Closed swaroop1012 closed 1 year ago
This is fixed. It turns out the client secret wasn't decoded properly (the trailing newline character had to be excluded) in the Kubernetes secret. It should be either -
echo -n '<client_secret>' | base64
and then copy the output to a secret
or
kubectl -n spinnaker create secret generic spin-secrets --from-literal=oauth-client-secret-azure=<client_secret>
and not -
echo '<client_secret>' | base64
I have set Oauth with Azure AD but when I open Spinnaker and login to my Microsoft account, I get the below error in the browser:
{"timestamp":1693327786258,"status":401,"error":"Unauthorized","message":"Unauthorized"}
The gate pod log corresponding to that time says:
2023-08-29 16:25:35.156 WARN 1 --- [0.0-8084-exec-9] c.n.s.gate.filters.FiatSessionFilter : Authenticated user was not present in authenticated request. Check authentication settings.
Config:
Also tried the above config with
provider: AZURE
as well but got the same error. Does anyone know what's wrong with the config?