<p>I am trying to setup Redis (version 6.2.7) to use an ACL file but whenever I try to load this file in the server configuration, the process crashes at startup without errors.
I am trying to do this on Kubernetes and I am using the bitnami helm chart package (version 16.13.2).</p>
<p>As the Chart does not explicitly support setting custom ACL rules, I came up with a workaround: I have mounted an acl file as an extraVolume (from a k8s secret) on /etc/redis/acl-file.conf.</p>
<p>My aclfile looks like this:</p>
<pre><code>user foo +@all ~* on &gt;somepassword
user bar +@all -@dangerous on &gt;someotherpassword 
</code></pre>
<p>I referenced it in the Redis configuration file and loaded it with the <code>aclfile</code> directive:</p>
<pre><code>commonConfiguration: |-
  # Enable appendonly file
  appendonly yes
  # Disable rdb persistence
  save &quot;&quot;
  aclfile /etc/redis/acl-file.conf
</code></pre>
<p>Unfortunately this attempt does not work and makes the server crash.</p>
<p>I have also set a &quot;root&quot; password with the <code>auth</code> Chart property:</p>
<pre><code>auth:
  enabled: true
  password: rootpassword
</code></pre>
<p>This last authentication works but unfortunately has no access restrictions whatsoever.</p>
<p>Can anyone give me a hint on how to solve this issue? Thanks</p>

matbot01
<p>I think that the healthcheck fails because it does not have access anymore. You need to provide the password for the default user both in the values of the Helm Chart and in the ACL file. For me the following works:</p>
<p>values.yaml:</p>
<pre><code>architecture: standalone
auth:
  password: abc-insecure
master:
  persistence:
    enabled: false
  extraVolumes:
  - name: redis-acl-list
    secret:
      secretName: redis-acl-list
  extraVolumeMounts:
  - name: redis-acl-list
    readOnly: true
    subPath: users.acl
    mountPath: &quot;/etc/redis/users.acl&quot;
commonConfiguration:
  aclfile /etc/redis/users.acl
</code></pre>
<p>secret for ACL file:</p>
<pre><code>apiVersion: v1
kind: Secret
metadata:
  name: redis-acl-list
type: Opaque
stringData:
  users.acl: |
    user default on ~* &amp;* +@all &gt;abc-insecure
    user worker +@list +@connection ~jobs:* on &gt;ffa9203c493aa99
</code></pre>
