realtime access gets 403 in kong

[prezhdarov]

Bug report

when accessed realtime websocket gets 403 in kong

Describe the bug

In default config and deployment realtime functions end up with 403 in kong

for example:

172.30.0.5 - - [06/Nov/2024:22:01:41 +0000] "GET /realtime/v1/websocket?apikey=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyAgCiAgICAicm9sZSI6ICJhbm9uIiwKICAgICJpc3MiOiAic3VwYWJhc2UtZGVtbyIsCiAgICAiaWF0IjogMTY0MTc2OTIwMCwKICAgICJleHAiOiAxNzk5NTM1NjAwCn0.dc_X5iR_VP_qT0zsiyj_I_OZ2T9FtRU2BBNWN8Bu4GE&vsn=1.0.0 HTTP/1.1" 403 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"

Same config works with supabase docker example. Tried both with and without ingress.

[omeroy]

I had the same issue with the newest version.

Setting fullnameOverride: "realtime-dev" in the values-yaml seems to be fixing it. See #91

[nthtrung09it]

Thanks @omeroy very much, your MR #91 works for me.

But when I check the logs of realtime pod, there are some errors:

supabase-supabase-realtime-64bdcdcd85-rvwrj supabase-realtime 12:22:24.224 project=supabase-supabase-realtime [info] Billing metrics: [:realtime, :connections]
supabase-supabase-realtime-64bdcdcd85-rvwrj supabase-realtime 12:22:24.236 [debug] Tzdata polling for update.
supabase-supabase-realtime-64bdcdcd85-rvwrj supabase-realtime 12:22:24.236 [error] GenServer :tzdata_release_updater terminating
supabase-supabase-realtime-64bdcdcd85-rvwrj supabase-realtime ** (File.Error) could not write to file "/app/lib/tzdata-1.1.2/priv/latest_remote_poll.txt": permission denied
supabase-supabase-realtime-64bdcdcd85-rvwrj supabase-realtime (elixir 1.17.3) lib/file.ex:1144: File.write!/3
supabase-supabase-realtime-64bdcdcd85-rvwrj supabase-realtime (tzdata 1.1.2) lib/tzdata/data_loader.ex:43: Tzdata.DataLoader.last_modified_of_latest_available/1
supabase-supabase-realtime-64bdcdcd85-rvwrj supabase-realtime (tzdata 1.1.2) lib/tzdata/release_updater.ex:81: Tzdata.ReleaseUpdater.loaded_tzdata_matches_remote_last_modified?/0
supabase-supabase-realtime-64bdcdcd85-rvwrj supabase-realtime (tzdata 1.1.2) lib/tzdata/release_updater.ex:42: Tzdata.ReleaseUpdater.poll_for_update/0
supabase-supabase-realtime-64bdcdcd85-rvwrj supabase-realtime (tzdata 1.1.2) lib/tzdata/release_updater.ex:19: Tzdata.ReleaseUpdater.handle_info/2
supabase-supabase-realtime-64bdcdcd85-rvwrj supabase-realtime (stdlib 6.1.2) gen_server.erl:2345: :gen_server.try_handle_info/3
supabase-supabase-realtime-64bdcdcd85-rvwrj supabase-realtime (stdlib 6.1.2) gen_server.erl:2433: :gen_server.handle_msg/6
supabase-supabase-realtime-64bdcdcd85-rvwrj supabase-realtime (stdlib 6.1.2) proc_lib.erl:329: :proc_lib.init_p_do_apply/3
supabase-supabase-realtime-64bdcdcd85-rvwrj supabase-realtime Last message: :check_if_time_to_update

Do you have any tips?