Bug 1623700 - openshift_master_audit_config with a path in /var/log is not working when upgrading to 3.10
Summary: openshift_master_audit_config with a path in /var/log is not working when upg...
Keywords:
Status: CLOSED DUPLICATE of bug 1565555
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Installer
Version: 3.10.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
: ---
Assignee: Scott Dodson
QA Contact: Johnny Liu
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-08-29 22:32 UTC by Candace Sheremeta
Modified: 2018-08-29 22:49 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2018-08-29 22:49:17 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Candace Sheremeta 2018-08-29 22:32:18 UTC
Description of problem: openshift_master_audit_config with a path in /var/log is not working when upgrading to 3.10

I would have expected this to continue working as the documentation here: https://docs.openshift.com/container-platform/3.10/install_config/master_node_configuration.html#master-node-config-audit-config specifies this as an example:

auditConfig:
  auditFilePath: "/var/log/audit-ocp.log"
  enabled: true
  maximumFileRetentionDays: 10
  maximumFileSizeMegabytes: 10
  maximumRetainedFiles: 10

How reproducible: 100%

Steps to Reproduce:
1. Configure a 3.9 cluster with an auditConfig like that seen in the Example Audit Configuration in the documentation linked above
2. Attempt to upgrade to 3.10

Actual results:
TASK [openshift_control_plane : Check for file paths outside of /etc/origin/master in master's config] **************************************************************************************
fatal: [node.example.com]: FAILED! => {"failed": true, "msg": "A string value that appears to be a file path located outside of\n/etc/origin/master/, /var/lib/origin, /etc/origin/cloudprovider, /etc/origin/kubelet-plugins, /usr/libexec/kubernetes/kubelet-plugins has been found in /etc/origin/master/master-config.yaml.\nIn 3.10 and newer, all files needed by the master must reside inside of\nthose directories or a subdirectory or it will not be readable by the\nmaster process. Please migrate all files needed by the master into\none of /etc/origin/master/, /var/lib/origin, /etc/origin/cloudprovider, /etc/origin/kubelet-plugins, /usr/libexec/kubernetes/kubelet-plugins or a subdirectory and update your master configs before\nproceeding. The string found was: /var/log/example_log.log\n
***********************


Note You need to log in before you can comment on or make changes to this bug.