Uploaded image for project: 'Red Hat OpenShift Data Science'
  1. Red Hat OpenShift Data Science
  2. RHODS-5099

Randomly logged in as kube:admin to RHODS dashboard

XMLWordPrintable

    • RHODS 1.17

      Description of problem:

      While using the RHODS dashboard logged in as a test user, I suddendly found myself logged in as `kube:admin` without having ever logged out of my user.
      The GET request for status in the network tab of the browser does indeed show me as kube:admin

      {
         "kube":{
            "currentContext":"inClusterContext",
            "currentUser":{
               "name":"inClusterUser",
               "authProvider":{
                  "name":"tokenFile",
                  "config":{
                     "tokenFile":"/var/run/secrets/kubernetes.io/serviceaccount/token"
                  }
               }
            },
            "namespace":"redhat-ods-applications",
            "userName":"kube:admin",
            "clusterID":"abd3747f-ea7b-4dcf-86bb-5083661bbfbe",
            "clusterBranding":"dedicated",
            "isAdmin":false,
            "isAllowed":true
         }
      } 

       

       

      However kube:admin does not even exist in my cluster as a user (I'm on OSD)

       

      I'm attaching all dashboard pods logs if they can be useful, however I didn't find anything in there when looking for kube:admin or similar.

      Prerequisites (if any, like setup, operators/versions):

      Latest RHODS 1.16 live build on OSD

      Steps to Reproduce

      1. Unknown, happened randomly. rhn-support-bdattoma also reported seeing something similar on one of his clusters

      Actual results:

      Randomly logged in as a user who doesn't exist on the cluster

      Expected results:

      Always logged in as the user I chose

      Reproducibility (Always/Intermittent/Only Once):

      Intermittently

      Build Details:

      quay.io/llasmith/odh-operator-container-live:1.16.0-dashboard-kfnbc on OSD

      Workaround:

      Additional info:

        1. image (2).png
          194 kB
          Luca Giorgi
        2. image-2022-09-09-10-12-43-998.png
          50 kB
          Erwan Granger
        3. jupyter-nb-kube-3aadmin-0-jupyter-nb-kube-3aadmin.log
          12 kB
          Luca Giorgi
        4. jupyter-nb-kube-3aadmin-0-oauth-proxy.log
          1.0 kB
          Luca Giorgi
        5. notebook-controller-deployment-859bfb9965-jgkbk-manager.log
          91 kB
          Luca Giorgi
        6. rhods-dashboard-844cc48d6b-sf8kq-oauth-proxy.log
          75 kB
          Luca Giorgi
        7. rhods-dashboard-844cc48d6b-sf8kq-oauth-proxy(1).log
          166 kB
          Luca Giorgi
        8. rhods-dashboard-844cc48d6b-sf8kq-rhods-dashboard.log
          3 kB
          Luca Giorgi
        9. rhods-dashboard-844cc48d6b-sf8kq-rhods-dashboard(2).log
          27 kB
          Luca Giorgi
        10. rhods-dashboard-844cc48d6b-w7m99-oauth-proxy.log
          67 kB
          Luca Giorgi
        11. rhods-dashboard-844cc48d6b-w7m99-oauth-proxy(1).log
          245 kB
          Luca Giorgi
        12. rhods-dashboard-844cc48d6b-w7m99-rhods-dashboard.log
          4 kB
          Luca Giorgi
        13. rhods-dashboard-844cc48d6b-w7m99-rhods-dashboard(1).log
          65 kB
          Luca Giorgi
        14. Screenshot from 2022-08-31 17-29-22.png
          3 kB
          Luca Giorgi
        15. Screenshot from 2022-08-31 17-55-05.png
          46 kB
          Luca Giorgi
        16. Screenshot from 2022-08-31 17-56-15.png
          66 kB
          Luca Giorgi
        17. Screenshot from 2022-09-02 13-00-19.png
          169 kB
          Luca Giorgi
        18. Screenshot from 2022-09-02 13-00-44.png
          238 kB
          Luca Giorgi
        19. Screenshot from 2022-09-02 13-00-54.png
          165 kB
          Luca Giorgi
        20. Screenshot from 2022-09-02 13-01-10.png
          46 kB
          Luca Giorgi

              lferrnan@redhat.com Lucas Fernandez Aragon
              rhn-support-lgiorgi Luca Giorgi
              Luca Giorgi Luca Giorgi
              Votes:
              0 Vote for this issue
              Watchers:
              11 Start watching this issue

                Created:
                Updated:
                Resolved: