Closed esteban1983cl closed 3 years ago
Hi,
I was unable to reproduce the issue. I deployed the chart with these values:
❯ cat /tmp/values.yaml
extraSecrets:
load-definition:
load_definition.json: |
{
"vhosts": [
{
"name": "/"
}
],
"policies": [
{
"name": "ha-all",
"pattern": ".*\..*",
"vhost": "/",
"definition": {
"ha-mode": "all"
}
}
]
}
Then entered the container and authenticated without issues
I have no name!@rabet-rabbitmq-0:/$ rabbitmqctl authenticate_user user $RABBITMQ_PASSWORD
Authenticating user "user" ...
Success
Then deleted the pod and tried again
❯ kubectl delete pod rabet-rabbitmq-0
pod "rabet-rabbitmq-0" deleted
... After restarting
I have no name!@rabet-rabbitmq-0:/$ rabbitmqctl authenticate_user user $RABBITMQ_PASSWORD
Authenticating user "user" ...
Success
Is there any other thing you changed in the configuration?
Hi again, thanks for your help, I forgot share other details:
Install chart using this command line
helm upgrade --install
--namespace ${NAMESPACE} rabbitmq bitnami/rabbitmq
-f ./values-${CI_ENVIRONMENT_NAME}.yaml
--set auth.password=${RABBITMQ_PASSWORD}
--set auth.erlangCookie=${RABBITMQ_ERLANG_COOKIE}
--set ingress.hostname=rabbitmq-sai.${DOMAIN}
--version ${CHART_VERSION}
Just to confirm something. Does the password CHANGEME work? In case it is trying to use that authentication
Hello, with that configuration I get invalid credentials:
2021-03-19 14:31:45.006 [warning] <0.959.0> HTTP access denied: user 'user' - invalid credentials 2021-03-19 14:31:45.008 [warning] <0.961.0> HTTP access denied: user 'user' - invalid credentials 2021-03-19 14:31:45.009 [warning] <0.963.0> HTTP access denied: user 'user' - invalid credentials 2021-03-19 14:31:45.010 [warning] <0.965.0> HTTP access denied: user 'user' - invalid credentials 2021-03-19 14:31:45.013 [warning] <0.967.0> HTTP access denied: user 'user' - invalid credentials 2021-03-19 14:31:51.109 [warning] <0.964.0> HTTP access denied: user 'user' - invalid credentials
And error during starup in rabbitmq and many restarts
rabbitmq 14:31:12.59 ERROR ==> Couldn't change password for user 'user'. rabbitmq 14:31:12.60 INFO ==> Stopping RabbitMQ... rabbitmq 14:31:13.40 ERROR ==> Couldn't change password for user 'user'. rabbitmq 14:31:13.40 INFO ==> Stopping RabbitMQ... rabbitmq 14:31:17.70 ERROR ==> Couldn't change password for user 'user'. rabbitmq 14:31:17.70 INFO ==> Stopping RabbitMQ...
rabbitmq 14:31:22.43 Submit issues and feature requests at https://github.com/bitnami/bitnami-docker-rabbitmq/issues rabbitmq 14:31:22.43 rabbitmq 14:31:22.43 INFO ==> Starting RabbitMQ setup rabbitmq 14:31:22.44 INFO ==> Validating settings in RABBITMQ_* env vars.. rabbitmq 14:31:22.46 INFO ==> Initializing RabbitMQ... rabbitmq 14:31:22.48 INFO ==> Persisted data detected. Restoring... rabbitmq 14:31:22.49 INFO ==> RabbitMQ setup finished!
rabbitmq 14:31:22.50 INFO ==> Starting RabbitMQ
We should see what the issue with the password change error is. Could relaunch the chart with --set image.debug=true
? This should provide more insight about the error that appears.
We should see what the issue with the password change error is. Could relaunch the chart with
--set image.debug=true
? This should provide more insight about the error that appears.
It look well after install, so I'll kill pods and wait for start.
kubectl delete po -l app.kubernetes.io/instance=rabbitmq -n <namespace> --force --grace-period=0
Password changed :(
No answer about this ?
Hi,
This is very strange because this time it doesn't show the couldn't change password
error. It says that the password was changed without issues. I'm still unable to reproduce it, every time I delete the password works without issues.
It's true that I see this
2021-03-22 13:48:26.006 [info] <0.627.0> Applying definitions from file at '/app/load_definition.json'
2021-03-22 13:48:26.006 [info] <0.627.0> Asked to import definitions. Acting user: rmq-internal
2021-03-22 13:48:26.006 [info] <0.627.0> Importing concurrently 1 users...
2021-03-22 13:48:26.008 [info] <0.618.0> Successfully changed password for user 'user'
2021-03-22 13:48:26.010 [info] <0.618.0> Successfully set user tags for user 'user' to [administrator]
It seems that the password gets changed a second time. Anything in the definitions that could be causing this?
Just a note to let you know that @andresbono is working on fixing the issue. We will let you know any news on this
Just a note to let you know that @andresbono is working on fixing the issue. We will let you know any news on this
Thank you very much for all your support. I'll wait for the update.
This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.
Just a note to let you know that this should be fixed in the latest version of the chart.
Hello, It doesn't work, user and password are not set when use load definitions.
Hi,
In that case you should set the user and password in the load definitions file. Did you try that?
This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.
Hello everyone, I solve this issue using the following configuration:
I specified secrets to manage passwords and loadDefinitions:
auth:
username: user
existingPasswordSecret: rabbitmq-secrets
existingErlangSecret: rabbitmq-secrets
loadDefinition:
enabled: true
existingSecret: rabbitmq-load-definitions
load_definition.json
{
"vhosts": [
{
"name": "/"
}
],
"users": [
{
"name": "user",
"password": "xxxxxxxxxxx",
"tags": "administrator"
}
],
"policies": [
{
"name": "ha-all",
"pattern": ".*\..*",
"vhost": "/",
"definition": {
"ha-mode": "all"
}
}
],
"permissions": [
{
"user": "user",
"vhost": "/",
"configure": ".*",
"write": ".*",
"read": ".*"
}
]
}
Pickup my values.yaml for chart version 8.11.9
Awesome! Thanks for sharing!
This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.
Due to the lack of activity in the last 5 days since it was marked as "stale", we proceed to close this Issue. Do not hesitate to reopen it later if necessary.
Which chart: The name (and version) of the affected chart name: rabbitmq version: 8.11.3
Describe the bug I'm trying to use load_definitions to set a policy via extraSecrets helm chart field.
To Reproduce Steps to reproduce the behavior:
kubectl delete po -l app.kubernetes.io/instance=rabbitmq -n <namespace> --force --grace-period=0
kubectl logs -f -l app.kubernetes.io/instance=rabbitmq -n <namespace>
Expected behavior load definitions feature doesn't affect credentials.
Version of Helm and Kubernetes:
helm version
:kubectl version
:Additional context I tried to persist the credentials using the following load_definitions file but with not success: