Connection to SpiceDB not possible

[tafli]

When running thumper (locally and/or docker) I am not able to connect to my SpiceDB instance. SpiceDB is running in a OpenShift cluster with self-signed certs for testing purposes.

However, connecting with zed works when adding the option --no-verify-ca as expeced. The same option seems not to have an effect in thumper.

Thumper-Output:

{"severity":"info","name":"write basic RBAC schema","time":"2024-12-19T10:59:56+01:00","message":"loaded script"}
{"severity":"info","script":"write basic RBAC schema","time":"2024-12-19T10:59:56+01:00","message":"running migration script"}
{"severity":"debug","step":0,"total":2,"time":"2024-12-19T10:59:56+01:00","message":"executing migration step"}
Error: error running migration scripts: error running script write basic RBAC schema: rpc error: code = Unavailable desc = last connection error: connection error: desc = "error reading server preface: EOF"

The error is the same, despite adding --no-verify-ca or not.

When running zed without this option, the output is:

11:06AM ERR terminated with errors error="rpc error: code = Unavailable desc = connection error: desc = \"transport: authentication handshake failed: tls: failed to verify certificate: x509: certificate signed by unknown authority\""

Any hints on this how I could solve / debug this problem?

[ecordell]

Can you try with --insecure=false? The flag defaults to true, which can be confusing.

[tafli]

Thanks for your hint. Yes, this is definitely confusing. However, this has done the trick.

I've created a small PR #8 to change this default flag.