strimzi / strimzi-kafka-operator

Apache Kafka® running on Kubernetes
https://strimzi.io/
Apache License 2.0
4.82k stars 1.29k forks source link

[Bug]: Kafkauser is not getting ready state #10572

Closed sonukumar0205 closed 1 month ago

sonukumar0205 commented 1 month ago

Bug Description

We are trying to install Kafka using strimzi 0.43 operator but kafkauser gets stuck with Not Ready state. As a result of this when we are trying to do kafka configuration in Maximo application suite getting error as Broken Transport Failure error. We are trying to install this on AWS ROSA (4.14.x) using ansible playbook. Below is the yaml file getting created for kafka and kafkauser:

**Kafka***** apiVersion: kafka.strimzi.io/v1beta2 kind: Kafka metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: '{"apiVersion":"kafka.strimzi.io/v1beta2","kind":"Kafka","metadata":{"name":"maskafka","namespace":"strimzi"},"spec":{"entityOperator":{"template":{"pod":{"tmpDirSizeLimit":"1024Mi"}},"tlsSidecar":{"resources":{"limits":{"cpu":"500m","memory":"128Mi"},"requests":{"cpu":"200m","memory":"64Mi"}}},"topicOperator":{"logging":{"loggers":{"rootLogger.level":"INFO"},"type":"inline"},"resources":{"limits":{"cpu":"500m","memory":"512Mi"},"requests":{"cpu":"250m","memory":"512Mi"}},"zookeeperSessionTimeoutSeconds":30},"userOperator":{"logging":{"loggers":{"rootLogger.level":"INFO"},"type":"inline"},"resources":{"limits":{"cpu":"500m","memory":"512Mi"},"requests":{"cpu":"250m","memory":"512Mi"}}}},"kafka":{"authorization":{"superUsers":["admin"],"type":"simple"},"config":{"auto.create.topics.enable":false,"default.replication.factor":3,"log.cleaner.enable":true,"log.cleanup.policy":"delete","log.message.format.version":"3.7.0","log.retention.bytes":1073741824,"log.retention.hours":24,"log.segment.bytes":268435456,"min.insync.replicas":2,"offsets.topic.replication.factor":3,"transaction.state.log.min.isr":2,"transaction.state.log.replication.factor":3,"unclean.leader.election.enable":true},"jvmOptions":{"-Xms":"3072m","-Xmx":"3072m"},"listeners":[{"authentication":{"type":"scram-sha-512"},"name":"tls","port":9094,"tls":true,"type":"route"},{"authentication":{"type":"scram-sha-512"},"name":"internal","networkPolicyPeers":[{"namespaceSelector":{}}],"port":9093,"tls":true,"type":"internal"}],"logging":{"type":"external","valueFrom":{"configMapKeyRef":{"key":"kafka-log4j.properties","name":"kafka-logging-config"}}},"metricsConfig":{"type":"jmxPrometheusExporter","valueFrom":{"configMapKeyRef":{"key":"kafka-metrics-config.yml","name":"kafka-metrics-config"}}},"replicas":3,"resources":{"limits":{"cpu":"2","memory":"4Gi"},"requests":{"cpu":"1","memory":"4Gi"}},"storage":{"type":"jbod","volumes":[{"class":"gp3-csi","deleteClaim":true,"id":0,"size":"100Gi","type":"persistent-claim"}]},"template":{"pod":{"affinity":{"podAntiAffinity":{"preferredDuringSchedulingIgnoredDuringExecution":[{"podAffinityTerm":{"labelSelector":{"matchExpressions":[{"key":"strimzi.io/name","operator":"In","values":["maskafka-kafka"]}]},"topologyKey":"kubernetes.io/hostname"},"weight":100}]}},"tmpDirSizeLimit":"100Mi"}},"version":"3.7.0"},"kafkaExporter":{"enableSaramaLogging":true,"groupRegex":".","logging":"debug","resources":{"limits":{"cpu":"500m","memory":"128Mi"},"requests":{"cpu":"200m","memory":"64Mi"}},"topicRegex":"."},"zookeeper":{"jvmOptions":{"-Xms":"768m","-Xmx":"768m"},"metricsConfig":{"type":"jmxPrometheusExporter","valueFrom":{"configMapKeyRef":{"key":"zookeeper-metrics-config.yml","name":"kafka-metrics-config"}}},"replicas":3,"resources":{"limits":{"cpu":"1","memory":"1Gi"},"requests":{"cpu":"0.5","memory":"1Gi"}},"storage":{"class":"gp3-csi","deleteClaim":true,"size":"10Gi","type":"persistent-claim"},"template":{"pod":{"affinity":{"podAntiAffinity":{"preferredDuringSchedulingIgnoredDuringExecution":[{"podAffinityTerm":{"labelSelector":{"matchExpressions":[{"key":"strimzi.io/name","operator":"In","values":["maskafka-zookeeper"]}]},"topologyKey":"kubernetes.io/hostname"},"weight":100}]}},"tmpDirSizeLimit":"100Mi"}}}}}' creationTimestamp: '2024-09-12T17:19:41Z' generation: 1 managedFields:

apiVersion: kafka.strimzi.io/v1beta2 kind: KafkaUser metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: '{"apiVersion":"kafka.strimzi.io/v1beta2","kind":"KafkaUser","metadata":{"labels":{"strimzi.io/cluster":"maskafka"},"name":"masuser","namespace":"strimzi"},"spec":{"authentication":{"password":{"valueFrom":{"secretKeyRef":{"key":"password","name":"maskafka-credentials"}}},"type":"scram-sha-512"},"authorization":{"acls":[{"host":"","operation":"All","resource":{"name":"","patternType":"prefix","type":"topic"}},{"host":"","operation":"All","resource":{"name":"","patternType":"prefix","type":"group"}},{"host":"","operation":"All","resource":{"name":"","patternType":"prefix","type":"cluster"}},{"host":"","operation":"All","resource":{"name":"","patternType":"literal","type":"topic"}},{"host":"","operation":"All","resource":{"name":"","patternType":"literal","type":"group"}},{"host":"","operation":"All","resource":{"name":"","patternType":"literal","type":"cluster"}}],"type":"simple"}}}' resourceVersion: '45255504' name: masuser uid: 99676939-50c2-4146-b4e3-23421360f3d9 creationTimestamp: '2024-09-12T17:19:43Z' generation: 1 managedFields:

Steps to reproduce

No response

Expected behavior

No response

Strimzi version

0.43.0

Kubernetes version

kubernetes v1.29/openshift 4.14

Installation method

YAML File

Infrastructure

AWS ROSA

Configuration files and logs

No response

Additional context

No response

sonukumar0205 commented 1 month ago

Below is the secret that is getting created but kafkauser is not able to take those secrets:

kind: Secret apiVersion: v1 metadata: name: maskafka-credentials namespace: strimzi uid: 08ca0efd-428a-4815-ba75-44283e2fc87d resourceVersion: '45252109' annotations: kubectl.kubernetes.io/last-applied-configuration: '{"apiVersion":"v1","data":{"password":"MDQxMjNxeWtrYng1M2Z2cA==","username":"bWFzdXNlcg=="},"kind":"Secret","metadata":{"name":"maskafka-credentials","namespace":"strimzi"},"type":"Opaque"}' managedFields: