Bug 1883663
| Summary: | elasticsearch-proxy hides 401 auth response from api server by always returning 500 | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | OpenShift BugZilla Robot <openshift-bugzilla-robot> |
| Component: | Logging | Assignee: | Jeff Cantrill <jcantril> |
| Status: | CLOSED ERRATA | QA Contact: | Anping Li <anli> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 4.6 | CC: | anli, aos-bugs |
| Target Milestone: | --- | ||
| Target Release: | 4.5.z | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2020-10-19 14:13:03 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1879748 | ||
| Bug Blocks: | |||
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (OpenShift Container Platform 4.5.15 extras update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:4230 |
Verified on clusterserviceversion.operators.coreos.com/clusterlogging.4.5.0-202010090328.p0,clusterserviceversion.operators.coreos.com/elasticsearch-operator.4.5.0-202010081312.p0. 1. Modify accessTokenMaxAgeSeconds to 120 apiVersion: config.openshift.io/v1 kind: OAuth metadata: name: cluster spec: tokenConfig: accessTokenMaxAgeSeconds: 120 2. Login kibana. and waint for 2 minutes 3. Check the proxy logs time="2020-10-10T14:24:29Z" level=info msg="Error processing request in handler authorization: got 401 [invalid bearer token, token lookup failed]" time="2020-10-10T14:24:29Z" level=info msg="Handling request \"authorization\"" time="2020-10-10T14:24:29Z" level=info msg="Error processing request in handler authorization: got 401 [invalid bearer token, token lookup failed]" time="2020-10-10T14:24:29Z" level=info msg="Handling request \"authorization\"" time="2020-10-10T14:24:29Z" level=info msg="Error processing request in handler authorization: got 401 [invalid bearer token, token lookup failed]"