App Connect

 View Only
  • 1.  Help! Failed to run IntegrationServers using bar files stored in external endpoints

    Posted Thu August 25, 2022 11:27 AM
    Edited by Kristen Park Fri August 26, 2022 08:59 AM
    Hello everyone,

    This is urgent question from our customer. Please help!


    I have APP Connect operator installed on OCP platform. And I want to run IntegrationServers using bar files stored in external repository.

    The procedure I am following is this:
    https://community.ibm.com/community/user/integration/blogs/rob-convery1/2021/06/25/acecc-bars-from-external-endpoints

    The blog says to connect to an endpoint that does not have basic authentication enabled, we should supply a blank username and password likes this: {"authType":"BASIC_AUTH","credentials":{"username":"","password":""}}

    I have created barauth type configuration successfully. And the corresponding secret is created as well by operator. 





    I also double checked the credential in secret is correct.



    But I failed to create Integration Server with this barauth type configuration. The error message is: admission webhook "validate.barendpoints.appconnect.ibm.com" denied the request: BarURL - Non-OK HTTP status returned: 400, please check the credentials provided in your barauth configuration





    Any comments is appreciated.

    Regards,
    Eric

    ------------------------------
    ZHI QIANG KOU
    ------------------------------


  • 2.  RE: Help! Failed to run IntegrationServers using bar files stored in external endpoints

    IBM TechXchange Speaker
    Posted Fri August 26, 2022 11:56 AM
    I had a look at this with Zhi Qiang.

    With a quick curl test we can see that the url will present a 400 code if any basic auth header is used, but if no basic auth header is used, then it comes back fine. I have to believe that what's happening here is that ACE is still sending the basic auth header even if you set the username and password to empty strings.

    The documentation says this:
    If the endpoint requires no authentication, specify a blank username and password in JSON format in a text editor:
    {"authType":"BASIC_AUTH","credentials":{"username":"","password":""}}

    Can anyone confirm the behaviour?

    ------------------------------
    James Hewitt
    ------------------------------



  • 3.  RE: Help! Failed to run IntegrationServers using bar files stored in external endpoints

    IBM TechXchange Speaker
    Posted Fri August 26, 2022 11:58 AM
    I've just confirmed that the auth header is still included using requestbin:


    jammy:~$ echo "Og==" | base64 -d
    :

    I think this is an ACE bug.

    ------------------------------
    James Hewitt
    ------------------------------



  • 4.  RE: Help! Failed to run IntegrationServers using bar files stored in external endpoints

    Posted Mon August 29, 2022 10:23 AM
    Hi Zhi Qiang,

    The BARUrl you included in the Integration Server CRD seems to be protected. Are you providing the right credentials as part of the BARAuth configuration?

    The sample you are referring to is for a non protected repo.

    Best regards... Joel

    ------------------------------
    Joel Gomez
    Executive Cloud Integration Architect
    IBM
    Coral Gable FL
    954-529-0877
    ------------------------------