apache / apache/solr-operator

Basic authentication remove/reset doesn't work.

Open
#542 4 comments 0 reactions 0 assignees View on GitHub
question security
Dominant language
Go
Stars
283
Forks
148
PR merge metrics
No merged PRs in 30d

Description

I did set security as per below.

solrOptions:
security:
authenticationType: Basic

It generated bootstrap and auth secret and authentication and authorization was working fine. Somehow admin user doesn't able to access "Security" in admin UI "You do not have permission to view the security panel.". Though admin role does have permission "security-read" and "security-edit".

To reset authentication, I removed the secrets and did helm upgrade and restart all solr cloud pods and operator pod. It generated new bootstrap and auth but still new credentials doesn't work but old credentials are working and persists "Security" access issue.

Even I removed SolrOptions- security and again applied helm upgrade but it still has authentication enabled and old (first time) credentials are working.

How can I remove and/or reset authentication/authorization ?

Contributor guide

No contributing guide indexed for this repository

Research direction

Reproduce the reported sequence using solrOptions.security.authenticationType: Basic, generated secrets, Helm upgrades, and restarts of the Solr Cloud and operator pods. Check whether removing the secrets or the security configuration changes the active credentials and access to the Security panel; done means authentication can be reset or removed as documented by the observed behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
helm, kubernetes
Domain
authentication, infrastructure, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.