Uploaded image for project: 'Observability and Data Analysis Program'
  1. Observability and Data Analysis Program
  2. OBSDA-1270

Support for OpenShift Loki Operator and OCP BYO / External Authentication (OAuth Removal Handling)

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • openshift-4.19, openshift-4.20, openshift-4.21
    • Log API, Log Storage
    • None
    • False
    • Hide

      None

      Show
      None
    • False
    • 0
    • Moderate

      After converting an OpenShift cluster to use BYO / External Authentication, the native OpenShift OAuth server and its related OAuth endpoints are no longer present.

      When Loki (via the OpenShift Loki Operator) attempts to auto-discover OpenShift OAuth endpoints, it encounters errors because those endpoints no longer exist in an external-authenticated environment.

      This results in repeated errors such as:

      level=error name=lokistack-gateway ts=2025-11-08T00:42:05.931886411Z caller=openshift.go:149 tenant=network msg="unable to auto discover OpenShift OAuth endpoints: got 404 404 page not found"

      Expected Result

      • Loki should support external identity providers without requiring OpenShift OAuth.
      • OAuth autodiscovery should be disabled or handled gracefully in external-auth environments.
      • No repeated error logs should occur when OAuth is intentionally absent.

              Unassigned Unassigned
              rhn-support-amanverm Aman Dev Verma
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: