-
Bug
-
Resolution: Won't Do
-
Major
-
None
-
None
-
False
-
None
-
False
-
NEW
-
NEW
-
-
Description of problem:
Unable to add redirecturi annotation for kibana serviceaccount
Version-Release number of selected component (if applicable):
4.14
How reproducible:
100%
The customer has installed the OpenShift Logging operator and configured it correctly. The customer has the requirement to access the kibana route over a different hostname. For this, they created a new route `custom-kibana` with the new hostname. While accsing the kibana using the new route, they got the below error: {"error":"invalid_request","error_description":"The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed.","state":"57fe2a5b87169c869679f2b953d3d1b7:/"} Tried adding the redirectURI annotation on kibana serviceacount to allow oauth access by following the doc[1]. But the annotation is getting overriden. [1] https://docs.openshift.com/container-platform/4.13/authentication/using-service-accounts-as-oauth-client.html
Actual results:
redirectURI annotation getting removed, which making it impossible to access Kibana UI over a different hostname. The same redirectURI annotation works fine with prometheus-k8s serviceaccount in openshift-monitoring project which helps accessing prometheus UI on a different hostname.
Expected results:
redirectURI annotation should not get overriden as the customer would like to access the kibana UI over a different hostname.
Additional info: