Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-4943

Enhance Infrastructure permissions to support application log collection

XMLWordPrintable

    • 3
    • False
    • None
    • False
    • NEW
    • OBSDA-228 - Log filtering and collecting
    • NEW
    • With this update, ClusterLogForwarders that specify an Application input with one or more infrastructure namespaces (`default`, `openshift*`, `kube*`), now require a service account with the `collect-infrastructure-logs` role.
    • Enhancement
    • Log Collection - Sprint 248

      Summary

      As an administrator of ClusterLogForwarder,
      I want forwarders collecting logs from infrastructure namespaces to need the 'collect-infrastructure-role'
      so the infrastructure logs are guarded when defining an 'application' input

      Acceptance Criteria

      • Verify custom application inputs that includes default, openshift*,kube* are rejected when the serviceaccount does not have the 'collect-infrastructure-logs' role

      Notes

            rh-ee-calee Calvin Lee
            jcantril@redhat.com Jeffrey Cantrill
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: