Login - Denied Error 403

Posted on

bash-5.2$ oc version
Client Version: 4.13.14
Kustomize Version: v4.5.7
Kubernetes Version: v1.26.4
CRC VM: Running
MicroShift: Running (v4.13.14)
RAM Usage: 1.487GB of 3.904GB
Disk Usage: 4.904GB of 16.1GB (Inside the CRC VM)
Cache Usage: 69.87GB

Context: setup crc and running OC on micro shift.

bash-5.2$ oc login -u developer https://api.crc.testing:6443 --v=10
I1106 16:10:00.287307 36086 loader.go:373] Config loaded from file: /Users/obaidomer/.kube/config
I1106 16:10:00.288262 36086 round_trippers.go:466] curl -v -XHEAD 'https://api.crc.testing:6443/'
I1106 16:10:00.288837 36086 round_trippers.go:495] HTTP Trace: DNS Lookup for api.crc.testing resolved to [{127.0.0.1 }]
I1106 16:10:00.289679 36086 round_trippers.go:510] HTTP Trace: Dial to tcp:127.0.0.1:6443 succeed
I1106 16:10:00.302414 36086 round_trippers.go:553] HEAD https://api.crc.testing:6443/ 403 Forbidden in 14 milliseconds
I1106 16:10:00.302443 36086 round_trippers.go:570] HTTP Statistics: DNSLookup 0 ms Dial 0 ms TLSHandshake 8 ms ServerProcessing 3 ms Duration 14 ms
I1106 16:10:00.302455 36086 round_trippers.go:577] Response Headers:
I1106 16:10:00.302469 36086 round_trippers.go:580] Date: Mon, 06 Nov 2023 21:10:00 GMT
I1106 16:10:00.302480 36086 round_trippers.go:580] Audit-Id: 995417ab-fe66-4745-a5fa-6126e5f97c98
I1106 16:10:00.302492 36086 round_trippers.go:580] Content-Type: application/json
I1106 16:10:00.302503 36086 round_trippers.go:580] X-Content-Type-Options: nosniff
I1106 16:10:00.302514 36086 round_trippers.go:580] X-Kubernetes-Pf-Flowschema-Uid: da76f8d4-9a67-42ca-98a5-590a326b3a93
I1106 16:10:00.302523 36086 round_trippers.go:580] X-Kubernetes-Pf-Prioritylevel-Uid: f77c6acf-5ca9-42f5-bbb5-31e8b9d646ed
I1106 16:10:00.302530 36086 round_trippers.go:580] Cache-Control: no-cache, private
I1106 16:10:00.302536 36086 round_trippers.go:580] Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
I1106 16:10:00.302543 36086 round_trippers.go:580] Content-Length: 186
I1106 16:10:00.303068 36086 round_trippers.go:466] curl -v -XGET -H "User-Agent: oc/4.13.0 (darwin/amd64) kubernetes/17b7acc" -H "Accept: application/json, /" 'https://api.crc.testing:6443/apis/user.openshift.io/v1/users/~'
I1106 16:10:00.303212 36086 round_trippers.go:495] HTTP Trace: DNS Lookup for api.crc.testing resolved to [{127.0.0.1 }]
I1106 16:10:00.303656 36086 round_trippers.go:510] HTTP Trace: Dial to tcp:127.0.0.1:6443 succeed
I1106 16:10:00.316458 36086 round_trippers.go:553] GET https://api.crc.testing:6443/apis/user.openshift.io/v1/users/~ 404 Not Found in 13 milliseconds
I1106 16:10:00.316492 36086 round_trippers.go:570] HTTP Statistics: DNSLookup 0 ms Dial 0 ms TLSHandshake 8 ms ServerProcessing 3 ms Duration 13 ms
I1106 16:10:00.316505 36086 round_trippers.go:577] Response Headers:
I1106 16:10:00.316518 36086 round_trippers.go:580] Cache-Control: no-cache, private
I1106 16:10:00.316530 36086 round_trippers.go:580] Content-Type: text/plain; charset=utf-8
I1106 16:10:00.316543 36086 round_trippers.go:580] Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
I1106 16:10:00.316554 36086 round_trippers.go:580] X-Kubernetes-Pf-Prioritylevel-Uid: f6eca3ab-1928-4dfc-a2a6-1dd3104bd28c
I1106 16:10:00.316563 36086 round_trippers.go:580] Date: Mon, 06 Nov 2023 21:10:00 GMT
I1106 16:10:00.316569 36086 round_trippers.go:580] Audit-Id: 6b28eea6-0019-4aae-8130-62a8b2dcd8c5
I1106 16:10:00.316575 36086 round_trippers.go:580] X-Content-Type-Options: nosniff
I1106 16:10:00.316584 36086 round_trippers.go:580] X-Kubernetes-Pf-Flowschema-Uid: 3a30a4c8-8b47-4c8c-a850-8ba143f8bc6f
I1106 16:10:00.316593 36086 round_trippers.go:580] Content-Length: 19
I1106 16:10:00.316643 36086 request.go:1171] Response Body: 404 page not found
I1106 16:10:00.316755 36086 round_trippers.go:466] curl -v -XGET -H "X-Csrf-Token: 1" 'https://api.crc.testing:6443/.well-known/oauth-authorization-server'
I1106 16:10:00.319179 36086 round_trippers.go:553] GET https://api.crc.testing:6443/.well-known/oauth-authorization-server 404 Not Found in 2 milliseconds
I1106 16:10:00.319211 36086 round_trippers.go:570] HTTP Statistics: GetConnection 0 ms ServerProcessing 2 ms Duration 2 ms
I1106 16:10:00.319224 36086 round_trippers.go:577] Response Headers:
I1106 16:10:00.319237 36086 round_trippers.go:580] Audit-Id: 7a07da93-0193-48e7-ad93-8c77d90c88a5
I1106 16:10:00.319249 36086 round_trippers.go:580] Cache-Control: no-cache, private
I1106 16:10:00.319260 36086 round_trippers.go:580] Content-Type: text/plain; charset=utf-8
I1106 16:10:00.319272 36086 round_trippers.go:580] Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
I1106 16:10:00.319283 36086 round_trippers.go:580] X-Content-Type-Options: nosniff
I1106 16:10:00.319294 36086 round_trippers.go:580] X-Kubernetes-Pf-Flowschema-Uid: da76f8d4-9a67-42ca-98a5-590a326b3a93
I1106 16:10:00.319306 36086 round_trippers.go:580] X-Kubernetes-Pf-Prioritylevel-Uid: f77c6acf-5ca9-42f5-bbb5-31e8b9d646ed
I1106 16:10:00.319317 36086 round_trippers.go:580] Content-Length: 19
I1106 16:10:00.319328 36086 round_trippers.go:580] Date: Mon, 06 Nov 2023 21:10:00 GMT
I1106 16:10:00.319919 36086 round_trippers.go:466] curl -v -XGET -H "Accept: application/json, /" -H "User-Agent: oc/4.13.0 (darwin/amd64) kubernetes/17b7acc" 'https://api.crc.testing:6443/api/v1/namespaces/openshift/configmaps/motd'
I1106 16:10:00.322832 36086 round_trippers.go:553] GET https://api.crc.testing:6443/api/v1/namespaces/openshift/configmaps/motd 403 Forbidden in 2 milliseconds
I1106 16:10:00.322868 36086 round_trippers.go:570] HTTP Statistics: GetConnection 0 ms ServerProcessing 2 ms Duration 2 ms
I1106 16:10:00.322881 36086 round_trippers.go:577] Response Headers:
I1106 16:10:00.322897 36086 round_trippers.go:580] Content-Length: 303
I1106 16:10:00.322909 36086 round_trippers.go:580] Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
I1106 16:10:00.322922 36086 round_trippers.go:580] X-Content-Type-Options: nosniff
I1106 16:10:00.322934 36086 round_trippers.go:580] X-Kubernetes-Pf-Flowschema-Uid: da76f8d4-9a67-42ca-98a5-590a326b3a93
I1106 16:10:00.322947 36086 round_trippers.go:580] X-Kubernetes-Pf-Prioritylevel-Uid: f77c6acf-5ca9-42f5-bbb5-31e8b9d646ed
I1106 16:10:00.322960 36086 round_trippers.go:580] Audit-Id: 93e7de7e-7e6d-495f-9efe-4b2b4708350b
I1106 16:10:00.322972 36086 round_trippers.go:580] Cache-Control: no-cache, private
I1106 16:10:00.322984 36086 round_trippers.go:580] Content-Type: application/json
I1106 16:10:00.322996 36086 round_trippers.go:580] Date: Mon, 06 Nov 2023 21:10:00 GMT
I1106 16:10:00.323025 36086 request.go:1171] Response Body: {"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"configmaps \"motd\" is forbidden: User \"system:anonymous\" cannot get resource \"configmaps\" in API group \"\" in the namespace \"openshift\"","reason":"Forbidden","details":{"name":"motd","kind":"configmaps"},"code":403}
error: couldn't get https://api.crc.testing:6443/.well-known/oauth-authorization-server: unexpected response status 404

OR

Responses