Rancher AzureAd auth-provider issues (member explorer)

Rancher 2.x
1

Hi guys,
following setup:

  • Rancher 2.7.9 installed via helm chart (ha setup)

  • AzureAd auth-provider configured (allow any valid user)

problem:
At the user overview in downstream cluster (dashboard/c/c-m-jkscgtw2/explorer/members#cluster-membership) we experience problems with loading of the users like in this picture:

image
image944×380 116 KB

local user lead to 404 and azuread user lead to 500 (if logged in as azuread user). Azuread user also load extremly slow, when logged in as default admin we also get 500 but loading is faster.

I saw this in rancher deployment logs, which occures when you visit the member explorer:

2024/01/18 07:58:15 [ERROR] Panic serving api request: 
goroutine 29753488 [running]:
runtime/debug.Stack()
        /usr/lib64/go/1.19/src/runtime/debug/stack.go:24 +0x65
github.com/rancher/norman/api.(*Server).ServeHTTP.func1()
        /go/pkg/mod/github.com/rancher/norman@v0.0.0-20230426211126-d3552b018687/api/server.go:175 +0x75
panic({0x3c23680, 0x77899a0})
        /usr/lib64/go/1.19/src/runtime/panic.go:884 +0x212
github.com/rancher/rancher/pkg/auth/providers/azure/clients.azureMSGraphClient.userToPrincipal(...)
        /go/src/github.com/rancher/rancher/pkg/auth/providers/azure/clients/ms_graph_client.go:295
github.com/rancher/rancher/pkg/auth/providers/azure/clients.azureMSGraphClient.GetUser({_, _, _}, {_, _})
        /go/src/github.com/rancher/rancher/pkg/auth/providers/azure/clients/ms_graph_client.go:49 +0x15b
github.com/rancher/rancher/pkg/auth/providers/azure.(*Provider).getUserPrincipal(_, {_, _}, {_, _}, {{{0x457259a, 0x5}, {0xc04a07fde8, 0x17}}, {{0xc01f30fdd0, ...}, ...}, ...})

Do you have any ideas what the problem can be? If you need more info, i can try to provide :slight_smile:

kind regards,
Tobias