oc >= 3.7.0-rc.0 cannot talk to OpenShift servers < 3.6.0-rc.0 #17648
Labels
area/usability
component/cli
kind/bug
Categorizes issue or PR as related to a bug.
lifecycle/frozen
Indicates that an issue or PR should not be auto-closed due to staleness.
priority/P1
Attempting to log in to an OpenShift server running any version prior to
3.6.0-rc.0
usingoc
with version of3.7.0-rc.0
or newer fails with an error.Version
Steps To Reproduce
oc
version 3.7.0, runoc login
Current Result
Expected Result
Login is able to proceed.
Additional Information
The issue stems from this commit, which added PKCE support to
oc
. Unfortunately, the implementation now requires that the server offers a document from the OAuth metadata endpoint (/.well-known/oauth-authorization-server
). That endpoint was added in this commit, which first shipped in 3.6.0-rc.0. Ideally,oc
should be able to fall back to the old behavior if the OAuth metadata endpoint is not present.The text was updated successfully, but these errors were encountered: