Closed hongbo-miao closed 2 years ago
hey @Hongbo-Miao,
this is the issue: OPAL cannot find the healthcheck policy file.
Critical: OPA health-check policy is enabled, but cannot find policy at /usr/local/lib/python3.8/site-packages/opal_client-0.1.15-py3.8.egg/opal_client/opa/healthcheck/opal.rego
As to why, i am suspecting it's because i did not add the policy file to the python package manifest. I will make sure and if so - i will fix it in the next version (which hopefully will be submitted tonight).
Did it work for you in docker compose?
@asafc thanks! Yup, the docker compose demo works for me.
Hey @Hongbo-Miao, i think i found the issue and it's indeed the manifest. What's weird, it seems the OPAL running in your k8s is being run from a different path. I suspect that you invoke OPAL differently in your k8s config.
I will fix it in the morning before releasing 0.1.16
Should be fixed in 0.1.16
Confirmed, the healthcheck has been fixed in 0.1.16! Thanks!
I followed How to use data update callbacks and OPA healthcheck policy and succeed running the docker-compose demo.
Now I am trying it in a Kubernetes cluster. My opal-server has set up JWT, and I generated one and added to opal-client. They work well and can communicate with each other.
First here is the opal-client log when it works well:
Now I tried to set up health check.
When I added
In my case, it is
However, I got this error in my opal-client log:
I also tried setting up
headers
, as my opal-server has set up the JWT. However, still no luck.Any clue? Thanks!