In any case the user associated with the credentials you use is not assigned to the same cinoany ID you replaced

More in detail?

How can I fresh DB? Mongo or Redis?

where did you get it from?

Oh, wait

In any case, the said credentials are valid for the company ID defined using apiserver.default_company

I set it up with the following documentation: https://allegro.ai/clearml/docs/docs/deploying_clearml/clearml_server_kubernetes_helm.html

Well, for some reason the webserver auth user entry is probably created using the incorrect company_id - the best thing to do it exec into the mongo container and check the actual company value assigned to the webserver user

Also - did you start with a fresh DB after changing the default company value?

No, I just restart the apiserver and webserver pod.

But you’re not using the webserver, you’re sending the cURL requests manually, aren’t you?

yes, I send them manully.

Also - did you start with a fresh DB after changing the default company value?

Or check the chart you're using 🙂

The chart might be replacing that

Oh, you're just debugging?

Are you sending these requests manually?
COK. In any case, you should be looking at the

I send them with curl.

Hi FloppyDeer99 ,
the users.get_all should be sent to the apiserver, not to the webserver. In any case, the header will not affect this request as the server will be using your user's identity (encoded in the authorization header) to resolve the company

Are you sending these requests manually?
OK. In any case, you should be looking at the

In any case the user associated with the credentials you use is not assigned to the same company ID you replaced

I set ClearML up with Kubernetes Helm.

the webserver secret isn't there

OK, so the company you're referring to is encoded in the authorization header

These values are overridden in the k8s deployment. See https://github.com/allegroai/clearml-server-k8s/blob/master/clearml-server-cloud-ready/templates/secrets.yaml

In any case, the said credentials are valid for the company ID defined using 

apiserver.default_company

It really works for apiserver, but webserver does not have the default_company configuration.

I have another question. Does the following apis in the picture are served by both of apiserver and webserver, or just one of them ?

A users.get_all request will return the users in the company to which the calling user is authenticated to. So, if you only get the users from the original default company ID and not those from newID, it means the credentials you're using to call this endpoint are associated in the server with the original company ID, and not with the newID

<webserver>/api is a reverse proxy

Just the apiserver