Docker Community Forums

Share and learn in the Docker community.

DTR login problem in UCP cluster

I have a UCP Cluster with 3 controllers and other 3 nodes. In one of the nodes, I have DTR installed as well. When I try to login to DTR via web interface I am getting the following error. Any help please?

{
“errors”: [
{
“code”: “OPENID_ERROR”,
“message”: “Failed to establish openid authentication”,
“detail”: “OpenID Connect Error\n\nunable to get token\n\nsee server logs for details”
}
]
}

I’ve got this error and the problem was solved after cleaning browser cache.

@primehaxor No. It didn’t work after clearing the cache. I even tried with incognito mode every single time and it failed.

Was there ever a remedy for this error? I started getting this out of the blue. Nothing has changed in my environment…

That’s the standard error for a problem in getting the identity token during authentication. Can you provide logs at the error time from the dtr-api container?

Hi,

I have the same issue, ntp is running on all my hosts, i’ve cleaned up many times my cookies and stuff on my browser, here’s what i get from logs :slight_smile:

{"level":"info","msg":"Call of type GET to /api/v0/openid/begin from xxx.xx.x.x:43994 by anonymous","time":"2017-01-06T08:54:25Z"}

{“level”:“info”,“msg”:“Call of type GET to /api/v0/openid/callback?code=53a18456-f355-40a3-9ccc-28e7bbfe32f7\u0026state=eyJyZWRpcmVjdE5leHQiOiIiLCJyZWRpcmVjdFVSSSI6Imh0dHBzOi8vZHRyX2RvY2tlci5hZG1pbi5laGMuYWRwLmNvbS9hcGkvdjAvb3BlbmlkL2NhbGxiYWNrIn0.-m4hiJJawOTro-g0h8tzYnZ5Fbp93ebAt59Dym2Byt8 from xxx.xx.x.x:44000 by anonymous”,“time”:“2017-01-06T08:54:36Z”}
{“level”:“error”,“msg”:“unable to get identity token: http client error: Post https://ucp_docker.xxxxx.xxx.xxx.com/enzi/v0/id/token: tls: received record with version 696b when expecting version 303”,“time”:“2017-01-06T08:54:36Z”}

ok i had an issue while installing the DTR :
DEBU[0027] failed to update DTR service config in Auth Service error=API Errors: [“NO_SUCH_SERVICE: A service with the given name or ID does not exist. - Detail: Service name or ID: “Docker Trusted Registry””]
INFO[0028] Verifying auth settings…

DEBU[0028] retrying HTTP request error=Get https://dtr_docker.xxxx.xxx.xxx.com: EOF method=GET retryNumber=2 url=https://dtr_docker.admin.ehc.adp.com
DEBU[0028] Failed to connect to DTR: Get https://dtr_docker.xxxx.xxx.xxx.com: EOF
INFO[0033] Waiting for DTR to start…
DEBU[0033] Failed to connect to DTR: Get /api/v0/openid/begin: redirect

DEBU[0174] Failed to connect to DTR: Get /api/v0/openid/begin: redirect
WARN[0179] Couldn’t confirm authentication works, but still completing installation: Failed to wait for dtr to come back up: Polling failed with 30 attempts 5s apart: Failed to connect to DTR: Get /api/v0/openid/begin: redirect

Had to delete everything and start over, now it’s ok

Glad it’s working now. I’m going to follow up with the engineer working on the auth system.

Hi there,
I have the same issue what @jmnguye have. I tried already a couple of times to re-build my cluster, but no luck there.

Long story short. I have UCP v2.0.1 and DTR v2.2.0 and everything runs in AWS.

When I access to DTR endpoint it redirects me to UCP and from the console, I can see.

Failed to load resource: the server responded with a status of 400 () https://ucp_endpoint/enzi/v0/id/authorize

From dtr-api container logs, i can see.

2017-06-28T13:45:32.770635444Z {“level”:“info”,“msg”:“Call of type GET to /api/v0/openid/begin from 10.1.0.8:46944 by anonymous”,“time”:“2017-06-28T13:45:32Z”}

Any ideas what coulde be a issue?

