Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1858811

Summary: TLS support for remote-syslog is not working
Product: OpenShift Container Platform Reporter: Giriyamma <gkarager>
Component: LoggingAssignee: Vimal Kumar <vimalkum>
Status: CLOSED ERRATA QA Contact: Giriyamma <gkarager>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 4.6CC: anli, aos-bugs, vimalkum
Target Milestone: ---   
Target Release: 4.6.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-10-27 16:16:00 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Giriyamma 2020-07-20 13:12:57 UTC
Description of problem:
TLS support for remote-syslog is not working

How reproducible:
Always

Steps to Reproduce:
1. Deploy CLO and EO
2. Create clusterlogging instance
3. Create syslog receiver (sa, secret, configmap, deployment, svc) 
4. Create ClusterLogForwarder with:

apiVersion: logging.openshift.io/v1      
kind: ClusterLogForwarder      
metadata:      
  name: instance      
  namespace: openshift-logging      
spec:      
  outputs:      
    - name: rsyslog-created-by-user
      secret:
        name: rsyslogserver  
      type: syslog      
      syslog:      
        facility: local0      
        rfc: RFC3164      
        payloadKey: message      
        severity: informational  
      url: 'tls://rsyslogserver.openshift-logging.svc:514'      
  pipelines:      
    - name: forward-to-external-syslog      
      inputRefs:      
        - infrastructure      
        - application      
        - audit      
      outputRefs:      
        - rsyslog-created-by-user

Actual results:
Fluentd pods are not up

$ oc log $fluentd-pod

[error]: config error file="/etc/fluent/fluent.conf" error_class=Fluent::ConfigError error="valid options are udp,tcp but got tls"

Expected results:
all the pods are up and running
Logs are sent to rsyslogserver successfully

Comment 3 Giriyamma 2020-08-01 14:15:37 UTC
Issue is fixed, moving to verified state.

Comment 5 errata-xmlrpc 2020-10-27 16:16:00 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.6 GA Images), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:4196