oc >= 3.7.0-rc.0 cannot talk to OpenShift servers < 3.6.0-rc.0
@mfojtik is already working on this.
Since Dec 7, 2017.
- Dominant language
- Go
- Stars
- 8.7k
- Forks
- 4.8k
- Avg merge
- 4d 10h
- Merged PRs (30d)
- 53
Description
Attempting to log in to an OpenShift server running any version prior to 3.6.0-rc.0 using oc with version of 3.7.0-rc.0 or newer fails with an error.
Version
oc v3.7.0+7ed6862
kubernetes v1.7.6+a08f5eeb62
features: Basic-Auth
Server [REDACTED]
openshift v1.3.3
kubernetes v1.3.0+52492b4
Steps To Reproduce
- Set up an OpenShift server running version 1.5.1 or older
- Using
ocversion 3.7.0, runoc login
Current Result
scapeless:~ elyscape$ oc login [REDACTED]
error: Missing configuration - verify you have provided the correct host and port and that the server is currently running.
error: Missing configuration
Expected Result
Login is able to proceed.
Additional Information
The issue stems from this commit, which added PKCE support to oc. Unfortunately, the implementation now requires that the server offers a document from the OAuth metadata endpoint (/.well-known/oauth-authorization-server). That endpoint was added in this commit, which first shipped in 3.6.0-rc.0. Ideally, oc should be able to fall back to the old behavior if the OAuth metadata endpoint is not present.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.