Bug 1337083

Summary: Deployer failed with error OAuthClient "kibana-proxy" is invalid
Product: OKD Reporter: Xia Zhao <xiazhao>
Component: LoggingAssignee: ewolinet
Status: CLOSED CURRENTRELEASE QA Contact: chunchen <chunchen>
Severity: high Docs Contact:
Priority: high    
Version: 3.xCC: aos-bugs, ewolinet, wsun
Target Milestone: ---Keywords: Regression, TestBlocker
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-09-19 13:56:28 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
deployer_pod_log none

Description Xia Zhao 2016-05-18 09:09:37 UTC 
Created attachment 1158668 [details]
deployer_pod_log

Problem description:
Deploy logging system on a clean origin box (devenv-rhel7_4227), deployer pod failed by this error:
    error: OAuthClient "kibana-proxy" is invalid: scopeRestrictions: Required value: required when allowAnyScope is false

Version-Release number of selected component (if applicable):
docker.io/openshift/origin-logging-deployment   latest              21fc80bb6c46        36 hours ago        706.3 MB

devenv-rhel7_4227:
oc v1.3.0-alpha.0-581-gcf6465c
kubernetes v1.3.0-alpha.1-331-g0522e63

How reproducible:
Always

Steps to Reproduce:
1. Deploy logging system on a clean origin box according to doc:  https://github.com/openshift/origin-aggregated-logging/tree/master/deployment#using-the-logging-deployer
2. Check deployer pod status

Actual Result:
2.deployer pod failed by this error:
    error: OAuthClient "kibana-proxy" is invalid: scopeRestrictions: Required value: required when allowAnyScope is false

Expected Result:
2. deployer pod should complete successfully

Additional info:
Full log attached