1. Messages
  2. Endorsement Policy Failure while committing chaincode

Re: Endorsement Policy Failure while committing chaincode #fabric-kubernetes #hyperledger-fabric #chaincode

David Enyeart
 

You can use either OrgMSP.member or OrgMSP.peer format, assuming you’ve configured the MSP for Node OU roles and provided the matching OU “peer” tag in the peer’s certificate.

More details at https://hyperledger-fabric.readthedocs.io/en/latest/membership/membership.html#node-ou-roles-and-msps

You could try OrgMSP.member in your channel configuration to verify that you don’t have a Node OU configuration issue.

 

The additional policy error logging was backported to v2.2 in the recent v2.2.6, it may provide additional hints in the peer log.

 

From: fabric@... <fabric@...> on behalf of Arsh <arshimag@...>
Date: Thursday, June 23, 2022 at 11:24 AM
To: fabric@... <fabric@...>
Subject: [EXTERNAL] Re: [Hyperledger Fabric] Endorsement Policy Failure while committing chaincode #fabric-kubernetes #hyperledger-fabric

@Dave  As you can see from the configtx.yaml that I've previously shared, all the orgs have LifecycleEndorsement policy set to   Endorsement:                 Type: Signature                 Rule: "OR('Org1MSP.peer')" ‍ ‍ ‍ ‍

ZjQcmQRYFpfptBannerStart

This Message Is From an External Sender

This message came from outside your organization.

ZjQcmQRYFpfptBannerEnd

@Dave  As you can see from the configtx.yaml that I've previously shared, all the orgs have LifecycleEndorsement policy set to  

Endorsement:

                Type: Signature

                Rule: "OR('Org1MSP.peer')"

and from the example configtx file which you shared, I can see that the policy is set to "OR('OrgMSP.member')". Will that impact? 
The hyperledger version I'm using is 2.2

@Josh, thank you for the compliment, it's a template I took from the repo I'm using as a reference for this project. Coming to your second point, the CORE_PEER_LOCALMSPID along with all the other required peer env variables is specified while creating peer containers but not in the argo workflows which execute the chaincode process. Even though I'm not using cli containers in my cluster unlike docker, I can safely tell you that my argo workflows do the same job of the cli containers more or less. Argo templates are used to do nothing but create containers and run chaincode scripts on them. Also, I haven't specified any CORE_PEER env variables in my docker-compose file for cli containers either. They are specified for the peer containers. At this point, I'm having another doubt. Why didn't any of this affect the previous chaincode commands?
Join fabric@lists.hyperledger.org to automatically receive all group messages.