sparse-artist-9604
01/27/2023, 3:55 PMbetter-state-74960
01/28/2023, 9:41 AMbest-umbrella-88325
01/29/2023, 9:22 AMflat-painter-78331
01/29/2023, 5:58 PMgentle-battery-24950
01/30/2023, 8:56 AMfamous-florist-7218
01/30/2023, 11:56 AMdatahub
default user. I’m looking for a friendly way to secure the DataHub frontend. The guideline was updated earlier this month (ref link) but some unexpected cases may occur.
For example:
• Let’s say Adam deploys DataHub with default configs just for testing. When accessing the UI, the login page will show up and he can login with the default credential.
• After that, he sets up an alternative authentication method, OIDC for example.
• The point is: In the next time, the frontend will take Adam to Home Page directly. He will no longer see Login Page. So he might forget to change the default credential.
=> The bad guy can leverage this problem to access the frontend via datahub user. And by default, its role is really powerful. The data can be stolen.
My thoughts:
• Update password for datahub user through the UI.
• Warning message about potential vulnerabilities. (in case people forget the security issues).
• Qualifying task to check security issues during deployment.aloof-balloon-41159
01/30/2023, 6:23 PMorg.apache.kafka.common.errors.GroupAuthorizationException: Not authorized to access group: mce-consumer-job-client
org.apache.kafka.common.errors.GroupAuthorizationException: Not authorized to access group: generic-mce-consumer-job-client
org.apache.kafka.common.errors.GroupAuthorizationException: Not authorized to access group: generic-mae-consumer-job-client
org.apache.kafka.common.errors.GroupAuthorizationException: Not authorized to access group: generic-platform-event-job-client
org.apache.kafka.common.errors.GroupAuthorizationException: Not authorized to access group: datahub-usage-event-consumer-job-client
these are all followed by a:
[ThreadPoolTaskExecutor-1] ERROR o.s.k.l.KafkaMessageListenerContainer$ListenerConsumer:140 - Fatal consumer exception; stopping container
Is this OK? I can’t tell if it’s affecting anything as I’m still unable to create or run an ingestion due to the issue referenced here
We’re using our own Confluent Kafka but I have no access to the console myself without SRE/DevOps support. Is it possible that we need to permission our Kafka user to access these consumer groups?rapid-crowd-46218
01/31/2023, 2:43 AMred-waitress-53338
01/31/2023, 5:08 AMmicroscopic-mechanic-13766
01/31/2023, 4:08 PMbland-orange-13353
01/31/2023, 5:56 PMshy-dog-84302
02/01/2023, 9:45 PMacryldata/datahub-postgres-setup:v0.9.6.1
while installing Datahub v0.9.6.1 from helm charts. Is it really missing or I have a local problem in fetching images? I can fetch v0.9.6.2 for that matter. Any thoughts?steep-waitress-15973
02/02/2023, 3:06 AMproud-table-38689
02/02/2023, 6:10 AMbulky-diamond-29794
02/02/2023, 7:11 AMbulky-diamond-29794
02/02/2023, 7:14 AMwonderful-spring-3326
02/02/2023, 8:23 AMlimited-forest-73733
02/02/2023, 9:01 AMrapid-hamburger-95729
02/02/2023, 3:19 PMLogin module not specified in JAAS config
..see full error from kafka-setup-job below). We're deploying this with helm/terraform
4 done working
Topic Creation Complete.
Error while executing config command with args '--command-config /tmp/connection.properties --bootstrap-server <http://b-1.xxx:9098,b-2.xxx:9098,b-3.xxx:9098|b-1.xxx:9098,b-2.xxx:9098,b-3.xxx:9098> --entity-type topics --entity-name _schemas --alter --add-config cleanup.policy=compact'
org.apache.kafka.common.KafkaException: Failed to create new KafkaAdminClient
at org.apache.kafka.clients.admin.KafkaAdminClient.createInternal(KafkaAdminClient.java:540)
at org.apache.kafka.clients.admin.Admin.create(Admin.java:134)
at kafka.admin.ConfigCommand$.processCommand(ConfigCommand.scala:295)
at kafka.admin.ConfigCommand$.main(ConfigCommand.scala:97)
at kafka.admin.ConfigCommand.main(ConfigCommand.scala)
Caused by: java.lang.IllegalArgumentException: Login module not specified in JAAS config
at org.apache.kafka.common.security.JaasConfig.<init>(JaasConfig.java:66)
at org.apache.kafka.common.security.JaasContext.load(JaasContext.java:88)
at org.apache.kafka.common.security.JaasContext.loadClientContext(JaasContext.java:82)
at org.apache.kafka.common.network.ChannelBuilders.create(ChannelBuilders.java:167)
at org.apache.kafka.common.network.ChannelBuilders.clientChannelBuilder(ChannelBuilders.java:81)
at org.apache.kafka.clients.ClientUtils.createChannelBuilder(ClientUtils.java:105)
at org.apache.kafka.clients.admin.KafkaAdminClient.createInternal(KafkaAdminClient.java:513)
... 4 more
gray-wall-52477
02/02/2023, 3:22 PMrich-state-73859
02/02/2023, 11:33 PMdatahub docker quickstart
, it stuck and kept Pulling docker images...
for hours… Is there any solution?proud-table-38689
02/03/2023, 1:16 AMrich-policeman-92383
02/03/2023, 10:32 AMmysqlSetupJob:
enabled: false
gifted-diamond-19544
02/03/2023, 2:27 PMcuddly-butcher-39945
02/03/2023, 8:46 PMlimited-forest-73733
02/04/2023, 3:54 PMred-waitress-53338
02/06/2023, 2:40 AMmysterious-monkey-71931
02/06/2023, 7:43 AMcreamy-van-28626
02/06/2023, 8:24 AMflat-painter-78331
02/06/2023, 9:44 AM