Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Host name error while creating UserAuthConfig #29

Open
vedantthapa opened this issue Apr 8, 2024 · 0 comments
Open

Host name error while creating UserAuthConfig #29

vedantthapa opened this issue Apr 8, 2024 · 0 comments

Comments

@vedantthapa
Copy link

vedantthapa commented Apr 8, 2024

Hello, I'm trying to follow the docs for configuring ASM end-user authentication, however, encountering the error below while creating a UserAuthConfig (check the Status key):

Name:         user-auth-config
Namespace:    asm-user-auth
Labels:       <none>
Annotations:  internal.kpt.dev/upstream-identifier: security.anthos.io|UserAuthConfig|asm-user-auth|user-auth-config
API Version:  security.anthos.io/v1beta1
Kind:         UserAuthConfig
Metadata:
  Creation Timestamp:  2024-04-08T14:12:54Z
  Generation:          1
  Resource Version:    3282165
  UID:                 e9fd8aaf-40a0-4868-ad44-b5473562e06e
Spec:
  Authentication:
    Oidc:
      Certificate Authority Data:  
      Groups Claim:                
      Issuer URI:                  https://accounts.google.com
      Oauth Credentials Secret:
        Name:             oauth-secret
        Namespace:        asm-user-auth
      Proxy:              
      Redirect URI Host:  https://localhost:8443
      Redirect URI Path:  /_gcp_asm_authenticate
      Scopes:             
  Output JWT Audience:    test_audience
Status:
  User Auth Service:  One or more auth methods in generation 1 have failed to start: Unable to connect to 'https://kubernetes.default.svc/api/v1/namespaces/asm-user-auth/secrets/oauth-secret', encountered the following error: Couldn't resolve host name. Details: Could not resolve host: kubernetes.default.svc.
Events:               <none>

Moreover authservice also doesn't redirect to the OIDC login page. I'm assuming that a consequence of the above error?

Could someone please help me troubleshoot this?

Cluster version: v1.27.8-gke.1067004 (Autopilot)
ASM version: 1.17.8-asm.20 (Regular channel)

@vedantthapa vedantthapa changed the title Host namr error while creating a UserAuthConfig Host name error while creating UserAuthConfig Apr 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant