Pulsar配置JWT授权之后broker启动报错

我的目的:测试KoP对PLAIN认证的支持度。

机器配置:
pulsar2.8.3+Kop2.8.3.5

broker配置文件:
按照Client authentication using tokens based on JSON Web Tokens | Apache Pulsar 进行配置
brokerClientTrustCertsFilePath=/path/my-ca/certs/ca.cert.pem未配置

报错信息:

16:11:25.084 [main] ERROR org.apache.pulsar.PulsarBrokerStarter - Failed to start pulsar service.
org.apache.pulsar.broker.PulsarServerException: java.lang.IllegalStateException: org.apache.pulsar.broker.PulsarServerException: java.lang.IllegalArgumentException: Web service address was not set properly , isBrokerClientTlsEnabled: true, webServiceAddressTls: null, webServiceAddress: http://wy1:8080
	at org.apache.pulsar.broker.PulsarService.start(PulsarService.java:789) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at org.apache.pulsar.PulsarBrokerStarter$BrokerStarter.start(PulsarBrokerStarter.java:259) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at org.apache.pulsar.PulsarBrokerStarter.main(PulsarBrokerStarter.java:331) [org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
Caused by: java.lang.IllegalStateException: org.apache.pulsar.broker.PulsarServerException: java.lang.IllegalArgumentException: Web service address was not set properly , isBrokerClientTlsEnabled: true, webServiceAddressTls: null, webServiceAddress: http://wy1:8080
	at io.streamnative.pulsar.handlers.kop.KafkaProtocolHandler.start(KafkaProtocolHandler.java:211) ~[?:?]
	at org.apache.pulsar.broker.protocol.ProtocolHandlerWithClassLoader.start(ProtocolHandlerWithClassLoader.java:76) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at org.apache.pulsar.broker.protocol.ProtocolHandlers.lambda$start$4(ProtocolHandlers.java:142) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at java.lang.Iterable.forEach(Iterable.java:75) ~[?:?]
	at org.apache.pulsar.broker.protocol.ProtocolHandlers.start(ProtocolHandlers.java:142) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at org.apache.pulsar.broker.PulsarService.start(PulsarService.java:753) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	... 2 more
Caused by: org.apache.pulsar.broker.PulsarServerException: java.lang.IllegalArgumentException: Web service address was not set properly , isBrokerClientTlsEnabled: true, webServiceAddressTls: null, webServiceAddress: http://wy1:8080
	at org.apache.pulsar.broker.PulsarService.getAdminClient(PulsarService.java:1419) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at io.streamnative.pulsar.handlers.kop.KafkaProtocolHandler.start(KafkaProtocolHandler.java:207) ~[?:?]
	at org.apache.pulsar.broker.protocol.ProtocolHandlerWithClassLoader.start(ProtocolHandlerWithClassLoader.java:76) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at org.apache.pulsar.broker.protocol.ProtocolHandlers.lambda$start$4(ProtocolHandlers.java:142) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at java.lang.Iterable.forEach(Iterable.java:75) ~[?:?]
	at org.apache.pulsar.broker.protocol.ProtocolHandlers.start(ProtocolHandlers.java:142) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at org.apache.pulsar.broker.PulsarService.start(PulsarService.java:753) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	... 2 more
Caused by: java.lang.IllegalArgumentException: Web service address was not set properly , isBrokerClientTlsEnabled: true, webServiceAddressTls: null, webServiceAddress: http://wy1:8080
	at org.apache.pulsar.broker.PulsarService.getAdminClient(PulsarService.java:1391) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at io.streamnative.pulsar.handlers.kop.KafkaProtocolHandler.start(KafkaProtocolHandler.java:207) ~[?:?]
	at org.apache.pulsar.broker.protocol.ProtocolHandlerWithClassLoader.start(ProtocolHandlerWithClassLoader.java:76) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at org.apache.pulsar.broker.protocol.ProtocolHandlers.lambda$start$4(ProtocolHandlers.java:142) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at java.lang.Iterable.forEach(Iterable.java:75) ~[?:?]
	at org.apache.pulsar.broker.protocol.ProtocolHandlers.start(ProtocolHandlers.java:142) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at org.apache.pulsar.broker.PulsarService.start(PulsarService.java:753) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	... 2 more

请问是啥原因呢?

可以把 brokerClientTlsEnabled 设置为 false


大佬,按照这个设置完之后
又出现如下错误:

[main] ERROR org.apache.pulsar.broker.PulsarService - Failed to start Pulsar service: org.apache.pulsar.client.admin.PulsarAdminException$NotAuthorizedException: HTTP 401 Unauthorized
java.lang.IllegalStateException: org.apache.pulsar.client.admin.PulsarAdminException$NotAuthorizedException: HTTP 401 Unauthorized
	at io.streamnative.pulsar.handlers.kop.KafkaProtocolHandler.createAndBootGroupCoordinator(KafkaProtocolHandler.java:371) ~[?:?]
	at java.util.concurrent.ConcurrentHashMap.computeIfAbsent(ConcurrentHashMap.java:1705) ~[?:?]
	at io.streamnative.pulsar.handlers.kop.KafkaProtocolHandler.getGroupCoordinator(KafkaProtocolHandler.java:108) ~[?:?]
	at io.streamnative.pulsar.handlers.kop.KafkaProtocolHandler.start(KafkaProtocolHandler.java:256) ~[?:?]
	at org.apache.pulsar.broker.protocol.ProtocolHandlerWithClassLoader.start(ProtocolHandlerWithClassLoader.java:76) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at org.apache.pulsar.broker.protocol.ProtocolHandlers.lambda$start$4(ProtocolHandlers.java:142) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at java.lang.Iterable.forEach(Iterable.java:75) ~[?:?]
	at org.apache.pulsar.broker.protocol.ProtocolHandlers.start(ProtocolHandlers.java:142) ~[org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at org.apache.pulsar.broker.PulsarService.start(PulsarService.java:753) [org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at org.apache.pulsar.PulsarBrokerStarter$BrokerStarter.start(PulsarBrokerStarter.java:259) [org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
	at org.apache.pulsar.PulsarBrokerStarter.main(PulsarBrokerStarter.java:331) [org.apache.pulsar-pulsar-broker-2.8.3.jar:2.8.3]
Caused by: org.apache.pulsar.client.admin.PulsarAdminException$NotAuthorizedException: HTTP 401 Unauthorized
	at org.apache.pulsar.client.admin.internal.BaseResource.getApiException(BaseResource.java:228) ~[org.apache.pulsar-pulsar-client-admin-original-2.8.3.jar:2.8.3]
	at org.apache.pulsar.client.admin.internal.ClustersImpl$1.failed(ClustersImpl.java:82) ~[org.apache.pulsar-pulsar-client-admin-original-2.8.3.jar:2.8.3]
	at org.glassfish.jersey.client.JerseyInvocation$1.failed(JerseyInvocation.java:882) ~[org.glassfish.jersey.core-jersey-client-2.34.jar:?]
	at org.glassfish.jersey.client.JerseyInvocation$1.completed(JerseyInvocation.java:863) ~[org.glassfish.jersey.core-jersey-client-2.34.jar:?]
	at org.glassfish.jersey.client.ClientRuntime.processResponse(ClientRuntime.java:229) ~[org.glassfish.jersey.core-jersey-client-2.34.jar:?]
	at org.glassfish.jersey.client.ClientRuntime.access$200(ClientRuntime.java:62) ~[org.glassfish.jersey.core-jersey-client-2.34.jar:?]
	at org.glassfish.jersey.client.ClientRuntime$2.lambda$response$0(ClientRuntime.java:173) ~[org.glassfish.jersey.core-jersey-client-2.34.jar:?]
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248) ~[org.glassfish.jersey.core-jersey-common-2.34.jar:?]
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244) ~[org.glassfish.jersey.core-jersey-common-2.34.jar:?]
	at org.glassfish.jersey.internal.Errors.process(Errors.java:292) ~[org.glassfish.jersey.core-jersey-common-2.34.jar:?]
	at org.glassfish.jersey.internal.Errors.process(Errors.java:274) ~[org.glassfish.jersey.core-jersey-common-2.34.jar:?]
	at org.glassfish.jersey.internal.Errors.process(Errors.java:244) ~[org.glassfish.jersey.core-jersey-common-2.34.jar:?]
	at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:288) ~[org.glassfish.jersey.core-jersey-common-2.34.jar:?]
	at org.glassfish.jersey.client.ClientRuntime$2.response(ClientRuntime.java:173) ~[org.glassfish.jersey.core-jersey-client-2.34.jar:?]

是啥原因呢?