Bug 1864397 - SSLError in fluentd logs when deploying CLO 4.6
Summary: SSLError in fluentd logs when deploying CLO 4.6
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Logging
Version: 4.6
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
: 4.6.0
Assignee: Jeff Cantrill
QA Contact: Qiaoling Tang
URL:
Whiteboard:
: 1866156 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-08-03 19:22 UTC by Eric Matysek
Modified: 2023-09-14 06:05 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: No Doc Update
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-10-27 15:09:31 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
Logging stack pod logs (320.07 KB, application/gzip)
2020-08-03 19:22 UTC, Eric Matysek
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Github openshift cluster-logging-operator pull 651 0 None closed Bug 1864397: Revert sniffer class deletion for collector es output 2021-02-17 13:43:45 UTC
Red Hat Product Errata RHBA-2020:4198 0 None None None 2020-10-27 15:09:47 UTC

Description Eric Matysek 2020-08-03 19:22:56 UTC
Created attachment 1706572 [details]
Logging stack pod logs

Description of problem:
All logging is stopped with SSLError in fluentd logs

Version-Release number of selected component (if applicable):
4.6

How reproducible:
100%

Steps to Reproduce:
1. Deploy 4.6 operator
2. Look at fluentd logs

Actual results:
2020-08-03 19:05:56 +0000 [warn]: [default] failed to flush the buffer. retry_time=81 next_retry_seconds=2020-08-03 19:11:16 +0000 chunk="5abfac255fb207925a141d86ebc962cd" error_class=Fluent::Plugin::ElasticsearchOutput::RecoverableRequestFailure error="could not push logs to Elasticsearch cluster ({:host=>\"elasticsearch.openshift-logging.svc.cluster.local\", :port=>9200, :scheme=>\"https\", :user=>\"fluentd\", :password=>\"obfuscated\"}): hostname \"10.131.2.22\" does not match the server certificate (OpenSSL::SSL::SSLError)"

No app logs indexed during workload run

Expected results:
No SSLError and all app logs indexed

Additional info:

Comment 1 Jeff Cantrill 2020-08-05 19:06:13 UTC
*** Bug 1866156 has been marked as a duplicate of this bug. ***

Comment 2 Jeff Cantrill 2020-08-05 19:11:45 UTC
Eric please gather more info regarding the cluster: https://github.com/openshift/cluster-logging-operator/tree/master/must-gather#usage

Comment 5 Qiaoling Tang 2020-08-07 06:59:43 UTC
Verified with clusterlogging.4.6.0-202008061010.p0

Comment 7 errata-xmlrpc 2020-10-27 15:09:31 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.6.1 extras update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:4198

Comment 8 Red Hat Bugzilla 2023-09-14 06:05:14 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days


Note You need to log in before you can comment on or make changes to this bug.