Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-43587

Go's 1.22 net/http.ServeMux causes oauth-server to panic with idp names that contain whitespacs [4.17]

XMLWordPrintable

    • Important
    • Yes
    • Auth - Sprint 250
    • 1
    • False
    • Hide

      None

      Show
      None
    • Hide
      * Previously, due to a behavior regression in Go 1.22, `oauth-server` pods crashed if the IDP configuration contained multiple password-based IDPs, such as `htpasswd`, with at least one of them having spaces in its name. Note that if the bootstrap user ,`kubeadmin`, still exists in a cluster, the user also counts as a password-based IDP. With this release, a fix to the `oauth-server` resolves this issue and prevents the server from crashing. (link:https://issues.redhat.com/browse/OCPBUGS-43587[*OCPBUGS-43587*])
      Show
      * Previously, due to a behavior regression in Go 1.22, `oauth-server` pods crashed if the IDP configuration contained multiple password-based IDPs, such as `htpasswd`, with at least one of them having spaces in its name. Note that if the bootstrap user ,`kubeadmin`, still exists in a cluster, the user also counts as a password-based IDP. With this release, a fix to the `oauth-server` resolves this issue and prevents the server from crashing. (link: https://issues.redhat.com/browse/OCPBUGS-43587 [* OCPBUGS-43587 *])
    • Bug Fix
    • Done

      Description of problem:

          When there is more than one password-based IDP (like htpasswd) and its name contains whitespaces, it causes the oauth-server to panic, if Golang is v1.22 or higher.

      Version-Release number of selected component (if applicable):

      How reproducible:

          always

      Steps to Reproduce:

          1. Create a cluster with OCP 4.17
    2. Create at least two password-based IDP (like htpasswd) with whitespaces in the name.
    3. oauth-server panics.

      Actual results:

          oauth-server panics (if Go is at version 1.22 or higher).

      Expected results:

          NO REGRESSION, it worked with Go 1.21 and lower.

      Additional info:

              rh-ee-irinis Ilias Rinis
              kostrows@redhat.com Krzysztof Ostrowski
              Xingxing Xia Xingxing Xia
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

                Created:
                Updated:
                Resolved: