[1.4.9] Unable to login to syndesis on openshift pro

This is a…

[ ] Feature request
[x] Regression (a behavior that used to work and stopped working in a new release)
[x] Bug report  
[ ] Documentation issue or request

Description

After installation from template to openshift Pro I’m unable to login into syndesis with message: 500 Internal Error

Version

OpenShift Master: v3.9.41 Kubernetes Master:v1.9.1+a0ce1bc657 OpenShift Web Console:v3.9.41 Syndesis 1.4.9

Log from syndesis-oauthproxy pod

2018/10/11 09:19:26 provider.go:572: 200 GET https://172.30.0.1/.well-known/oauth-authorization-server  {
--
  | "issuer": "https://api.pro-us-east-1.openshift.com ",
  | "authorization_endpoint": "https://api.pro-us-east-1.openshift.com/oauth/authorize ",
  | "token_endpoint": "https://api.pro-us-east-1.openshift.com/oauth/token ",
  | "scopes_supported": [
  | "user:check-access",
  | "user:full",
  | "user:info",
  | "user:list-projects",
  | "user:list-scoped-projects"
  | ],
  | "response_types_supported": [
  | "code",
  | "token"
  | ],
  | "grant_types_supported": [
  | "authorization_code",
  | "implicit"
  | ],
  | "code_challenge_methods_supported": [
  | "plain",
  | "S256"
  | ]
  | }
  | 2018/10/11 09:19:26 oauthproxy.go:201: mapping path "/api/" => upstream "http://syndesis-server/api/ "
  | 2018/10/11 09:19:26 oauthproxy.go:201: mapping path "/mapper/" => upstream "http://syndesis-server/mapper/ "
  | 2018/10/11 09:19:26 oauthproxy.go:201: mapping path "/" => upstream "http://syndesis-ui/ "
  | 2018/10/11 09:19:26 oauthproxy.go:222: compiled skip-auth-regex => "/logout"
  | 2018/10/11 09:19:26 oauthproxy.go:222: compiled skip-auth-regex => "/[^/]+\\.(png\|jpg\|eot\|svg\|ttf\|woff\|woff2)"
  | 2018/10/11 09:19:26 oauthproxy.go:222: compiled skip-auth-regex => "/api/v1/swagger.*"
  | 2018/10/11 09:19:26 oauthproxy.go:222: compiled skip-auth-regex => "/api/v1/index.html"
  | 2018/10/11 09:19:26 oauthproxy.go:222: compiled skip-auth-regex => "/api/v1/credentials/callback"
  | 2018/10/11 09:19:26 oauthproxy.go:222: compiled skip-auth-regex => "/api/v1/version"
  | 2018/10/11 09:19:26 oauthproxy.go:228: OAuthProxy configured for  Client ID: system:serviceaccount:syndesis:syndesis-oauth-client
  | 2018/10/11 09:19:26 oauthproxy.go:238: Cookie settings: name:_oauth_proxy secure(https):true httponly:true expiry:168h0m0s domain:<default> refresh:disabled
  | 2018/10/11 09:19:26 http.go:56: HTTP: listening on 127.0.0.1:4180
  | 2018/10/11 09:19:26 http.go:96: HTTPS: listening on [::]:8443
  | 2018/10/11 09:21:58 oauthproxy.go:635: error redeeming code (client:10.128.12.1:50836): got 400 from "https://api.pro-us-east-1.openshift.com/oauth/token " {"error":"unauthorized_client","error_description":"The client is not authorized to request a token using this method."}
  | 2018/10/11 09:21:58 oauthproxy.go:434: ErrorPage 500 Internal Error Internal Error
  | 2018/10/11 09:22:01 oauthproxy.go:635: error redeeming code (client:10.128.12.1:50836): got 400 from "https://api.pro-us-east-1.openshift.com/oauth/token " {"error":"unauthorized_client","error_description":"The client is not authorized to request a token using this method."}
  | 2018/10/11 09:22:01 oauthproxy.go:434: ErrorPage 500 Internal Error Internal Error

Steps to reproduce

run on onpenshift pro

oc create -f https://raw.githubusercontent.com/syndesisio/syndesis/master/install/support/serviceaccount-as-oauthclient-restricted.yml
oc create -f https://raw.githubusercontent.com/syndesisio/syndesis/1.4.9/install/syndesis.yml
oc new-app syndesis -p OPENSHIFT_MASTER=$(oc whoami --show-server) -p OPENSHIFT_PROJECT=$(oc project -q) -p ROUTE_HOSTNAME=syndesis.b9ad.pro-us-east-1.openshiftapps.com

[mmelko]

@zregvart thanks and sorry for false-alert. I don’t know why I missed that parameter, it’s also in quickstart.

[zregvart]

@mmelko don’t worry about it I miss stuff all the time.