Open EKami opened 2 years ago
When I'm trying to access kubeflow.mydomain.com I get this in my oauth2-proxy pod.
kubeflow.mydomain.com
oauth2-proxy
$ k logs pod/oauth2-proxy-7cc846f4c7-v7vjg -n auth 127.0.0.6:57685 - cfac3aab-c871-914f-ac84-a98ce3e1fe90 - - [2021/09/19 23:26:29] kubeflow.pw-research.com GET - "/" HTTP/1.1 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36" 302 301 0.00097 [2021/09/19 23:26:29] [stored_session.go:76] Error loading cookied session: http: named cookie not present, removing session
and this from my ingress-gateway:
$ k logs istio-ingressgateway-f7db58bf5-j459c -n istio-system [2021-10-03T22:30:45.427Z] "GET / HTTP/2" 302 - ext_authz_denied - "-" 0 301 7 - "181.129.102.162" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36" "5abdaf3d-5e31-9286-a0b9-60111920bbaa" "kubeflow.pw-research.com" "-" outbound|80||centraldashboard.kubeflow.svc.cluster.local - 10.0.5.226:443 181.129.102.162:49438 kubeflow.pw-research.com - [2021-10-03T22:34:27.922Z] "GET / HTTP/1.1" 403 - rbac_access_denied_matched_policy[none] - "-" 0 19 0 - "103.203.56.1" "Mozilla/5.0" "6c798c45-962f-93f6-aad9-e5aa7d56a93d" "13.59.228.87" "-" - - 10.0.6.234:80 103.203.56.1:37874 - - [2021-10-03T22:36:19.609Z] "POST / HTTP/1.1" 403 - rbac_access_denied_matched_policy[none] - "-" 0 19 0 - "18.188.33.57" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "f5425a56-5eea-9a21-8787-81fb19c46074" "18.118.92.248" "-" - - 10.0.4.231:80 18.188.33.57:14912 - - [2021-10-03T22:36:19.616Z] "GET /.env HTTP/1.1" 403 - rbac_access_denied_matched_policy[none] - "-" 0 19 0 - "18.188.33.57" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "2e2c553c-9540-9955-99e0-e7c71732af76" "18.118.92.248" "-" - - 10.0.4.231:80 18.188.33.57:14928 - -
Any idea what's going on? Thanks
When I'm trying to access
kubeflow.mydomain.com
I get this in myoauth2-proxy
pod.and this from my ingress-gateway:
Any idea what's going on? Thanks