oc login doesn't work and I get EOF
Get EOF error message when doing oc login on my OCP Cluster on larval-inf.fyre.ibm.com
This is the extensive log message when I specified oc login with loglevel=10
[root@larval-inf ~]# oc login --loglevel=10
I0118 00:00:51.495772 16382 loader.go:375] Config loaded from file: /root/auth/kubeconfig
I0118 00:00:51.496278 16382 round_trippers.go:423] curl -k -v -XHEAD 'https://api.larval.os.fyre.ibm.com:6443/'
I0118 00:00:51.501453 16382 round_trippers.go:443] HEAD https://api.larval.os.fyre.ibm.com:6443/ 403 Forbidden in 5 milliseconds
I0118 00:00:51.501468 16382 round_trippers.go:449] Response Headers:
I0118 00:00:51.501473 16382 round_trippers.go:452] X-Content-Type-Options: nosniff
I0118 00:00:51.501477 16382 round_trippers.go:452] X-Kubernetes-Pf-Flowschema-Uid: 31f9fd82-6457-43d7-80e0-854c3b2d8f3a
I0118 00:00:51.501499 16382 round_trippers.go:452] X-Kubernetes-Pf-Prioritylevel-Uid: 73354010-9e7e-4d79-9910-1ea36aaad07a
I0118 00:00:51.501504 16382 round_trippers.go:452] Content-Length: 186
I0118 00:00:51.501511 16382 round_trippers.go:452] Date: Tue, 18 Jan 2022 08:00:51 GMT
I0118 00:00:51.501515 16382 round_trippers.go:452] Audit-Id: f439724e-aff1-4d39-b467-7e000ecf74fe
I0118 00:00:51.501519 16382 round_trippers.go:452] Cache-Control: no-cache, private
I0118 00:00:51.501523 16382 round_trippers.go:452] Content-Type: application/json
I0118 00:00:51.501540 16382 request_token.go:86] GSSAPI Enabled
I0118 00:00:51.501579 16382 round_trippers.go:423] curl -k -v -XGET -H "X-Csrf-Token: 1" 'https://api.larval.os.fyre.ibm.com:6443/.well-known/oauth-authorization-server'
I0118 00:00:51.502089 16382 round_trippers.go:443] GET https://api.larval.os.fyre.ibm.com:6443/.well-known/oauth-authorization-server 200 OK in 0 milliseconds
I0118 00:00:51.502103 16382 round_trippers.go:449] Response Headers:
I0118 00:00:51.502108 16382 round_trippers.go:452] Content-Length: 606
I0118 00:00:51.502113 16382 round_trippers.go:452] Date: Tue, 18 Jan 2022 08:00:51 GMT
I0118 00:00:51.502117 16382 round_trippers.go:452] Audit-Id: 1ecc15da-7c61-44f0-bcd0-dfc048055fa7
I0118 00:00:51.502122 16382 round_trippers.go:452] Cache-Control: no-cache, private
I0118 00:00:51.502126 16382 round_trippers.go:452] Content-Type: application/json
I0118 00:00:51.502130 16382 round_trippers.go:452] X-Kubernetes-Pf-Flowschema-Uid: 31f9fd82-6457-43d7-80e0-854c3b2d8f3a
I0118 00:00:51.502134 16382 round_trippers.go:452] X-Kubernetes-Pf-Prioritylevel-Uid: 73354010-9e7e-4d79-9910-1ea36aaad07a
I0118 00:00:51.502232 16382 round_trippers.go:423] curl -k -v -XHEAD 'https://oauth-openshift.apps.larval.os.fyre.ibm.com'
I0118 00:00:51.503315 16382 round_trippers.go:443] HEAD https://oauth-openshift.apps.larval.os.fyre.ibm.com in 1 milliseconds
I0118 00:00:51.503328 16382 round_trippers.go:449] Response Headers:
I0118 00:00:51.503345 16382 request_token.go:444] falling back to kubeconfig CA due to possible IO error: EOF
I0118 00:00:51.503395 16382 round_trippers.go:423] curl -k -v -XGET -H "X-Csrf-Token: 1" 'https://oauth-openshift.apps.larval.os.fyre.ibm.com/oauth/authorize?client_id=openshift-challenging-client&code_challenge=oJUIrTG_izyUXxPhNO5Q3FCXXGzTp6hdjAZC0eQuoWY&code_challenge_method=S256&redirect_uri=https%3A%2F%2Foauth-openshift.apps.larval.os.fyre.ibm.com%2Foauth%2Ftoken%2Fimplicit&response_type=code'
I0118 00:00:51.503885 16382 round_trippers.go:443] GET https://oauth-openshift.apps.larval.os.fyre.ibm.com/oauth/authorize?client_id=openshift-challenging-client&code_challenge=oJUIrTG_izyUXxPhNO5Q3FCXXGzTp6hdjAZC0eQuoWY&code_challenge_method=S256&redirect_uri=https%3A%2F%2Foauth-openshift.apps.larval.os.fyre.ibm.com%2Foauth%2Ftoken%2Fimplicit&response_type=code in 0 milliseconds
I0118 00:00:51.503897 16382 round_trippers.go:449] Response Headers:
I0118 00:00:51.504319 16382 round_trippers.go:423] curl -k -v -XGET -H "Accept: application/json, /" -H "User-Agent: oc/v0.0.0 (linux/amd64) kubernetes/$Format" 'https://api.larval.os.fyre.ibm.com:6443/api/v1/namespaces/openshift/configmaps/motd'
I0118 00:00:51.504952 16382 round_trippers.go:443] GET https://api.larval.os.fyre.ibm.com:6443/api/v1/namespaces/openshift/configmaps/motd 403 Forbidden in 0 milliseconds
I0118 00:00:51.504961 16382 round_trippers.go:449] Response Headers:
I0118 00:00:51.504966 16382 round_trippers.go:452] X-Kubernetes-Pf-Prioritylevel-Uid: 73354010-9e7e-4d79-9910-1ea36aaad07a
I0118 00:00:51.504971 16382 round_trippers.go:452] Content-Length: 303
I0118 00:00:51.504975 16382 round_trippers.go:452] Date: Tue, 18 Jan 2022 08:00:51 GMT
I0118 00:00:51.504979 16382 round_trippers.go:452] Audit-Id: 089b037a-e387-4c6b-b18c-b37ab14e80da
I0118 00:00:51.504983 16382 round_trippers.go:452] Cache-Control: no-cache, private
I0118 00:00:51.504987 16382 round_trippers.go:452] Content-Type: application/json
I0118 00:00:51.504991 16382 round_trippers.go:452] X-Content-Type-Options: nosniff
I0118 00:00:51.504996 16382 round_trippers.go:452] X-Kubernetes-Pf-Flowschema-Uid: 31f9fd82-6457-43d7-80e0-854c3b2d8f3a
I0118 00:00:51.505021 16382 request.go:968] Response Body: {"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"configmaps \"motd\" is forbidden: User \"system:anonymous\" cannot get resource \"configmaps\" in API group \"\" in the namespace \"openshift\"","reason":"Forbidden","details":{"name":"motd","kind":"configmaps"},"code":403}
F0118 00:00:51.505394 16382 helpers.go:114] error: EOF
Responses
The same issue, any oc command to the server gets I've tried this solution (that helped me sometime ago), but since no oc command is working (like oc get csr) I cannot fix this Here is my output of oc login
[root@ocp-cp-1 ~]# oc login --loglevel=10
I1121 09:23:42.168042 84853 loader.go:372] Config loaded from file: /root/.kube/config
I1121 09:23:42.168392 84853 round_trippers.go:466] curl -v -XHEAD 'https://api.datalake.ocp.MYDOMAINNAME:6443/'
I1121 09:23:42.169762 84853 round_trippers.go:495] HTTP Trace: DNS Lookup for api.datalake.ocp.foranx.by resolved to [{192.168.22.1 }]
I1121 09:23:42.170256 84853 round_trippers.go:510] HTTP Trace: Dial to tcp:192.168.22.1:6443 succeed
I1121 09:23:42.170729 84853 round_trippers.go:553] HEAD https://api.datalake.ocp.MYDOMAINNAME:6443/ in 2 milliseconds
I1121 09:23:42.170760 84853 round_trippers.go:570] HTTP Statistics: DNSLookup 1 ms Dial 0 ms TLSHandshake 0 ms Duration 2 ms
I1121 09:23:42.170785 84853 round_trippers.go:577] Response Headers:
error: EOF
The problem has raised after rebooting of all nodes