Bug 1395282 - java NPE (appy/create/bulk) - Searchguard plugin
Summary: java NPE (appy/create/bulk) - Searchguard plugin
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Logging
Version: 3.3.0
Hardware: x86_64
OS: Linux
medium
high
Target Milestone: ---
: ---
Assignee: ewolinet
QA Contact: Xia Zhao
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-11-15 15:25 UTC by Ricardo Lourenco
Modified: 2017-01-09 14:20 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-01-09 14:20:53 UTC
Target Upstream Version:

Attachments (Terms of Use)
es data node (873.23 KB, text/plain)
2016-11-15 15:25 UTC, Ricardo Lourenco 		no flags Details
es master node (10.34 KB, text/plain)
2016-11-15 15:27 UTC, Ricardo Lourenco 		no flags Details
_cat_allocation (465 bytes, text/plain)
2016-11-15 15:32 UTC, Ricardo Lourenco 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Description Ricardo Lourenco 2016-11-15 15:25:22 UTC 
Created attachment 1220861 [details]
es data node

Description of problem:

During scale-out testing of logging (205 nodes) the following NPE appeared in the elasticsearch logs
Comment 1 Ricardo Lourenco 2016-11-15 15:27:07 UTC 
Created attachment 1220863 [details]
es master node
Comment 2 Ricardo Lourenco 2016-11-15 15:32:02 UTC 
Created attachment 1220865 [details]
_cat_allocation
Comment 5 ewolinet 2016-11-15 15:51:02 UTC 
In the master ES logs, are there entries regarding the searchguard index being created/updated? We should see a different entry for each ES cluster node.

In the past we've seen that not having the ACLs configured yet has been cause for those NPE stack traces to be emitted from Searchguard.
Comment 6 Jeff Cantrill 2016-11-16 14:03:10 UTC 
I think this is an error from us not handling a failure scenario properly: https://github.com/fabric8io/openshift-elasticsearch-plugin/blob/ES1.5.x/src/main/java/io/fabric8/elasticsearch/plugin/ActionForbiddenActionFilter.java#L57  likely related to the seeding problem mentioned by @eric.
Comment 8 Ricardo Lourenco 2016-11-16 15:33:33 UTC 
Nothing in the logs regarding ACL configuration.

The master logs are attached to this BZ:
https://bugzilla.redhat.com/attachment.cgi?id=1220863
Comment 15 Ricardo Lourenco 2017-01-08 15:54:05 UTC 
@Eric,

That's fine by me, I didn't see this error thus far.
Note You need to log in before you can comment on or make changes to this bug.