You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@polaris.apache.org by "bacek (via GitHub)" <gi...@apache.org> on 2025/08/06 04:46:05 UTC

[I] Helm chart provides incorrect defaults and documentation [polaris]

bacek opened a new issue, #2272:
URL: https://github.com/apache/polaris/issues/2272

   https://github.com/apache/polaris/blob/bae5444cf37ef86a2c472ded33c513dff3350053/helm/polaris/values.yaml#L567
   
   `type` for both `authenticator` and `roleProvider` should be one of `internal`, `external`, or `hybrid`. `default` is not accepted by polaris itself


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart provides incorrect defaults and documentation [polaris]

Posted by "dimas-b (via GitHub)" <gi...@apache.org>.
dimas-b commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3175986886

   Just FYI: 1.0.1 has the same java code as 1.0.0 (only helm charts are different).


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart provides incorrect defaults and documentation [polaris]

Posted by "adutra (via GitHub)" <gi...@apache.org>.
adutra commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3176052537

   OK I tried again with:
   
   * Helm chart: 1.0.0-incubating 
   * Image: 1.0.0-incubating 
   
   And it worked. Note that this version does not have external auth.
   
   But then I tried with:
   
   * Helm chart: from main branch
   * Image: 1.0.1-incubating-rc0
   
   And I finally got the error:
   
   ```
   Configuration validation failed:
   	java.lang.IllegalArgumentException: SRCFG00039: The config property polaris.authentication.active-roles-provider.type with the config value "default" threw an Exception whilst being converted SRCFG00049: Cannot convert default to enum class org.apache.polaris.service.auth.AuthenticationType, allowed values: internal,external,mixed
   ```
   
   Investigating...


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart from `main` as of 2025-08-11 is not compatible with 1.0.x binaires (provides incorrect defaults) [polaris]

Posted by "bacek (via GitHub)" <gi...@apache.org>.
bacek commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3177313853

   > > [@adutra](https://github.com/adutra) : could you double-check helm charts from 1.0.1 RC0 too? (they worked for me, IIRC)
   > 
   > It works for me as well.
   > 
   > [@bacek](https://github.com/bacek) Could you try with the below options please?
   > 
   > * This Helm chart: https://dist.apache.org/repos/dist/dev/incubator/polaris/helm-chart/1.0.1-incubating/
   > * This image: 1.0.1-incubating-rc0
   
   Yes, that worked. Thank you!
   
   Side question: how much effort is to actually publish helm chart? It's kind of inconvenient to use it from git.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart provides incorrect defaults and documentation [polaris]

Posted by "bacek (via GitHub)" <gi...@apache.org>.
bacek commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3162503093

   Hi @adutra 
   
   I probably didn't put it clearly.
   
   Problem is: existing helm chart provides defaults which can't be used. Generated configmap with defaults is
   ```
   polaris.authentication.active-roles-provider.type=default
   polaris.authentication.authenticator.type=default
   polaris.authentication.token-broker.max-token-generation=PT1H
   polaris.authentication.token-broker.type=rsa-key-pair
   polaris.authentication.token-service.type=default
   polaris.authentication.type=internal
   polaris.file-io.type=default
   polaris.log.request-id-header-name=Polaris-Request-Id
   polaris.persistence.type=in-memory
   polaris.rate-limiter.filter.type=no-op
   polaris.realm-context.realms=POLARIS
   polaris.realm-context.type=default
   quarkus.http.port=8181
   quarkus.log.category."org.apache.iceberg.rest".level=INFO
   quarkus.log.category."org.apache.polaris".level=INFO
   quarkus.log.console.enable=true 
   quarkus.log.console.format=%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c{3.}] [%X{requestId},%X{realmId}] [%X{traceId},%X{parentId},%X{spanId},%X{sampled}] (%t) %s%e%n quarkus.log.console.level=ALL
   quarkus.log.file.enable=false
   quarkus.log.level=INFO
   quarkus.management.port=8182quarkus.otel.sdk.disabled=true                                                                                                                                                      
   ```
   
   Pod is failing with
   ```
   Configuration validation failed:                                                                                                                                                           java.lang.IllegalArgumentException: SRCFG00039: The config property polaris.authentication.active-roles-provider.type with the config value "default" threw an Exception whilst being converted SRCFG00049: Cannot convert default to enum class org.apache.polaris.service.auth.AuthenticationType, allowed values: internal,external,mixed                                     │
   
   ```
   
   Yes, you are absolutely correct and actual behaviour.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart provides incorrect defaults and documentation [polaris]

Posted by "adutra (via GitHub)" <gi...@apache.org>.
adutra commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3176183074

   OK I see the issue:
   
   The image doesn't have this commit: b96461ac1 which makes `active-roles-provider` configurable per realm.
   
   Before that commit, the roles provider was configured with `polaris.active-roles-provider.type`. So `polaris.authentication.active-roles-provider.type` doesn't exist in this version.
   
   But the current Helm chart in the main branch does have support for this option, which is why the configmap contains:
   
   ```yaml
   polaris.authentication.type=internal
   polaris.authentication.active-roles-provider.type=default
   ```
   
   Now since `polaris.authentication.active-roles-provider.type` doesn't exist, SmallRye is considering that `active-roles-provider` is the name of a realm, and that for that realm, the authentication type is `default` – which is indeed incorrect.
   
   **TLDR: the 1.0.1-incubating-rc0 image can only work with Helm charts before b96461ac1.**


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart from `main` as of 2025-08-11 is not compatible with 1.0.x binaires (provides incorrect defaults) [polaris]

Posted by "olsoloviov (via GitHub)" <gi...@apache.org>.
olsoloviov commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3464482268

   @bacek I have been doing some fixes in Helm Chart documentation and decided as well to fill the gap you mentioned: https://github.com/apache/polaris/pull/2939


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart provides incorrect defaults and documentation [polaris]

Posted by "adutra (via GitHub)" <gi...@apache.org>.
adutra commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3162885295

   @bacek 
   
   Your configuration above is correct. I deployed a Polaris pod with it and the pod came up without problems.
   
   Which version of Polaris are you deploying? Can you try with `apache/polaris:latest` from Docker Hub?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart provides incorrect defaults and documentation [polaris]

Posted by "dimas-b (via GitHub)" <gi...@apache.org>.
dimas-b commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3176164220

   @adutra : could you double-check helm charts from 1.0.1 RC0 too? (they worked for me, IIRC)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart provides incorrect defaults and documentation [polaris]

Posted by "adutra (via GitHub)" <gi...@apache.org>.
adutra commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3176210030

   > [@adutra](https://github.com/adutra) : could you double-check helm charts from 1.0.1 RC0 too? (they worked for me, IIRC)
   
   It works for me as well. 
   
   @bacek Could you try with the below options please?
   
   * This Helm chart: https://dist.apache.org/repos/dist/dev/incubator/polaris/helm-chart/1.0.1-incubating/
   * This image: 1.0.1-incubating-rc0


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart provides incorrect defaults and documentation [polaris]

Posted by "bacek (via GitHub)" <gi...@apache.org>.
bacek commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3165704435

   It was 1.0.0-incubating. I'll try latest later today.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart provides incorrect defaults and documentation [polaris]

Posted by "adutra (via GitHub)" <gi...@apache.org>.
adutra commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3158025205

   Hi @bacek thanks for reporting this.
   
   There are two different settings:
   
   ```yaml
   authentication.type: internal
   authentication.authenticator.type: default
   ```
   
   * `authentication.type` can be: `internal`, `external`, or `mixed`.
   * `authentication.authenticator.type` can only be `default` (for now).
   
   Does that make sense?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart provides incorrect defaults and documentation [polaris]

Posted by "bacek (via GitHub)" <gi...@apache.org>.
bacek commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3172992359

   Same with `latest` (`sha256:82ba0c7b73bc476f0a37abf4d9f7e90960221600513d189af1ccc48ee9e4f71c`)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart from `main` as of 2025-08-11 is not compatible with 1.0.x binaires (provides incorrect defaults) [polaris]

Posted by "bacek (via GitHub)" <gi...@apache.org>.
bacek commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3181230578

   @dimas-b it's not obvious from the documentation. All examples are using git checkout to install helm. Also I have no idea about "apache dist server" at all. Having something like "helm repo add apache https://some.dist.server/" in the documentation would be really helpful. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart from `main` as of 2025-08-11 is not compatible with 1.0.x binaires (provides incorrect defaults) [polaris]

Posted by "dimas-b (via GitHub)" <gi...@apache.org>.
dimas-b commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3181186939

   @bacek : The chart is published on the Apache dist server with every release. Do you mean publishing it somewhere else?
   
   There is also an on-going discussion for releasing helm charts separately from binaries: https://lists.apache.org/thread/xlfmtrhnx0k0wo8rysqwhmgq3dygnnrl


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart provides incorrect defaults and documentation [polaris]

Posted by "dimas-b (via GitHub)" <gi...@apache.org>.
dimas-b commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3176032426

   > Configuration validation failed: 
   > java.lang.IllegalArgumentException: SRCFG00039: The config property polaris.authentication.active-roles-provider.type with 
   > the config value "default" threw an Exception whilst being converted SRCFG00049: Cannot convert default to enum class 
   > org.apache.polaris.service.auth.AuthenticationType, allowed values: internal,external,mixed                                     │
   
   @adutra : it looks like `QuarkusAuthenticationConfiguration` from the 1.0.0 state of the code treats the `active-roles-provider` part of the config name as a "realm", subsequently it tries to parse `.type` as `QuarkusAuthenticationRealmConfiguration.type()` (and fails) 🤷 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart provides incorrect defaults and documentation [polaris]

Posted by "dimas-b (via GitHub)" <gi...@apache.org>.
dimas-b commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3176047546

   @bacek : which version of the Helm Charts did you use?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] Helm chart provides incorrect defaults and documentation [polaris]

Posted by "bacek (via GitHub)" <gi...@apache.org>.
bacek commented on issue #2272:
URL: https://github.com/apache/polaris/issues/2272#issuecomment-3172989518

   Same results with `1.0.1-incubating-rc0`.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org