confluentinc / confluent-kubernetes-examples

Example scenario workflows for Confluent for Kubernetes
Apache License 2.0
47 stars 178 forks source link

Got error related to secrets when applied confluent-platform-production.yaml #51

Open skri47 opened 3 years ago

skri47 commented 3 years ago

I have applied what i got from the repo but unable to pass those errors can I know to fix these issues?

image

skri47 commented 3 years ago

@ptyagii @MosheBlumbergX @rohit2b Can anyone please help me with the above error? Thanks

skri47 commented 3 years ago

I can only see these below pods and others are not created because of the above issue. image

skri47 commented 3 years ago

I have used the default secrets which are in the repo. The password is 'kafka-secret' I believe this should match with the regex it is expecting but not sure why I see those errors

jcrabb-confluent commented 3 years ago

@skri47 can you email me your plain.txt file? Don't forget to configure this for all of the other resources (connect, control center, etc) also!

https://docs.confluent.io/operator/current/co-authenticate.html#configure-confluent-components-to-authenticate-to-ak-using-sasl-plain

MosheBlumbergX commented 3 years ago

making the answer more public, we suggest that there is a hidden/return character in the initial text file, a good method to test is to run the create secret with --v=9, for example:

kubectl create secret generic cloud-sr-access \
  --from-file=basic.txt=creds-schemaRegistry-user.txt --v=9

This gives you the based64 encoded string, you can then decode it and see what is being passed.

skri47 commented 3 years ago

@MosheBlumbergX That was resolved by removing the new line from the secret ref files and redeploying the environment, But currently now I see the following pods ( connect, controlcenter, ksqldb and schema registry) got created but they are running in CrashLoopBackOff status. Below are the logs for that.

confluent_rolebinding_error confluent_connect_issue confluent_ksql_issue confluent_controlcenter_error connect_schemaregistry_issue kubectl_pods
ptyagii commented 3 years ago

hey @skri47 this seems like an ACL issue, please check https://docs.confluent.io/platform/current/kafka/authorization.html and https://docs.confluent.io/platform/current/kafka/authorization.html#additional-information