This section provides troubleshooting guidance for common issues encountered when configuring and using mTLS with Managed Service for Apache Kafka.
Errors when updating a cluster
You might encounter the following errors when running a
gcloud managed-kafka clusters update or gcloud managed-kafka clusters create
command.
Invalid SSL principal mapping rule
You receive an error message similar to one of the following:
INVALID_ARGUMENT: The request was invalid: invalid SSL principal mapping
rule: \"RULE:INVALID-RULE\". The rule must be of the format DEFAULT or
RULE:pattern/replacement/[LU]
INVALID_ARGUMENT: The request was invalid: invalid SSL principal mapping
rules: \"RULE:\\nRULE:,DEFAULT\" contains a newline
The error messages occur because the value provided for the
ssl-principal-mapping-rules flag is incorrectly formatted or contains
invalid characters.
Correct the rule to match the required format and verify that the rule string
does not contain any newline characters. For more information about the
ssl-principal-mapping-rules flag, see Principal mapping.
Invalid CA pool configuration
You receive an error message similar to one of the following:
INVALID_ARGUMENT: The request was invalid:
ca_pool: project/managed-kafka-test/locations/us-central1/test-ca-pool
doesn't match the expected format: projects/{project}/locations/{location}/caPools/{caPool}
INVALID_ARGUMENT: The request was invalid: maximum of