cloudfoundry-incubator / kubo-deployment

Contains manifests used to deploy Cloud Foundry Container Runtime
https://www.cloudfoundry.org/container-runtime/
Apache License 2.0
275 stars 114 forks source link

too many audit file or missing operator to change behavior #362

Closed obeyler closed 5 years ago

obeyler commented 5 years ago

What happened: too many audit.log and archive file image

by default in the cfcr.yml and in our current deployment

 k8s-args:
        audit-log-maxage: 0
        audit-log-maxbackup: 0
        audit-log-maxsize: 0

at the end due to the number of all audit files, the syslog server have crashed:

2018/11/21 08:30:12 FATAL -- failed to create Watcher
goroutine 4071 [running]:
runtime/debug.Stack(0xc42166d590, 0x21, 0x0)
    /var/vcap/data/packages/golang/1798f26e8038da27c09433ca8194a50c05be3ea0/src/runtime/debug/stack.go:24 +0x79
github.com/hpcloud/tail/util.Fatal(0x6270f6, 0x18, 0x0, 0x0, 0x0)
    /var/vcap/packages/blackbox/src/github.com/hpcloud/tail/util/util.go:22 +0xc7
github.com/hpcloud/tail/watch.(*InotifyTracker).run(0xc421686d00)
    /var/vcap/packages/blackbox/src/github.com/hpcloud/tail/watch/inotify_tracker.go:231 +0x4ac
created by github.com/hpcloud/tail/watch.glob..func1
    /var/vcap/packages/blackbox/src/github.com/hpcloud/tail/watch/inotify_tracker.go:54 +0x233 
was inside the blackbox log

What you expected to happen: no audit log

How to reproduce it (as minimally and precisely as possible): just run the cfcr with some application inside :-)

Anything else we need to know?:

Environment:

Name Release(s) Stemcell(s) Team(s) Cloud Config
cfcr bosh-dns/0.2.0 bosh-openstack-kvm-ubuntu-trusty-go_agent/3586.42 - outdated
bpm/0.6.0
cfcr-etcd/1.5.0
docker/32.0.0
haproxy/8.6.0
kubo/0.24.0
nfs-volume/1.1.0
node-exporter/1.1.0
os-conf/19
routing/0.176.0
syslog/11
weave-scope/0.0.17

1 deployments

cf-gitbot commented 5 years ago

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/162121160

The labels on this github issue will be updated when the story is started.

obeyler commented 5 years ago

I prepare a PR to solve it

bstick12 commented 5 years ago

This was fixed by https://github.com/cloudfoundry-incubator/kubo-deployment/pull/371