844600078504951838 #spicedb

Channels

spicedb

test-forum

zanzibar

vroldanbet

11/24/2022, 8:35 AM

so the difference is you are specifying the relation in the subject

Yansong

11/24/2022, 8:37 AM

let me have one try

Yansong

11/24/2022, 8:37 AM

thank you so much

Perseus

11/24/2022, 8:47 AM

does the otel endpoint have to support TLS? tried to set these values in my spicedbcluster config

otelInsecure: "true"
    otelEndpoint: <something>
    otelProvider: otlphttp

but it continues to try to access

https://

at the collector endpoint

vroldanbet

11/24/2022, 8:49 AM

which version of SpiceDB are you using?

Perseus

11/24/2022, 8:50 AM

ahhh ignore this. i think it worked after adding the quotes. i'd previously done

otelInsecure: true

in the YAML config, but didnt restart after changing it

"true"

Perseus

11/24/2022, 8:51 AM

i was looking through the list of flags the

spicedb serve

command takes, and the otel-insecure didnt take any values, just seemed to be a flag

vroldanbet

11/24/2022, 8:52 AM

glad to hear it sorted out! What setup are you using for traces, out of curiousity?

vroldanbet

11/24/2022, 8:53 AM

(if you can share, ofc)

Perseus

11/24/2022, 9:03 AM

in the process of setting up performance monitoring specifically to test out the performance for spicedb (and hopefully spread out the stack for the entire org to use) using grafana tempo right now

vroldanbet

11/24/2022, 9:04 AM

what datastore are you planning to use?

Perseus

11/24/2022, 9:04 AM

they have an s3 storage layer, so using that

vroldanbet

11/24/2022, 9:05 AM

oh, sorry, I was referring to the spicedb datastore 😅

Perseus

11/24/2022, 9:05 AM

ohh haha, postgres - running on RDS

vroldanbet

11/24/2022, 9:09 AM

nice

Perseus

11/24/2022, 9:09 AM

is there a way to stop health check traces from being pushed to the collector?

vroldanbet

11/24/2022, 9:09 AM

unfortunately not 😢 tracing is enabled for the whole gRPC API, including health check. Would you mind opening an issue? I think it makes sense to disable tracing there.

Perseus

11/24/2022, 9:13 AM

yup yup! will do that. i'd also like to raise a documentation PR for the otel endpoint configuration. had to go to quite a few places to figure it out (looked through the otel implementation PR, then found the operator config docs where it said that it would take every flag that can be passed to the

spicedb serve

command and then had to install that and check which flags were available) - not sure if I missed a place in the docs where this is already laid out

vroldanbet

11/24/2022, 9:15 AM

yeah that's a great point, there is no great configuration around it. Will be happy to review any PRs! 🙇🏻‍♂️

romil

11/24/2022, 9:49 AM

Hello, Trying to use the example App.java to evaluate some of the functionality .

https://github.com/authzed/authzed-java/blob/main/examples/v1/App.java

If I am running Spicedb locally via docker container, what should be the value of

private static final String target = "localhost:50051";

as I keep getting below exception upon running the sample ov 24, 2022 3:16:26 PM v1.App writeSchema INFO: Writing schema... Nov 24, 2022 3:16:26 PM v1.App writeSchema WARNING: RPC failed: UNAVAILABLE: io exception Channel Pipeline: [SslHandler#0, ProtocolNegotiators$ClientTlsHandler#0, WriteBufferingAndExceptionHandler#0, DefaultChannelPipeline$TailContext#0] Nov 24, 2022 3:16:26 PM v1.App readSchema INFO: Reading schema... Nov 24, 2022 3:16:26 PM v1.App readSchema WARNING: RPC failed: UNAVAILABLE: io exception Logs upon starting the container {"level":"info","upstream":":50051","time":"2022-11-24T09:45:57Z","message":"starting REST gateway"} {"level":"info","addr":":8443","service":"http","insecure":true,"time":"2022-11-24T09:45:57Z","message":"http server started serving"} {"level":"info","addr":":9090","service":"metrics","insecure":true,"time":"2022-11-24T09:45:57Z","message":"http server started serving"} {"level":"info","addr":":8080","service":"dashboard","insecure":true,"time":"2022-11-24T09:45:57Z","message":"http server started serving"} {"level":"info","interval":"1h0m0s","endpoint":"https://telemetry.authzed.com","next":"3m28s","time":"2022-11-24T09:45:57Z","message":"telemetry reporter scheduled"} Code Snippet which throws exception public static void main(String[] args) { ManagedChannel channel = ManagedChannelBuilder .forTarget(target) //.useTransportSecurity() .build(); try { App client = new App(channel);

vroldanbet

11/24/2022, 9:56 AM

👋🏻mind sharing you you are running the docker container?

vroldanbet

11/24/2022, 9:56 AM

(command)

romil

11/24/2022, 9:57 AM

yes ,

docker run -p 50051:50051 -p 8443:8443 authzed/spicedb serve  --http-enabled --grpc-preshared-key "globalschema" --experiment-enable-caveats=true

vroldanbet

11/24/2022, 9:59 AM

I don't seem to see in the logs the message indicating the gRPC server is running. It should say something like

9:58AM INF grpc server started serving addr=:50051 insecure=true network=tcp service=grpc workers=0

vroldanbet

11/24/2022, 10:00 AM

let's maybe force the spicedb container version? we push the

latest

tag set AFAIK, so it may be an old version

vroldanbet

11/24/2022, 10:00 AM

docker run -p 50051:50051 -p 8443:8443 authzed/spicedb@v1.15.0 serve  --http-enabled --grpc-preshared-key "globalschema" --experiment-enable-caveats=true

romil

11/24/2022, 10:01 AM

have pulled in latest docker image so , but let me try with specific version

vroldanbet

11/24/2022, 10:02 AM

this is the log output I get with your flags:

10:02AM INF configured logging async=false format=auto log_level=info provider=zerolog
10:02AM INF configured opentelemetry tracing endpoint= insecure=false provider=none service=spicedb v=0
10:02AM WRN not running a released version of SpiceDB version=
10:02AM INF using memory datastore engine
10:02AM WRN in-memory datastore is not persistent and not feasible to run in a high availability fashion
10:02AM INF request hedging enabled hedgingQuantile=0.95 initialSlowRequest=10ms maxRequests=1000000
10:02AM INF configured namespace cache maxCost="16 MiB" metrics=false numCounters=1000
10:02AM INF configured dispatch cache maxCost="5.6 GiB" metrics=false numCounters=10000
10:02AM WRN experimental caveats support enabled
10:02AM INF grpc server started serving addr=:50051 insecure=true network=tcp service=grpc workers=0
10:02AM INF starting REST gateway upstream=:50051
10:02AM INF http server started serving addr=:8443 insecure=true service=http
10:02AM INF http server started serving addr=:8080 insecure=true service=dashboard
10:02AM INF http server started serving addr=:9090 insecure=true service=metrics
10:02AM INF telemetry reporter scheduled endpoint=https://telemetry.authzed.com interval=1h0m0s next=4m14s

vroldanbet

11/24/2022, 10:03 AM

(running from compiled sources tho)

romil

11/24/2022, 10:06 AM

Same observation , and as you see in the last logs , it stats that

INF grpc server started serving addr=:50051 insecure=true network=tcp service=grpc workers=0

Does it mean grpc is on 50051 ?