Bug 1786353 - [c.f.s.c.PrivilegesEvaluator] No index-level perm match for User
Summary: [c.f.s.c.PrivilegesEvaluator] No index-level perm match for User
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Logging
Version: 3.11.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
: 3.11.z
Assignee: Jeff Cantrill
QA Contact: Anping Li
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-12-24 15:18 UTC by Greg Rodriguez II
Modified: 2020-01-02 20:21 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-01-02 20:21:32 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Greg Rodriguez II 2019-12-24 15:18:15 UTC
Description of problem:
[x] Seeing the following errors when trying to create a search index in kibana.

object Object]: [security_exception] no permissions for [indices:data/read/field_caps] and User [name=ZK96YLT, roles=[gen_user_199526ad7a0de4af2684efb50a8d4e115b346b61, gen_kibana_199526ad7a0de4af2684efb50a8d4e115b346b61]]

Config: Error 404 Not Found: [doc][config:5.6.13]: document missing: [document_missing_exception] [doc][config:5.6.13]: document missing, with { index_uuid="nEzQKgl5QOG2Ts7LGegFSg" & shard="0" & .

[x] Attempted to delete the user indices and restore, but no change

Version-Release number of selected component (if applicable):
[x] 3.11.146-4

How reproducible:
[x] Very

Actual results:
[x] Get errors reported above.  Also, longform errors from ES logs attached privately.

Expected results:
[x] Able to create indices in Kibana for all needed users.

Additional info:
[x] Attached sensitive information privately to ticket for further review.
[x] This issue appears similar [1] to issues resolved in 3.11.146-1, however customer is using 3.11.146-4 and still experiencing.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1752853

Comment 4 Jeff Cantrill 2020-01-02 20:21:32 UTC
This is because the Kibana version (5.6.13) is mismatched with the ES version (5.6.16).   The images for both differ Kibana (3.11.141), ES(3.11.146).  Something is incorrect in your deployment. Bump the kibana version to be the same as ES and this will be resolved.  Closing NOTABUG


Note You need to log in before you can comment on or make changes to this bug.