Description of problem: When inspecting error messages when serviceaccount token authentication fails such as the one in https://bugzilla.redhat.com/show_bug.cgi?id=1956879, we could see that the oauth-apiserver's token review returns a message "old, insecure token format". The message from oauth-apiserver should instead warn about the token not being found if it really does not exist not to confuse the person debugging the issue. In case an old token was really found, it shoud not use commas so that it does not appear like two separate error messages. Version-Release number of selected component (if applicable): 4.8 How reproducible: 100% Steps to Reproduce: 1. attempt to login with an invalid bearer token
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: OpenShift Container Platform 4.8.2 bug fix and security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2021:2438