openshift / openshift/origin

oc >= 3.7.0-rc.0 cannot talk to OpenShift servers < 3.6.0-rc.0

Open
#17,648 5 comments 0 reactions 1 assignee View on GitHub

@mfojtik is already working on this.

Since Dec 7, 2017.

area/usability component/cli kind/bug lifecycle/frozen priority/P1
Dominant language
Go
Stars
8.7k
Forks
4.8k
Avg merge
4d 10h
Merged PRs (30d)
53

Description

Attempting to log in to an OpenShift server running any version prior to 3.6.0-rc.0 using oc with version of 3.7.0-rc.0 or newer fails with an error.

Version
oc v3.7.0+7ed6862
kubernetes v1.7.6+a08f5eeb62
features: Basic-Auth

Server [REDACTED]
openshift v1.3.3
kubernetes v1.3.0+52492b4
Steps To Reproduce
  1. Set up an OpenShift server running version 1.5.1 or older
  2. Using oc version 3.7.0, run oc login
Current Result
scapeless:~ elyscape$ oc login [REDACTED]
error: Missing configuration - verify you have provided the correct host and port and that the server is currently running.
error: Missing configuration
Expected Result

Login is able to proceed.

Additional Information

The issue stems from this commit, which added PKCE support to oc. Unfortunately, the implementation now requires that the server offers a document from the OAuth metadata endpoint (/.well-known/oauth-authorization-server). That endpoint was added in this commit, which first shipped in 3.6.0-rc.0. Ideally, oc should be able to fall back to the old behavior if the OAuth metadata endpoint is not present.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.