-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
netobserv-1.7-candidate
-
None
-
False
-
None
-
False
-
-
-
NetObserv - Sprint 260, NetObserv - Sprint 261
-
Moderate
Description of problem:
NetObserv must-gather doesn't collect logs when cluster has FIPS enabled
Steps to Reproduce:
1. Deploy cluster with fips enabled 2. Deploy NOO and create flowcollector 3. Run oc adm must-gather --image=quay.io/netobserv/must-gather
Actual results:
2024-09-04T20:22:14.954975715Z ++ oc get subs -A -o template --template '{{range .items}}{{if eq .spec.name "netobserv-operator"}}{{.metadata.namespace}}{{end}}{{end}}' 2024-09-04T20:22:14.958232090Z FIPS mode is enabled, but the required OpenSSL backend is unavailable 2024-09-04T20:22:14.958685380Z + NO_NS= 2024-09-04T20:22:14.958729901Z + '[' -z '' ']' 2024-09-04T20:22:14.958747817Z + echo 'INFO: Network Observability namespace is not detected. Skipping.' 2024-09-04T20:22:14.958776339Z INFO: Network Observability namespace is not detected. Skipping. 2024-09-04T20:22:14.958787032Z + exit 0 2024-09-04T20:22:14.958906818Z running gather_webhooks 2024-09-04T20:22:14.960689809Z +++ dirname -- /usr/bin/gather_webhooks 2024-09-04T20:22:14.961631958Z ++ cd -- /usr/bin 2024-09-04T20:22:14.961681111Z ++ pwd 2024-09-04T20:22:14.961782196Z + DIR_NAME=/usr/bin 2024-09-04T20:22:14.961826098Z + source /usr/bin/common.sh 2024-09-04T20:22:14.962194356Z ++++ dirname -- /usr/bin/common.sh 2024-09-04T20:22:14.963015192Z +++ cd -- /usr/bin 2024-09-04T20:22:14.963046261Z +++ pwd 2024-09-04T20:22:14.963148183Z ++ DIR_NAME=/usr/bin 2024-09-04T20:22:14.963211065Z ++ export BASE_COLLECTION_PATH=/must-gather 2024-09-04T20:22:14.963233668Z ++ BASE_COLLECTION_PATH=/must-gather 2024-09-04T20:22:14.963287264Z + check_command 2024-09-04T20:22:14.963302310Z + [[ -z 1 ]] 2024-09-04T20:22:14.963363364Z + export -f gather_validating_wh 2024-09-04T20:22:14.963734051Z ++ /usr/bin/oc get validatingwebhookconfiguration -o custom-columns=NAME:.metadata.name --no-headers 2024-09-04T20:22:14.963824002Z ++ grep -i flowcollectorconversionwebhook 2024-09-04T20:22:14.967158050Z FIPS mode is enabled, but the required OpenSSL backend is unavailable 2024-09-04T20:22:14.967915973Z + validating_wh= Note "NO_NS= " where NO_NS is not detected
Expected results:
NetObserv MG image should collect logs in FIPS enabled profile.