Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-5880

[splunk] the ca-bundle.crt,tls.key,tls.crt,passphrase are not migrated to 6.0

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False
    • NEW
    • NEW
    • Release Note Not Required
    • Log Collection - Sprint 257

      Description of problem:

      [splunk] the ca-bundle.crt,tls.key,tls.crt,passphrase are not migrated in 6.0

      Steps to Reproduce:

      1. forward logs to Splunk with ca-bundle.crt.
        to-splunk-secret
        {
            "apiVersion": "v1",
            "data": {
                "ca-bundle.crt": "",
                "hecToken": ""
            },
            "kind": "Secret",
             ....
        }
        

      ClusterLogForwarder/clf-to-splunk

      apiVersion: logging.openshift.io/v1
      kind: ClusterLogForwarder
      metadata:
        name: clf-to-splunk
      spec:
        outputs:
        - name: splunk-aosqe
          secret:
            name: to-splunk-secret
          splunk:
            indexName: ocp-logs
          tuning:
            compression: gzip
            delivery: AtLeastOnce
            maxWrite: 10M
          type: splunk
          url: https://splunk-default-service.splunk-aosqe.svc:8088
        pipelines:
        - inputRefs:
          - application
          - infrastructure
          - audit
          name: pipe1
          outputRefs:
          - splunk-aosqe
        serviceAccountName: clf-to-splunk
      
      1. Upgrade Logging to 6.0

      Actual results:

      new clusterlogforwarders.observability.openshift.io/clf-to-splunk doesn't include tls properties.
      oc get clusterlogforwarders.observability.openshift.io clf-to-splunk -o yaml |yq '.spec'

      managementState: Managed
      outputs:
        - name: splunk-aosqe
          splunk:
            authentication:
              token:
                key: hecToken
                secretName: to-splunk-secret
            index: ocp-logs
            tuning:
              compression: none
              delivery: atLeastOnce
              maxWrite: 10M
            url: https://splunk-default-service.splunk-aosqe.svc:8088
          type: splunk
      pipelines:
        - inputRefs:
            - application
            - infrastructure
            - audit
          name: pipe1
          outputRefs:
            - splunk-aosqe
      serviceAccount:
        name: clf-to-splunk
      

      Expected results:

      managementState: Managed
      outputs:
        - name: splunk-aosqe
          splunk:
            authentication:
            index: ocp-logs
            tuning:
            url: https://splunk-default-service.splunk-aosqe.svc:8088
          tls:
            ca:
              key: ca-bundle.crt
               secretName:  to-splunk-secret
          type: splunk
      pipelines:
      serviceAccount:
        name: clf-to-splunk
      

              rh-ee-calee Calvin Lee
              rhn-support-anli Anping Li
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: