NeuVector access from Rancher UI returns "Authentication failed!"

This document (000021081) is provided subject to the disclaimer at the end of this document.

Environment

Rancher 2.6.x+
NeuVector 5.x+

Situation

Try to use the NeuVector hyperlinked from Rancher UI to access NeuVector, and the login page indicates "Authentication failed!".

Resolution

Rancher SSO requires the following values rbac: true, controller.ranchersso.enabled: true, and global.cattle.url: https://<Rancher_URL>/.

In addition, the ServiceAccount needs to be mounted. Ensure the ServiceAccount for the controller either has autoMountServiceAccountToken: true or true by default when this line doesn't exists within the YAML manifest.

Example:

apiVersion: v1
kind: ServiceAccount
metadata:
...
automountServiceAccountToken: true
...

In the case of using Terraform, the global.cattle.url is not defined and needs to be defined like below. Rancher_URL should be the hostname to access the Rancher UI.

global:
  cattle:
...
    url: https://<RANCHER_URL>/

If the above is in place but still getting authentication error, try logging in with an incognito browser. If that works, then clearing the browser cache may fix the problem

Additional Information

Ref: https://github.com/rancher/rancher/issues/37434

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.