Bug 1384367

Summary: cluster-admin is not able to view logs for other users' deleted projects
Product: OpenShift Container Platform Reporter: Xia Zhao <xiazhao>
Component: LoggingAssignee: ewolinet
Status: CLOSED CURRENTRELEASE QA Contact: Xia Zhao <xiazhao>
Severity: medium Docs Contact:
Priority: medium    
Version: 3.2.1CC: aos-bugs, jcantril, juzhao, tdawson, xiazhao
Target Milestone: ---Keywords: Regression, Reopened
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
undefined
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-02-16 21:04:48 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Comment 2 Xia Zhao 2016-10-13 23:15:34 UTC
@Eric,

Yes, by saying "populates logs " in repro step #2 and #3, checked that the both logs exist on kibana UI (logged in with cluster-admin user A). And for step #5, it was actually performed time and time again within more than 1 hour which is assumed to be enough for the logs to be populated.

Comment 3 ewolinet 2016-10-14 14:34:08 UTC
@Xia,

Can you scale down ES, add the following ENV name/value to your ES dc, scale it back up, rerun this test and paste the whole ES logs here?

```
name: "PLUGIN_LOGLEVEL"
value: "DEBUG"
```

Comment 5 Xia Zhao 2016-10-16 07:47:00 UTC
@Eric

I'm sending you the log files in email.

Thanks,
Xia

Comment 8 Junqi Zhao 2016-11-28 01:52:11 UTC
Verified with 3.4.0 images on ops registry, tested according to Comments 4 step,this issue does not exist any more.
cluster-admin is able to view logs for other users' deleted projects, please set this issue to ON_QA.

openshift3/logging-deployer    cfa18cbbc8f3
openshift3/logging-fluentd    7b11a29c82c1
openshift3/logging-elasticsearch    6716a0ad8b2b
openshift3/logging-kibana    7fc9916eea4d
openshift3/logging-curator    9af78fc06248

Comment 9 Junqi Zhao 2016-11-28 01:53:43 UTC
clear all needinfo requests

Comment 10 Xia Zhao 2016-11-29 05:12:27 UTC
Set to verified according to comment #8

Comment 11 Troy Dawson 2017-02-16 21:04:48 UTC
This bug was fixed with the latest OCP 3.4.0 that is already released.