Troubleshooting

Why is my AuthServer not working?

Generally, AuthServer.status is designed to provide you with helpful feedback to debug a faulty AuthServer.

Find all AuthServer-related Kubernetes resources

All AuthServer components can be identified with Kubernetes common labels , e.g.:

app.kubernetes.io/part-of: my-authserver

Logs of all AuthServers

With stern you can tail the logs of all AppSSO managed Pods inside your cluster with:

stern --all-namespaces --selector=app.kubernetes.io/managed-by=sso.apps.tanzu.vmware.com

Change propagation

When applying changes to an AuthServer, keep in mind that changes to issuer URI, IDP, server and logging configuration take a moment to be effective as the operator will roll out the authorization server Deployment.

My Service is not selecting the authorization server’s Deployment

If you are deploying your Service with kapp make sure to set the annotation kapp.k14s.io/disable-default-label-scoping-rules: "" to avoid that kapp amends Service.spec.selector.

check-circle-line exclamation-circle-line close-line
Scroll to top icon