search

scylladb / scylla-operator

The Kubernetes Operator for ScyllaDB
https://operator.docs.scylladb.com/
Apache License 2.0
324 stars 159 forks source link

Scylla config not getting applied #2003

Open vivekbnipf opened 4 days ago

vivekbnipf commented 4 days ago

What happened?

Auth is not getting enabled:

https://operator.docs.scylladb.com/stable/generic.html

kubectl create configmap scylla-config -n scylla --from-file=21_scylla_config_map.yaml authenticator: PasswordAuthenticator authorizer: CassandraAuthorizer

kubectl rollout restart -n scylla statefulset/simple-cluster-us-east-1-us-east-1a

PasswordAuthenticator is not getting applied.

cqlsh> LIST ROLES; Unauthorized: Error from server: code=2100 [Unauthorized] message="You have to be logged in and not anonymous to perform this request"

also, nodes etc/scylla/scylla.yaml does not show PasswordAuthenticator.

What did you expect to happen?

Scylla config to get applied, so auth works.

How can we reproduce it (as minimally and precisely as possible)?

Follow this https://operator.docs.scylladb.com/stable/generic.html

Scylla Operator version

latest

Kubernetes platform name and version

```console $ kubectl version # paste output here ``` kubectl version Client Version: v1.30.2 Kustomize Version: v5.0.4-0.20230601165947-6ce0bf390ce3 Server Version: v1.30.1 Kubernetes platform info:

Please attach the must-gather archive.

The cluster works fine.

Anything else we need to know?

The cluster works fine. Auth is not getting enabled.

tnozicka commented 3 days ago

Please attach the must-gather archive.

The cluster works fine.

This is directly contradicting the nature of your issue as a bug and claiming that auth is not getting enabled.

This all depends on how you have created the CM and the ScyllaCluster naming / options for CM name, which is exactly what the must-gather allows us to inspect. Also the template say it's mandatory, so please collect it.