Uncaught DOMException: The operation is insecure.

[Somebodyisnobody]

I am getting an error regarding DNS resolution while deploying Dekaf standalone to manage a cloud cluster using the docker image visortelle/dekaf:1.1.1:

14:05:32.868 [grpc-default-executor-3] WARN  o.a.p.common.util.SecurityUtility - Conscrypt isn't available in the classpath. Using JDK default security provider.
14:05:33.146 [grpc-default-executor-5] WARN  o.a.p.c.util.netty.DnsResolverUtil - Cannot get DNS TTL settings from sun.net.InetAddressCachePolicy class
java.lang.IllegalAccessException: class org.apache.pulsar.common.util.netty.DnsResolverUtil cannot access class sun.net.InetAddressCachePolicy (in module java.base) because module java.base does not export sun.net to unnamed module @7ea2b3c6
        at java.base/jdk.internal.reflect.Reflection.newIllegalAccessException(Reflection.java:394)
        at java.base/java.lang.reflect.AccessibleObject.checkAccess(AccessibleObject.java:709)
        at java.base/java.lang.reflect.Method.invoke(Method.java:569)
        at org.apache.pulsar.common.util.netty.DnsResolverUtil.<clinit>(DnsResolverUtil.java:46)
        at org.apache.pulsar.client.impl.ConnectionPool.createAddressResolver(ConnectionPool.java:164)
        at org.apache.pulsar.client.impl.ConnectionPool.lambda$new$1(ConnectionPool.java:127)
        at java.base/java.util.Optional.orElseGet(Optional.java:364)
        at org.apache.pulsar.client.impl.ConnectionPool.<init>(ConnectionPool.java:127)
        at org.apache.pulsar.client.impl.ConnectionPool.<init>(ConnectionPool.java:96)
        at org.apache.pulsar.client.impl.ConnectionPool.<init>(ConnectionPool.java:91)
        at org.apache.pulsar.client.impl.PulsarClientImpl.<init>(PulsarClientImpl.java:199)
        at org.apache.pulsar.client.impl.PulsarClientImpl.<init>(PulsarClientImpl.java:94)
        at org.apache.pulsar.client.impl.PulsarClientImpl$PulsarClientImplBuilder.build(PulsarClientImpl.java:174)
        at pulsar_auth.Client$package$.makePulsarClient$$anonfun$2(Client.scala:94)
        at scala.util.Try$.apply(Try.scala:210)
        at pulsar_auth.Client$package$.makePulsarClient(Client.scala:94)
        at pulsar_auth.ClientsCache$.writePulsarClient(PulsarAuthInterceptor.scala:49)
        at pulsar_auth.ClientsCache$.getPulsarClient(PulsarAuthInterceptor.scala:67)
        at pulsar_auth.PulsarAuthInterceptor.interceptCall(PulsarAuthInterceptor.scala:107)
        at io.grpc.ServerInterceptors$InterceptCallHandler.startCall(ServerInterceptors.java:244)
        at io.grpc.internal.ServerImpl$ServerTransportListenerImpl.startWrappedCall(ServerImpl.java:703)
        at io.grpc.internal.ServerImpl$ServerTransportListenerImpl.access$2200(ServerImpl.java:406)
        at io.grpc.internal.ServerImpl$ServerTransportListenerImpl$1HandleServerCall.runInternal(ServerImpl.java:615)
        at io.grpc.internal.ServerImpl$ServerTransportListenerImpl$1HandleServerCall.runInContext(ServerImpl.java:603)
        at io.grpc.internal.ContextRunnable.run(ContextRunnable.java:37)
        at io.grpc.internal.SerializingExecutor.run(SerializingExecutor.java:133)
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
        at java.base/java.lang.Thread.run(Thread.java:1623)

Command used:

docker run `
  --name dekaf_cloud `
  -e DEKAF_PUBLIC_BASE_URL="http://127.0.0.1:8091" `
  -e DEKAF_PULSAR_WEB_URL="https://cloud.com.invalid:443" `
  -e DEKAF_PULSAR_BROKER_URL="pulsar+ssl://cloud.com.invalid:6651" `
  -e DEKAF_DEFAULT_PULSAR_AUTH="<auth token>" `
  -v "./data/dekaf:/dekaf/data/library" `
  -p 8091:8090 `
  visortelle/dekaf:1.1.1

Found this error message with an old pulsar version here: apache/pulsar#20282

This is the browser's console output:

overlay false entrypoint.js:2436:119826
DOMException: The operation is insecure.
    x http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1895
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1895
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1895
    xVe http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    Iue http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    gBo http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    pJ http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    qGr http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    L7 http://127.0.0.1:8091/ui/static/dist/entrypoint.js:6
    Iue http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    gBo http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    oPt http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    Jkt http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    F4r http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    G4r http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    V5r http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    IA http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    Q5r http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1881
    <anonymous> http://127.0.0.1:8091/ui/static/dist/entrypoint.js:2484
entrypoint.js:8:163
    aIt http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    callback http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    RGr http://127.0.0.1:8091/ui/static/dist/entrypoint.js:6
    GGr http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    D5r http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    cBo http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    gBo http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    pJ http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    qGr http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    L7 http://127.0.0.1:8091/ui/static/dist/entrypoint.js:6
    Iue http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    gBo http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    oPt http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    Jkt http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    (Async: EventHandlerNonNull)
    F4r http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    G4r http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    V5r http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    IA http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    Q5r http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1881
    <anonym> http://127.0.0.1:8091/ui/static/dist/entrypoint.js:2484
Uncaught DOMException: The operation is insecure.
    x http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1895
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1895
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1895
    xVe http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    Iue http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    gBo http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    pJ http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    qGr http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    L7 http://127.0.0.1:8091/ui/static/dist/entrypoint.js:6
    Iue http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    gBo http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    oPt http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    Jkt http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    F4r http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    G4r http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    V5r http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    IA http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    Q5r http://127.0.0.1:8091/ui/static/dist/entrypoint.js:8
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1
    pulsarUiEntrypoint http://127.0.0.1:8091/ui/static/dist/entrypoint.js:1881
    <anonymous> http://127.0.0.1:8091/ui/static/dist/entrypoint.js:2484
entrypoint.js:1895:5940

The browser shows a blank page. No elements were rendered.

I don't think that my input causes the error. The error seems like something with the docker image is wrong. Can somebody else confirm that?

[Somebodyisnobody]

I am seeing the same java error logged in my local development docker-compose deployment with v1.2.0 but the web page works fine. Maybe the errors doesn't correlate.

[Somebodyisnobody]

I've managed it to reproduce the issue:
When DEKAF_PUBLIC_BASE_URL is set to http://127.0.0.1:8091, and I call http://localhost:8091 in my browser the exeption Uncaught DOMException: The operation is insecure. is being thrown. Same vice versa.

I expect that both ways should work. So regardless if i am calling localhost or 127.0.0.1 or other hostnames that link to 127.0.0.1 the page should load. At least there should be an error message that helps me out.