sctool: cluster requires CQL authentication but username/password was not set

[rwnd-bradley]

I am running the scylla helm stack in kubernetes (scylla-operator, scylla-manager, scylla), I have automated backups with s3 that are working. When I try to use the sctool restore command on my cluster, I cannot due to the following error (command is minimal to reproduce, other arguments do not change the outcome):

scylla@scylla-manager-77dd86f7b9-zxmhq:/$ sctool restore -c scylla/scylla --location s3:scylla-backup --dry-run
Error: get restore target, units and views: create worker: get CQL cluster session: cluster requires CQL authentication but username/password was not set

I do have the password authenticator enabled on the scylla cluster:

apiVersion: v1
kind: ConfigMap
metadata:
  name: scylla-config
  namespace: scylla
data:
  scylla.yaml: |
    authenticator: PasswordAuthenticator
    authorizer: CassandraAuthorizer

so I assume that scylla-manager requires some cql user credentials? if this is so, I cannot find any documentation regarding it, please advise.

scylla version: 5.4.5 scylla agent version: 3.2.7 scylla manager version: 3.2.7 scylla operator version: 1.12

[karol-kokoszka]

Hey @rwnd-bradley, cluster credentials are indeed one of the requirements for the restore procedure to work. It's mentioned in the part of the Scylla Manager documentation https://manager.docs.scylladb.com/stable/restore/restore-tables.html .

CQL credentials must be added with sctool to the clusters managed by the Scylla Manager. https://manager.docs.scylladb.com/stable/sctool/cluster.html#cluster-add https://manager.docs.scylladb.com/stable/sctool/cluster.html#cluster-update

Let me transfer this issue to the Scylla-Operator team, as it looks you are using k8s env.

[karol-kokoszka]

OK, I cannot transfer it. @zimnx @rzetelskik Could you please take a look at this issue ? Maybe operator misses some info (or redirection) in the documentation ?

[rwnd-bradley]

Updating the cluster with credentials does indeed fix this issue 😄. I had overlooked this since the cluster was automatically registered. Thank you.

[rzetelskik]

@rwnd-bradley from the operator we can't securely set up CQL username/password when integrating the cluster with Scylla Manager. It should, however, be covered in the docs, but it looks like none of the pages related to Scylla Manager integration cover it at this time. I'll log an issue with Scylla Operator repository to cover it.

[karol-kokoszka]

Thanks @rzetelskik , so I'm closing this one.