Hey guys I have a small issue
# spicedbf
Farhad Nowzari
10/09/2023, 1:06 PMHey guys, I have a small issue.
I have spice db installed on kubernetes with the operator and deployed the cluster. The spicedb pods are healthy and the healthcheck is also fine.
but when I portforward the spicedb service on 50051 and add the context to
zedFarhad Nowzari
10/09/2023, 1:06 PMThe preshared key is set to the context
y
yetitwo
10/09/2023, 1:18 PMare you running with TLS, and did you add the
--insecuref
Farhad Nowzari
10/09/2023, 1:41 PMwith the --insecure flag it worked.
but I have an ingress with nginx in front of it and the endpoint has letsencrypt certificate.
does we need to let the ssl get to the pod? by default nginx blocks it
y
yetitwo
10/09/2023, 2:01 PMdepends on your intentions with your deployment more generally
yetitwo
10/09/2023, 2:01 PMit's valid to terminate at nginx, it's also valid to terminate at spicedb
f
Farhad Nowzari
10/09/2023, 2:51 PMbut the --insecure should be fine right?
since the connection from client to server is already encrypted and then from nginx to spicedb is inseecure then
Farhad Nowzari
10/09/2023, 2:52 PMbtw, I just noticed that the zed cli, warns about using version 1.24 which is an older version. But the operator doesn't update to version 1.25
Farhad Nowzari
10/09/2023, 2:53 PMif I set the version to 1.25 on channel stable, the operator will not do anything
y
yetitwo
10/09/2023, 2:57 PMyeah i treat those warnings as "good to know" rather than "something is wrong"
yetitwo
10/09/2023, 2:58 PMyeah, i think the insecure flag in this context is fine
f
Farhad Nowzari
10/10/2023, 12:34 PMThank you 😉
14 Views