Comments (7)
Can you share more of that screenshot? The logs should be there, including the Vault startup logs. Can you make sure you're looking at the correct container? What does kubectl get logs
show for that container?
from vault-on-google-kubernetes-engine.
Thanks for the quick reply @sethvargo .
See the full screenshot below (hiding few fields for security reasons):
The logs for the vault-init
containers are being saved to Stackdriver, but for the vault
container it does not seem they are. See screenshot below fir the vault-init
container in the pod that is working on Stackdriver:
If I run kubectl logs vault-0 -f vault
I'm able to see all the audit logs.
Thanks for the help!
from vault-on-google-kubernetes-engine.
Hmm - that's really weird, since they are deployed the same. Are you able to reproduce it on a new cluster?
from vault-on-google-kubernetes-engine.
I'd have to try creating a new cluster and building Vault again.
I'll post the results once I am able to replicate the environment in a new cluster.
Let me know if you find anything meanwhile.
Thank you.
from vault-on-google-kubernetes-engine.
I'm not able to reproduce it on my end. If you're familiar with Terraform, github.com/sethvargo/vault-on-gke is a one-command version of this same thing.
from vault-on-google-kubernetes-engine.
Thank you @sethvargo,
I'll try to use the Terrraform script for my testing.
For now I'll go ahead and close this ticket.
Sam.
from vault-on-google-kubernetes-engine.
I'm seeing issues with logging with the Terraform script. Absolutely 0 Kubernetes logs in Stackdriver. But viewing kubectl logs for the Vault container shows the audit logs properly.
For a cluster created "manually" through the GCloud UI, you can see the K8S logs:
For the Vault cluster created through the Terraform, nothing.
from vault-on-google-kubernetes-engine.
Related Issues (15)
- Vault is sealed. Unsealing... storage: object doesn't exist HOT 16
- [QUESTION] Upgrade to vault 1.0 HOT 1
- [Self-solved issue] Pulling images from gcr.io HOT 1
- Error initializing core: Failed to lock memory: cannot allocate memory
- Tutorial doesn't convert the string id in ZSH
- CrashLoopBackOff When Deploying Vault HOT 2
- storage migration check error
- Vault PODS are in pending state for ever HOT 1
- "https://127.0.0.1:8200/v1/sys/health: x509: certificate signed by unknown authority" during pod startup
- Support for a version that just uses a tainted node pool HOT 2
- maybe add reminder to update your vault client to 0.10 HOT 1
- vault status fails HOT 4
- Vault pod can't initialize HOT 2
- [Question] Should the ca.pem be persisted for further access in KMS? HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from vault-on-google-kubernetes-engine.