Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

helm:Increasing number of servers with ACLs enabled fails #677

Closed
lkysow opened this issue Mar 4, 2020 · 2 comments
Closed

helm:Increasing number of servers with ACLs enabled fails #677

lkysow opened this issue Mar 4, 2020 · 2 comments
Labels
area/acls Related to ACLs

Comments

@lkysow
Copy link
Member

lkysow commented Mar 4, 2020

If the number of server replicas is increased, the new servers don't get ACL tokens applied to them and so they can't function properly.

The way the initial set of servers get their ACL tokens is via the server-acl-init Job that makes an agent token update API call. This is then stored on persistent disk for each of those servers. When a new server comes up as a result of increasing the number of replicas, it doesn't have an ACL token on disk and the server-acl-init job doesn't make the token update API call because it thinks the servers are already bootstrapped.

A workaround for now is to manually retrieve the agent-token from Consul and manually apply it to the new servers.
@tjhiggins
Copy link
Contributor

Having the same issue. Finding the acl management to be extremely fragile.

@t-eckert t-eckert changed the title Increasing number of servers with ACLs enabled fails helm:Increasing number of servers with ACLs enabled fails Aug 24, 2021
@t-eckert t-eckert transferred this issue from hashicorp/consul-helm Aug 24, 2021
lawliet89 pushed a commit to lawliet89/consul-k8s that referenced this issue Sep 13, 2021
@kschoche
Add acceptance tests for health checks on consul-ent (hashicorp#677)
7c3cdfc 
* Add acceptance tests for health checks on consul-ent
* update ci timeouts because of ns delete taking a while
* add helper function to make tests pass
@lkysow lkysow added the area/acls Related to ACLs label Nov 2, 2021
@lkysow lkysow mentioned this issue Nov 2, 2021
Merged
2 tasks
@lkysow
Copy link
Member Author

lkysow commented Nov 4, 2021

Closed by #832

@lkysow lkysow closed this as completed Nov 4, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
area/acls Related to ACLs
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@tjhiggins @lkysow