apache / solr-operator

Official Kubernetes operator for Apache Solr
https://solr.apache.org/operator
Apache License 2.0
242 stars 112 forks source link

Missing permission for "/admin/info/system" endpoint in security.json template in the SolrCloud CRD documentation #679

Closed dan-niles closed 3 months ago

dan-niles commented 5 months ago

I noticed that the default security.json template is missing the permission for the /admin/info/system endpoint, in the SolrCloud CRD documentation.

I was trying to deploy Solr with a custom security.json using the bootstrapSecurityJson option. I used the security.json template provided in the SolrCloud CRD documentation, but my Solr pods weren't starting. So I used the other option of having the operator bootstrap a security.json, and it worked.

When I compared the security.json generated by the operator and the template provided in the documentation, the following permission object for the /admin/info/system endpoint was missing in the docs.

{
  "name": "k8s-probe-0",
  "role": null,
  "collection": null,
  "path": "/admin/info/system"
}

Once I included this in my custom security json, my pods were starting up, and Solr was working correctly.