<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<div>
<div dir="auto">Loop more people.</div>
</div>
<div><br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">JenTing Hsiao <<a href="mailto:jenting.hsiao@suse.com">jenting.hsiao@suse.com</a>>於 2019年8月17日 週六，11:45寫道：<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div dir="auto">Hi Ian,</div>
<div dir="auto"> Due to oidc-dex ClusterRole refreshtokens no get permission. Thanks for finding the bug. Please help file bugzilla if possible.</div>
<div dir="auto"><br>
</div>
<div dir="auto">JenTing</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">Donaldson, Ian <<a href="mailto:Ian.Donaldson@ngic.com" target="_blank">Ian.Donaldson@ngic.com</a>>於 2019年8月17日 週六，00:44寫道：<br>
</div>
</div>
</div>
<div>
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="white" lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="m_-8928562945885462343m_9164401655511269502WordSection1">
<p class="MsoNormal"><span style="color:#1f497d">One of our developers can’t login to gangway/dex to get his token.. I see these errors in the dex logs. Any ideas?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d">2019-08-16T11:44:00.072284195-04:00 stderr F time="2019-08-16T15:44:00Z" level=error msg="failed to get refresh token: GET
<a href="https://10.96.0.1:443/apis/dex.coreos.com/v1/namespaces/kube-system/refreshtokens/bj7ffgjikxfj6hiryzqgmzm6x" target="_blank">
https://10.96.0.1:443/apis/dex.coreos.com/v1/namespaces/kube-system/refreshtokens/bj7ffgjikxfj6hiryzqgmzm6x</a> Forbidden: response from server \"{\"kind\":\"Status\",\"apiVersion\":\"v1\",\"metadata\":{},\"status\":\"Failure\",\"message\":\"<a href="http://refreshtokens.dex.coreos.com" target="_blank">refreshtokens.dex.coreos.com</a>
\\"bj7ffgjikxfj6hiryzqgmzm6x\\" is forbidden: User \\"system:serviceaccount:kube-system:oidc-dex\\" cannot get resource \\"refreshtokens\\" in API group \\"<a href="http://dex.coreos.com" target="_blank">dex.coreos.com</a>\\" in the namespace
<a>\\"kube-system\\"\",\"reason\":\"Forbidden\",\"details\":{\"name\":\"bj7ffgjikxfj6hiryzqgmzm6x\",\"group\":\"dex.coreos.com\",\"kind\":\"refreshtokens\"},\"code\":403}\</a>""<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">Ian Donaldson<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">Unix Systems Administrator<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">Office: 336-435-3983<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">ian.donaldson@NGIC.com<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><img border="0" src="cid:16c9dac8271ad7999131" alt="cid:image001.png@01CF32FA.7C387000" style="width:200px;max-width:100%"></span><span style="color:#1f497d"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:#1f497d"><u></u> <u></u></span></p>
</div>
</div>
_______________________________________________<br>
caasp-beta mailing list<br>
<a href="mailto:caasp-beta@lists.suse.com" target="_blank">caasp-beta@lists.suse.com</a><br>
Check the mailing list archives or Unsubscribe at <a href="http://lists.suse.com/mailman/listinfo/caasp-beta" rel="noreferrer" target="_blank">
http://lists.suse.com/mailman/listinfo/caasp-beta</a><br>
</blockquote>
</div>
</div>
</blockquote>
</div>
</div>
</body>
</html>