Hi, we are testing Keto and something weird happened. We are gettin a

504 Gateway Time-out

error when we are trying to check a relation which

object

+

relation

exists, but they are not related to the asked

subject_id

. So, we are at the point when we have:

{
  "namespace": "permissions",
  "object": "john",
  "relation": "view",
  "subject_id": "ann"
}

Asking Keto if the following relation exist:

{
  "object": "john",
  "relation": "view",
  "subject_id": "ann"
}

responds with 200

{
  "object": "john",
  "relation": "delete",
  "subject_id": "ann"
}

responds with 403

{
  "object": "john",
  "relation": "view",
  "subject_id": "ben"
}

responds with 504

Are you talking to Keto directly? I.e. is the 504 returned by Keto or is it possible that Keto takes so long that you get a timeout from the ingress/...

504 is actually returned by NGINX because the request is taking too long

can you try to disable the timeout or reach keto directly so that we know how long it takes? how does the test of your tuples look like? and how many are there, specifically for that object and user?

Can I privatly send you the Keto logs?

sure

@User according to CRDB we are using an index join