Hi @allardbz . I did not use the IDEA trick yet … but still got an update: I suppressed the log-info, until we got a call because we had 100ks erroneous requests in instana (around 1 every 80 ms) … In the instana report, you can see, that it is a permission problem:
Type RPC Client
Category rpc
Flavor grpc
Host xxx.xy
Remote Port 8124
Procedure/Method io.axoniq.axonserver.grpc.query.QueryService/OpenStream
Error
PERMISSION_DENIED: Invalid token for io.axoniq.axonserver.grpc.query.QueryService/OpenStream
We then did a try and error, the problem stopped, after giving the “I am only interested in using the query gateway” system the access-right: “READ”. Funny thing: this is marked as deprecated in the docs …
for sake of completeness these are the access rights in total now (panning to drop commands/events soon):
ourContext:DISPATCH_COMMANDS
ourContext:DISPATCH_QUERY
ourContext:READ_EVENTS
ourContext:READ
I must admit, I am a bit confused … if the READ
right seems to be that important, why is it not active by default … and why is it deprecated? and what should we use instead?
I will hand this over to one of my colleagues that can file support requests, just copying this here to round up the discussion an in case it is of value for other users as well …
yours
Jan