Graylog Google Pub/Sub输出插件运行IllegalAccessError问题求助

Root Cause #

This error is a classic case of dependency version conflict between Graylog's built-in libraries and the Google Pub/Sub Java client. Specifically:

• The Pub/Sub client relies on gRPC internally, which tries to access a field (io.opencensus.trace.unsafe.ContextUtils.CONTEXT_SPAN_KEY) from the OpenCensus library.
• Graylog already includes its own version of OpenCensus, and the version mismatch means the gRPC code can't access the field due to changed access permissions or incompatible class definitions.

Step-by-Step Solutions #

1. Resolve Dependency Conflicts in Your Build #

The key is to make sure your plugin uses the same version of OpenCensus as Graylog instead of bundling its own. Update your build configuration (Maven or Gradle) to exclude conflicting OpenCensus dependencies from the Pub/Sub client and use Graylog's version:

Maven pom.xml Example:

<dependencies>
    <!-- Google Pub/Sub Client -->
    <dependency>
        <groupId>com.google.cloud</groupId>
        <artifactId>google-cloud-pubsub</artifactId>
        <version>your-pubsub-client-version</version>
        <!-- Exclude conflicting OpenCensus artifacts -->
        <exclusions>
            <exclusion>
                <groupId>io.opencensus</groupId>
                <artifactId>opencensus-api</artifactId>
            </exclusion>
            <exclusion>
                <groupId>io.opencensus</groupId>
                <artifactId>opencensus-contrib-grpc-metrics</artifactId>
            </exclusion>
        </exclusions>
    </dependency>
    <!-- Use Graylog's built-in OpenCensus (find version in Graylog's lib/opencensus-api-*.jar) -->
    <dependency>
        <groupId>io.opencensus</groupId>
        <artifactId>opencensus-api</artifactId>
        <version>graylog-opencensus-version</version>
        <scope>provided</scope>
    </dependency>
</dependencies>

Gradle build.gradle Example:

dependencies {
    implementation('com.google.cloud:google-cloud-pubsub:your-pubsub-client-version') {
        exclude group: 'io.opencensus', module: 'opencensus-api'
        exclude group: 'io.opencensus', module: 'opencensus-contrib-grpc-metrics'
    }
    // Declare OpenCensus as provided to use Graylog's copy
    provided 'io.opencensus:opencensus-api:graylog-opencensus-version'
}

To get graylog-opencensus-version, check your Graylog installation's lib directory for a file named opencensus-api-X.X.X.jar—the X.X.X is your target version.

2. Verify Graylog Plugin Classloading #

Graylog uses isolated classloaders for plugins to prevent conflicts, so:

• Ensure any dependencies shared with Graylog (like OpenCensus, gRPC) are marked as provided in your build—this tells the plugin to use Graylog's existing classes instead of bundling duplicates.
• Double-check your plugin's plugin.xml to make sure you're not accidentally declaring conflicting dependencies.

3. Try a Compatible Pub/Sub Client Version #

If exclusion doesn't work, switch to a Pub/Sub client version that aligns with Graylog's gRPC/OpenCensus versions. You can find the gRPC version Graylog uses by checking lib/grpc-core-*.jar in your installation, then match it to a Pub/Sub client version that depends on that same gRPC version (check Pub/Sub client release notes for dependency details).

Testing the Fix #

1. Rebuild your plugin with the adjusted dependencies
2. Deploy the plugin JAR to Graylog's plugin directory
3. Restart Graylog and test sending logs to Pub/Sub—this should resolve the IllegalAccessError

内容的提问来源于stack exchange，提问作者Lavish Jain