Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-46481

[release-4.16] When the webhook token authenticator is enabled, the console is in crashloopback

XMLWordPrintable

    • Low
    • None
    • False
    • Hide

      None

      Show
      None
    • Fixes an issue where the web console was disabled when the authorization type was set to `None` in the cluster authentication configuration.
    • Bug Fix
    • In Progress

      This is a clone of issue OCPBUGS-46390. The following is the description of the original issue:
      —
      This is a clone of issue OCPBUGS-46068. The following is the description of the original issue:
      —
      This is a clone of issue OCPBUGS-45222. The following is the description of the original issue:
      —
      Description of problem:

      
When setting up the "webhookTokenAuthenticator" the oauth configure "type" is set to "None". 
Then controller sets the console configmap with "authType=disabled". Which will cause that the console pod goes in the crash loop back due to the not allowed type:

Error:
validate.go:76] invalid flag: user-auth, error: value must be one of [oidc openshift], not disabled.

This worked before on 4.14, stopped working on 4.15.

      Version-Release number of selected component (if applicable):

      OpenShift Container Platform 4.15

      How reproducible:

      Steps to Reproduce:

          1.
    2.
    3.

      Actual results:

      The console can't start, seems like it is not allowed to change the console.

      Expected results:

      Additional info:

              jhadvig@redhat.com Jakub Hadvig
              openshift-crt-jira-prow OpenShift Prow Bot
              YaDan Pei YaDan Pei
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: