Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1867903

Summary:	[oc] oc adm must-gather should start collecting oauth-apiserver logs
Product:	OpenShift Container Platform	Reporter:	RamaKasturi <knarra>
Component:	oc	Assignee:	Jan Chaloupka <jchaloup>
Status:	CLOSED DUPLICATE	QA Contact:	zhou ying <yinzhou>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	4.6	CC:	aos-bugs, jokerman, maszulik, mfojtik
Target Milestone:	---
Target Release:	4.6.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-08-11 14:26:42 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description RamaKasturi 2020-08-11 07:36:16 UTC

Description of problem:
with 4.6 Openshift master has split apart oauth resources from openshift-apiserver into a new oauth-apiserver and audit logs for those API groups go to /var/log/oauth-apiserver and not /var/log/openshift-apiserver anymore. Currently when oc adm must-gather is run does not see any logs related to oauth-apiserver collected.

Version-Release number of selected component (if applicable):
4.6.0-0.nightly-2020-08-07-202945

How reproducible:
Always

Steps to Reproduce:
1.Install latest 4.6 cluster
2.Run oc adm must-gather
3.cd to must-gather.local.5959959629377510922/quay-io-openshift-release-dev-ocp-v4-0-art-dev-sha256-4fe3dcd31bc4b628ec26bcea6ad91af05d6fac05206b46d4961e477197b8b2b1
[ramakasturinarra@dhcp35-60 audit_logs]$ ls -l
total 16
drwxr-xr-x. 2 ramakasturinarra ramakasturinarra 4096 Aug 10 21:15 kube-apiserver
-rw-r--r--. 1 ramakasturinarra ramakasturinarra 2634 Aug 10 21:12 kube-apiserver.audit_logs_listing
drwxr-xr-x. 2 ramakasturinarra ramakasturinarra 4096 Aug 10 21:15 openshift-apiserver
-rw-r--r--. 1 ramakasturinarra ramakasturinarra  158 Aug 10 21:12 openshift-apiserver.audit_logs_listing


Actual results:
Do not see any directory with name oauth-apiserver and audit logs for them are not collected
[ramakasturinarra@dhcp35-60 audit_logs]$ ls -l
total 16
drwxr-xr-x. 2 ramakasturinarra ramakasturinarra 4096 Aug 10 21:15 kube-apiserver
-rw-r--r--. 1 ramakasturinarra ramakasturinarra 2634 Aug 10 21:12 kube-apiserver.audit_logs_listing
drwxr-xr-x. 2 ramakasturinarra ramakasturinarra 4096 Aug 10 21:15 openshift-apiserver
-rw-r--r--. 1 ramakasturinarra ramakasturinarra  158 Aug 10 21:12 openshift-apiserver.audit_logs_listing

[ramakasturinarra@dhcp35-60 quay-io-openshift-release-dev-ocp-v4-0-art-dev-sha256-4fe3dcd31bc4b628ec26bcea6ad91af05d6fac05206b46d4961e477197b8b2b1]$ ls -l
total 176
drwxr-xr-x.  4 ramakasturinarra ramakasturinarra   4096 Aug 10 21:13 audit_logs
drwxr-xr-x. 16 ramakasturinarra ramakasturinarra   4096 Aug 10 21:13 cluster-scoped-resources
drwxr-xr-x.  2 ramakasturinarra ramakasturinarra   4096 Aug 10 21:15 etcd_info
-rw-r--r--.  1 ramakasturinarra ramakasturinarra 154053 Aug 10 21:12 event-filter.html
drwxr-xr-x.  3 ramakasturinarra ramakasturinarra   4096 Aug 10 21:13 host_service_logs
drwxr-xr-x. 51 ramakasturinarra ramakasturinarra   4096 Aug 10 21:19 namespaces
-rw-r--r--.  1 ramakasturinarra ramakasturinarra     34 Aug 10 21:10 version


Expected results:
oauth-apiserver audit logs should be collected

Additional info:

Comment 1 Maciej Szulik 2020-08-11 11:21:59 UTC

Jan can you update https://github.com/openshift/must-gather/blob/master/collection-scripts/gather_audit_logs so that it also gather oauth-apiserver

Comment 2 Maciej Szulik 2020-08-11 14:26:42 UTC


*** This bug has been marked as a duplicate of bug 1862426 ***