Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-12274

There are some errors in oauth-proxy in grafana pod

XMLWordPrintable

    • GH Train-16 1
    • Critical
    • No

      Description of problem:

      2024/06/19
       03:37:44 provider.go:368: unable to retrieve authentication information
       for tokens: tokenreviews.authentication.k8s.io is forbidden: User 
      "system:serviceaccount:multicluster-global-hub:multicluster-global-hub-grafana"
       cannot create resource "tokenreviews" in API group 
      "authentication.k8s.io" at the cluster scope2024/06/19
       03:37:46 provider.go:368: unable to retrieve authentication information
       for tokens: tokenreviews.authentication.k8s.io is forbidden: User 
      "system:serviceaccount:multicluster-global-hub:multicluster-global-hub-grafana"
       cannot create resource "tokenreviews" in API group 
      "authentication.k8s.io" at the cluster scope2024/06/19
       03:37:48 provider.go:368: unable to retrieve authentication information
       for tokens: tokenreviews.authentication.k8s.io is forbidden: User 
      "system:serviceaccount:multicluster-global-hub:multicluster-global-hub-grafana"
       cannot create resource "tokenreviews" in API group 
      "authentication.k8s.io" at the cluster scope2024/06/19
       03:37:48 provider.go:368: unable to retrieve authentication information
       for tokens: tokenreviews.authentication.k8s.io is forbidden: User 
      "system:serviceaccount:multicluster-global-hub:multicluster-global-hub-grafana"
       cannot create resource "tokenreviews" in API group 
      "authentication.k8s.io" at the cluster scope2024/06/19
       03:37:48 provider.go:393: unable to retrieve authorization information 
      for users: subjectaccessreviews.authorization.k8s.io is forbidden: User 
      "system:serviceaccount:multicluster-global-hub:multicluster-global-hub-grafana"
       cannot create resource "subjectaccessreviews" in API group 
      "authorization.k8s.io" at the cluster scope2024/06/19
       03:37:50 provider.go:393: unable to retrieve authorization information 
      for users: subjectaccessreviews.authorization.k8s.io is forbidden: User 
      "system:serviceaccount:multicluster-global-hub:multicluster-global-hub-grafana"
       cannot create resource "subjectaccessreviews" in API group 
      "authorization.k8s.io" at the cluster scope2024/06/19
       03:37:52 provider.go:393: unable to retrieve authorization information 
      for users: subjectaccessreviews.authorization.k8s.io is forbidden: User 
      "system:serviceaccount:multicluster-global-hub:multicluster-global-hub-grafana"
       cannot create resource "subjectaccessreviews" in API group 
      "authorization.k8s.io" at the cluster scope2024/06/19
       03:37:54 provider.go:393: unable to retrieve authorization information 
      for users: subjectaccessreviews.authorization.k8s.io is forbidden: User 
      "system:serviceaccount:multicluster-global-hub:multicluster-global-hub-grafana"
       cannot create resource "subjectaccessreviews" in API group 
      "authorization.k8s.io" at the cluster scope2024/06/19
       03:37:56 provider.go:393: unable to retrieve authorization information 
      for users: subjectaccessreviews.authorization.k8s.io is forbidden: User 
      "system:serviceaccount:multicluster-global-hub:multicluster-global-hub-grafana"
       cannot create resource "subjectaccessreviews" in API group 
      "authorization.k8s.io" at the cluster scope2024/06/19
       03:37:58 provider.go:393: unable to retrieve authorization information 
      for users: subjectaccessreviews.authorization.k8s.io is forbidden: User 
      "system:serviceaccount:multicluster-global-hub:multicluster-global-hub-grafana"
       cannot create resource "subjectaccessreviews" in API group 
      "authorization.k8s.io" at the cluster scope2024/06/19
       03:37:58 provider.go:393: unable to retrieve authorization information 
      for users: subjectaccessreviews.authorization.k8s.io is forbidden: User 
      "system:serviceaccount:multicluster-global-hub:multicluster-global-hub-grafana"
       cannot create resource "subjectaccessreviews" in API group 
      "authorization.k8s.io" at the cluster scope 

      Version-Release number of selected component (if applicable):

      How reproducible:

      Steps to Reproduce:

      1. install global hub
      2. check the grafana-proxy log of grafana pod
      3. ...

      Actual results:

      Expected results:

      Additional info:

            clyang82 Chunlin Yang
            clyang82 Chunlin Yang
            Hui Chen Hui Chen
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: