oAuth annotations not working on openshift but working in tanzu about ingress-nginx

[k8s-ci-robot]

This issue is currently awaiting triage.

If Ingress contributors determines this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[longwuyuan]

/remove-kind bug
/retitle oAuth annotations not working on openshift but working in tanzu
/kind support
/triage needs-information

• Those annotations are tested and working in the example https://kubernetes.github.io/ingress-nginx/examples/auth/oauth-external-auth/
• Even you have said those annotations are working for you in Tanzu
• We do'nt test in CI for openshift but some other users are using successfully in Openshift
• Since those Auth URLs are specific to you, others can not debug the problem for you
• If you can test on minikube or kind cluster using oAuth URLs that others also can copy/paste and use in their own minikube or kind clusters to reproduce, it will help readers to make comments
• Wait and see if someone can guess the problem here and help you solve it

[longwuyuan]

• You have not answered all the questions that are asked in the template of a new bug report
• You have not provided the issue description in markdown format so whatever info present is very hard to read or make sense out of and does not help to analyse the problem or make useful comments for you

[baot20]

/remove-kind bug /retitle oAuth annotations not working on openshift but working in tanzu /kind support /triage needs-information

• Those annotations are tested and working in the example https://kubernetes.github.io/ingress-nginx/examples/auth/oauth-external-auth/
• Even you have said those annotations are working for you in Tanzu
• We do'nt test in CI for openshift but some other users are using successfully in Openshift
• Since those Auth URLs are specific to you, others can not debug the problem for you
• If you can test on minikube or kind cluster using oAuth URLs that others also can copy/paste and use in their own minikube or kind clusters to reproduce, it will help readers to make comments
• Wait and see if someone can guess the problem here and help you solve it

We do'nt test in CI for openshift but some other users are using successfully in Openshift.
Do you mean these 2 annotations work successfully in successfully in Openshift?
We can configure ingress work well in Openshift without these 2 annotations

[baot20]

• You have not answered all the questions that are asked in the template of a new bug report
• You have not provided the issue description in markdown format so whatever info present is very hard to read or make sense out of and does not help to analyse the problem or make useful comments for you

I will update the content with markdown format .

[longwuyuan]

• @baot20 Please use minikube or kind cluster to test the annotations related to OAuth
• I already tested and those OAuth annotations work on minikube
• So since your problem is related to using those annotations on OpenShift, you have to show the details of the problem with testing and data. Because nobody here is going to test those annotations on OpenShift for you
• If your issue description shows enough data for readers, then someone may take action on it

[baot20]

##Current Ingress configuration**:

##Test data and result**:

• If we remove the 2 annotations for oauth2-proxy, the ingress can work and services ( UI /API) can be reachable .
  Application entry
  I am not sure whether others can visit it or not outside our company wifi.

• If we added these 2 annotations, call UI/API services will turn 500 error .

[baot20]

We have found out the root cause for our issue . It is confuration related mistake .
So I am going to close this issue.
For now these annotation works fine in openshif platform.
Thank you for your support !