ibraheemalayan opened a new issue, #755: URL: https://github.com/apache/solr-operator/issues/755
Hi, I have a very simple SolrCloud config file as follows ```yaml # specs: https://apache.github.io/solr-operator/docs/solr-cloud/solr-cloud-crd.html apiVersion: solr.apache.org/v1beta1 kind: SolrCloud metadata: name: search-cluster spec: # change the date below to trigger a manual restart customSolrKubeOptions: podOptions: annotations: manualrestart: "2025-02-06T07:57:00Z" replicas: 2 solrJavaMem: -Xms512M -Xmx1G solrImage: tag: 9.8.0 solrSecurity: authenticationType: Basic dataStorage: persistent: reclaimPolicy: Delete pvcTemplate: spec: resources: requests: storage: 6Gi solrAddressability: podPort: 8983 commonServicePort: 8983 ``` as you can see, basic auth is supposed to be enabled, yet the cluster has no authentication. <img width="679" alt="Image" src="https://github.com/user-attachments/assets/a07aa96f-b0b9-4979-bbe0-3fcbe2462576"; /> <img width="881" alt="Image" src="https://github.com/user-attachments/assets/ce52640f-a751-4fdd-aa87-8cc3afe9bd9b"; /> I tried deleting the SolrCloud and recreating it multiple times ( also deleted all PVCs ), the security.json is always empty The bootstrape security.json secret is created but it seems like its never used. Here some debugging commands and their outputs, might help understand the issue: >```bash >kubectl get pods | grep solr >``` ``` search-cluster-solrcloud-0 1/1 Running 0 8m search-cluster-solrcloud-1 1/1 Running 0 15m search-cluster-solrcloud-zookeeper-0 1/1 Running 0 15m search-cluster-solrcloud-zookeeper-1 1/1 Running 0 14m search-cluster-solrcloud-zookeeper-2 1/1 Running 0 14m solr-operator-65bd76858c-dj54z 1/1 Running 0 4d12h solr-operator-zookeeper-operator-7cf584d8b6-5vlzr 1/1 Running 0 4d12h ``` >```bash >kubectl get secrets >``` ``` search-cluster-solrcloud-basic-auth kubernetes.io/basic-auth 2 16m search-cluster-solrcloud-security-bootstrap Opaque 3 16m sh.helm.release.v1.solr-operator.v1 helm.sh/release.v1 1 7d23h ``` >```bash >kubectl get secrets/search-cluster-solrcloud-basic-auth -o yaml >``` ``` apiVersion: v1 data: password: amkodUctamRWYTJIM3cpRg== username: azhzLW9wZXI= kind: Secret metadata: creationTimestamp: "2025-02-06T10:09:01Z" labels: solr-cloud: search-cluster name: search-cluster-solrcloud-basic-auth namespace: default ownerReferences: - apiVersion: solr.apache.org/v1beta1 blockOwnerDeletion: true controller: true kind: SolrCloud name: search-cluster uid: 0f94b8ff-134f-459c-903f-cc9a8312992e resourceVersion: "38390607" uid: feeb1481-474c-48bb-bbd4-4c3805e6a9bf type: kubernetes.io/basic-auth ``` >```bash > kubectl get secrets/search-cluster-solrcloud-security-bootstrap -o yaml > ``` ``` apiVersion: v1 data: admin: clUlcyVGQVtTQiN1aEdAUw== security.json: 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 sCiAgICAgICAgICB7ICJuYW1lIjogInNlY3VyaXR5LWVkaXQiLCAicm9sZSI6IFsiYWRtaW4iXSB9LAogICAgICAgICAgeyAibmFtZSI6ICJhbGwiLCAicm9sZSI6WyJhZG1pbiJdIH0KICAgICAgICBdCiAgICAgIH0KICAgIH0= solr: cV1QeVVsdkRHNkFySHAzSw== kind: Secret metadata: creationTimestamp: "2025-02-06T10:09:01Z" labels: solr-cloud: search-cluster name: search-cluster-solrcloud-security-bootstrap namespace: default ownerReferences: - apiVersion: solr.apache.org/v1beta1 blockOwnerDeletion: true controller: true kind: SolrCloud name: search-cluster uid: 0f94b8ff-134f-459c-903f-cc9a8312992e resourceVersion: "38390610" uid: cbdb9c8e-dde5-4c09-a9c2-157e6a4727ea type: Opaque ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