Thanks

I’m still having the issue, but it’s a POC from our side, and the platform will be upgrade soon, i wish i won’t have the problem on new releases, if not, i’ll update the post.

@jmnguye Which version do you plan to upgrade?

everything is still in standby from our side for the moment.

Does anyone have a solution for this issue?

hello All,
I have a similar issue.

Post DTR install, I get the below error on the browser:
[‎4/‎03/‎2019 6:48 PM] Bhatia, Gaurav: { "errors": [ { "code": "OPENID_ERROR", "message": "Failed to establish openid authentication", "detail": "OpenID Connect Error\n\nunable to get token\n\nsee server logs for details" } ] }

Also, my dtr-api container log says :
{"level":"info","msg":"Establishing connection with Rethinkdb","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"writing out configs and watching for changes","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"watching configs","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"watching for changes to configtracker.configSpec{src:\"license.json\", writer:(configtracker.WriterFunc)(0xd079a0), templateFunc:(configtracker.TemplateFunc)(0xcddba0), cacheKey:\"ec3416e6-73de-43e3-a354-f087a1930833\"}","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"Establishing connection with Rethinkdb","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"Starting tmp folder cleanup","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"No files to remove","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"writing out configs and watching for changes","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"watching configs","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"watching for changes to configtracker.configSpec{src:\"certs/api_server/cert.pem/73a1d0bf1ff9\", writer:(configtracker.WriterFunc)(0xcde850), templateFunc:(configtracker.TemplateFunc)(0xcddba0), cacheKey:\"465639cb-a4d9-4ccb-8cef-17bdb347579b\"}","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"watching for changes to configtracker.configSpec{src:\"certs/api_server/key.pem/73a1d0bf1ff9\", writer:(configtracker.WriterFunc)(0xcde850), templateFunc:(configtracker.TemplateFunc)(0xcddba0), cacheKey:\"310f3c20-2b58-4842-bddc-fff3301e6ef7\"}","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"watching for changes to configtracker.configSpec{src:\"certs/api_ca/cert.pem\", writer:(configtracker.WriterFunc)(0xcde850), templateFunc:(configtracker.TemplateFunc)(0xcddba0), cacheKey:\"85cb4a9d-60f8-408b-9745-331f10a92b2a\"}","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"watching for changes to configtracker.configSpec{src:\"certs/postgres_client/cert.pem\", writer:(configtracker.WriterFunc)(0xcdf1f0), templateFunc:(configtracker.TemplateFunc)(0xcddba0), cacheKey:\"91a0b40c-45e8-4d94-a4c2-937ee3153158\"}","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"watching for changes to configtracker.configSpec{src:\"certs/postgres_client/key.pem\", writer:(configtracker.WriterFunc)(0xcdf1f0), templateFunc:(configtracker.TemplateFunc)(0xcddba0), cacheKey:\"9f72e391-5b79-49ea-8e7f-f8f650ec9a0f\"}","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"watching for changes to configtracker.configSpec{src:\"certs/postgres_ca/cert.pem\", writer:(configtracker.WriterFunc)(0xcdf1f0), templateFunc:(configtracker.TemplateFunc)(0xcddba0), cacheKey:\"dd7d60d5-b064-4b61-b6df-70865e53f2e5\"}","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"writing