Attachment 1477090 Details for Bug 1619137 – grafana-proxy container logs, used juzhao@redhat.com as username

grafana-proxy container logs, used juzhao@redhat.com as username

grafana-proxy.txt (text/plain), 2.95 KB, created by Junqi Zhao on 2018-08-20 07:46:40 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Junqi Zhao

Created: 2018-08-20 07:46:40 UTC

Size: 2.95 KB

patch

obsolete

># oc logs -c grafana-proxy grafana-7476cc5c4b-zw4dn
>2018/08/20 01:08:37 provider.go:98: Defaulting client-id to system:serviceaccount:openshift-monitoring:grafana
>2018/08/20 01:08:37 provider.go:103: Defaulting client-secret to service account token /var/run/secrets/kubernetes.io/serviceaccount/token
>2018/08/20 01:08:37 provider.go:526: Performing OAuth discovery against https://172.30.0.1/.well-known/oauth-authorization-server
>2018/08/20 01:08:37 provider.go:572: 200 GET https://172.30.0.1/.well-known/oauth-authorization-server {
>  "issuer": "https://qe-juzhao-311-gce-master-etcd-1.0820-brf.qe.rhcloud.com:8443",
>  "authorization_endpoint": "https://qe-juzhao-311-gce-master-etcd-1.0820-brf.qe.rhcloud.com:8443/oauth/authorize",
>  "token_endpoint": "https://qe-juzhao-311-gce-master-etcd-1.0820-brf.qe.rhcloud.com:8443/oauth/token",
>  "scopes_supported": [
>    "user:check-access",
>    "user:full",
>    "user:info",
>    "user:list-projects",
>    "user:list-scoped-projects"
>  ],
>  "response_types_supported": [
>    "code",
>    "token"
>  ],
>  "grant_types_supported": [
>    "authorization_code",
>    "implicit"
>  ],
>  "code_challenge_methods_supported": [
>    "plain",
>    "S256"
>  ]
>}
>2018/08/20 01:08:37 provider.go:300: Delegation of authentication and authorization to OpenShift is enabled for bearer tokens and client certificates.
>2018/08/20 01:08:37 oauthproxy.go:201: mapping path "/" => upstream "http://localhost:3001/"
>2018/08/20 01:08:37 oauthproxy.go:222: compiled skip-auth-regex => "^/metrics"
>2018/08/20 01:08:37 oauthproxy.go:228: OAuthProxy configured for  Client ID: system:serviceaccount:openshift-monitoring:grafana
>2018/08/20 01:08:37 oauthproxy.go:238: Cookie settings: name:_oauth_proxy secure(https):true httponly:true expiry:168h0m0s domain:<default> refresh:disabled
>2018/08/20 01:08:37 http.go:96: HTTPS: listening on [::]:3000
>2018/08/20 01:33:36 provider.go:382: authorizer reason: no RBAC policy matched
>2018/08/20 01:33:36 provider.go:382: authorizer reason: no RBAC policy matched
>2018/08/20 01:33:49 provider.go:572: 200 GET https://qe-juzhao-311-gce-master-etcd-1.0820-brf.qe.rhcloud.com:8443/apis/user.openshift.io/v1/users/~ {"kind":"User","apiVersion":"user.openshift.io/v1","metadata":{"name":"juzhao@redhat.com","selfLink":"/apis/user.openshift.io/v1/users/juzhao%40redhat.com","uid":"152ecb56-a419-11e8-8e18-42010af00003","resourceVersion":"12252","creationTimestamp":"2018-08-20T01:33:47Z"},"identities":["allow_all:juzhao@redhat.com"],"groups":null}
>2018/08/20 01:33:49 provider.go:572: 201 POST https://qe-juzhao-311-gce-master-etcd-1.0820-brf.qe.rhcloud.com:8443/apis/authorization.openshift.io/v1/subjectaccessreviews {"kind":"SubjectAccessReviewResponse","apiVersion":"authorization.openshift.io/v1","allowed":true,"reason":"RBAC: allowed by ClusterRoleBinding \"cluster-admin-0\" of ClusterRole \"cluster-admin\" to User \"juzhao@redhat.com\""}
>2018/08/20 01:33:49 oauthproxy.go:665: 10.129.0.1:44848 authentication complete Session{juzhao@redhat.com token:true}

Actions: View

Attachments on bug 1619137: 1477090 | 1477091