Uploaded image for project: 'OpenShift Service Mesh'
  1. OpenShift Service Mesh
  2. OSSM-2371

Kiali in read-only mode still can change the log level of the envoy proxies

XMLWordPrintable

    • Icon: Ticket Ticket
    • Resolution: Done
    • Icon: Normal Normal
    • OSSM 2.3.2
    • OSSM 2.3.0
    • Kiali
    • None
    • False
    • None
    • False
    • Release Notes
    • Bug Fix

      Tested with Service Mesh 2.3.0 and Kiali 1.57.3. 

       

      Despite Kiali being configured as read-only, any user can change the log level of the envoy proxies.  Need the read-only feature to prevent this change as well. 

      Steps to reproduce:

      1. Deploy ServiceMesh with Kiali in read-only mode:

      spec:
        addons:
          kiali:
            enabled: true
            install:
              dashboard:
                enableGrafana: true
                enablePrometheus: true
                enableTracing: true
                viewOnly: true
            name: kiali
       [...]

      2. Add a namespace to the SMMR, and deploy an application.

      3. Log in to Kiali, go to Workloads, select one of them. 

      4. Go to the Logs tab, and then to the three dots on the right. 

      5. Select any proxy log level.

       

      Expected behaviour:

      The proxy log level should not be set from Kiali when  "viewOnly: true" is set.  

       

       

            rh-ee-fhoyosle Fernando Hoyos Leyva
            rhn-support-asolanas Alexis Solanas
            Matej Nesuta
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved: