Hello, I've copied the template from http://cockpit-project.org/guide/latest/feature-kubernetes.html#feature-open... to openshift, then using GUI set OPENSHIFT_OAUTH_PROVIDER_URL to https://my-master:8443/ server and set COCKPIT_KUBE_URL so that it matches route I've created. When trying to access the cockpit URL, I am redirected to https://my-master:8443/oauth/authorize?client_id=cockpit-oauth-client&re... The oauth server responds with 400 Bad Request: {"error":"invalid_request","error_description":"The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed."}
I already tried oauth with jenkins template that is integrated in openshift, that seems to be working OK (setting those ENV vars was not needed there).
OpenShift Master: v1.4.0+208f053 Kubernetes Master: v1.4.0+776c994
On 01/24/2017 07:32 AM, tolvecky@frinx.io wrote:
Hello, I've copied the template from http://cockpit-project.org/guide/latest/feature-kubernetes.html#feature-open... to openshift, then using GUI set OPENSHIFT_OAUTH_PROVIDER_URL to https://my-master:8443/ server and set COCKPIT_KUBE_URL so that it matches route I've created. When trying to access the cockpit URL, I am redirected to https://my-master:8443/oauth/authorize?client_id=cockpit-oauth-client&re... The oauth server responds with 400 Bad Request: {"error":"invalid_request","error_description":"The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed."}
I already tried oauth with jenkins template that is integrated in openshift, that seems to be working OK (setting those ENV vars was not needed there).
OpenShift Master: v1.4.0+208f053 Kubernetes Master: v1.4.0+776c994 _______________________________________________ cockpit-devel mailing list -- cockpit-devel@lists.fedorahosted.org To unsubscribe send an email to cockpit-devel-leave@lists.fedorahosted.org
Looks like the oauth client may not be setup correctly. What's the output of:
oc get oauthclients/cockpit-oauth-client
Thanks Peter, yeah, I just added the redirect URL via oc edit oauthclient/cockpit-oauth-client
Now I have the same issue mentioned in thread "Issue with configuring cockpit in openshift cluster" - MESSAGE: cockpit-protocol: couldn't read from connection: Error receiving data: Connection reset by peer
and the webpage returns Disconnected Server has closed the connection.
I've added G_MESSAGES_DEBUG=all, but don't see anything interesting. Is there something I should search for?
On 01/24/2017 09:59 AM, tolvecky@frinx.io wrote:
Thanks Peter, yeah, I just added the redirect URL via oc edit oauthclient/cockpit-oauth-client
Now I have the same issue mentioned in thread "Issue with configuring cockpit in openshift cluster" - MESSAGE: cockpit-protocol: couldn't read from connection: Error receiving data: Connection reset by peer
and the webpage returns Disconnected Server has closed the connection.
I've added G_MESSAGES_DEBUG=all, but don't see anything interesting. Is there something I should search for?
It seems to be a issue of the websocket failing. What browser are you using? Are you using the self signed certificate?
I am using self signed certificate, testing with Firefox 51 and Chromium 53 on Ubuntu. Both complain about the wss connection, chromium shows this error: cockpit.js:293WebSocket connection to 'wss://cockpit-test.redacted/cockpit/socket' failed: Error during WebSocket handshake: Unexpected response code: 301
cockpit-devel@lists.fedorahosted.org
-
Peter -
tolvecky＠frinx.io