Bug 1789658 - [openstack] Authentication operator progressing: 404 Not Found status while trying to GET the OAuth well-known
Summary: [openstack] Authentication operator progressing: 404 Not Found status while t...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Node
Version: 4.3.0
Hardware: Unspecified
OS: Unspecified
low
low
Target Milestone: ---
: 4.4.0
Assignee: Peter Hunt
QA Contact: Sunil Choudhary
URL:
Whiteboard: buildcop
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-01-10 02:40 UTC by Adam Kaplan
Modified: 2020-03-05 18:40 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-03-05 18:28:59 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 1700046 0 unspecified CLOSED API server returns "Unauthorized" briefly during test runs, causes most flakes in e2e tests 2021-02-22 00:41:40 UTC

Internal Links: 1811216

Description Adam Kaplan 2020-01-10 02:40:47 UTC
Description of problem:

Authentication operator remains progressing with message:
Cluster operator authentication Progressing is True with ProgressingWellKnownNotReady: Progressing: got '404 Not Found' status while trying to GET the OAuth well-known https://10.0.0.17:6443/.well-known/oauth-authorization-server endpoint data


Version-Release number of selected component (if applicable): 4.3.0

Additional info:

https://prow.svc.ci.openshift.org/view/gcs/origin-ci-test/logs/release-openshift-ocp-installer-e2e-openstack-serial-4.3/777

Possibly related to https://bugzilla.redhat.com/show_bug.cgi?id=1700046

Comment 1 Standa Laznicka 2020-01-10 09:30:23 UTC
Trying to get all nodes up took way too long, you're seeing this error because kube-apiservers weren't able to deploy to their latest version, which serves the .well-known endpoint, because of the nodes.

Comment 3 Adam Kaplan 2020-01-16 22:17:14 UTC
@Standa - I request that a separate bug be opened against Auth. If we need all nodes for the .well_known endpoint to be available, we should have a more useful/actionable error message.

Example:

```
ProgressingWellKnownNotReady: Could not find the OAuth well-known endpoint. Please verify that all nodes in the cluster are available and the kube-apiserver is available.

```

Comment 4 Standa Laznicka 2020-01-23 12:37:56 UTC
That's fair Adam, please open that bug.

Comment 5 Peter Hunt 2020-03-05 18:28:59 UTC
I don't know if there is a problem here that can be addressed. If a bug was opened with Auth, then I think figuring out the issue should be there. (I looked to verify Ryan's finding of the 'name is reserved' error appearing, and couldn't find indication it was). Thus, I'm closing as NOTABUG. Please re-open if you think there is some Node specific issue here.


Note You need to log in before you can comment on or make changes to this bug.