cleanup edge onboarding process for NATS #878
Labels
No labels
1week
2weeks
Failed compliance check
IP cameras
NATS
Possible security concern
Review effort 1/5
Review effort 2/5
Review effort 3/5
Review effort 4/5
Review effort 5/5
UI
aardvark
accessibility
amd64
api
arm64
auth
back-end
bgp
blog
bug
build
checkers
ci-cd
cleanup
cnpg
codex
core
dependencies
device-management
documentation
duplicate
dusk
ebpf
enhancement
eta 1d
eta 1hr
eta 3d
eta 3hr
feature
fieldsurvey
github_actions
go
good first issue
help wanted
invalid
javascript
k8s
log-collector
mapper
mtr
needs-triage
netflow
network-sweep
observability
oracle
otel
plug-in
proton
python
question
reddit
redhat
research
rperf
rperf-checker
rust
sdk
security
serviceradar-agent
serviceradar-agent-gateway
serviceradar-web
serviceradar-web-ng
siem
snmp
sysmon
topology
ubiquiti
wasm
wontfix
zen-engine
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
carverauto/serviceradar#878
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Imported from GitHub.
Original GitHub issue: #2537
Original author: @mfreeman451
Original URL: https://github.com/carverauto/serviceradar/issues/2537
Original created: 2026-01-27T07:31:32Z
Describe the bug
https://192.168.2.235/admin/collectors
The
Provisioning NATS Accountprogress spinner spins indefinitely and none of this stuff seems to be working anymore. We initially created most of this when we were trying to figure out how to do multi-tenancy, we first had attribute-based/row level tenancy, then we tried schema based but we still had a sharedserviceradar-coreand web-ng control plane, to today where we will provision separate instances of ServiceRadar per tenant, isolated by namespaces, or just support an on-prem/OSS user with a single-tenant installation on k8s or docker, and every tenant, even in a single-tenant situation, gets their own credentials toCNPGand a NATS account (JWT).We need to think a little harder about what this should look like or what the purpose of this really is. From the perspective of a tenant that doesn't care about tenancy, and since ServiceRadar (SR) isn't really multi-tenant anymore, the SaaS will have a control-plane that will provision new tenants in their own namespace, with their own CNPG account connecting to a shared CNPG cluster, and their own NATS account, also connecting to a shared NATS cluster. Maybe all we really need to worry about right now is the single-tenant scenario on k8s or docker deployments and break down the steps where we interact with NATS:
User story
platformschemaI'm not really sure why this thing thinks there is something being provisioned and if that is actually true or not, this is a clean system, I haven't tried to add a NATS leaf yet.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
A clear and concise description of what you expected to happen.
Screenshots
If applicable, add screenshots to help explain your problem.
Desktop (please complete the following information):
Smartphone (please complete the following information):
Additional context
Add any other context about the problem here.