Blank root password for Omnibus does not work for cloud native analytics
In hybrid systems, blank root password for Omnibus does not work for cloud native analytics.
Problem
Blank root password for Omnibus causes failures for Aggregation Normalizer pod and EA NOI Action
Service pod. The following errors - Unauthorized or Not Authorized and a 401 HTTP response code are
displayed.
{"name":"clients.kafka","hostname":"tmo-noi-noihybrid-ibm-hdm--47fc-normali-b38b-78dcb486bc-vsc8l","pid":18,"level":40,"tenantId":"cfd95b7e-3bc7-4006-a4a8-a73a79c71255","destination":{"targetUrl":"http://tmo-noi-noihybrid-ea-noi-layer-ea
noiactionservice:5600/api/actions/v1/actions","username":"root"},"err":{"message":"Unauthorized","name":"Error","stack":"**Error: Unauthorized**\n at Request.callback (/app/node_modules/superagent/lib/node/index.js:883:15)\n at /app/no
de_modules/superagent/lib/node/index.js:1127:20\n at IncomingMessage.<anonymous> (/app/node_modules/superagent/lib/node/parsers/json.js:22:7)\n at IncomingMessage.emit (events.js:388:22)\n at endReadableNT (internal/streams/read
able.js:1336:12)\n at processTicksAndRejections (internal/process/task_queues.js:82:21)"},"msg":"Unable to send to primary outgoing webhook","time":"2022-05-04T16:03:52.445Z","v":0}
The credentials in the omni-secret are used for authenticating the requests that are used by the
Aggregation Normalizer pod and EA NOI Action Service pod. This secret is a password only secret. The
user is root.Cause
Blank root password does not work.
Resolution
Following are the steps to resolve the issue:
- Set the root password to nonblank.
- Update the omni-secret by editing the secret.
- Set the yaml to use an encoded version of the password by using the following
command:
echo newpassword -n | base64
The
-n
option for echo is important to avoid sending a newline character to base64. - Update the root password in the secret and delete the following pods to restart them:
- EA Gateway
- Normalizer Aggregation pod
- NOI EA Action Service