Comments (12)
can you run
kubectl describe statefulset authservice -n istio-system
from oidc-authservice.
can you run
kubectl describe statefulset authservice -n istio-system
from oidc-authservice.
can you describe pv and pvc of authservice
from oidc-authservice.
from oidc-authservice.
Create a brand new pv and pvc, instead of using the one that has been mounted, may be able to solve this problem
from oidc-authservice.
new
Create a brand new pv and pvc, instead of using the one that has been mounted, may be able to solve this problem
That works for me,Thank you!
from oidc-authservice.
new
Create a brand new pv and pvc, instead of using the one that has been mounted, may be able to solve this problem
That works for me,Thank you!
It doesn't work, I tried many many times, can you explain in detail ?
thx
from oidc-authservice.
new
Create a brand new pv and pvc, instead of using the one that has been mounted, may be able to solve this problem
That works for me,Thank you!
It doesn't work, I tried many many times, can you explain in detail ?
thx
I fix it.
I have two k8s cluster, one normal(already deploy kubeflow 1.3), one bad.
I copy data.db
to authservice-pvc from normal cluster deployed kubeflow 1.3. , it is ok.
if you need, i could send data.db you.
from oidc-authservice.
I had the same problem. Pod authservice-0
logs were saying "permission denied".
What helped: chmod
ing the PV to less restrictive and deleting Pod authservice-0
.
from oidc-authservice.
I had the same problem. Pod
authservice-0
logs were saying "permission denied".
What helped:chmod
ing the PV to less restrictive and deleting Podauthservice-0
.
Actually it's authority problem, I've already fixed it. thx anyway
from oidc-authservice.
Help)
Pod "authservice-0" is CrashLoopBackOff.
I have the same problem. Logs report:
Error opening bolt store: open /var/lib/authservice/data.db: stale NFS file handle
My pv and pvc:
from oidc-authservice.
@youxingtian , I am facing same issue with Kubeflow 1.8,
error messgae:
ClientID:kubeflow-oidc-authservice ClientSecret:pUBnBOY80SnXgjibTYM9ZWNzY2xreNGQok OIDCAuthURL:/dex/auth RedirectURL:/authservice/oidc/callback OIDCScopes:[openid profile email groups] StrictSessionValidation:false OIDCStateStorePath:/var/lib/authservice/data.db AuthserviceURLPrefix:/authservice/ SkipAuthURLs:[/authservice/ /dex] AuthHeader:Authorization Audiences:[istio-ingressgateway.istio-system.svc.cluster.local] HomepageURL:/authservice/site/homepage AfterLoginURL: AfterLogoutURL:/ UserIDHeader:kubeflow-userid GroupsHeader:kubeflow-groups UserIDPrefix: UserIDTransformer:{rules:[]} UserIDClaim:email UserIDTokenHeader: GroupsClaim:groups IDTokenHeader:Authorization Hostname: Port:8080 WebServerPort:8082 ReadinessProbePort:8081 CABundlePath: SessionStorePath:/var/lib/authservice/data.db SessionMaxAge:86400 SessionSameSite:Lax ClientName:AuthService ThemesURL:themes Theme:kubeflow TemplatePath:[web/templates/default] UserTemplateContext:map[] GroupsAllowlist:[*]}"
time="2024-03-05T11:27:03Z" level=info msg="Starting readiness probe at 8081"
time="2024-03-05T11:27:03Z" level=info msg="Starting server at :8080"
time="2024-03-05T11:27:03Z" level=info msg="Starting web server at :8082"
time="2024-03-05T11:27:03Z" level=fatal msg="Error creating session store: open /var/lib/authservice/data.db: permission denied"
Please help
from oidc-authservice.
Related Issues (20)
- Enable oidc-authservice repository CI for power(ppc64le) architecture. HOT 4
- External Authentication with Updated OIDC authservice image HOT 1
- Wildcard support for GROUPS_ALLOWLIST
- Authservice pod "Failed to save state in store: error trying to save session: input/output error" HOT 4
- ERROR: CSRF check failed. This may happen if you opened the login form in more than 1 tabs. Please try to login again. HOT 6
- Set LOG_LEVEL not work HOT 4
- Getting access denied 403 from OIDC login with Azure AD in Kubeflow HOT 1
- all URIs are whitelisted and cannot be secured by OIDC provider HOT 1
- OIDC authentication repeating and getting session timed out HOT 2
- Support Secure and HttpOnly flags in session cookie HOT 2
- x509: certificate signed by unknown authority-While deploying Kubeflow
- STORE_PATH option isn't honoured HOT 1
- Authservice validation HOT 1
- /var/lib/authservice
- Sessions are not cleaned up when using bolt db
- Possibly memory leak HOT 2
- Update container image on gcr.io HOT 1
- Failed to exchange authorization code with token: oauth2: cannot fetch token: 400 Bad Request Using Azure AD OIDC HOT 3
- how to get user info by session token?
- Access kubeflow from path "/kubeflow" instead of "/" HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from oidc-authservice.