Uploaded image for project: 'Network Observability'
  1. Network Observability
  2. NETOBSERV-1830

NetObserv must-gather doesn't collect logs when cluster has FIPS enabled

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • netobserv-1.7-candidate
    • Operator
    • None
    • False
    • None
    • False
    • NetObserv - Sprint 260, NetObserv - Sprint 261
    • Moderate

      Description of problem:

      NetObserv must-gather doesn't collect logs when cluster has FIPS enabled

      Steps to Reproduce:

      1. Deploy cluster with fips enabled
      2. Deploy NOO and create flowcollector
      3. Run oc adm must-gather --image=quay.io/netobserv/must-gather 

      Actual results:

      2024-09-04T20:22:14.954975715Z ++ oc get subs -A -o template --template '{{range .items}}{{if eq .spec.name "netobserv-operator"}}{{.metadata.namespace}}{{end}}{{end}}'
      2024-09-04T20:22:14.958232090Z FIPS mode is enabled, but the required OpenSSL backend is unavailable
      2024-09-04T20:22:14.958685380Z + NO_NS=
      2024-09-04T20:22:14.958729901Z + '[' -z '' ']'
      2024-09-04T20:22:14.958747817Z + echo 'INFO: Network Observability namespace is not detected. Skipping.'
      2024-09-04T20:22:14.958776339Z INFO: Network Observability namespace is not detected. Skipping.
      2024-09-04T20:22:14.958787032Z + exit 0
      2024-09-04T20:22:14.958906818Z running gather_webhooks
      2024-09-04T20:22:14.960689809Z +++ dirname -- /usr/bin/gather_webhooks
      2024-09-04T20:22:14.961631958Z ++ cd -- /usr/bin
      2024-09-04T20:22:14.961681111Z ++ pwd
      2024-09-04T20:22:14.961782196Z + DIR_NAME=/usr/bin
      2024-09-04T20:22:14.961826098Z + source /usr/bin/common.sh
      2024-09-04T20:22:14.962194356Z ++++ dirname -- /usr/bin/common.sh
      2024-09-04T20:22:14.963015192Z +++ cd -- /usr/bin
      2024-09-04T20:22:14.963046261Z +++ pwd
      2024-09-04T20:22:14.963148183Z ++ DIR_NAME=/usr/bin
      2024-09-04T20:22:14.963211065Z ++ export BASE_COLLECTION_PATH=/must-gather
      2024-09-04T20:22:14.963233668Z ++ BASE_COLLECTION_PATH=/must-gather
      2024-09-04T20:22:14.963287264Z + check_command
      2024-09-04T20:22:14.963302310Z + [[ -z 1 ]]
      2024-09-04T20:22:14.963363364Z + export -f gather_validating_wh
      2024-09-04T20:22:14.963734051Z ++ /usr/bin/oc get validatingwebhookconfiguration -o custom-columns=NAME:.metadata.name --no-headers
      2024-09-04T20:22:14.963824002Z ++ grep -i flowcollectorconversionwebhook
      2024-09-04T20:22:14.967158050Z FIPS mode is enabled, but the required OpenSSL backend is unavailable
      2024-09-04T20:22:14.967915973Z + validating_wh=
      
      
      Note "NO_NS= " where NO_NS is not detected

      Expected results:

       NetObserv MG image should collect logs in FIPS enabled profile.

            Unassigned Unassigned
            rhn-support-memodi Mehul Modi
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: