Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1599518

Summary: logging mux certificate error
Product: OpenShift Container Platform Reporter: Rajnikant <rkant>
Component: apiserver-authAssignee: Simo Sorce <ssorce>
Status: CLOSED WONTFIX QA Contact: Chuan Yu <chuyu>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 3.6.0CC: aos-bugs, mkhan, nhosoi, rmeggins
Target Milestone: ---Keywords: Reopened
Target Release: 3.6.z   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-08-03 15:35:29 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Rajnikant 2018-07-10 02:11:12 UTC 
Description of problem:
logging mux certificate error
Unable to create logging-mux certs
Fluentd error looks like
---
2018-07-02 09:40:16 +0000 [info]: reading config file path="/etc/fluent/fluent.conf"
2018-07-02 09:40:16 +0000 [warn]: 'block' action stops input process until the buffer full is resolved. Check your pipeline this action is fit or not
2018-07-02 09:40:16 +0000 [error]: config error file="/etc/fluent/fluent.conf" error="no valid certificates in cert_path: /etc/fluent/muxkeys/cert"
----

Version-Release number of selected component (if applicable):
3.6

How reproducible:
Yes,

Steps to Reproduce:
1. Deploy logging EFK with mux, logging-mux pods was in crashloopback 
2. Uninstall logging EFK
 ansible-playbook -e openshift_logging_install_logging=false  /usr/share/ansible/openshift-ansible/playbooks/byo/openshift-cluster/openshift-logging.yml

The certs folder in master /etc/origin/logging is not deleted. So when redeploying EFK with mux,the certs are not created again.
3.

After uninstalling EFK with playbook,need to remove manually "logging" folder /etc/origin in master and redeployed EFK, post that logging-mux pods was running.

Actual results:
---
2018-07-02 09:40:16 +0000 [info]: reading config file path="/etc/fluent/fluent.conf"
2018-07-02 09:40:16 +0000 [warn]: 'block' action stops input process until the buffer full is resolved. Check your pipeline this action is fit or not
2018-07-02 09:40:16 +0000 [error]: config error file="/etc/fluent/fluent.conf" error="no valid certificates in cert_path: /etc/fluent/muxkeys/cert"
----


Expected results:
Should be installed

Additional info:
Comment 2 Jeff Cantrill 2018-07-10 13:11:02 UTC 
Noriko, please investigate