-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
4.18
Document Reference:
[-] https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/red_hat_build_of_opentelemetry/configuring-the-collector#filelog-receiver_otel-collector-receivers
Issue:
When using the configuration from documentation, the filelog receiver could work because of permission denied problems. Below is the sample log:
warn fileconsumer/file.go:49 finding files {“kind”: “receiver”, “name”: “filelog”, “data_type”: “logs”, “component”: “fileconsumer”, “error”: “no files match the configured criteria prefind files with ‘/var/log/pods/petclinic_*/*/*/*.log’ pattern: open .: permission denied”}
OR below event when using restricted-v2 SCC:
6s Warning FailedCreate replicaset/dev-collector-6d7766cf95 Error creating: pods "dev-collector-6d7766cf95-" is forbidden: unable to validate against any security context constraint: [provider "anyuid": Forbidden: not usable by user or serviceaccount, spec.volumes[1]: Invalid value: "hostPath": hostPath volumes are not allowed to be used, provider "restricted": Forbidden: not usable by user or serviceaccount, provider "nonroot-v2": Forbidden: not usable by user or serviceaccount, provider "nonroot": Forbidden: not usable by user or serviceaccount, provider "hostmount-anyuid": Forbidden: not usable by user or serviceaccount, provider "logging-scc": Forbidden: not usable by user or serviceaccount, provider "machine-api-termination-handler": Forbidden: not usable by user or serviceaccount, provider "hostnetwork-v2": Forbidden: not usable by user or serviceaccount, provider "hostnetwork": Forbidden: not usable by user or serviceaccount, provider "hostaccess": Forbidden: not usable by user or serviceaccount, provider "node-exporter": Forbidden: not usable by user or serviceaccount, provider "privileged": Forbidden: not usable by user or serviceaccount]
So, either the documentation needs to be fixed or OpenTelemetryCollector should get required SELinux permissions when using filelog receiver.
Furthermore, the documentation should also contain example "volumeMounts" and "volumes" section of OpenTelemetryCollector to enable use of FileLog receiver.
