This message was deleted.
# opal
s
This message was deleted.
s
Hi @Sejal Shah, can you please share you ACI config or command you use to set the container up?
Also, what kind of integration do you want with Azure AD?
s
Hi Shaul, My ACI log show below for Opal -Server
Copy code
[2023-08-21 21:54:39 +0000] [19] [INFO] Starting gunicorn 20.1.0
[2023-08-21 21:54:39 +0000] [19] [INFO] Listening at: <http://0.0.0.0:7002> (19)
[2023-08-21 21:54:39 +0000] [19] [INFO] Using worker: uvicorn.workers.UvicornWorker
2023-08-21 21:54:43.079 | WARNING  | __config__:when_ready:34 - Finished pre loading scopes...
[2023-08-21 21:54:43 +0000] [26] [INFO] Booting worker with pid: 26
[32m2023-08-21T21:54:43.597550+0000[0m | [34mopal_server.server                      [0m|[1m INFO  | OPAL was not provided with JWT encryption keys, cannot verify api requests![0m
[32m2023-08-21T21:54:43.598709+0000[0m | [34mopal_server.pubsub                      [0m|[1m INFO  | Pub/Sub broadcaster is off[0m
[32m2023-08-21T21:54:43.837436+0000[0m | [34mopal_server.server                      [0m|[1m INFO  | *** OPAL Server Startup ***[0m
[32m2023-08-21T21:54:43.838371+0000[0m | [34mopal_server.server                      [0m|[1m INFO  | leadership lock acquired, leader pid: 26[0m
[32m2023-08-21T21:54:43.839114+0000[0m | [34mopal_server.policy.watcher.factory      [0m|[1m INFO  | Policy repo will be cloned to: /opal/regoclone/opal_repo_clone[0m
[32m2023-08-21T21:54:43.839330+0000[0m | [34mopal_server.policy.watcher.factory      [0m|[33m[1mWARNING | POLICY_REPO_URL is unset but repo watcher is enabled! disabling watcher.[0m
[32m2023-08-21T21:54:43.841017+0000[0m | [34mopal_server.data.data_update_publisher  [0m|[1m INFO  | [26] Starting Polling Updates[0m
And Opal Client shows
Copy code
[2023-08-21 22:12:22 +0000] [19] [INFO] Starting gunicorn 20.1.0
[2023-08-21 22:12:22 +0000] [19] [INFO] Listening at: <http://0.0.0.0:7000> (19)
[2023-08-21 22:12:22 +0000] [19] [INFO] Using worker: uvicorn.workers.UvicornWorker
[2023-08-21 22:12:22 +0000] [24] [INFO] Booting worker with pid: 24
[32m2023-08-21T22:12:24.578345+0000[0m | [34mopal_client.policy_store.opa_client     [0m|[1m INFO  | Authentication mode for policy store: PolicyStoreAuth.NONE[0m
[32m2023-08-21T22:12:24.585857+0000[0m | [34mopal_common.fetcher.fetcher_register    [0m|[1m INFO  | Loading FetcherProvider 'FastApiRpcFetchProvider' found at: <class 'opal_common.fetcher.providers.fastapi_rpc_fetch_provider.FastApiRpcFetchProvider'>[0m
[32m2023-08-21T22:12:24.586774+0000[0m | [34mopal_common.fetcher.fetcher_register    [0m|[1m INFO  | Loading FetcherProvider 'HttpFetchProvider' found at: <class 'opal_common.fetcher.providers.http_fetch_provider.HttpFetchProvider'>[0m
[32m2023-08-21T22:12:24.587680+0000[0m | [34mopal_common.fetcher.fetcher_register    [0m|[1m INFO  | Fetcher Register loaded[0m
[32m2023-08-21T22:12:24.589238+0000[0m | [34mopal_client.callbacks.register          [0m|[1m INFO  | Callbacks register loaded[0m
[32m2023-08-21T22:12:24.590222+0000[0m | [34mopal_client.client                      [0m|[1m INFO  | API authentication disabled (public encryption key was not provided)[0m
[32m2023-08-21T22:12:24.787118+0000[0m | [34mopal_client.engine.runner               [0m|[1m INFO  | Launching engine runner[0m
[32m2023-08-21T22:12:24.790483+0000[0m | [34mopal_client.engine.runner               [0m|[1m INFO  | Running policy engine inline: opa run --server --addr=:8181 --authentication=off --authorization=off --log-level=info[0m
[32m2023-08-21T22:12:25.804999+0000[0m | [34mopal_client.engine.runner               [0m|[1m INFO  | Running policy engine initial start callbacks[0m
[32m2023-08-21T22:12:25.806511+0000[0m | [34mopal_client.data.updater                [0m|[1m INFO  | Launching data updater[0m
[32m2023-08-21T22:12:25.807454+0000[0m | [34mopal_client.policy.updater              [0m|[1m INFO  | Launching policy updater[0m
[32m2023-08-21T22:12:25.809698+0000[0m | [34mopal_client.data.updater                [0m|[1m INFO  | Subscribing to topics: ['policy_data'][0m
[32m2023-08-21T22:12:25.810227+0000[0m | [34mopal_client.policy.updater              [0m|[1m INFO  | Subscribing to topics: ['policy:.'][0m
[32m2023-08-21T22:12:25.810880+0000[0m | [34mfastapi_websocket_pubsub.pub_sub_client [0m|[1m INFO  | Trying to connect to Pub/Sub server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:12:25.811740+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:12:25.822433+0000[0m | [34mfastapi_websocket_pubsub.pub_sub_client [0m|[1m INFO  | Trying to connect to Pub/Sub server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:12:25.822890+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:12:25.838374+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:12:25.839719+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:12:26.200108+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:12:26.201501+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:12:26.835363+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:12:26.836492+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:12:27.097718+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:12:27.100151+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:12:27.476227+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:12:27.477232+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:12:27.674303+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:12:27.676185+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:12:31.369344+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:12:31.370549+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:12:35.180286+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:12:35.181998+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:12:35.227055+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:12:35.228263+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:12:37.333083+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:12:37.334162+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:12:40.564703+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:12:40.565653+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:12:44.855285+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:12:44.856477+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:13:01.209130+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:13:01.210557+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:13:17.181611+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:13:17.185356+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:13:30.123180+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:13:30.126813+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:13:45.205620+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:13:45.210299+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:14:50.916131+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:14:50.917533+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
[32m2023-08-21T22:15:00.238687+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | Trying server - <ws://localhost:7002/ws>[0m
[32m2023-08-21T22:15:00.240402+0000[0m | [34mfastapi_websocket_rpc.websocket_rpc_c...[0m|[1m INFO  | RPC connection was refused by server[0m
o
Hi @Sejal Shah - @Shaul Kremer is AFK - I expect he’ll get back to you following his morning
s
Thank you for the update.
s
Is that all of the server log? If so, looks like it gets stuck for some reason. What environment variables are you running it with?
Also, note that you're running in insecure mode since you didn't provide encryption keys. Once you get it working, look at https://docs.opal.ac/getting-started/running-opal/run-opal-server/security-parameters to see how to do that.
s
Hi Shaul, Is there a guide that will tell me how to set up and which environment variables should be set up to have the docker container run successfully on Azure. I am new to both Azure containers and Opal and any tutorial will be appreciated. Thank you
s
Azure should be identical to any container other environment AFAIK. You can look at this Docker-Compose example for a list of what's needed: https://github.com/permitio/opal/blob/master/docker/docker-compose-example.yml