Recurrent mesage flooding master controller logs
The following message seem to be flooding the master controller logs:
Jun 15 10:27:41 oomaster105 atomic-openshift-master-api: I0615 10:27:41.378811 10445 rbac.go:116] RBAC DENY: user "system:serviceaccount:test-custom-haproxy-router:router" groups ["system:serviceaccounts" "system:serviceaccounts:test-c
ustom-haproxy-router" "system:authenticated"] cannot "list" resource "services" cluster-wide
Jun 15 10:27:41 oomaster105 atomic-openshift-master-api: I0615 10:27:41.378950 10445 rbac.go:116] RBAC DENY: user "system:serviceaccount:test-custom-haproxy-router:router" groups ["system:serviceaccounts" "system:serviceaccounts:test-c
ustom-haproxy-router" "system:authenticated"] cannot "list" resource "services" cluster-wide
Jun 15 10:27:41 oomaster105 atomic-openshift-master-api: I0615 10:27:41.378812 10445 rbac.go:116] RBAC DENY: user "system:serviceaccount:test-custom-haproxy-router:router" groups ["system:serviceaccounts" "system:serviceaccounts:test-c
ustom-haproxy-router" "system:authenticated"] cannot "list" resource "services" cluster-wide
Jun 15 10:27:41 oomaster105 atomic-openshift-master-api: I0615 10:27:41.381713 10445 rbac.go:116] RBAC DENY: user "system:serviceaccount:test-custom-haproxy-router:router" groups ["system:serviceaccounts" "system:serviceaccounts:test-c
ustom-haproxy-router" "system:authenticated"] cannot "list" resource "services" cluster-wide
Jun 15 10:27:42 oomaster105 atomic-openshift-master-api: I0615 10:27:42.380941 10445 rbac.go:116] RBAC DENY: user "system:serviceaccount:test-custom-haproxy-router:router" groups ["system:serviceaccounts" "system:serviceaccounts:test-c
ustom-haproxy-router" "system:authenticated"] cannot "list" resource "services" cluster-wide
Jun 15 10:27:42 oomaster105 atomic-openshift-master-api: I0615 10:27:42.380991 10445 rbac.go:116] RBAC DENY: user "system:serviceaccount:test-custom-haproxy-router:router" groups ["system:serviceaccounts" "system:serviceaccounts:test-c
ustom-haproxy-router" "system:authenticated"] cannot "list" resource "services" cluster-wide
Jun 15 10:27:42 oomaster105 atomic-openshift-master-api: I0615 10:27:42.381011 10445 rbac.go:116] RBAC DENY: user "system:serviceaccount:test-custom-haproxy-router:router" groups ["system:serviceaccounts" "system:serviceaccounts:test-c
ustom-haproxy-router" "system:authenticated"] cannot "list" resource "services" cluster-wide
Jun 15 10:27:42 oomaster105 atomic-openshift-master-api: I0615 10:27:42.384591 10445 rbac.go:116] RBAC DENY: user "system:serviceaccount:test-custom-haproxy-router:router" groups ["system:serviceaccounts" "system:serviceaccounts:test-c
ustom-haproxy-router" "system:authenticated"] cannot "list" resource "services" cluster-wide
This causes /var/log/messages to grow ~20Gb and exhausting the disk in the master. This seems to have appear recently, see attached prometheus graph
Edited by Alberto Rodriguez Peon