Delete default token - Githubissues

Sftobias commented 5 months ago

I've tried the roles on a new deployment and they don't seem to work correctly. The problem is on the consul server. The rest of the nodes appear to see each other, while the consul server cannot see any of them

method=GET url=/v1/operator/raft/configuration from=127.0.0.1:55712 error="Permission denied: anonymous token lacks permission 'operator:read'. The anonymous token is used implicitly when a request does not sp> method=GET url=/v1/acl/policy/name/nomad-server from=127.0.0.1:39550 error="Requested policy does not exist: ACL not found" method=GET url=/v1/acl/policy/name/nomad-client from=127.0.0.1:39558 error="Requested policy does not exist: ACL not found"

ubuntu@dev-node-ifca-0:~$ consul members
ubuntu@dev-node-ifca-0:~$ consul operator raft list-peers
Error getting peers: Failed to retrieve raft configuration: Unexpected response code: 403 (Permission denied: anonymous token lacks permission 'operator:read'. The anonymous token is used implicitly when a request does not specify a token.)

ubuntu@dev-node-ifca-1:~$ consul members
Node             Address             Status  Type    Build   Protocol  DC            Partition  Segment
dev-node-ifca-0  172.16.44.17:8301   alive   server  1.17.1  2         ai4os-consul  default    <all>
dev-node-ifca-1  172.16.44.163:8301  alive   client  1.17.1  2         ai4os-consul  default    <default>
dev-node-ifca-2  172.16.44.212:8301  alive   client  1.17.1  2         ai4os-consul  default    <default>
dev-node-ifca-3  172.16.44.169:8301  alive   client  1.17.1  2         ai4os-consul  default    <default>
ubuntu@dev-node-ifca-1:~$ nomad node status
ID        Node Pool  DC            Name             Class   Drain  Eligibility  Status
99de90f6  default    ifca-ai4eosc  dev-node-ifca-2  <none>  false  eligible     ready
48d5a598  default    ifca-ai4eosc  dev-node-ifca-1  <none>  false  eligible     ready
38fa7047  default    ifca-ai4eosc  dev-node-ifca-3  <none>  false  eligible     ready
ubuntu@dev-node-ifca-1:~$