PowerFlex 4.X: PFMP UI login failure - Failure to initialize - User has no permissions to view this page

Error Message:

Failure to initialize

User has no permissions to view this page

Keycloak logs show this.

2024-04-15 16:49:00,976 ERROR [org.jgroups.protocols.JDBC_PING] (jgroups-915,keycloak-0-18534) JGRP000115: Could not open connection to database: org.postgresql.util.PSQLException: Connection to postgres-ha-pgbouncer.powerflex.svc.cluster.local:5432 refused. Check that the hostname and port are correct and that the postmaster is accepting TCP/IP connections. 

SSO pod shows

2024-04-16T06:33:32.230Z ERROR 1 --- [io-8083-exec-33] com.dell.sso.clients.KeycloakClient      : update token request failed 400 Bad Request: "{"error":"invalid_grant","error_description":"Session not active"}"

org.springframework.web.client.HttpClientErrorException$BadRequest: 400 Bad Request: "{"error":"invalid_grant","error_description":"Session not active"}"
        at org.springframework.web.client.HttpClientErrorException.create(HttpClientErrorException.java:103) ~[spring-web-6.1.5.jar:6.1.5] 

2024-04-16T06:33:32.230Z ERROR 1 --- [io-8083-exec-33] com.dell.sso.clients.KeycloakClient : update token request failed 400 Bad Request: "{"error":"invalid_grant","error_description":"Session not active"}" org.springframework.web.client.HttpClientErrorException$BadRequest: 400 Bad Request: "{"error":"invalid_grant","error_description":"Session not active"}"

2024-04-16T12:00:07.330Z ERROR 1 --- [io-8083-exec-31] com.dell.sso.clients.KeycloakClient      : update token request failed 400 Bad Request: "{"error":"invalid_grant","error_description":"Token is not active"}" 

Keycloak issue fails with "too many redirects" showing in logs. This has been reported in several keycloak forums when using keycloak behind reverse proxy (Ingress) and a viable fix is not known.

Restart keycloak pods in k8. Wait for the status command to return to the shell, then the user can successfully log in to the UI.

kubectl rollout restart sts -n powerflex keycloak
kubectl rollout status sts -n powerflex keycloak