{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin-aggregated-logging/issues/535","repository_url":"https://api.github.com/repos/openshift/origin-aggregated-logging","labels_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/issues/535/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/issues/535/comments","events_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/issues/535/events","html_url":"https://github.com/openshift/origin-aggregated-logging/pull/535","id":244078503,"number":535,"title":"Add Prometheus Elasticsearch plugin","user":{"login":"lukas-vlcek","id":205174,"avatar_url":"https://avatars2.githubusercontent.com/u/205174?v=4","gravatar_id":"","url":"https://api.github.com/users/lukas-vlcek","html_url":"https://github.com/lukas-vlcek","followers_url":"https://api.github.com/users/lukas-vlcek/followers","following_url":"https://api.github.com/users/lukas-vlcek/following{/other_user}","gists_url":"https://api.github.com/users/lukas-vlcek/gists{/gist_id}","starred_url":"https://api.github.com/users/lukas-vlcek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lukas-vlcek/subscriptions","organizations_url":"https://api.github.com/users/lukas-vlcek/orgs","repos_url":"https://api.github.com/users/lukas-vlcek/repos","events_url":"https://api.github.com/users/lukas-vlcek/events{/privacy}","received_events_url":"https://api.github.com/users/lukas-vlcek/received_events","type":"User","site_admin":false},"labels":[{"id":390712798,"url":"https://api.github.com/repos/openshift/origin-aggregated-logging/labels/component/elasticsearch","name":"component/elasticsearch","color":"0052cc","default":false},{"id":413936600,"url":"https://api.github.com/repos/openshift/origin-aggregated-logging/labels/DO%20NOT%20MERGE%20!!","name":"DO NOT MERGE !!","color":"000000","default":false},{"id":260296580,"url":"https://api.github.com/repos/openshift/origin-aggregated-logging/labels/kind/enhancement","name":"kind/enhancement","color":"84b6eb","default":false},{"id":636968138,"url":"https://api.github.com/repos/openshift/origin-aggregated-logging/labels/release/3.7","name":"release/3.7","color":"c5def5","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":20,"created_at":"2017-07-19T15:20:07Z","updated_at":"2017-09-12T20:21:28Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/openshift/origin-aggregated-logging/pulls/535","html_url":"https://github.com/openshift/origin-aggregated-logging/pull/535","diff_url":"https://github.com/openshift/origin-aggregated-logging/pull/535.diff","patch_url":"https://github.com/openshift/origin-aggregated-logging/pull/535.patch"},"body":"Initial work to add Elasticsearch Prometheus plugin.\r\n\r\nThis needs to be followed by:\r\n- ansible work in [openshift/openshift-ansible](https://github.com/openshift/openshift-ansible)\r\n- discussion: Are there needed and changes to SearchGuard configuration (i.e. how do we want to control access to the new `_prometheus/metrics` endpoint)"},"comment":{"url":"https://api.github.com/repos/openshift/origin-aggregated-logging/issues/comments/328973064","html_url":"https://github.com/openshift/origin-aggregated-logging/pull/535#issuecomment-328973064","issue_url":"https://api.github.com/repos/openshift/origin-aggregated-logging/issues/535","id":328973064,"user":{"login":"richm","id":23066,"avatar_url":"https://avatars2.githubusercontent.com/u/23066?v=4","gravatar_id":"","url":"https://api.github.com/users/richm","html_url":"https://github.com/richm","followers_url":"https://api.github.com/users/richm/followers","following_url":"https://api.github.com/users/richm/following{/other_user}","gists_url":"https://api.github.com/users/richm/gists{/gist_id}","starred_url":"https://api.github.com/users/richm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/richm/subscriptions","organizations_url":"https://api.github.com/users/richm/orgs","repos_url":"https://api.github.com/users/richm/repos","events_url":"https://api.github.com/users/richm/events{/privacy}","received_events_url":"https://api.github.com/users/richm/received_events","type":"User","site_admin":false},"created_at":"2017-09-12T20:21:28Z","updated_at":"2017-09-12T20:21:28Z","author_association":"CONTRIBUTOR","body":"@lukas-vlcek here is the failure:\r\n```\r\n[INFO] See if user loguser can read /project.multi-tenancy-1.*\r\nRunning test/multi_tenancy.sh:93: executing 'test 0 = 1' expecting success...\r\nFAILURE after 0.012s: test/multi_tenancy.sh:93: executing 'test 0 = 1' expecting success: the command returned the wrong error code\r\nThere was no output from the command.\r\nThere was no error output from the command.\r\n[ERROR] loguser cannot access project.multi-tenancy-1.* indices\r\n{\r\n    \"error\": {\r\n        \"reason\": \"no permissions for indices:data/read/search\",\r\n        \"root_cause\": [\r\n            {\r\n                \"reason\": \"no permissions for indices:data/read/search\",\r\n                \"type\": \"security_exception\"\r\n            }\r\n        ],\r\n        \"type\": \"security_exception\"\r\n    },\r\n    \"status\": 403\r\n}\r\n```\r\nLooks like some SearchGuard permission may have changed to prevent an ordinary user from viewing `project.name.*` indices."}}
{"actor":{"display_login":"richm"}}