Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Bug]: RBAC permission denied after restart with star privilege #40547

Open
1 task done
shaoting-huang opened this issue Mar 11, 2025 · 2 comments
Open
1 task done

[Bug]: RBAC permission denied after restart with star privilege #40547

shaoting-huang opened this issue Mar 11, 2025 · 2 comments
Assignees
Labels
kind/bug Issues or changes related a bug severity/major Major, major function doesn't work under some condition. triage/accepted Indicates an issue or PR is ready to be actively worked on.

Comments

@shaoting-huang
Copy link
Contributor

Is there an existing issue for this?

  • I have searched the existing issues

Environment

- Milvus version: 2.5.4
- Deployment mode(standalone or cluster): cluster
- MQ type(rocksmq, pulsar or kafka):    
- SDK version(e.g. pymilvus v2.0.0rc2):
- OS(Ubuntu or CentOS): 
- CPU/Memory: 
- GPU: 
- Others:

Current Behavior

Existing permissions get denied after restarting with Milvus if there is a privilege name "*" granted. See details: #40015

Expected Behavior

Should restore all existing permissions after restarting Milvus

Steps To Reproduce

Milvus Log

No response

Anything else?

No response

@shaoting-huang shaoting-huang added kind/bug Issues or changes related a bug needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. labels Mar 11, 2025
Copy link

dosubot bot commented Mar 11, 2025

Hey @shaoting-huang! 👋 I'm here to help you out with any bugs, questions, or contributions you have in mind. Let's squash those bugs together!

The issue you're experiencing with RBAC permissions being denied after a restart, particularly when using the privilege name "", might be related to how Milvus manages and persists these permissions. The privilege name "" is intended to grant global permissions across all collections or resources, simplifying permission management [1][2]. However, it seems there might be a problem with how these permissions are being restored after a restart.

Unfortunately, I couldn't find specific information on how Milvus persists RBAC permissions across restarts or any known issues related to this in the documentation or codebase. It might be beneficial to check if there are any updates or patches available for your current version (2.5.4) that address this issue. Additionally, reviewing the discussion linked in your message might provide further insights or workarounds shared by other users facing similar issues.

To continue talking to Dosu, mention @dosu.


Help Dosu learn! Give it feedback: Great Response | Irrelevant Answer | Incorrect Sources | Too Verbose | Hallucination | Bug Report | Other

@dosubot dosubot bot added the severity/major Major, major function doesn't work under some condition. label Mar 11, 2025
@shaoting-huang shaoting-huang changed the title [Bug]: RBAC permission denied after restart [Bug]: RBAC permission denied after restart with star privilege Mar 11, 2025
sre-ci-robot pushed a commit that referenced this issue Mar 12, 2025
cherry-pick from master: #40553
related: #40547

Signed-off-by: shaoting-huang <shaoting.huang@zilliz.com>
sre-ci-robot pushed a commit that referenced this issue Mar 12, 2025
related: #40547

Signed-off-by: shaoting-huang <shaoting.huang@zilliz.com>
@yanliang567
Copy link
Contributor

working on the verification

@yanliang567 yanliang567 added triage/accepted Indicates an issue or PR is ready to be actively worked on. and removed needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. labels Mar 12, 2025
czs007 pushed a commit that referenced this issue Mar 12, 2025
…0600)

cherry-pick from: #40553,
#40536
related: #40547

Signed-off-by: shaoting-huang <shaoting.huang@zilliz.com>
sre-ci-robot pushed a commit that referenced this issue Mar 12, 2025
cherry-pick from master: #40553
related: #40547

Signed-off-by: shaoting-huang <shaoting.huang@zilliz.com>
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
kind/bug Issues or changes related a bug severity/major Major, major function doesn't work under some condition. triage/accepted Indicates an issue or PR is ready to be actively worked on.
Projects
None yet
Development

No branches or pull requests

2 participants