OpenSSL backend is unavailable
      [must-gather-tlxjd] POD 2023-10-23T05:16:43.932518549Z FIPS mode is enabled, but the required OpenSSL backend is unavailable
      [must-gather-tlxjd] POD 2023-10-23T05:16:43.952411918Z FIPS mode is enabled, but the required OpenSSL backend is unavailable
      [must-gather-tlxjd] OUT waiting for gather to complete
      [must-gather-tlxjd] OUT downloading gather output
      [must-gather-tlxjd] OUT receiving file list ... done
      [must-gather-tlxjd] OUT ./
      [must-gather-tlxjd] OUT gather-debug.log
      [must-gather-tlxjd] OUT cache-dir/
      [must-gather-tlxjd] OUT 
      [must-gather-tlxjd] OUT sent 50 bytes  received 660 bytes  157.78 bytes/sec
      [must-gather-tlxjd] OUT total size is 6366  speedup is 8.97
      [must-gather      ] OUT namespace/openshift-must-gather-tt65v deleted
      [must-gather      ] OUT clusterrolebinding.rbac.authorization.k8s.io/must-gather-x75pv deleted
      
      
      
      
      Reprinting Cluster State:
      When opening a support case, bugzilla, or issue please include the following summary data along with any other requested information:
      ClusterID: abb7ad56-b3ba-4163-95df-2a1da09de8fc
      ClusterVersion: Stable at "4.13.0-0.nightly-2023-10-17-114326"
      ClusterOperators:
      	All healthy and stable

      Nothing gathered:

      $ ls -ltR must-gather.local.2879045434226075298
      total 16
      -rw-r--r--  1 qitang  staff   105 Oct 23 13:16 timestamp
      -rw-r--r--  1 qitang  staff  3336 Oct 23 13:16 event-filter.html
      drwxrwxrwx  4 qitang  staff   128 Oct 23 13:16 brew-registry-redhat-io-openshift-logging-cluster-logging-rhel9-operator-sha256-0c91462002735a3213c41a9a11b67d381ccdfed081d7555d87c091b00808bad2
      
      
      must-gather.local.2879045434226075298/brew-registry-redhat-io-openshift-logging-cluster-logging-rhel9-operator-sha256-0c91462002735a3213c41a9a11b67d381ccdfed081d7555d87c091b00808bad2:
      total 16
      drwxr-xr-x  2 qitang  staff    64 Oct 23 13:16 cache-dir
      -rw-r--r--  1 qitang  staff  6366 Oct 23 13:16 gather-debug.log
      
      
      must-gather.local.2879045434226075298/brew-registry-redhat-io-openshift-logging-cluster-logging-rhel9-operator-sha256-0c91462002735a3213c41a9a11b67d381ccdfed081d7555d87c091b00808bad2/cache-dir:
      total 0

      Version-Release number of selected component (if applicable):

      openshift-logging/cluster-logging-rhel9-operator/images/v5.8.0-194

      How reproducible:

      Always

      Steps to Reproduce:

      1. Deploy logging on a cluster which has FIPS
      2. Run must-gather command

      Actual results:

      No info gathered

      Expected results:

      Must-gather should gather logging info.

      Additional info:

      No issue if the cluster doesn't have FIPS.

      No issue when running `oc adm must-gather` in the same cluster.

            Unassigned Unassigned
            qitang@redhat.com Qiaoling Tang
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: