-
Bug
-
Resolution: Done-Errata
-
Critical
-
4.16
-
None
This is a clone of issue OCPBUGS-33695. The following is the description of the original issue:
—
Description of problem:
Found in QE CI case failure https://issues.redhat.com/browse/OCPQE-22045 that: 4.16 HCP oauth-openshift panics when anonymously curl'ed (this is not seen in OCP 4.16 and HCP 4.15).
Version-Release number of selected component (if applicable):
HCP 4.16 4.16.0-0.nightly-2024-05-14-165654
How reproducible:
Always
Steps to Reproduce:
1. $ export KUBECONFIG=HCP.kubeconfig $ oc get --raw=/.well-known/oauth-authorization-server | jq -r .issuer https://oauth-clusters-hypershift-ci-283235.apps.xxxx.com:443 2. Panics when anonymously curl'ed: $ curl -k "https://oauth-clusters-hypershift-ci-283235.apps.xxxx.com:443/oauth/authorize?response_type=token&client_id=openshift-challenging-client" This request caused apiserver to panic. Look in the logs for details. 3. Check logs. $ oc --kubeconfig=/home/xxia/my/env/hypershift-management/mjoseph-hyp-283235-416/kubeconfig -n clusters-hypershift-ci-283235 get pod | grep oauth-openshift oauth-openshift-55c6967667-9bxz9 2/2 Running 0 6h23m oauth-openshift-55c6967667-l55fh 2/2 Running 0 6h22m oauth-openshift-55c6967667-ntc6l 2/2 Running 0 6h23m $ for i in oauth-openshift-55c6967667-9bxz9 oauth-openshift-55c6967667-l55fh oauth-openshift-55c6967667-ntc6l; do oc logs --timestamps --kubeconfig=/home/xxia/my/env/hypershift-management/mjoseph-hyp-283235-416/kubeconfig -n clusters-hypershift-ci-283235 $i > logs/hypershift-management/mjoseph-hyp-283235-416/$i.log; done $ grep -il panic *.log oauth-openshift-55c6967667-ntc6l.log $ cat oauth-openshift-55c6967667-ntc6l.log 2024-05-15T03:43:59.769424528Z I0515 03:43:59.769303 1 secure_serving.go:57] Forcing use of http/1.1 only 2024-05-15T03:43:59.772754182Z I0515 03:43:59.772725 1 requestheader_controller.go:169] Starting RequestHeaderAuthRequestController 2024-05-15T03:43:59.772803132Z I0515 03:43:59.772782 1 configmap_cafile_content.go:202] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" 2024-05-15T03:43:59.772841518Z I0515 03:43:59.772834 1 shared_informer.go:311] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file 2024-05-15T03:43:59.772870498Z I0515 03:43:59.772787 1 shared_informer.go:311] Waiting for caches to sync for RequestHeaderAuthRequestController 2024-05-15T03:43:59.772982605Z I0515 03:43:59.772736 1 configmap_cafile_content.go:202] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" 2024-05-15T03:43:59.773009678Z I0515 03:43:59.773002 1 shared_informer.go:311] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file 2024-05-15T03:43:59.773214896Z I0515 03:43:59.773194 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/certs/serving-cert/tls.crt::/etc/kubernetes/certs/serving-cert/tls.key" 2024-05-15T03:43:59.773939655Z I0515 03:43:59.773923 1 secure_serving.go:213] Serving securely on [::]:6443 2024-05-15T03:43:59.773965659Z I0515 03:43:59.773952 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" 2024-05-15T03:43:59.873008524Z I0515 03:43:59.872970 1 shared_informer.go:318] Caches are synced for RequestHeaderAuthRequestController 2024-05-15T03:43:59.873078108Z I0515 03:43:59.873021 1 shared_informer.go:318] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file 2024-05-15T03:43:59.873120163Z I0515 03:43:59.873032 1 shared_informer.go:318] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file 2024-05-15T09:25:25.782066400Z E0515 09:25:25.782026 1 runtime.go:77] Observed a panic: runtime error: invalid memory address or nil pointer dereference 2024-05-15T09:25:25.782066400Z goroutine 8662 [running]: 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/server/filters.(*timeoutHandler).ServeHTTP.func1.1() 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/server/filters/timeout.go:110 +0x9c 2024-05-15T09:25:25.782066400Z panic({0x2115f60?, 0x3c45ec0?}) 2024-05-15T09:25:25.782066400Z runtime/panic.go:914 +0x21f 2024-05-15T09:25:25.782066400Z github.com/openshift/oauth-server/pkg/oauth/handlers.(*unionAuthenticationHandler).AuthenticationNeeded(0xc0008a90e0, {0x7f2a74268bd8?, 0xc000607760?}, {0x293c340?, 0xc0007d1ef0}, 0xc0007a3700) 2024-05-15T09:25:25.782066400Z github.com/openshift/oauth-server/pkg/oauth/handlers/default_auth_handler.go:122 +0xce1 2024-05-15T09:25:25.782066400Z github.com/openshift/oauth-server/pkg/oauth/handlers.(*authorizeAuthenticator).HandleAuthorize(0xc0008a9110, 0xc0007b06c0, 0x7?, {0x293c340, 0xc0007d1ef0}) 2024-05-15T09:25:25.782066400Z github.com/openshift/oauth-server/pkg/oauth/handlers/authenticator.go:54 +0x21d 2024-05-15T09:25:25.782066400Z github.com/openshift/oauth-server/pkg/osinserver.AuthorizeHandlers.HandleAuthorize({0xc0008a91a0?, 0x3, 0x772d66?}, 0x22ef8e0?, 0xc0007b2420?, {0x293c340, 0xc0007d1ef0}) 2024-05-15T09:25:25.782066400Z github.com/openshift/oauth-server/pkg/osinserver/interfaces.go:29 +0x95 2024-05-15T09:25:25.782066400Z github.com/openshift/oauth-server/pkg/osinserver.(*osinServer).handleAuthorize(0xc0004a54c0, {0x293c340, 0xc0007d1ef0}, 0xd?) 2024-05-15T09:25:25.782066400Z github.com/openshift/oauth-server/pkg/osinserver/osinserver.go:77 +0x25e 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0x0?, {0x293c340?, 0xc0007d1ef0?}, 0x410acc?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z net/http.(*ServeMux).ServeHTTP(0x2390e60?, {0x293c340, 0xc0007d1ef0}, 0xc0007a3700) 2024-05-15T09:25:25.782066400Z net/http/server.go:2514 +0x142 2024-05-15T09:25:25.782066400Z github.com/openshift/oauth-server/pkg/oauthserver.(*OAuthServerConfig).buildHandlerChainForOAuth.WithRestoreOAuthHeaders.func1({0x293c340, 0xc0007d1ef0}, 0xc0007a3700) 2024-05-15T09:25:25.782066400Z github.com/openshift/oauth-server/pkg/server/headers/oauthbasic.go:57 +0x1ca 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0x235fda0?, {0x293c340?, 0xc0007d1ef0?}, 0x291ef40?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.TrackCompleted.trackCompleted.func21({0x293c340?, 0xc0007d1ef0}, 0xc0007a3700) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filterlatency/filterlatency.go:110 +0x177 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0x29490d0?, {0x293c340?, 0xc0007d1ef0?}, 0x4?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/endpoints/filters.withAuthorization.func1({0x293c340, 0xc0007d1ef0}, 0xc0007a3700) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filters/authorization.go:78 +0x639 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0xc1893dc16e2d2585?, {0x293c340?, 0xc0007d1ef0?}, 0xc0007fabb8?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/endpoints/filterlatency.trackStarted.func1({0x293c340, 0xc0007d1ef0}, 0xc0007a3700) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filterlatency/filterlatency.go:84 +0x192 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0x3c5b920?, {0x293c340?, 0xc0007d1ef0?}, 0x3?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/server/filters.WithMaxInFlightLimit.func1({0x293c340, 0xc0007d1ef0}, 0xc0007a3700) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/server/filters/maxinflight.go:196 +0x262 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0x235fda0?, {0x293c340?, 0xc0007d1ef0?}, 0x291ef40?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.TrackCompleted.trackCompleted.func23({0x293c340?, 0xc0007d1ef0}, 0xc0007a3700) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filterlatency/filterlatency.go:110 +0x177 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0x7f2a74226390?, {0x293c340?, 0xc0007d1ef0?}, 0xc0007953c8?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.WithImpersonation.func4({0x293c340, 0xc0007d1ef0}, 0xc0007a3700) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filters/impersonation.go:50 +0x1c3 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0xcd1160?, {0x293c340?, 0xc0007d1ef0?}, 0x0?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/endpoints/filterlatency.trackStarted.func1({0x293c340, 0xc0007d1ef0}, 0xc0007a3700) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filterlatency/filterlatency.go:84 +0x192 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0x235fda0?, {0x293c340?, 0xc0007d1ef0?}, 0x291ef40?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.TrackCompleted.trackCompleted.func24({0x293c340?, 0xc0007d1ef0}, 0xc0007a3700) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filterlatency/filterlatency.go:110 +0x177 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0xcd1160?, {0x293c340?, 0xc0007d1ef0?}, 0x0?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/endpoints/filterlatency.trackStarted.func1({0x293c340, 0xc0007d1ef0}, 0xc0007a3700) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filterlatency/filterlatency.go:84 +0x192 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0x235fda0?, {0x293c340?, 0xc0007d1ef0?}, 0x291ef40?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.TrackCompleted.trackCompleted.func26({0x293c340?, 0xc0007d1ef0}, 0xc0007a3700) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filterlatency/filterlatency.go:110 +0x177 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0x29490d0?, {0x293c340?, 0xc0007d1ef0?}, 0x291a100?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/endpoints/filters.withAuthentication.func1({0x293c340, 0xc0007d1ef0}, 0xc0007a3700) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filters/authentication.go:120 +0x7e5 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0x29490d0?, {0x293c340?, 0xc0007d1ef0?}, 0x291ef40?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/endpoints/filterlatency.trackStarted.func1({0x293c340, 0xc0007d1ef0}, 0xc0007a3500) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filterlatency/filterlatency.go:94 +0x37a 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0xc0003e0900?, {0x293c340?, 0xc0007d1ef0?}, 0xc00061af20?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/server/filters.(*timeoutHandler).ServeHTTP.func1() 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/server/filters/timeout.go:115 +0x62 2024-05-15T09:25:25.782066400Z created by k8s.io/apiserver/pkg/server/filters.(*timeoutHandler).ServeHTTP in goroutine 8660 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/server/filters/timeout.go:101 +0x1b2 2024-05-15T09:25:25.782066400Z 2024-05-15T09:25:25.782066400Z goroutine 8660 [running]: 2024-05-15T09:25:25.782066400Z k8s.io/apimachinery/pkg/util/runtime.logPanic({0x1fb1a00?, 0xc000810260}) 2024-05-15T09:25:25.782066400Z k8s.io/apimachinery@v0.29.2/pkg/util/runtime/runtime.go:75 +0x85 2024-05-15T09:25:25.782066400Z k8s.io/apimachinery/pkg/util/runtime.HandleCrash({0xc0005aa840, 0x1, 0x1c08865?}) 2024-05-15T09:25:25.782066400Z k8s.io/apimachinery@v0.29.2/pkg/util/runtime/runtime.go:49 +0x6b 2024-05-15T09:25:25.782066400Z panic({0x1fb1a00?, 0xc000810260?}) 2024-05-15T09:25:25.782066400Z runtime/panic.go:914 +0x21f 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/server/filters.(*timeoutHandler).ServeHTTP(0xc000528cc0, {0x2944dd0, 0xc000476460}, 0xdf8475800?) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/server/filters/timeout.go:121 +0x35c 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.WithRequestDeadline.withRequestDeadline.func27({0x2944dd0, 0xc000476460}, 0xc0007a3300) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filters/request_deadline.go:100 +0x237 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0x29490d0?, {0x2944dd0?, 0xc000476460?}, 0x2459ac0?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.WithWaitGroup.withWaitGroup.func28({0x2944dd0, 0xc000476460}, 0xc0004764b0?) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/server/filters/waitgroup.go:86 +0x18c 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0xc0007a3200?, {0x2944dd0?, 0xc000476460?}, 0xc0004764b0?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.WithWarningRecorder.func13({0x2944dd0?, 0xc000476460}, 0xc000476410?) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filters/warning.go:35 +0xc6 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0x2390e60?, {0x2944dd0?, 0xc000476460?}, 0xd?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.WithCacheControl.func14({0x2944dd0, 0xc000476460}, 0x0?) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filters/cachecontrol.go:31 +0xa7 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0xc0002a0fa0?, {0x2944dd0?, 0xc000476460?}, 0xc0005aad90?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.WithHTTPLogging.WithLogging.withLogging.func34({0x2944dd0, 0xc000476460}, 0x1?) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/server/httplog/httplog.go:111 +0x95 2024-05-15T09:25:25.782066400Z net/http.HandlerFunc.ServeHTTP(0xc0007b0360?, {0x2944dd0?, 0xc000476460?}, 0x0?) 2024-05-15T09:25:25.782066400Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782066400Z k8s.io/apiserver/pkg/endpoints/filters.WithTracing.func1({0x2944dd0?, 0xc000476460?}, 0xc0007a3200?) 2024-05-15T09:25:25.782066400Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filters/traces.go:42 +0x222 2024-05-15T09:25:25.782129547Z net/http.HandlerFunc.ServeHTTP(0x29490d0?, {0x2944dd0?, 0xc000476460?}, 0x291ef40?) 2024-05-15T09:25:25.782129547Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782129547Z go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp.(*middleware).serveHTTP(0xc000289b80, {0x293c340?, 0xc0007d1bf0}, 0xc0007a3100, {0x2923a40, 0xc000528d68}) 2024-05-15T09:25:25.782129547Z go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.44.0/handler.go:217 +0x1202 2024-05-15T09:25:25.782129547Z go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp.NewMiddleware.func1.1({0x293c340?, 0xc0007d1bf0?}, 0xc0001fec40?) 2024-05-15T09:25:25.782129547Z go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.44.0/handler.go:81 +0x35 2024-05-15T09:25:25.782129547Z net/http.HandlerFunc.ServeHTTP(0x2948fb0?, {0x293c340?, 0xc0007d1bf0?}, 0x100?) 2024-05-15T09:25:25.782129547Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782129547Z k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.WithLatencyTrackers.func16({0x29377e0?, 0xc0001fec40}, 0xc000289e40?) 2024-05-15T09:25:25.782129547Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filters/webhook_duration.go:57 +0x14a 2024-05-15T09:25:25.782129547Z net/http.HandlerFunc.ServeHTTP(0xc0007a2f00?, {0x29377e0?, 0xc0001fec40?}, 0x7f2abb853108?) 2024-05-15T09:25:25.782129547Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782129547Z k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.WithRequestInfo.func17({0x29377e0, 0xc0001fec40}, 0x3d02360?) 2024-05-15T09:25:25.782129547Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filters/requestinfo.go:39 +0x118 2024-05-15T09:25:25.782129547Z net/http.HandlerFunc.ServeHTTP(0xc0007a2e00?, {0x29377e0?, 0xc0001fec40?}, 0x12a1dc02246f?) 2024-05-15T09:25:25.782129547Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782129547Z k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.WithRequestReceivedTimestamp.withRequestReceivedTimestampWithClock.func31({0x29377e0, 0xc0001fec40}, 0xc000508b58?) 2024-05-15T09:25:25.782129547Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filters/request_received_time.go:38 +0xaf 2024-05-15T09:25:25.782129547Z net/http.HandlerFunc.ServeHTTP(0x3?, {0x29377e0?, 0xc0001fec40?}, 0xc0005ab818?) 2024-05-15T09:25:25.782129547Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782129547Z k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.WithMuxAndDiscoveryComplete.func18({0x29377e0?, 0xc0001fec40?}, 0xc0007a2e00?) 2024-05-15T09:25:25.782129547Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filters/mux_discovery_complete.go:52 +0xd5 2024-05-15T09:25:25.782129547Z net/http.HandlerFunc.ServeHTTP(0xc000081800?, {0x29377e0?, 0xc0001fec40?}, 0xc0005ab888?) 2024-05-15T09:25:25.782129547Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782129547Z k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.WithPanicRecovery.withPanicRecovery.func32({0x29377e0?, 0xc0001fec40?}, 0xc0007d18f0?) 2024-05-15T09:25:25.782129547Z k8s.io/apiserver@v0.29.2/pkg/server/filters/wrap.go:74 +0xa6 2024-05-15T09:25:25.782129547Z net/http.HandlerFunc.ServeHTTP(0x29490d0?, {0x29377e0?, 0xc0001fec40?}, 0xc00065eea0?) 2024-05-15T09:25:25.782129547Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782129547Z k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.WithAuditInit.withAuditInit.func33({0x29377e0, 0xc0001fec40}, 0xc00040c580?) 2024-05-15T09:25:25.782129547Z k8s.io/apiserver@v0.29.2/pkg/endpoints/filters/audit_init.go:63 +0x12c 2024-05-15T09:25:25.782129547Z net/http.HandlerFunc.ServeHTTP(0x2390e60?, {0x29377e0?, 0xc0001fec40?}, 0xd?) 2024-05-15T09:25:25.782129547Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782129547Z github.com/openshift/oauth-server/pkg/oauthserver.(*OAuthServerConfig).buildHandlerChainForOAuth.WithPreserveOAuthHeaders.func2({0x29377e0, 0xc0001fec40}, 0xc0007a2d00) 2024-05-15T09:25:25.782129547Z github.com/openshift/oauth-server/pkg/server/headers/oauthbasic.go:42 +0x16e 2024-05-15T09:25:25.782129547Z net/http.HandlerFunc.ServeHTTP(0xc0005aba80?, {0x29377e0?, 0xc0001fec40?}, 0x24c95d5?) 2024-05-15T09:25:25.782129547Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782129547Z github.com/openshift/oauth-server/pkg/oauthserver.(*OAuthServerConfig).buildHandlerChainForOAuth.WithStandardHeaders.func3({0x29377e0, 0xc0001fec40}, 0xc0005abb18?) 2024-05-15T09:25:25.782129547Z github.com/openshift/oauth-server/pkg/server/headers/headers.go:30 +0xde 2024-05-15T09:25:25.782129547Z net/http.HandlerFunc.ServeHTTP(0xc0005abb68?, {0x29377e0?, 0xc0001fec40?}, 0xc00040c580?) 2024-05-15T09:25:25.782129547Z net/http/server.go:2136 +0x29 2024-05-15T09:25:25.782129547Z k8s.io/apiserver/pkg/server.(*APIServerHandler).ServeHTTP(0x3d33480?, {0x29377e0?, 0xc0001fec40?}, 0xc0005abb50?) 2024-05-15T09:25:25.782129547Z k8s.io/apiserver@v0.29.2/pkg/server/handler.go:189 +0x25 2024-05-15T09:25:25.782129547Z net/http.serverHandler.ServeHTTP({0xc0007d1830?}, {0x29377e0?, 0xc0001fec40?}, 0x6?) 2024-05-15T09:25:25.782129547Z net/http/server.go:2938 +0x8e 2024-05-15T09:25:25.782129547Z net/http.(*conn).serve(0xc0007b02d0, {0x29490d0, 0xc000585e90}) 2024-05-15T09:25:25.782129547Z net/http/server.go:2009 +0x5f4 2024-05-15T09:25:25.782129547Z created by net/http.(*Server).Serve in goroutine 249 2024-05-15T09:25:25.782129547Z net/http/server.go:3086 +0x5cb 2024-05-15T09:25:25.782129547Z http: superfluous response.WriteHeader call from k8s.io/apiserver/pkg/server.DefaultBuildHandlerChain.WithPanicRecovery.func19 (wrap.go:57) 2024-05-15T09:25:25.782129547Z E0515 09:25:25.782066 1 wrap.go:58] "apiserver panic'd" method="GET" URI="/oauth/authorize?response_type=token&client_id=openshift-challenging-client" auditID="ac4795ff-5935-4ff5-bc9e-d84018f29469"
Actual results:
Panics when anonymously curl'ed
Expected results:
No panic
- clones
-
OCPBUGS-33695 [4.17] HCP oauth-openshift panics when anonymously curl'ed (not seen in OCP)
- Verified
- is blocked by
-
OCPBUGS-33695 [4.17] HCP oauth-openshift panics when anonymously curl'ed (not seen in OCP)
- Verified
- links to
-
RHEA-2024:0041 OpenShift Container Platform 4.16.z bug fix update