Skip to content

Support BYO external authentication in OpenShift authenticator#888

Open
btaani wants to merge 3 commits intoobservatorium:mainfrom
btaani:byo-authentication
Open

Support BYO external authentication in OpenShift authenticator#888
btaani wants to merge 3 commits intoobservatorium:mainfrom
btaani:byo-authentication

Conversation

@btaani
Copy link
Copy Markdown
Contributor

@btaani btaani commented Mar 25, 2026

When OpenShift is configured with external OIDC providers (Keycloak, Red Hat SSO, etc.), the OAuth discovery endpoint returns 404 since OAuth server gets disabled. The current code retries indefinitely causing the LokiStack gateway to hang during startup.
This PR:

  • adds graceful handling for OpenShift clusters using BYO (Bring Your Own) external authentication where built-in OAuth server is disabled.
    • Detects 404 responses from OAuth endpoint and disables OAuth flow.
    • Generates a warning message
    • Bearer token authentication continues to work.
    • Transient errors still retry as before.

@btaani btaani changed the title Byo authentication Support BYO external authentication in OpenShift authenticator Mar 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant