Bug 1786353

Summary: [c.f.s.c.PrivilegesEvaluator] No index-level perm match for User
Product: OpenShift Container Platform Reporter: Greg Rodriguez II <grodrigu>
Component: LoggingAssignee: Jeff Cantrill <jcantril>
Status: CLOSED NOTABUG QA Contact: Anping Li <anli>
Severity: high Docs Contact:
Priority: high    
Version: 3.11.0CC: aos-bugs
Target Milestone: ---   
Target Release: 3.11.z   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-01-02 20:21:32 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Greg Rodriguez II 2019-12-24 15:18:15 UTC
Description of problem:
[x] Seeing the following errors when trying to create a search index in kibana.

object Object]: [security_exception] no permissions for [indices:data/read/field_caps] and User [name=ZK96YLT, roles=[gen_user_199526ad7a0de4af2684efb50a8d4e115b346b61, gen_kibana_199526ad7a0de4af2684efb50a8d4e115b346b61]]

Config: Error 404 Not Found: [doc][config:5.6.13]: document missing: [document_missing_exception] [doc][config:5.6.13]: document missing, with { index_uuid="nEzQKgl5QOG2Ts7LGegFSg" & shard="0" & .

[x] Attempted to delete the user indices and restore, but no change

Version-Release number of selected component (if applicable):
[x] 3.11.146-4

How reproducible:
[x] Very

Actual results:
[x] Get errors reported above.  Also, longform errors from ES logs attached privately.

Expected results:
[x] Able to create indices in Kibana for all needed users.

Additional info:
[x] Attached sensitive information privately to ticket for further review.
[x] This issue appears similar [1] to issues resolved in 3.11.146-1, however customer is using 3.11.146-4 and still experiencing.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1752853

Comment 4 Jeff Cantrill 2020-01-02 20:21:32 UTC
This is because the Kibana version (5.6.13) is mismatched with the ES version (5.6.16).   The images for both differ Kibana (3.11.141), ES(3.11.146).  Something is incorrect in your deployment. Bump the kibana version to be the same as ES and this will be resolved.  Closing NOTABUG