ci: detect poller logs errors

docs/prepare-cdot-clusters.md

@@ -127,29 +127,64 @@ security login role create -role harvest2-role -access readonly -cmddirname "vse
 Use this for password authentication
 
 ```bash
+# If the harvest2 user does not exist, you will be prompted to enter a password
 security login create -user-or-group-name harvest2 -application ontapi -role harvest2-role -authentication-method password
-security login create -user-or-group-name harvest2 -application http -role harvest2-role -authentication-method password   
 ```
 
 Or this for certificate authentication
 
 ```bash
 security login create -user-or-group-name harvest2 -application ontapi -role harvest2-role -authentication-method cert
-security login create -user-or-group-name harvest2 -application http -role harvest2-role -authentication-method cert 
 ```
 
-Check that the harvest role has web access for ONTAPI and REST.
+#### Create REST role
+
+```bash
+security login rest-role create -role harvest2-rest-role -access readonly -api /api
+```
+
+#### Associate REST role with harvest user
+
+Using password authentication
+
+```bash
+security login create -user-or-group-name harvest2 -application http -role harvest2-rest-role -authentication-method password
+```
+
+??? failure "If you get an error `command failed: duplicate entry` when running the previous command"
+    Remove the previous entry and recreate like so:
+
+    ```bash
+    security login delete -user-or-group-name harvest2 -application http -authentication-method *
+    security login create -user-or-group-name harvest2 -application http -role harvest2-rest-role -authentication-method password
+    ```
+
+Using certificate authentication
+
+```bash
+security login create -user-or-group-name harvest2 -application http -role harvest2-rest-role -authentication-method cert
+```
+
+??? failure "If you get an error `command failed: duplicate entry` when running the previous command"
+    Remove the previous entry and recreate like so:
+
+    ```bash
+    security login delete -user-or-group-name harvest2 -application http -authentication-method *
+    security login create -user-or-group-name harvest2 -application http -role harvest2-rest-role -authentication-method cert
+    ```
+
+#### Verify that the harvest role has web access
 ```bash
 vserver services web access show -role harvest2-role -name ontapi
-vserver services web access show -role harvest2-role -name rest
-vserver services web access show -role harvest2-role -name docs-api
+vserver services web access show -role harvest2-rest-role -name rest
+vserver services web access show -role harvest2-rest-role -name docs-api
 ```
 
-If either entry is missing, enable access by running the following. Replace `$ADMIN_VSERVER` with your SVM admin name.
+If any entries are missing, enable access by running the following. Replace `$ADMIN_VSERVER` with your SVM admin name.
 ```bash
 vserver services web access create -vserver $ADMIN_VSERVER -name ontapi -role harvest2-role
-vserver services web access create -vserver $ADMIN_VSERVER -name rest -role harvest2-role
-vserver services web access create -vserver $ADMIN_VSERVER -name docs-api -role harvest2-role
+vserver services web access create -vserver $ADMIN_VSERVER -name rest -role harvest2-rest-role
+vserver services web access create -vserver $ADMIN_VSERVER -name docs-api -role harvest2-rest-role
 ```
 
 #### 7-Mode CLI

integration/test/copy_logs_test.go

@@ -43,7 +43,7 @@ func TestNoErrors(t *testing.T) {
 }
 
 func checkLogs(t *testing.T, container docker.Container) {
-	cli := fmt.Sprintf(`docker logs %s 2>&1 | grep -v '%s' | grep -E "ERR"`, container.ID, ignoreList())
+	cli := fmt.Sprintf(`docker logs %s 2>&1 | grep -Ev '%s' | grep -E "ERR"`, container.ID, ignoreList())
 	command := exec.Command("bash", "-c", cli)
 	output, err := command.CombinedOutput()
 	// The grep checks for matching lines.
@@ -70,8 +70,7 @@ func checkLogs(t *testing.T, container docker.Container) {
 	}
 }
 
-// ignoreList returns a list of errors that should be ignored
-// Only use double quotes (") to group messages, not single quotes
+// ignoreList returns a list of regex patterns that will be ignored
 func ignoreList() any {
-	return `RPC: Remote system error|"connection error"`
+	return `RPC: Remote system error|connection error`
 }