---
name: openshift-ts-ingress-errdsaiss
title: 'Ingress error: ERRDSAISS'
description: Troubleshoot Ingress DSAISS (Destination Service And Ingress Service Selector mismatch) errors.
last-updated: 2026-08-12
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/openshift?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Ingress error: ERRDSAISS
{: #ts-ingress-errdsaiss}
{: troubleshoot}
{: support}

[Virtual Private Cloud]{: tag-vpc} [Classic infrastructure]{: tag-classic-inf} [Satellite]{: tag-satellite}



Troubleshoot Ingress DSAISS (Destination Service And Ingress Service Selector mismatch) errors.
{: shortdesc}

You can use the `ibmcloud oc ingress status-report ignored-errors add` command to add an error to the ignored-errors list. Ignored errors still appear in the output of the `ibmcloud oc ingress status-report get` command, but are ignored when calculating the overall Ingress status.
{: tip}

When you check the status of your cluster's Ingress components by running the `ibmcloud oc ingress status-report get` command, you see an error similar to the following example.
{: tsSymptoms}


```sh
The external provider for the given subdomain has authorization issues (ERRDSAISS).
```
{: screen}


The Kubernetes Service is unable to access the external domain provider used for the given subdomain.
{: tsCauses}

Complete the following steps based on your external domain provider.
{: tsResolve}

- For domains provisioned with Cloud Internet Services, ensure that the service-to-service authorization is in place. For more information, see [Setting up domains with IBM Cloud Internet Services](https://cloud.ibm.com/docs/openshift?topic=openshift-ingress-domains&interface=cli&format=markdown#ingress-domain-cis). If you no longer want to use the domain you registered, then you can remove it by using the **`ibmcloud ks ingress domain rm --c CLUSTER --domain DOMAIN`** command.