Backup not working with Service accounts using Web identity Tokens
- Dominant language
- Go
- Stars
- 283
- Forks
- 148
- PR merge metrics
- No merged PRs in 30d
Description
I have noticed that the backup functionality does not work when I use a service account with web identity token. I get the error message below.
ERROR (OverseerThreadFactory-54-thread-3) [c:Collection s: r: x: t:] o.a.s.c.a.c.CollectionHandlingUtils Collection Collection, operation backup failed => org.apache.solr.s3.S3Exception: An AmazonServiceException was thrown! [serviceName=S3] [awsRequestId=56HQCK517V8WD2EE] [httpStatus=403] [s3ErrorCode=null] [message=null]
I also get a 400 error on some occassions.
I am currently running on solr version 9.8.1 and solr operator v0.8.1
I saw a similar thread on https://github.com/apache/solr-operator/issues/475 and apparently it has been resolved on versions 8.11 and higher.
Is there any part of the back up process I may be missing when working with Web Identity token?
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reviewing the backup configuration for Kubernetes service accounts with web identity tokens in Solr 9.8.1 and solr-operator v0.8.1. Compare the behavior and resolution described in solr-operator issue 475, then reproduce the backup against S3 while checking the reported 403 and 400 errors. Done means backups succeed with this authentication setup.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, go, kubernetes
- Domain
- backend, cloud, devops
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100