Tectonic Console Logins Fail - Incorrect oidc_issuer_url

[nreisbeck]

Is this a BUG REPORT or FEATURE REQUEST?

BUG REPORT

Versions

• Tectonic version (release or commit hash):
  db1c71e
• Terraform version (terraform version): v0.11.1
• Platform (aws|azure|openstack|metal): DigitalOcean ;)

What happened?

Authentication was successful, but after a few seconds the page returned to the login page.

What you expected to happen?

Authentication to complete successfully and the Console page to stay open.

How to reproduce it (as minimally and precisely as possible)?

Login with a valid username & password.
Wait 5s.

kubectl -n tectonic-system logs tectonic-identity-##########-#####
time="2018-01-20T01:08:35Z" level=info msg="login successful: connector \"local\", username=\"admin\", email=\"user.name@email.com\", groups=[]" 

kubectl -n tectonic-system logs tectonic-console-##########-#####
2018/01/20 01:08:35 auth: oauth success, redirecting to: "https://cluster.domain.tld/"

kubectl -n kube-system logs kube-apiserver-#####
E0120 01:08:37.018693       6 oidc.go:190] oidc authenticator: failed to fetch provider discovery data: "issuer" in config (https://cluster.domain.tld/identity) does not match provided issuer URL (https://cluster.domain.tld:443/identity)
E0120 01:08:37.018731       6 authentication.go:64] Unable to authenticate the request due to an error: [invalid bearer token, [invalid bearer token, [crypto/rsa: verification error, fetch provider config: "issuer" in config (https://cluster.domain.tld/identity) does not match provided issuer URL (https://cluster.domain.tld:443/identity)]]]
E0120 01:08:37.051892       6 oidc.go:190] oidc authenticator: failed to fetch provider discovery data: "issuer" in config (https://cluster.domain.tld/identity) does not match provided issuer URL (https://cluster.domain.tld:443/identity)

[aknuds1]

Thanks for providing this, I must admit I haven't got around to testing the console yet!

[aknuds1]

I can also reproduce the issue.