-
Bug
-
Resolution: Unresolved
-
Normal
-
None
-
openshift-4.19, openshift-4.20, openshift-4.21
-
None
-
False
-
-
False
-
0
-
-
-
Moderate
After converting an OpenShift cluster to use BYO / External Authentication, the native OpenShift OAuth server and its related OAuth endpoints are no longer present.
When Loki (via the OpenShift Loki Operator) attempts to auto-discover OpenShift OAuth endpoints, it encounters errors because those endpoints no longer exist in an external-authenticated environment.
This results in repeated errors such as:
level=error name=lokistack-gateway ts=2025-11-08T00:42:05.931886411Z caller=openshift.go:149 tenant=network msg="unable to auto discover OpenShift OAuth endpoints: got 404 404 page not found"
Expected Result
- Loki should support external identity providers without requiring OpenShift OAuth.
- OAuth autodiscovery should be disabled or handled gracefully in external-auth environments.
- No repeated error logs should occur when OAuth is intentionally absent.