skooner-k8s / skooner

Simple Kubernetes real-time dashboard and management.
http://skooner.io/
Apache License 2.0
1.31k stars 179 forks source link

Unauthorized after OIDC 200 #343

Closed saiyam1814 closed 1 year ago

saiyam1814 commented 2 years ago

I used Keycloak with skooner and below are my keycloak configs My skooner is running at - http://a3869259-c651-4eab-be4e-ddcba12856f1.k8s.civo.com Keycloak - 74.220.17.8:8080 URL - http://74.220.17.8:8080/realms/skooner id - skooner redirect URl - http://a3869259-c651-4eab-be4e-ddcba12856f1.k8s.civo.com/*

the /oidc return 200 but then there are 401 errors, any pointer on this ?

2022-08-06T05:15:07.674Z POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews 401
2022-08-06T05:15:07.708Z POST /oidc 200
[HPM] POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews -> https://10.43.0.1:443
2022-08-06T05:15:08.029Z POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews 401
[HPM] POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews -> https://10.43.0.1:443
2022-08-06T05:15:08.039Z POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews 401
[HPM] POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews -> https://10.43.0.1:443
[HPM] POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews -> https://10.43.0.1:443
[HPM] Error occurred while proxying request a3869259-c651-4eab-be4e-ddcba12856f1.k8s.civo.com/apis/authorization.k8s.io/v1/selfsubjectrulesreviews to https://10.43.0.1:443/ [ECONNRESET] (https://nodejs.org/api/errors.html#errors_common_system_errors)
Error in proxied request Error: socket hang up
    at connResetException (internal/errors.js:609:14)
    at TLSSocket.socketCloseListener (_http_client.js:401:25)
    at TLSSocket.emit (events.js:326:22)
    at net.js:675:12
    at TCP.done (_tls_wrap.js:568:7) {
  code: 'ECONNRESET'
} POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews
Error in proxied request Error: socket hang up
    at connResetException (internal/errors.js:609:14)
    at TLSSocket.socketCloseListener (_http_client.js:401:25)
    at TLSSocket.emit (events.js:326:22)
    at net.js:675:12
    at TCP.done (_tls_wrap.js:568:7) {
  code: 'ECONNRESET'
} POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews
[HPM] Error occurred while proxying request a3869259-c651-4eab-be4e-ddcba12856f1.k8s.civo.com/apis/authorization.k8s.io/v1/selfsubjectrulesreviews to https://10.43.0.1:443/ [ECONNRESET] (https://nodejs.org/api/errors.html#errors_common_system_errors)
2022-08-06T05:15:08.356Z GET / 200
2022-08-06T05:15:08.778Z GET /static/css/2.b522e268.chunk.css 304
2022-08-06T05:15:08.791Z GET /static/css/main.ce0f149c.chunk.css 304
2022-08-06T05:15:09.138Z GET /static/js/main.519bfd42.chunk.js 304
2022-08-06T05:15:09.151Z GET /static/js/2.23699fe9.chunk.js 304
[HPM] POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews -> https://10.43.0.1:443
2022-08-06T05:15:09.518Z POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews 401
2022-08-06T05:15:09.530Z GET /oidc 200
2022-08-06T05:15:10.383Z GET /?state=http%3A%2F%2Fa3869259-c651-4eab-be4e-ddcba12856f1.k8s.civo.com%2F&session_state=75a5ae80-1b69-403c-a01b-b04fcb37e0f9&code=1f2f28f7-f384-400a-92ca-459e1907a005.75a5ae80-1b69-403c-a01b-b04fcb37e0f9.5c6c7280-2da3-444e-b834-9614464d7665 200
2022-08-06T05:15:10.708Z GET /static/css/main.ce0f149c.chunk.css 304
2022-08-06T05:15:10.713Z GET /static/js/main.519bfd42.chunk.js 304
2022-08-06T05:15:10.718Z GET /static/js/2.23699fe9.chunk.js 304
2022-08-06T05:15:10.719Z GET /static/css/2.b522e268.chunk.css 304
[HPM] POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews -> https://10.43.0.1:443
2022-08-06T05:15:11.058Z POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews 401
2022-08-06T05:15:11.096Z POST /oidc 200
[HPM] POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews -> https://10.43.0.1:443
2022-08-06T05:15:11.413Z POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews 401
[HPM] POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews -> https://10.43.0.1:443
2022-08-06T05:15:11.428Z POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews 401
[HPM] POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews -> https://10.43.0.1:443
Error in proxied request Error: socket hang up
yuqiuw commented 1 year ago

Hi, we pushed some updates to the new stable release, could you try that again?

yuqiuw commented 1 year ago

New stable was released and we fixed two pieces of documentation flaws. Please follow through with the keycloak troubleshooting section and report any issues with a new ticket or reopen this. Thanks!

MaaatixPL commented 11 months ago

I have exactly the same problem. Any updates here ?

2023-10-30T08:27:03.653Z POST /oidc 200
[HPM] POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews -> https://10.96.0.1:443
[HPM] POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews -> https://10.96.0.1:443
2023-10-30T08:27:03.704Z POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews 401
2023-10-30T08:27:03.705Z POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews 401
2023-10-30T08:27:03.763Z GET / 304
tomroberts-srt commented 10 months ago

I'm getting the same error messages as @MaaatixPL, any ideas?