solr-operator
solr-operator copied to clipboard
Backup to S3 is broken when enabling IRSA as the mounted secret is not accessible for Solr.
When running with service accounts on a pod in EKS, a secret containing security information gets automatically mounted on /var/run/secrets/eks.amazonaws.com/serviceaccount/token When trying to make a backup this token is unreachable for Solr and hence the backup fails with unclear error messages (In my case it was saying that the noderole under which my kuberenetes nodes are running did not have access on the S3 bucket). It was very difficult to figure out that it actually tried to access that file but couldn't do so because it was not in the allowPath.
I solved it by adding
-Dsolr.allowPaths=/var/run/secrets/eks.amazonaws.com/serviceaccount/token