<@U04S8PLJWMT>: Installed airbyte on linux aarch64...
# replication-ask-ai
s
@kapa.ai: Installed airbyte on linux aarch64 EC2 instance (m6g.xlarge) with abctl version as v0.30.1 and snowflake destination version 4.0.37. But when trying to create destination with proper values which work outside airbyte properly getting gateway error 502. Why is that? I have sufficient disk and memory space available on the instance
k
There’s evidence in the knowledge sources that your 502s are likely related to known issues with
abctl v0.30.1
and the abctl-based deployments, not to your Snowflake credentials or EC2 resources. Relevant points: 1. abctl v0.30.1 has known problems with abctl installs - There is a confirmed bug in
abctl v0.30.1
around how it configures ingress/targets for Airbyte, which leads to HTTP 503/502-style failures until manually fixed. [[abctl ingress bug](https://github.com/airbytehq/airbyte/issues/65539)] - Multiple users on abctl-based installs (local and EC2) report HTTP 502 when configuring sources/destinations (file, S3, Postgres, ClickHouse, etc.), even though the UI loads and credentials are valid. [[source-file 502](https://github.com/airbytehq/airbyte/issues/65574); [MySQL→Snowflake 502](https://github.com/airbytehq/airbyte/issues/66692)] 2. The 502 appears specifically when configuring connectors, not due to connector config itself - In the
source-file
issue, a fresh EC2 install via the same guide you used (
abctl-ec2
) shows 502 errors when creating a connector, despite all pods being healthy and the web UI working. [[source-file 502](https://github.com/airbytehq/airbyte/issues/65574); [abctl-EC2 guide](https://docs.airbyte.com/platform/deploying-airbyte/abctl-ec2)] - Another issue on 1.8.3 shows “Airbyte is temporarily unavailable. Please try again. (HTTP 502)” when configuring MySQL→Snowflake; the fix was to restart the worker-related deployments, not to change connector settings. [[502 fix via restart](https://github.com/airbytehq/airbyte/issues/66692)] 3. Known mitigations from the sources From the issues above, the following actions have resolved similar 502s for other users: - Restart worker components (if you’re on a Kubernetes-based abctl install):
Copy code
bash      kubectl -n airbyte-abctl rollout restart deployment airbyte-abctl-worker      kubectl -n airbyte-abctl rollout restart deployment airbyte-abctl-workload-api-server       kubectl -n airbyte-abctl rollout status deployment airbyte-abctl-worker      kubectl -n airbyte-abctl rollout status deployment airbyte-abctl-workload-api-server
Users report this clears the 502 when configuring sources/destinations. [[502 fix via restart](https://github.com/airbytehq/airbyte/issues/66692)] - Use a fixed/updated abctl version A user opened a PR to fix an abctl bug and is using that patched version until it’s merged. [[abctl fix PR](https://github.com/airbytehq/airbyte/issues/65539)] The release notes also state that for newer Airbyte versions you must be on at least
abctl 0.30.2
. [[abctl 0.30.2 required](https://docs.airbyte.com/release_notes/v-2.0#abctl-0302-required)] This strongly suggests upgrading from
v0.30.1
to
>= 0.30.2
(or the latest available) to avoid known bugs. 4. Other environment notes from similar reports - One user hit 502s when using
abctl local install --no-browser --insecure-cookies
and accessing via IP; they noted that
--host
requires an FQDN and won’t accept an IP, which can complicate HTTP-only setups. [[source-file 502 comments](https://github.com/airbytehq/airbyte/issues/65574)] - Another user with Nginx in front of Airbyte saw 502s until a proxy timeout/env setting was adjusted or until Airbyte’s proxy restart behavior was fixed in a later version. [[proxy timeout env](https://discuss.airbyte.io/t/3305); [Nginx 502 fixed in later version](https://discuss.airbyte.io/t/3239)] Given all this, the most likely explanation from the available information is: - Your Snowflake destination config is fine, but - The combination of abctl v0.30.1 and the abctl-based deployment has a bug or instability in the worker / ingress / proxy path that manifests as HTTP 502 when validating or saving connector configs. Recommended next steps (based only on the sources): 1. Upgrade abctl to at least
0.30.2
(or latest) and redeploy Airbyte.
[[abctl 0.30.2 required](https://docs.airbyte.com/release_notes/v-2.0#abctl-0302-required)] 2. If you’re on a Kubernetes-based abctl install and still see 502s: - Run the
kubectl rollout restart
commands for
airbyte-abctl-worker
and
airbyte-abctl-workload-api-server
shown above, then retry creating the Snowflake destination. [[502 fix via restart](https://github.com/airbytehq/airbyte/issues/66692)] 3. If you have any reverse proxy (Nginx, etc.) in front of Airbyte, ensure its timeouts are not too low and that it correctly targets the Airbyte server service, not a non-existent webapp service. [[abctl ingress bug](https://github.com/airbytehq/airbyte/issues/65539); [proxy timeout env](https://discuss.airbyte.io/t/3305)] The knowledge sources don’t provide an ARM-specific (aarch64) cause, so based on what’s documented, the version/abctl issues above are the most supported explanation.
s
@kapa.ai: And how about abctl version v0.30.3 and airbyte oss 2.0.1 on ubuntu amd64 instance? There also getting same error
k
A message from kapa.ai
The knowledge sources show multiple users hitting the same HTTP 502 error when creating any connector (sources or destinations) on abctl-based OSS installs, including recent versions, and the root cause is consistently in the platform / Workload API auth, not in the specific connector or instance type. For abctl installs (including recent ones like yours), the documented fix is: 1. Align Workload API auth tokens across components The worker and workload API server must share the same
WORKLOAD_API_BEARER_TOKEN
(and, in some cases,
WORKLOAD_API_AUTH_HEADER
/
INTERNAL_API_AUTH_TOKEN
). When they don’t, Workload API calls are rejected with 401, and the UI surfaces this as HTTP 502 when testing/creating connectors. [[source-postgres 502](https://github.com/airbytehq/airbyte/issues/65567); [file/source 502](https://github.com/airbytehq/airbyte/issues/65574)] From the documented workaround:
Copy code
bash    # Create a token    TOKEN=$(openssl rand -hex 24)    echo "Generated token: $TOKEN"     # Set same header + token on all three deployments    kubectl -n airbyte-abctl set env deployment/airbyte-abctl-workload-api-server \      WORKLOAD_API_AUTH_HEADER=Authorization \      WORKLOAD_API_BEARER_TOKEN=$TOKEN     kubectl -n airbyte-abctl set env deployment/airbyte-abctl-worker \      WORKLOAD_API_AUTH_HEADER=Authorization \      WORKLOAD_API_BEARER_TOKEN=$TOKEN     kubectl -n airbyte-abctl set env deployment/airbyte-abctl-server \      WORKLOAD_API_AUTH_HEADER=Authorization \      WORKLOAD_API_BEARER_TOKEN=$TOKEN
Some users also needed to set
INTERNAL_API_AUTH_TOKEN
on the worker to the same value: [[502 fix snippet](https://github.com/airbytehq/airbyte/issues/65567); [reused in 1.8.3 502 fix](https://github.com/airbytehq/airbyte/issues/66692)]
Copy code
bash    kubectl -n airbyte-abctl set env deployment/airbyte-abctl-worker \      WORKLOAD_API_BEARER_TOKEN="$TOKEN" \      INTERNAL_API_AUTH_TOKEN="$TOKEN"
2. Restart the affected deployments After setting the env vars, restart and wait for rollouts to complete: [[source-postgres 502](https://github.com/airbytehq/airbyte/issues/65567); [1.8.3 502 fix](https://github.com/airbytehq/airbyte/issues/66692)]
Copy code
bash    kubectl -n airbyte-abctl rollout restart deployment airbyte-abctl-workload-api-server    kubectl -n airbyte-abctl rollout restart deployment airbyte-abctl-worker    kubectl -n airbyte-abctl rollout restart deployment airbyte-abctl-server     kubectl -n airbyte-abctl rollout status deployment airbyte-abctl-workload-api-server    kubectl -n airbyte-abctl rollout status deployment airbyte-abctl-worker    kubectl -n airbyte-abctl rollout status deployment airbyte-abctl-server
Users on abctl-based installs (including those following the same quickstart you likely used) report that this resolves the “Airbyte is temporarily unavailable. Please try again. (HTTP 502)” error for all connectors (CSV, S3, Postgres, Snowflake, etc.). [[source-file 502](https://github.com/airbytehq/airbyte/issues/65574); [MySQL→Snowflake 502](https://github.com/airbytehq/airbyte/issues/66692)] The knowledge sources do not mention any additional, version-specific fix for abctl v0.30.3 + OSS 2.0.1 beyond this token alignment and restart pattern, so based on what’s documented, applying the above steps is the supported workaround for your case as well.
s
@kapa.ai: Post following above steps successfully still getting error as: • Failed to save Snowflake_Dev_Temp due to the following error: errors.http.badGateway • Airbyte is temporarily unavailable. Please try again. (HTTP 502)
k
A message from kapa.ai
The knowledge sources show several closely related 502 cases on abctl / Kubernetes installs, but they don’t provide a guaranteed, single fix beyond what you’ve already tried. I’ll summarize what is documented and where the gaps are. From the issues: 1. 502 often comes from Workload API auth / worker path, not the connector itself - Users see exactly your messages when creating any connector: “Airbyte is temporarily unavailable. Please try again. (HTTP 502)” and
errors.http.badGateway
. [[Problem 502](https://github.com/airbytehq/airbyte/issues/66692); [source-file 502](https://github.com/airbytehq/airbyte/issues/65574)] - Root cause in those cases was Workload API calls failing (401/5xx) between: -
airbyte-abctl-worker
-
airbyte-abctl-workload-api-server
- sometimes
airbyte-abctl-server
due to missing/mismatched
WORKLOAD_API_*
tokens. [[source-postgres 502](https://github.com/airbytehq/airbyte/issues/65567); [source-file 502](https://github.com/airbytehq/airbyte/issues/65574)] 2. Documented fixes that worked for others You’ve already applied the main documented workaround (aligning
WORKLOAD_API_AUTH_HEADER
and
WORKLOAD_API_BEARER_TOKEN
across the three deployments and restarting). That is exactly what resolved the 502 for multiple users. [[source-postgres 502](https://github.com/airbytehq/airbyte/issues/65567); [1.8.3 502 fix](https://github.com/airbytehq/airbyte/issues/66692)] Additional details from those same threads that sometimes mattered: - Ensure all three have the same values: -
airbyte-abctl-workload-api-server
-
airbyte-abctl-worker
-
airbyte-abctl-server
[[source-postgres 502](https://github.com/airbytehq/airbyte/issues/65567)] - Some users also had to set
INTERNAL_API_AUTH_TOKEN
on the worker to the same token. [[source-postgres 502](https://github.com/airbytehq/airbyte/issues/65567); [1.8.3 502 fix](https://github.com/airbytehq/airbyte/issues/66692)] If any of these three deployments still have different values (or missing vars), the 502 can persist. 3. When the above is done and 502 persists The knowledge sources do not provide a further, definitive fix for the case where: -
WORKLOAD_API_AUTH_HEADER
,
WORKLOAD_API_BEARER_TOKEN
(and optionally
INTERNAL_API_AUTH_TOKEN
) are aligned across all three deployments, - all deployments have been restarted and are healthy, - and you still get 502 on connector save. In particular, there is no explicit, documented resolution for: - abctl v0.30.3 + OSS 2.0.1 on Ubuntu amd64, - where the token alignment workaround has already been applied and verified. So I cannot confidently state the exact remaining cause from the provided sources. 4. What you can still verify based on the docs Given only what’s documented, the next checks (all from the same issues) are: - Confirm env alignment actually took effect (no typos / old pods):
Copy code
bash      kubectl -n airbyte-abctl get deploy airbyte-abctl-workload-api-server -o yaml | grep -A2 WORKLOAD_API      kubectl -n airbyte-abctl get deploy airbyte-abctl-worker -o yaml | grep -A2 WORKLOAD_API      kubectl -n airbyte-abctl get deploy airbyte-abctl-server -o yaml | grep -A2 WORKLOAD_API
and similarly for
INTERNAL_API_AUTH_TOKEN
on the worker. [[source-postgres 502](https://github.com/airbytehq/airbyte/issues/65567)] - Check logs for 401/5xx from Workload API around the time you hit “Save”: -
airbyte-abctl-worker
logs -
airbyte-abctl-workload-api-server
logs In the documented cases, you see explicit
Unauthorized
/ 401 errors there. [[source-postgres 502](https://github.com/airbytehq/airbyte/issues/65567); [source-file 502](https://github.com/airbytehq/airbyte/issues/65574)] If all of the above is correct and you still get 502, the knowledge sources don’t contain enough information to explain or fix your specific remaining error. They strongly suggest it is still in the Workload API / worker / auth path, but they don’t document any additional configuration or patch beyond the token-alignment workaround and restarts you’ve already tried.