out configs and watching for changes","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"watching configs","time":"2019-03-04T06:03:35Z"} {"level":"info","msg":"watching for changes to configtracker.configSpec{src:\"metadataStoreOptedIn\", writer:(configtracker.WriterFunc)(0xcde850), templateFunc:(configtracker.TemplateFunc)(0xcddba0), cacheKey:\"a8aa324d-f619-40b6-a5fc-75d839138a64\"}","time":"2019-03-04T06:03:35Z"} {"address":":5002","level":"info","msg":"Admin server about to listen for connections","time":"2019-03-04T06:03:35Z"} {"err":"failed to get dtr enzi service, no enzi registration\n --- at /go/src/github.com/docker/dhe-deploy/gocode/dtr/garant/authn/enzi/authenticate.go:68 (NewAuthenticator) ---","go.version":"go1.8.3","instance.id":"e35f68c9-a9ff-462f-8f64-543223ca8fba","level":"info","msg":"error authenticating; presenting challenge","time":"2019-03-04T06:03:42Z"} {"error":"failed to get dtr enzi service, no enzi registration\n --- at /go/src/github.com/docker/dhe-deploy/gocode/dtr/garant/authn/enzi/authenticate.go:68 (NewAuthenticator) ---","level":"info","msg":"Unable to authenticate","time":"2019-03-04T06:03:42Z"} {"error":"failed to get dtr enzi service, no enzi registration\n --- at /go/src/github.com/docker/dhe-deploy/gocode/dtr/garant/authn/enzi/authenticate.go:68 (NewAuthenticator) ---","level":"error","msg":"Authentication failed due to internal error","time":"2019-03-04T06:03:42Z"} {"err":"failed to get dtr enzi service, no enzi registration\n --- at /go/src/github.com/docker/dhe-deploy/gocode/dtr/garant/authn/enzi/authenticate.go:68 (NewAuthenticator) ---","go.version":"go1.8.3","instance.id":"e35f68c9-a9ff-462f-8f64-543223ca8fba","level":"info","msg":"error authenticating; presenting challenge","time":"2019-03-04T06:03:43Z"} {"error":"failed to get dtr enzi service, no enzi registration\n --- at /go/src/github.com/docker/dhe-deploy/gocode/dtr/garant/authn/enzi/authenticate.go:68 (NewAuthenticator) ---","level":"info","msg":"Unable to authenticate","time":"2019-03-04T06:03:43Z"} {"error":"failed to get dtr enzi service, no enzi registration\n --- at /go/src/github.com/docker/dhe-deploy/gocode/dtr/garant/authn/enzi/authenticate.go:68 (NewAuthenticator) ---","level":"error","msg":"Authentication failed due to internal error","time":"2019-03-04T06:03:43Z"} {"err":"failed to get dtr enzi service, no enzi registration\n --- at /go/src/github.com/docker/dhe-deploy/gocode/dtr/garant/authn/enzi/authenticate.go:68 (NewAuthenticator) ---","go.version":"go1.8.3","instance.id":"e35f68c9-a9ff-462f-8f64-543223ca8fba","level":"info","msg":"error authenticating; presenting challenge","time":"2019-03-04T06:03:44Z"} {"error":"failed to get dtr enzi service, no enzi registration\n --- at /go/src/github.com/docker/dhe-deploy/gocode/dtr/garant/authn/enzi/authenticate.go:68 (NewAuthenticator) ---","level":"info","msg":"Unable to authenticate","time":"2019-03-04T06:03:44Z"} {"error":"failed to get dtr enzi service, no enzi registration\n --- at /go/src/github.com/docker/dhe-deploy/gocode/dtr/garant/authn/enzi/authenticate.go:68 (NewAuthenticator) ---","level":"error","msg":"Authentication failed due to internal error","time":"2019-03-04T06:03:44Z"} {"err":"failed to get dtr enzi service, no enzi registration\n --- at /go/src/github.com/docker/dhe-deploy/gocode/dtr/garant/authn/enzi/authenticate.go:68 (NewAuthenticator) ---","go.version":"go1.8.3","instance.id":"e35f68c9-a9ff-462f-8f64-543223ca8fba","level":"info","msg":"error authenticating; presenting challenge","time":"2019-03-04T06:03:45Z"} {"error":"failed to get dtr enzi service, no enzi registration\n --- at /go/src/github.com/docker/dhe-deploy/gocode/dtr/garant/authn/enzi/authenticate.go:68 (NewAuthenticator) ---","level":"info","msg":"Unable to authenticate","time":"2019-03-04T06:03:45Z"} {"error":"failed to get dtr enzi service, no enzi registration\n --- at /go/src/github.com/docker/dhe-deploy/gocode/dtr/garant/authn/enzi/authenticate.go:68 (NewAuthenticator) ---","level":"error","msg":"Authentication failed due to internal error","time":"2019-03-04T06:03:45Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/begin from 10.1.0.13:44192 by anonymous","time":"2019-03-04T06:04:59Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/begin from 10.1.0.13:44224 by anonymous","time":"2019-03-04T06:05:02Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/callback?code=62804dd6-0dab-46ec-8273-ebef5b8cb7be\u0026state=eyJyZWRpcmVjdE5leHQiOiIiLCJyZWRpcmVjdFVSSSI6Imh0dHBzOi8vZHRyLndzZGMuZWRkcC5zcnYud2VzdHBhYy5jb20uYXUvYXBpL3YwL29wZW5pZC9jYWxsYmFjayJ9.zUHS7zr9Wf79zKS6nRGxV4ye-9ons75gRai9ob8EsF0 from 10.1.0.13:44334 by anonymous","time":"2019-03-04T06:05:14Z"} {"level":"info","msg":"Call of type GET to /api/v0/jobs?action=tagmigration\u0026worker=any\u0026running=true\u0026start=0 from 10.1.0.13:44346 by admin","time":"2019-03-04T06:05:15Z"} {"level":"info","msg":"Call of type GET to /api/v0/admin/clientAnalytics from 10.1.0.13:44354 by admin","time":"2019-03-04T06:05:15Z"} {"level":"info","msg":"Call of type GET to /api/v0/repositories from 10.1.0.13:44358 by anonymous","time":"2019-03-04T06:05:15Z"} {"go.version":"go1.8.3","http.request.host":"dtr.wsdc.eddp.srv.westpac.com.au","http.request.id":"1ce0a65c-5469-4ab9-91fa-58d98a66b305","http.request.method":"GET","http.request.referer":"https://dtr.wsdc.eddp.srv.westpac.com.au/repositories","http.request.remoteaddr":"10.38.111.116","http.request.uri":"/api/v0/repositories","http.request.useragent":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36","instance.id":"e35f68c9-a9ff-462f-8f64-543223ca8fba","level":"error","msg":"unable to decode unexpected response: expected 200, got 502 - ","time":"2019-03-04T06:05:15Z"} {"level":"info","msg":"Call of type GET to /api/v0/meta/features from 10.1.0.13:44360 by admin","time":"2019-03-04T06:05:15Z"} {"level":"info","msg":"Call of type GET to /api/v0/meta/features from 10.1.0.13:44370 by admin","time":"2019-03-04T06:05:15Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/begin from 10.1.0.13:44372 by admin","time":"2019-03-04T06:05:15Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/callback?code=b810ae7e-8f9d-4932-87bf-90798b78dba4\u0026state=eyJyZWRpcmVjdE5leHQiOiIiLCJyZWRpcmVjdFVSSSI6Imh0dHBzOi8vZHRyLndzZGMuZWRkcC5zcnYud2VzdHBhYy5jb20uYXUvYXBpL3YwL29wZW5pZC9jYWxsYmFjayJ9.NusSl0A3qaNc6yL7aC3k7ximsedOI89xGUdpPfRk1Ps from 10.1.0.13:44374 by admin","time":"2019-03-04T06:05:15Z"} {"level":"info","msg":"Call of type GET to /api/v0/jobs?action=tagmigration\u0026worker=any\u0026running=true\u0026start=0 from 10.1.0.13:44388 by admin","time":"2019-03-04T06:05:16Z"} {"level":"info","msg":"Call of type GET to /api/v0/repositories from 10.1.0.13:44396 by admin","time":"2019-03-04T06:05:16Z"} {"level":"info","msg":"Call of type GET to /api/v0/admin/clientAnalytics from 10.1.0.13:44394 by admin","time":"2019-03-04T06:05:16Z"} {"level":"info","msg":"Call of type GET to /api/v0/meta/features from 10.1.0.13:44398 by admin","time":"2019-03-04T06:05:16Z"} {"level":"info","msg":"Call of type GET to /api/v0/meta/features from 10.1.0.13:44408 by admin","time":"2019-03-04T06:05:16Z"} segment 2019/03/04 06:11:03 error sending request: Post https://api.segment.io/v1/batch: dial tcp 54.148.199.157:443: i/o timeout {"level":"info","msg":"Call of type GET to /api/v0/jobs?action=tagmigration\u0026worker=any\u0026running=true\u0026start=0 from 10.1.0.13:47884 by admin","time":"2019-03-04T06:11:27Z"} {"level":"info","msg":"Call of type GET to /api/v0/admin/clientAnalytics from 10.1.0.13:47890 by admin","time":"2019-03-04T06:11:27Z"} {"level":"info","msg":"Call of type GET to /api/v0/meta/features from 10.1.0.13:47894 by anonymous","time":"2019-03-04T06:11:27Z"} {"level":"info","msg":"Call of type GET to /api/v0/meta/features from 10.1.0.13:47904 by anonymous","time":"2019-03-04T06:11:27Z"} {"level":"info","msg":"Call of type GET to /api/v0/repositories from 10.1.0.13:47892 by admin","time":"2019-03-04T06:11:27Z"} segment 2019/03/04 06:17:13 error sending request: Post https://api.segment.io/v1/batch: dial tcp 52.89.6.109:443: i/o timeout {"level":"info","msg":"Call of type GET to /api/v0/jobs?action=tagmigration\u0026worker=any\u0026running=true\u0026start=0 from 10.1.0.13:36122 by admin","time":"2019-03-04T06:41:57Z"} {"level":"info","msg":"Call of type GET to /api/v0/repositories from 10.1.0.13:36130 by anonymous","time":"2019-03-04T06:41:57Z"} {"go.version":"go1.8.3","http.request.host":"dtr.wsdc.eddp.srv.westpac.com.au","http.request.id":"bf342656-6ace-4aa7-a25e-a930bef26db4","http.request.method":"GET","http.request.referer":"https://dtr.wsdc.eddp.srv.westpac.com.au/repositories","http.request.remoteaddr":"10.38.111.116","http.request.uri":"/api/v0/repositories","http.request.useragent":"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36","instance.id":"e35f68c9-a9ff-462f-8f64-543223ca8fba","level":"error","msg":"API Errors: [\"AUTHENTICATION_REQUIRED: The client is required to authenticate.\"]","time":"2019-03-04T06:41:57Z"} {"level":"info","msg":"Call of type GET to /api/v0/meta/features from 10.1.0.13:36132 by anonymous","time":"2019-03-04T06:41:57Z"} {"level":"info","msg":"Call of type GET to /api/v0/meta/features from 10.1.0.13:36138 by anonymous","time":"2019-03-04T06:41:57Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/begin from 10.1.0.13:36140 by anonymous","time":"2019-03-04T06:41:57Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/begin from 10.1.0.13:36142 by anonymous","time":"2019-03-04T06:41:57Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/callback?code=1597a074-8631-4651-a8c6-a74635aef9e7\u0026state=eyJyZWRpcmVjdE5leHQiOiIiLCJyZWRpcmVjdFVSSSI6Imh0dHBzOi8vZHRyLndzZGMuZWRkcC5zcnYud2VzdHBhYy5jb20uYXUvYXBpL3YwL29wZW5pZC9jYWxsYmFjayJ9.-dVxInKXuqp-W2gfJwErD5KGrPnoG8BUxFmWKH5FQ28 from 10.1.0.13:36228 by anonymous","time":"2019-03-04T06:42:07Z"} {"level":"error","msg":"unable to decode OpenID Connect authorization callback redirect state: invalid HMAC signature","time":"2019-03-04T06:42:07Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/begin from 10.1.0.13:36670 by anonymous","time":"2019-03-04T06:42:56Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/callback?code=db1ae6b7-377d-4e84-9c0c-6dc2609b3f0e\u0026state=eyJyZWRpcmVjdE5leHQiOiIiLCJyZWRpcmVjdFVSSSI6Imh0dHBzOi8vZHRyLndzZGMuZWRkcC5zcnYud2VzdHBhYy5jb20uYXUvYXBpL3YwL29wZW5pZC9jYWxsYmFjayJ9.kTqEMHzyn7p0WChgvAwy2i9PDGPZTVfrZrKaWSbQGKQ from 10.1.0.13:36680 by anonymous","time":"2019-03-04T06:42:56Z"} {"level":"error","msg":"unable to get identity token: unexpected response code from token endpoint: 502 - ","time":"2019-03-04T06:42:56Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/begin from 10.1.0.13:36818 by anonymous","time":"2019-03-04T06:43:13Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/begin from 10.1.0.13:37056 by anonymous","time":"2019-03-04T06:43:37Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/callback?code=b8d9c300-1f83-4b6b-b24a-2221286db524\u0026state=eyJyZWRpcmVjdE5leHQiOiIiLCJyZWRpcmVjdFVSSSI6Imh0dHBzOi8vZHRyLndzZGMuZWRkcC5zcnYud2VzdHBhYy5jb20uYXUvYXBpL3YwL29wZW5pZC9jYWxsYmFjayJ9.ZZ-H5CNeIa2O394rKD_Ic5cnU_IVzSJvZRF1F1c3Ukk from 10.1.0.13:37058 by anonymous","time":"2019-03-04T06:43:37Z"} {"level":"error","msg":"unable to get identity token: unexpected response code from token endpoint: 502 - ","time":"2019-03-04T06:43:37Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/begin from 10.1.0.13:37070 by anonymous","time":"2019-03-04T06:43:38Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/callback?code=8fcc90d0-cb6e-42f5-9378-97327af36142\u0026state=eyJyZWRpcmVjdE5leHQiOiIiLCJyZWRpcmVjdFVSSSI6Imh0dHBzOi8vZHRyLndzZGMuZWRkcC5zcnYud2VzdHBhYy5jb20uYXUvYXBpL3YwL29wZW5pZC9jYWxsYmFjayJ9.IvVMJNPxXyWXeGvm5-nGfFjnxQW2gC5z8MZebIcdwDI from 10.1.0.13:37080 by anonymous","time":"2019-03-04T06:43:38Z"} {"level":"error","msg":"unable to get identity token: unexpected response code from token endpoint: 502 - ","time":"2019-03-04T06:43:38Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/begin from 10.1.0.13:37126 by anonymous","time":"2019-03-04T06:43:44Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/begin from 10.1.0.13:37694 by anonymous","time":"2019-03-04T06:44:48Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/begin from 10.1.0.13:38384 by anonymous","time":"2019-03-04T06:46:04Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/callback?code=27018503-a917-47ce-b1e8-0efebf82647b\u0026state=eyJyZWRpcmVjdE5leHQiOiIiLCJyZWRpcmVjdFVSSSI6Imh0dHBzOi8vZHRyLndzZGMuZWRkcC5zcnYud2VzdHBhYy5jb20uYXUvYXBpL3YwL29wZW5pZC9jYWxsYmFjayJ9.LdS42ueYDB4VDU1TE_hLwfXEgFEElVoIZAPRsbijDOY from 10.1.0.13:38462 by anonymous","time":"2019-03-04T06:46:13Z"} {"level":"error","msg":"unable to get identity token: unexpected response code from token endpoint: 502 - ","time":"2019-03-04T06:46:13Z"} {"level":"info","msg":"Call of type GET to /api/v0/openid/callback?code=8fcc90d0-cb6e-42f5-9378-97327af36142\u0026state=eyJyZWRpcmVjdE5leHQiOiIiLCJyZWRpcmVjdFVSSSI6Imh0dHBzOi8vZHRyLndzZGMuZWRkcC5zcnYud2VzdHBhYy5jb20uYXUvYXBpL3YwL29wZW5pZC9jYWxsYmFjayJ9.IvVMJNPxXyWXeGvm5-nGfFjnxQW2gC5z8MZebIcdwDI from 10.1.0.13:42240 by anonymous","time":"2019-03-04T06:53:19Z"} {"level":"error","msg":"OpenID Connect authorization callback csrf redirect state key cookie not set","time":"2019-03-04T06:53:19Z"} {"level":"info","msg":"Starting tmp folder cleanup","time":"2019-03-04T07:03:35Z"} {"level":"info","msg":"No files to remove","time":"2019-03-04T07:03:35Z"} segment 2019/03/04 07:09:18 error sending request: Post https://api.segment.io/v1/batch: dial tcp 52.40.111.91:443: i/o timeout

Any clue what I am missing?