Prometheus SSO not working
Bug
Description
I deployed Bigbang as follows:
helm upgrade -i bigbang chart -n bigbang --create-namespace -f dev/credentials.yaml --set monitoring.sso.enabled=true --set monitoring.sso.prometheus.client_id=platform1_a8604cc9-f5e9-4656-802d-d05624370245_bb8-prometheus -f chart/ingress-certs.yamlAuth service does not deploy:
❯ k get hr -A
NAMESPACE NAME READY STATUS AGE
bigbang gatekeeper True Release reconciliation succeeded 7m34s
bigbang eck-operator True Release reconciliation succeeded 7m34s
bigbang istio-operator True Release reconciliation succeeded 7m34s
bigbang istio True Release reconciliation succeeded 7m34s
bigbang ek True Release reconciliation succeeded 7m34s
bigbang monitoring True Release reconciliation succeeded 7m34s
bigbang fluent-bit True Release reconciliation succeeded 7m34s
bigbang cluster-auditor True Release reconciliation succeeded 7m34s
bigbang twistlock True Release reconciliation succeeded 7m34sand Prometheus doesn't load:
After also enabling authservice:
❯ helm upgrade -i bigbang chart -n bigbang --create-namespace -f dev/credentials.yaml --set monitoring.sso.enabled=true --set monitoring.sso.prometheus.client_id=platform1_a8604cc9-f5e9-4656-802d-d05624370245_bb8-prometheus --set addons.authservice.enabled=true -f chart/ingress-certs.yaml
Release "bigbang" has been upgraded. Happy Helming!
NAME: bigbang
LAST DEPLOYED: Wed Feb 10 08:03:41 2021
NAMESPACE: bigbang
STATUS: deployed
REVISION: 2
TEST SUITE: None
NOTES:
Thank you for supporting PlatformOne!
❯ k get hr -A
NAMESPACE NAME READY STATUS AGE
bigbang gatekeeper True Release reconciliation succeeded 9m23s
bigbang eck-operator True Release reconciliation succeeded 9m23s
bigbang istio-operator True Release reconciliation succeeded 9m23s
bigbang istio True Release reconciliation succeeded 9m23s
bigbang ek True Release reconciliation succeeded 9m23s
bigbang monitoring True Release reconciliation succeeded 9m23s
bigbang fluent-bit True Release reconciliation succeeded 9m23s
bigbang cluster-auditor True Release reconciliation succeeded 9m23s
bigbang twistlock True Release reconciliation succeeded 9m23s
bigbang authservice True Release reconciliation succeeded 23s
bigbang haproxy-sso True Release reconciliation succeeded 22s
After pressing continue, the browser hangs at this screen and does not redirect back to prometheus.bigbang.dev
BigBang Version
What version of BigBang were you running?
This can be retrieved multiple ways:
# via helm
❯ helm ls -n bigbang
NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION
authservice-authservice authservice 1 2021-02-10 13:03:51.09886636 +0000 UTC deployed authservice-0.1.6-bb.3 1.16.0
authservice-haproxy-sso authservice 1 2021-02-10 13:03:51.249996086 +0000 UTC deployed haproxy-1.1.2-bb.0 2.3.2
bigbang bigbang 3 2021-02-10 08:07:06.145153 -0500 EST deployed bigbang-1.0.8
eck-operator-eck-operator eck-operator 1 2021-02-10 12:57:14.597436842 +0000 UTC deployed eck-operator-1.3.0-bb.3 1.3.0
gatekeeper-system-gatekeeper gatekeeper-system 1 2021-02-10 12:55:10.331765549 +0000 UTC deployed gatekeeper-3.1.2-bb.3 v3.1.2
istio-operator-istio-operator istio-operator 1 2021-02-10 12:57:22.630414587 +0000 UTC deployed istio-operator-1.7.0-bb.1
istio-system-istio istio-system 1 2021-02-10 12:57:41.728399411 +0000 UTC deployed istio-1.7.3-bb.7
logging-cluster-auditor logging 1 2021-02-10 12:58:10.410909323 +0000 UTC deployed cluster-auditor-0.1.8-bb.1 1.16.0
logging-ek logging 1 2021-02-10 12:57:52.51990551 +0000 UTC deployed logging-0.1.3-bb.1 7.9.2
logging-fluent-bit logging 1 2021-02-10 12:58:22.674747867 +0000 UTC deployed fluent-bit-0.1.0-bb.1 1.6.3
monitoring-monitoring monitoring 1 2021-02-10 12:57:56.327478224 +0000 UTC deployed kube-prometheus-stack-11.0.0-bb.10 0.43.0
twistlock-twistlock twistlock 1 2021-02-10 12:58:53.278127249 +0000 UTC deployed twistlock-0.0.2-bb.1 20.04.163
# via the deployed umbrella git tag
❯ kubectl get gitrepository -n bigbang
NAME URL READY STATUS AGE
istio-controlplane https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git True Fetched revision: 1.7.3-bb.7/336b22abc03b4f698d8190f488a1b3431e39c4bc 15m
monitoring https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring.git True Fetched revision: 11.0.0-bb.10/0373f8626c0a130671c40a6d5da2824613de696f 15m
elasticsearch-kibana https://repo1.dso.mil/platform-one/big-bang/apps/core/elasticsearch-kibana.git True Fetched revision: 0.1.3-bb.1/4874aba960f59d5f02ce54022949f7c6a976cb9f 15m
istio-operator https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-operator.git True Fetched revision: 1.7.0-bb.1/a6021e16d18a4c309bb57ba1b0244784a655b38b 15m
haproxy https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/haproxy.git True Fetched revision: 1.1.2-bb.0/7e4d75c26c06e60f9bfe753a73ac0dbba73c0d47 15m
fluentbit https://repo1.dso.mil/platform-one/big-bang/apps/core/fluentbit.git True Fetched revision: 0.1.0-bb.1/e7cae34b764a7838f7dab376e38ecc8742135b1d 15m
twistlock https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/twistlock.git True Fetched revision: 0.0.2-bb.1/5230b95dacb8d583585fc99219b6647a5ed03c00 15m
gatekeeper https://repo1.dso.mil/platform-one/big-bang/apps/core/policy.git True Fetched revision: 3.1.2-bb.3/d2ba785175e77bd6fabe44ee441d4cd424f58851 15m
cluster-auditor https://repo1.dso.mil/platform-one/big-bang/apps/core/cluster-auditor.git True Fetched revision: 0.1.8-bb.1/f2c43ad7da3e99d6e6d105c52f38bb49257b696f 15m
eck-operator https://repo1.dso.mil/platform-one/big-bang/apps/core/eck-operator.git True Fetched revision: 1.3.0-bb.3/9057b93e8719abddfb868eac5b5d9a282fcd4c0a 15m
authservice https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/authservice.git True Fetched revision: 0.1.6-bb.3/baaadac91b7f80816e23d0043c61adcdada38044 6m13s