Skip to content
This repository has been archived by the owner on May 17, 2024. It is now read-only.

kubectl hangs on some commands when audit logs are enabled #196

Open
Smana opened this issue May 7, 2021 · 5 comments
Open

kubectl hangs on some commands when audit logs are enabled #196

Smana opened this issue May 7, 2021 · 5 comments

Comments

@Smana
Copy link

Smana commented May 7, 2021

Hey,

I just noticed a thing this morning: When I try to delete something it hangs indefinitely. I have cancel the command :/
Actually for the moment I noticed that only for pods and namespaces, it works for deployments. Maybe they have different finalilzers.

I've seen this issue #135 and I checked that I'm using the latest version and this is the case.

I even tried to put a negative value --flush-interval=-1s but that didn't help.

Is this a known behavior ? Because I also noticed this limitation : #191

Thank you,

@Smana
Copy link
Author

Smana commented May 7, 2021

Same issue with kubectl rollout status ...

@Smana
Copy link
Author

Smana commented May 7, 2021

same for ingresses deletion

@Smana
Copy link
Author

Smana commented May 10, 2021

Well I tested several values and nothing worked so far.
Here are the info about the environment:

kubectl: tested with 1.17.17 and 1.20.4
kubernetes: 1.17.17
image: quay.io/jetstack/kube-oidc-proxy:v0.3.0
kube-oidc-proxy flags:

        - --secure-port=4443                                                                                                                                                                                                                                                                                                  
        - --tls-cert-file=/etc/oidc/tls/crt.pem                                                                                                                                                                                                                                                                               
        - --tls-private-key-file=/etc/oidc/tls/key.pem                                                                                                                                                                                                                                                                        
        - --oidc-client-id=$(OIDC_CLIENT_ID)                                                                                                                                                                                                                                                                                  
        - --oidc-issuer-url=$(OIDC_ISSUER_URL)
        - --oidc-username-claim=$(OIDC_USERNAME_CLAIM)
        - --oidc-groups-claim=$(OIDC_GROUPS_CLAIM)
        - --oidc-signing-algs=$(OIDC_SIGNING_ALGS)
        - --token-passthrough
        - --audit-log-path=-
        - --audit-policy-file=/etc/oidc/audit/audit-policy.yaml
        - --flush-interval=1s

Let me know if you need further details

@Smana
Copy link
Author

Smana commented May 10, 2021

Still digging because I face the issue when I enable the audit logs.

        - --audit-log-path=-
        - --audit-policy-file=/etc/oidc/audit/audit-policy.yaml

@Smana
Copy link
Author

Smana commented May 10, 2021

ok seems that this occurs only when enabling the audit logs.
I have to disable the audit logs while trying to find out what is the root cause.

@Smana Smana changed the title kubectl hangs on delete commands kubectl hangs on some commands when audit logs are enabled May 11, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant