Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TestClients doesn't work with active Authentication on Pulsar cluster side #94

Open
dan1el-k opened this issue Aug 24, 2023 · 0 comments

Comments

@dan1el-k
Copy link

dan1el-k commented Aug 24, 2023

When JWT authentication is enabled on the proxy and broker side, the "Test Clients" couldn't connect to the cluster anymore.
IT seems that not the same JWT token(actually None) is used to connect to the Websocket as it is used for connecting to the broker for the rest of the pulsar-admin-console.

Error of proxy-wss container:

2023-08-24T11:02:42,775+0000 [pulsar-websocket-web-1-6] WARN org.apache.pulsar.websocket.AbstractWebSocketHandler - [100.64.0.9:43314] Failed to authenticated WebSocket client <none> 
config:
    auth_mode: k8s
    cluster_name: prod01
    oauth_client_id: "pulsar-admin-console"
    host_overrides:
      pulsar: "pulsar+ssl://pulsar-prod01.<base-domain>:6651"
      ws: "wss://pulsar-prod01.<base-domain>:8001"
      http: "https://pulsar-prod01.<base-domain>:8443"
    server_config:
      pulsar_url: "https://pulsar-prod01.<base-domain>8443"
      websocket_url: "wss://pulsar-prod01.<base-domain>:8001"
      token_path: "/pulsar/tokens/admin-console-token/token"
      ssl:
        enabled: false
        hostname_validation: false
    kubernetes:
      k8s_namespace: prod01-pulsar

additionalVolumes:
    - name: token-keys
      secret:
        secretName: prod01-pulsar-token-asymmetric-key
        items:
          - key: PUBLICKEY
            path: token/public.key
        defaultMode: 420
    - name: admin-console-token
      secret:
        secretName: prod01-pulsar-token-nr-com-prod-adm-m-2m-t
        items:
          - key: TOKEN
            path: admin-console-token/token
        defaultMode: 420
    - name: token-private-key
      secret:
        secretName: token-private-key
  additionalVolumeMounts:
    - name: admin-console-token
      mountPath: "/pulsar/tokens"
      readOnly: true
    - name: token-keys
      mountPath: "/pulsar/keys"
      readOnly: true
´´´
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant