Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: 1.14.0, 1.13.2
Affects Version/s: None
Component/s: None
Labels:

Blocked:
False
Blocked Reason:
None
Ready:
False
Release Note Text:

Hide
Before this update, when a ROSA cluster with GitOps Operator installed and having an ArgoCD instance with dex based SSO configuration, when the cluster resumes back from an hibernation, it was not possible to login to the ArgoCD web console UI and the login screen would report an error about invalid redirect URI configured in the Dex configuration. This update fixes the issue by having the right dex redirect url updated in the ArgoCD configuration every time the ArgoCD server route is updated.

Show
Before this update, when a ROSA cluster with GitOps Operator installed and having an ArgoCD instance with dex based SSO configuration, when the cluster resumes back from an hibernation, it was not possible to login to the ArgoCD web console UI and the login screen would report an error about invalid redirect URI configured in the Dex configuration. This update fixes the issue by having the right dex redirect url updated in the ArgoCD configuration every time the ArgoCD server route is updated.
Git Pull Request:
https://github.com/argoproj-labs/argocd-operator/pull/1482
Intelligence Requested:
Market:

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

Description of problem:

    After a ROSA clsuter comes out of hibernate we are unable to login to our Gitops instances if they are using Openshift as the backing SSO

Version-Release number of selected component (if applicable):

    4.14+

How reproducible:

Hibernate a cluster with gitops and attempt to login to the gitops instance on wake up

Steps to Reproduce:

    1.
    2.
    3.

Actual results:

Failed to query provider "https://openshift-gitops-server-openshift-gitops.apps.rhsaia.vg6c.p1.openshiftapps.com/api/dex": oidc: issuer did not match the issuer returned by provider, expected "https://openshift-gitops-server-openshift-gitops.apps.rhsaia.vg6c.p1.openshiftapps.com/api/dex" got "https://openshift-gitops-server/api/dex"

So somehow the clusters domain information is not being populated

Expected results:

Successful Login

Additional info:

  Did some digging and the issue is the `argocd-cm` is not be populated correctly with the url. But it can be fixed by restarting the `openshift-gitops-operator-controller-manager` pod in the `openshift-gitops-operator` namespace then the `openshift-gitops-dex-server` and `openshift-gitops-server` pods in the `openshift-gitops` namespace