Bug 1316219

Summary: Cluster admins should be able to access logs of deleted namespaces
Product: OpenShift Container Platform Reporter: Wesley Hearn <whearn>
Component: LoggingAssignee: ewolinet
Status: CLOSED CURRENTRELEASE QA Contact: chunchen <chunchen>
Severity: low Docs Contact:
Priority: medium    
Version: 3.1.0CC: agrimm, aos-bugs, ewolinet, lmeyer, rmeggins, wsun, xiazhao
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-08-17 18:48:19 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 1303130    
Attachments:
Description Flags
es_pod_log none

Description Wesley Hearn 2016-03-09 17:14:36 UTC 
Description of problem:
Cluster admins should not have logs hidden from then when a namespace is deleted.

Version-Release number of selected component (if applicable):


How reproducible:
Always

Steps to Reproduce:
1. Add User A to cluster admin
2. User B creates a new NS and populates logs then deletes the NS
3. User A searches Kibana for the logs

Actual results:
User A does not have access to the logs

Expected results:
User A should be able to see all logs stored in ES

Additional info:
Comment 3 Xia Zhao 2016-03-18 10:52:41 UTC 
@ewolinet Would you please let me know what's meaning by logging-elasticsearch 3.1.1.8 image? 

--I installed OSE 3.2 with latest puddle and tested with the latest images from brew, got some error in es pod after deploying logging components. Logs attached. I will have a try later. Can you confirm this is the correct place I should test with? I also wonder the bug fix PR if possible.

Thanks,
Xia
Comment 4 Xia Zhao 2016-03-18 10:54:11 UTC 
Created attachment 1137740 [details]
es_pod_log
Comment 7 Xia Zhao 2016-03-21 11:14:41 UTC 
After about 1 hour the logs got shown on Kibana UI for all indices, and I have verified the logs from the deleted namespace exist on .all index of Kibana UI. Closing as fixed.