Bug 1907758

Summary:	Facing error "Cannot authenticate user because admin user is not permitted to login via HTTP" in OCP 4.5.20
Product:	OpenShift Container Platform	Reporter:	Asheth <asheth>
Component:	Logging	Assignee:	Periklis Tsirakidis <periklis>
Status:	CLOSED ERRATA	QA Contact:	Qiaoling Tang <qitang>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	4.5	CC:	anli, aos-bugs, dgautam, jcantril, kiyyappa, markmc, periklis, skanakal
Target Milestone:	---
Target Release:	4.7.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	logging-exploration
Fixed In Version:		Doc Type:	No Doc Update
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-02-24 11:22:30 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1909616

Description Asheth 2020-12-15 07:21:01 UTC

Description of problem:

We are seeing the following error messages in the elasticsearch pod logs "Cannot authenticate user because admin user is not permitted to login via HTTP" after upgrading to the OCP 4.5.20.

We had Bugzilla opened for a similar issue "https://bugzilla.redhat.com/show_bug.cgi?id=1882232". This Bugzilla was closed with the resolution of errata and per errata this bug was fixed in OCP 4.5.18.

However, this issue is present even after upgrading to OCP 4.5.20.

Version-Release number of selected component (if applicable):

OCP 4.5.20


Actual results:

The error is present "Cannot authenticate user because admin user is not permitted to login via HTTP" even after upgrading to the OCP 4.5.20.


Expected results:

The error ""Cannot authenticate user because admin user is not permitted to login via HTTP" should be fixed after upgrading to the OCP 4.5.20.


Additional info:

1. oc -n default auth can-i get pods/logs [The user has cluster-admin privileges] 
-- yes

2. The user is not making any calls before seeing this error message.

Comment 7 Periklis Tsirakidis 2020-12-18 07:39:52 UTC

*** Bug 1907689 has been marked as a duplicate of this bug. ***

Comment 8 Periklis Tsirakidis 2020-12-18 07:54:43 UTC

*** Bug 1906707 has been marked as a duplicate of this bug. ***

Comment 13 Qiaoling Tang 2020-12-22 02:24:16 UTC

Can't reproduce this issue with elasticsearch-operator.4.7.0-202012210041.p0, so move the bz to verified.

Comment 18 errata-xmlrpc 2021-02-24 11:22:30 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Errata Advisory for Openshift Logging 5.0.0), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:0652