apache / apache/solr-operator

Backup not working with Service accounts using Web identity Tokens

Open
#786 7 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
283
Forks
148
PR merge metrics
No merged PRs in 30d

Description

I have noticed that the backup functionality does not work when I use a service account with web identity token. I get the error message below.

ERROR (OverseerThreadFactory-54-thread-3) [c:Collection s: r: x: t:] o.a.s.c.a.c.CollectionHandlingUtils Collection Collection, operation backup failed => org.apache.solr.s3.S3Exception: An AmazonServiceException was thrown! [serviceName=S3] [awsRequestId=56HQCK517V8WD2EE] [httpStatus=403] [s3ErrorCode=null] [message=null]
I also get a 400 error on some occassions.

I am currently running on solr version 9.8.1 and solr operator v0.8.1

I saw a similar thread on https://github.com/apache/solr-operator/issues/475 and apparently it has been resolved on versions 8.11 and higher.

Is there any part of the back up process I may be missing when working with Web Identity token?

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the backup configuration for Kubernetes service accounts with web identity tokens in Solr 9.8.1 and solr-operator v0.8.1. Compare the behavior and resolution described in solr-operator issue 475, then reproduce the backup against S3 while checking the reported 403 and 400 errors. Done means backups succeed with this authentication setup.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, go, kubernetes
Domain
backend, cloud, devops
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.