action #89047
closedFailed to commit needles, gitlab account blocked 2021-02-24
0%
Description
Observation¶
Reported in https://chat.suse.de/channel/testing?msg=wpXCDohMos3AHXd2k
Failed to save welcome-before-select-product-sled-20210224.
Unable to fetch from origin master: Fetching origin
remote:
remote: ========================================================================
remote:
remote: Your account has been blocked.
remote:
remote: ========================================================================
remote:
fatal: Could not read from remote repository.
Please make sure you have the correct access rights
and the repository exists.
error: Could not fetch origin
Acceptance criteria¶
- AC1: Saving needles from OSD web UI works again
Suggestions¶
- Check within the SSH config and such if the gitlab account "openqa-pusher" is used with password from https://gitlab.suse.de/openqa/scripts/-/blob/master/password#L11
- Try to unblock account by logging in over the webUI (did not work for okurz)
- Try to recover password or ask SUSE IT EngInfra for help
Updated by nicksinger almost 4 years ago
- Status changed from Workable to Blocked
As already described by okurz the login is not possible as the password gets reported as "wrong". Resetting it over the idp-portal didn't work for me as I have no clue what e-mail for that user is used. I've created infra-ticket "[RT-ADM #185915] AutoReply: [openqa] openqa-pusher account on gitlab blocked" now.
Updated by okurz almost 4 years ago
I suggest to also reference URLs for EngInfra tickets, easier to click around this way :) So the according ticket is
https://infra.nue.suse.com/SelfService/Display.html?id=185915
Updated by nicksinger almost 4 years ago
I never can see infra tickets anyway but good you put the link here :)
In the meantime while we wait for an answer I created https://gitlab.suse.de/nicksinger/github-autologin which could automate our gitlab login over the webui in the future to avoid blocked accounts.
Updated by okurz almost 4 years ago
It seems slindomansilla has replaced the git ssh URL with an https URL but I am not aware of any place where he might have documented that so noting it here. This is a kinda workaround by allowing to pull from the gitlab repo but not allowing to push so this would need to be reverted as soon as the account is ok again. Evzenie Sujskaja told me over private chat that they will add the employee flag to the openqa-pusher account. Nothing heard since this morning though.
Updated by okurz almost 4 years ago
- Related to action #75067: save_needle minion task fails because "Your account has been blocked" added
Updated by okurz almost 4 years ago
- Related to action #67804: use non-personal account and key for pushing needles on osd to gitlab.suse.de added
Updated by okurz almost 4 years ago
- Related to action #67213: pushing needles on osd to gitlab.suse.de fails added
Updated by okurz almost 4 years ago
- Related to action #42920: Gitlab user gets blocked: Try out gitlab deployment tokens for openQA added
Updated by SLindoMansilla almost 4 years ago
Applying workaround:
changing remote from SSH url gitlab@gitlab.suse.de:openqa/os-autoinst-needles-sles.git
to HTTPS url https://gitlab.suse.de/openqa/os-autoinst-needles-sles.git
.
This allows to fetch data without user authentication, but doesn't allow by default any push (webui credentials would be needed)
geekotest@openqa:~/share/tests/sle/products/sle/needles> git remote -v
origin https://gitlab.suse.de/openqa/os-autoinst-needles-sles.git (fetch)
origin https://gitlab.suse.de/openqa/os-autoinst-needles-sles.git (push)
origin-ssh gitlab@gitlab.suse.de:openqa/os-autoinst-needles-sles.git (fetch)
origin-ssh gitlab@gitlab.suse.de:openqa/os-autoinst-needles-sles.git (push)
When the gitlab account is unblocked, the following commands need to be executed
geekotest@openqa:~/share/tests/sle/products/sle/needles> git remote rename origin origin-https
geekotest@openqa:~/share/tests/sle/products/sle/needles> git remote rename origin-ssh origin
The https remote doesn't harm to be there, but if necessary, it can be removed with
geekotest@openqa:~/share/tests/sle/products/sle/needles> git remote remove origin-https
Updated by SLindoMansilla almost 4 years ago
At the moment there are two commits on osd needles clone that cannot be pushed.
Can anyone temporarily give push permissions to my gitlab user SLindoMansilla
?
Updated by nicksinger almost 4 years ago
- Status changed from Blocked to Resolved
We have the account back. I renamed the remotes accordingly and pushed/pulled left-overs. Everything seems fine.
Updated by okurz almost 4 years ago
- Status changed from Resolved to Feedback
- Priority changed from Immediate to High
Glad to hear that. Thank you for fixing that. I assume though the password was changed and does not correspond anymore what is written in https://gitlab.suse.de/openqa/scripts/-/blob/master/password ?
Updated by nicksinger almost 4 years ago
- Priority changed from High to Immediate
Updated by nicksinger almost 4 years ago
- Priority changed from Immediate to High
Updated by sebchlad almost 4 years ago
nicksinger wrote:
We have the account back. I renamed the remotes accordingly and pushed/pulled left-overs. Everything seems fine.
not sure, maybe I do something wrong.
I tried to create hpc needle now in osd and got:
"Fatal error when saving needle.
Task for saving needles failed: Checkout Minion dashboard for further details."
Updated by nicksinger almost 4 years ago
sebchlad wrote:
nicksinger wrote:
We have the account back. I renamed the remotes accordingly and pushed/pulled left-overs. Everything seems fine.
not sure, maybe I do something wrong.
I tried to create hpc needle now in osd and got:
"Fatal error when saving needle.
Task for saving needles failed: Checkout Minion dashboard for further details."
Thanks for reporting back. Seems like openqa-gru
was stuck somehow and didn't even write any error onto the minion dashboard. I've restarted the service now and was able to save a needle. Please try again if it works for you :)
@okurz I'd not create a bug about this now as I can't really provide any logging data. The journal was empty, no failed minion logged anything. Feel free to create one anyway if you see the need for it
Updated by sebchlad almost 4 years ago
nicksinger wrote:
sebchlad wrote:
nicksinger wrote:
We have the account back. I renamed the remotes accordingly and pushed/pulled left-overs. Everything seems fine.
not sure, maybe I do something wrong.
I tried to create hpc needle now in osd and got:
"Fatal error when saving needle.
Task for saving needles failed: Checkout Minion dashboard for further details."Thanks for reporting back. Seems like
openqa-gru
was stuck somehow and didn't even write any error onto the minion dashboard. I've restarted the service now and was able to save a needle. Please try again if it works for you :)
yes, all works now. Thx.
Updated by nicksinger almost 4 years ago
- Status changed from Feedback to Resolved