Loahrs commented on issue #427:
URL:
https://github.com/apache/pulsar-helm-chart/issues/427#issuecomment-1893563413
I am also currently encountering this issue with a "fresh" pulsar deployment
from the helm chart. My error message contains a different role, but it's
probably the same issue:
`2024-01-16T10:18:00,153+0000 [pulsar-io-4-2] WARN
org.apache.pulsar.broker.authorization.AuthorizationService -
[/10.224.1.10:45766] Illegal combination of role [proxy-admin] and
originalPrincipal [admin]: cannot specify originalPrincipal when connecting
without valid proxy role.
`
My client tries to connect via "pulsar+ssl" and uses the "admin"-Token for
authentication. The client shows following error:
```
2024-01-16 12:14:34.600 INFO [23564]
D:\a\pulsar-client-cpp\pulsar-client-cpp\lib\ClientConnection:190 | [<none> ->
pulsar+ssl://<proxy-url>:6651] Create ClientConnection, timeout=10000
2024-01-16 12:14:34.602 INFO [23564]
D:\a\pulsar-client-cpp\pulsar-client-cpp\lib\ConnectionPool:114 | Created
connection for pulsar+ssl://<proxy-url>:6651-0
2024-01-16 12:14:34.617 INFO [31320]
D:\a\pulsar-client-cpp\pulsar-client-cpp\lib\ClientConnection:404 |
[192.168.178.20:61304 -> <proxy-url>:6651] Connected to broker
2024-01-16 12:14:34.682 ERROR [31320]
D:\a\pulsar-client-cpp\pulsar-client-cpp\lib\ClientConnection:1572 |
[192.168.178.20:61304 -> <proxy-url>:6651] Failed partition-metadata lookup
req_id: 1 error: Retryable msg:
org.apache.pulsar.client.api.PulsarClientException: Connection already closed
2024-01-16 12:14:34.682 INFO [31320]
D:\a\pulsar-client-cpp\pulsar-client-cpp\lib\ClientConnection:1325 |
[192.168.178.20:61304 -> <proxy-url>:6651] Connection disconnected (refCnt: 2)
2024-01-16 12:14:34.682 INFO [31320]
D:\a\pulsar-client-cpp\pulsar-client-cpp\lib\ConnectionPool:129 | Remove
connection for pulsar+ssl://<proxy-url>:6651-0
2024-01-16 12:14:34.682 INFO [31320]
D:\a\pulsar-client-cpp\pulsar-client-cpp\lib\RetryableOperation:114 |
Reschedule
get-partition-metadata-persistent://<my-tenant>/<namespace>/task-submitted for
100 ms, remaining time: 29900 ms
```
If I understand correctly, this will be solved by adding:
```
broker.configData:
proxyRoles: 'proxy-admin'
```
to the .yaml file, run a `helm upgrade pulsar apache/pulsar -f pulsar.yaml`
and probably restarting the pods?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
