https://www.ory.sh/ logo
#talk-keto
Title
# talk-keto
l

lively-beard-47107

03/24/2022, 1:50 PM
Hi, we are testing Keto and something weird happened. We are gettin a
504 Gateway Time-out
error when we are trying to check a relation which
object
+
relation
exists, but they are not related to the asked
subject_id
. So, we are at the point when we have:
Copy code
{
  "namespace": "permissions",
  "object": "john",
  "relation": "view",
  "subject_id": "ann"
}
Asking Keto if the following relation exist:
Copy code
{
  "object": "john",
  "relation": "view",
  "subject_id": "ann"
}
responds with 200
Copy code
{
  "object": "john",
  "relation": "delete",
  "subject_id": "ann"
}
responds with 403
Copy code
{
  "object": "john",
  "relation": "view",
  "subject_id": "ben"
}
responds with 504
s

steep-lamp-91158

03/24/2022, 2:18 PM
Are you talking to Keto directly? I.e. is the 504 returned by Keto or is it possible that Keto takes so long that you get a timeout from the ingress/...
and you omitted the namespace only in this example right?
also: can you share the keto logs?
l

lively-beard-47107

03/24/2022, 3:07 PM
504 is actually returned by NGINX because the request is taking too long
s

steep-lamp-91158

03/24/2022, 3:10 PM
can you try to disable the timeout or reach keto directly so that we know how long it takes? how does the test of your tuples look like? and how many are there, specifically for that object and user?
l

lively-beard-47107

03/24/2022, 3:11 PM
Can I privatly send you the Keto logs?
s

steep-lamp-91158

03/24/2022, 3:11 PM
sure
h

high-optician-2097

03/24/2022, 5:37 PM
@User according to CRDB we are using an index join
this could cause the issue here