Stacklight v2.0, glusterfs brick logs cannot be read by Heka

[Vladislav Kuspits]

Glusterfs brick logs cannot be read by Heka, because hekas user don't have permissions to this logs.

GlusterFS briks log permissions:
/
-rw-------+ 1 root root 17167 Nov 15 10:13 srv-glusterfs-aptly.log
-rw-------+ 1 root root 14355 Nov 15 11:21 srv-glusterfs-gerrit.log
-rw-------+ 1 root root 12260 Nov 15 10:13 srv-glusterfs-glance.log
-rw-------+ 1 root root 12773 Nov 15 10:13 srv-glusterfs-jenkins.log
-rw-------+ 1 root root 12515 Nov 15 10:13 srv-glusterfs-keystone-credential-keys.log
-rw-------+ 1 root root 12590 Nov 15 10:13 srv-glusterfs-keystone-keys.log
-rw-------+ 1 root root 26501 Nov 15 11:21 srv-glusterfs-mysql.log
-rw-------+ 1 root root 17692 Nov 15 11:21 srv-glusterfs-openldap.log
-rw-------+ 1 root root 20317 Nov 15 10:13 srv-glusterfs-registry.log
-rw-------+ 1 root root 14725 Nov 15 10:13 srv-glusterfs-salt_pki.log
/

Heka's systemd unit:

[Unit]
Description=heka log_collector - data collector and processor daemon
After=network.target auditd.service
ConditionPathExists=!/etc/log_collector_not_to_be_run

[Service]
EnvironmentFile=-/etc/default/log_collector
User=heka
Group=heka
LimitNOFILE=102400
ExecStart=/usr/bin/hekad -config=/etc/log_collector
# NOT SURE HEKA doesn't support reloading by signal
# ExecReload=/bin/kill -HUP $MAINPID
KillMode=process
Restart=on-failure
StandardError=inherit
[Install]
WantedBy=multi-user.target

Steps to reproduce: Use mcp 1.1 with StackLight v2.0 + OSS. Open Kibana dashboard.

Expected results: No errors about permissions to Glusterfs brick logs.

Actual result:
system.syslog hekad DEBUG 2017/11/16 10:20:48 Input 'glusterfsd_input' error: open /var/log/glusterfs/bricks/*: permission denied

Description of the environment:

MCP 1.1 with StackLight+OSS
OS: Ubuntu 16.04.5 LTS
3 KVM nodes
3 Computes
Network model: Contrail.