Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-5667

Unable to add redirecturi annotation for kibana serviceaccount

XMLWordPrintable

    • False
    • None
    • False
    • NEW
    • NEW

      Description of problem:

      Unable to add redirecturi annotation for kibana serviceaccount

      Version-Release number of selected component (if applicable):

      4.14

      How reproducible:

      100%

       

      The customer has installed the OpenShift Logging operator and configured it correctly. The customer has the requirement to access the kibana route over a different hostname.
      
      For this, they created a new route `custom-kibana` with the new hostname. 
      
      While accsing the kibana using the new route, they got the below error:
      
      {"error":"invalid_request","error_description":"The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.","state":"57fe2a5b87169c869679f2b953d3d1b7:/"}
      
      Tried adding the redirectURI annotation on kibana serviceacount to allow oauth access by following the doc[1].
      
      But the annotation is getting overriden. 
      
      [1] https://docs.openshift.com/container-platform/4.13/authentication/using-service-accounts-as-oauth-client.html
      
      

       

      Actual results:

      redirectURI annotation getting removed, which making it impossible to access Kibana UI over a different hostname. The same redirectURI annotation works fine with prometheus-k8s serviceaccount in openshift-monitoring project which helps accessing prometheus UI on a different hostname.

      Expected results:

      redirectURI annotation should not get overriden as the customer would like to access the kibana UI over a different hostname.

      Additional info:

       

              Unassigned Unassigned
              rhn-support-dpateriy Divyam Pateriya
              Anping Li Anping Li
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: