You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When debugging containers for the quickstart, I found log lines like those below:
2024/04/15 18:49:32 failed to initialize auth token: failed to parse JWK set: failed to unmarshal JWK set: error reading token: EOF
<--snip-->
2024/04/15 18:50:17 Failed to obtain client credentials and token: no access token found
2024/04/15 18:50:22 Attempting to obtain access token (attempt 10/10)
<--snip-->
2024/04/15 18:50:27 Access to SM service http://smd:27779 failed: Failed refreshing JWT: Failed to get access token: Exhausted 10 attempts at obtaining client credentials and token
Then bss died.
Clearly there's a problem with bss attempting to fetch a token for use in querying smd, but I can't tell enough information to start troubleshooting the issue.
What endpoint was used to obtain the EOF JWK?
Was the download successful, but the file was empty?
Was there a problem with name resolution?
Was the server on the other end slow?
BSS has clearly exited because it believes that further attempts to start up will be unsuccessful. Why?
What about using SMD?
Did SMD reject any requests due to failed JWT checks? If so which ones? Were there messages associated?
The text was updated successfully, but these errors were encountered:
This seems to be caused by opaal failing to fetch the JWKS from hydra if hydra fails to start whenever BSS tries making a request to the /keys endpoint. When this happens, it doesn't look like any of the code paths in opaal are returning an error or redirect (which is not suppose to happen). So in addition to making BSS's logging more informative, we also need to improve logging messages in opaal as well.
To help with debugging issues like this in the future, the plan is to add the OpenCHAMI middleware to the router in BSS like with SMD. See related SMD issue: OpenCHAMI/smd#27
When debugging containers for the quickstart, I found log lines like those below:
Then bss died.
Clearly there's a problem with bss attempting to fetch a token for use in querying smd, but I can't tell enough information to start troubleshooting the issue.
What endpoint was used to obtain the EOF JWK?
Was the download successful, but the file was empty?
Was there a problem with name resolution?
Was the server on the other end slow?
BSS has clearly exited because it believes that further attempts to start up will be unsuccessful. Why?
What about using SMD?
Did SMD reject any requests due to failed JWT checks? If so which ones? Were there messages associated?
The text was updated successfully, but these errors were encountered: