Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-38349

OpenID IDP endpoint verification fails when hostname can only be resolved by data plane

XMLWordPrintable

    • Moderate
    • None
    • False
    • Hide

      None

      Show
      None
    • Hide
      * Previously, when a hosted cluster proxy used an IDP that had an HTTP or HTTPS endpoint, the hostname of the IDP was not resolved before it was sent through the proxy. As a consequence, hostnames that could be resolved only by the data plane failed to be resolved for IDPs. With this fix, the DNS lookup is completed before IDP traffic is sent through the Konnectivity channel. As a result, the control plane Operator can verify IDPs with hostnames that can be resolved only by the data plane. (link:https://issues.redhat.com/browse/OCPBUGS-38349[*OCPBUGS-38349*])
      Show
      * Previously, when a hosted cluster proxy used an IDP that had an HTTP or HTTPS endpoint, the hostname of the IDP was not resolved before it was sent through the proxy. As a consequence, hostnames that could be resolved only by the data plane failed to be resolved for IDPs. With this fix, the DNS lookup is completed before IDP traffic is sent through the Konnectivity channel. As a result, the control plane Operator can verify IDPs with hostnames that can be resolved only by the data plane. (link: https://issues.redhat.com/browse/OCPBUGS-38349 [* OCPBUGS-38349 *])
    • Bug Fix
    • Done

      Description of problem:

      When using configuring an OpenID idp that can only be accessed via the data plane, if the hostname of the provider can only be resolved by the data plane, reconciliation of the idp fails.

      Version-Release number of selected component (if applicable):

          4.16

      How reproducible:

          always

      Steps to Reproduce:

          1. Configure an OpenID idp on a HostedCluster with a URL that points to a service in the dataplane (like https://keycloak.keycloak.svc)

      Actual results:

          The oauth server fails to be reconciled

      Expected results:

          The oauth server reconciles and functions properly

      Additional info:

          Follow up to OCPBUGS-37753

              cewong@redhat.com Cesar Wong
              cewong@redhat.com Cesar Wong
              Jie Zhao Jie Zhao
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: