Bug 1384367 - cluster-admin is not able to view logs for other users' deleted projects
Summary: cluster-admin is not able to view logs for other users' deleted projects
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Logging
Version: 3.2.1
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: ---
Assignee: ewolinet
QA Contact: Xia Zhao
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-10-13 07:55 UTC by Xia Zhao
Modified: 2017-03-08 18:43 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: No Doc Update
Doc Text:
undefined
Clone Of:
Environment:
Last Closed: 2017-02-16 21:04:48 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Comment 2 Xia Zhao 2016-10-13 23:15:34 UTC 
@Eric,

Yes, by saying "populates logs " in repro step #2 and #3, checked that the both logs exist on kibana UI (logged in with cluster-admin user A). And for step #5, it was actually performed time and time again within more than 1 hour which is assumed to be enough for the logs to be populated.
Comment 3 ewolinet 2016-10-14 14:34:08 UTC 
@Xia,

Can you scale down ES, add the following ENV name/value to your ES dc, scale it back up, rerun this test and paste the whole ES logs here?

```
name: "PLUGIN_LOGLEVEL"
value: "DEBUG"
```
Comment 5 Xia Zhao 2016-10-16 07:47:00 UTC 
@Eric

I'm sending you the log files in email.

Thanks,
Xia
Comment 8 Junqi Zhao 2016-11-28 01:52:11 UTC 
Verified with 3.4.0 images on ops registry, tested according to Comments 4 step,this issue does not exist any more.
cluster-admin is able to view logs for other users' deleted projects, please set this issue to ON_QA.

openshift3/logging-deployer    cfa18cbbc8f3
openshift3/logging-fluentd    7b11a29c82c1
openshift3/logging-elasticsearch    6716a0ad8b2b
openshift3/logging-kibana    7fc9916eea4d
openshift3/logging-curator    9af78fc06248
Comment 9 Junqi Zhao 2016-11-28 01:53:43 UTC 
clear all needinfo requests
Comment 10 Xia Zhao 2016-11-29 05:12:27 UTC 
Set to verified according to comment #8
Comment 11 Troy Dawson 2017-02-16 21:04:48 UTC 
This bug was fixed with the latest OCP 3.4.0 that is already released.
Note You need to log in before you can comment on or make changes to this bug.