OpenUnison / openunison-k8s-idm-oidc

Self service portal for Kubernetes. Automate provisioning and access of namespaces, authenticate users using your OpenID Connect Identity Provider.
https://www.tremolosecurity.com/kubernetes/
Apache License 2.0
7 stars 2 forks source link

k8s-idm-oidc, not able to access gui #19

Open prashanthkumar122 opened 3 years ago

prashanthkumar122 commented 3 years ago

Hi tremolo team, After trying openunison-k8s-login-oidc, tried openunison-k8s-idm-oidc also, getting 'This site can’t be reached' error. below are the logs displayed.

[2021-03-31 07:31:52,421][XNIO-1 task-1] INFO AccessLog - [AzSuccess] - k8sIdp - https://127.0.0.1:8443/auth/idp/k8sIdp/.well-known/openid-configuration - uid=Anonymous,o=Tremolo - NONE [127.0.0.1] - [f416566ec9066f4bdc5673c77f52dfd7a068edc44] [2021-03-31 07:31:53,412][Thread-23] INFO K8sLoadTrusts - watching https://10.96.0.1:443/apis/openunison.tremolo.io/v1/namespaces/openunison/trusts?watch=true&timeoutSeconds=10 [2021-03-31 07:31:59,700][XNIO-1 task-1] INFO AccessLog - [AzSuccess] - CheckAlive - https://127.0.0.1:8443/check_alive - uid=Anonymous,o=Tremolo - [127.0.0.1] - [f9275f6f00da3b6b81207d50c1a98b9fe97a3e240] [2021-03-31 07:32:00,097][Thread-11] INFO LoadUrlsFromK8s - watching https://10.96.0.1:443/apis/openunison.tremolo.io/v1/namespaces/openunison/portalurls?watch=true&timeoutSeconds=10 [2021-03-31 07:32:00,110][Thread-12] INFO LoadOrgsFromK8s - watching https://10.96.0.1:443/apis/openunison.tremolo.io/v1/namespaces/openunison/orgs?watch=true&timeoutSeconds=10 [2021-03-31 07:32:02,419][XNIO-1 task-1] INFO AccessLog - [AzSuccess] - k8sIdp - https://127.0.0.1:8443/auth/idp/k8sIdp/.well-known/openid-configuration - uid=Anonymous,o=Tremolo - NONE [127.0.0.1] - [f9b0dae6eefdf192a7776197243f8f1b4d21cacfa] [2021-03-31 07:32:03,431][Thread-23] INFO K8sLoadTrusts - watching https://10.96.0.1:443/apis/openunison.tremolo.io/v1/namespaces/openunison/trusts?watch=true&timeoutSeconds=10 [2021-03-31 07:32:09,667][XNIO-1 task-1] INFO AccessLog - [AzSuccess] - CheckAlive - https://127.0.0.1:8443/check_alive - uid=Anonymous,o=Tremolo - [127.0.0.1] - [fdc8f17f714d1848c32779805cd75f7d35abb81b3] [2021-03-31 07:32:10,110][Thread-11] INFO LoadUrlsFromK8s - watching https://10.96.0.1:443/apis/openunison.tremolo.io/v1/namespaces/openunison/portalurls?watch=true&timeoutSeconds=10 [2021-03-31 07:32:10,122][Thread-12] INFO LoadOrgsFromK8s - watching https://10.96.0.1:443/apis/openunison.tremolo.io/v1/namespaces/openunison/orgs?watch=true&timeoutSeconds=10 [2021-03-31 07:32:12,407][XNIO-1 task-1] INFO AccessLog - [AzSuccess] - k8sIdp - https://127.0.0.1:8443/auth/idp/k8sIdp/.well-known/openid-configuration - uid=Anonymous,o=Tremolo - NONE [127.0.0.1] - [f1693fffe83d3c706356f071fc0101cc50a6b78ed] [2021-03-31 07:32:13,453][Thread-23] INFO K8sLoadTrusts - watching https://10.96.0.1:443/apis/openunison.tremolo.io/v1/namespaces/openunison/trusts?watch=true&timeoutSeconds=10

mlbiam commented 3 years ago

I would like to get https://github.com/OpenUnison/openunison-k8s-login-oidc/issues/38 figured out first. it uses the same code.