Unable to login to application behind oauth-proxy

[openshift]

Unable to login to application behind oauth-proxy

Correction finally got it to work and here is my options.

- '-openshift-review-url=https://openshift.default.svc/apis/authorization.openshift.io/v1/subjectaccessreviews'
- '-redeem-url=https://openshift.default.svc/oauth/token'
- '-validate-url=https://openshift.default.svc/apis/user.openshift.io/v1/users/~'

[enj]

is there a plan to make those fields to be over written?

No, there are no plans to change the configuration of these fields. masterPublicURL must be available both internally and externally to the cluster. The decision between masterPublicURL and masterURL is one that should be based on the origin of the request (and we did not have a good way to determine that), not one that is based on a singular hard coded configuration. Thus we opted to use masterPublicURL as that is generally available to all parties.

If you have a proxy in front of openshift, you can have it override the data returned for /.well-known/oauth-authorization-server with the desired values.

[enj]

Feel free to reopen if you have further questions.

Not to re-open more of something on the side. I finally got this working using the below extra options
'-redeem-url=https://openshift.default.svc/oauth/token'
'-validate-url=https://openshift.default.svc/oauth/authorize'

So login is still on the public master url, but actual authentication is now on the internal where the nodes can actually hit the master api.
Working on a separate 500 error issue now but getting there.

[geropizarro]

The above worked for me too. Thanks!

[newlight77]

That works for me as well. Thanks