Project

General

Profile

action #89047

Failed to commit needles, gitlab account blocked 2021-02-24

Added by okurz 8 months ago. Updated 8 months ago.

Status:
Resolved
Priority:
High
Assignee:
Target version:
Start date:
2021-02-24
Due date:
% Done:

0%

Estimated time:

Description

Observation

Reported in https://chat.suse.de/channel/testing?msg=wpXCDohMos3AHXd2k

Failed to save welcome-before-select-product-sled-20210224.
Unable to fetch from origin master: Fetching origin
remote:
remote: ========================================================================
remote:
remote: Your account has been blocked.
remote:
remote: ========================================================================
remote:
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
error: Could not fetch origin

Acceptance criteria

  • AC1: Saving needles from OSD web UI works again

Suggestions


Related issues

Related to openQA Infrastructure - action #75067: save_needle minion task fails because "Your account has been blocked"Resolved2020-10-22

Related to openQA Infrastructure - action #67804: use non-personal account and key for pushing needles on osd to gitlab.suse.deResolved2020-05-252020-11-05

Related to openQA Infrastructure - action #67213: pushing needles on osd to gitlab.suse.de failsResolved2020-05-25

Related to openQA Infrastructure - action #42920: Gitlab user gets blocked: Try out gitlab deployment tokens for openQAResolved2018-10-25

History

#1 Updated by nicksinger 8 months ago

  • Assignee set to nicksinger

#2 Updated by nicksinger 8 months ago

  • Status changed from Workable to Blocked

As already described by okurz the login is not possible as the password gets reported as "wrong". Resetting it over the idp-portal didn't work for me as I have no clue what e-mail for that user is used. I've created infra-ticket "[RT-ADM #185915] AutoReply: [openqa] openqa-pusher account on gitlab blocked" now.

#3 Updated by okurz 8 months ago

I suggest to also reference URLs for EngInfra tickets, easier to click around this way :) So the according ticket is
https://infra.nue.suse.com/SelfService/Display.html?id=185915

#4 Updated by nicksinger 8 months ago

I never can see infra tickets anyway but good you put the link here :)
In the meantime while we wait for an answer I created https://gitlab.suse.de/nicksinger/github-autologin which could automate our gitlab login over the webui in the future to avoid blocked accounts.

#5 Updated by okurz 8 months ago

It seems slindomansilla has replaced the git ssh URL with an https URL but I am not aware of any place where he might have documented that so noting it here. This is a kinda workaround by allowing to pull from the gitlab repo but not allowing to push so this would need to be reverted as soon as the account is ok again. Evzenie Sujskaja told me over private chat that they will add the employee flag to the openqa-pusher account. Nothing heard since this morning though.

#6 Updated by okurz 8 months ago

  • Related to action #75067: save_needle minion task fails because "Your account has been blocked" added

#7 Updated by okurz 8 months ago

  • Related to action #67804: use non-personal account and key for pushing needles on osd to gitlab.suse.de added

#8 Updated by okurz 8 months ago

  • Related to action #67213: pushing needles on osd to gitlab.suse.de fails added

#9 Updated by okurz 8 months ago

  • Related to action #42920: Gitlab user gets blocked: Try out gitlab deployment tokens for openQA added

#10 Updated by SLindoMansilla 8 months ago

Applying workaround:

changing remote from SSH url gitlab@gitlab.suse.de:openqa/os-autoinst-needles-sles.git to HTTPS url https://gitlab.suse.de/openqa/os-autoinst-needles-sles.git.

This allows to fetch data without user authentication, but doesn't allow by default any push (webui credentials would be needed)

geekotest@openqa:~/share/tests/sle/products/sle/needles> git remote -v
origin  https://gitlab.suse.de/openqa/os-autoinst-needles-sles.git (fetch)
origin  https://gitlab.suse.de/openqa/os-autoinst-needles-sles.git (push)
origin-ssh      gitlab@gitlab.suse.de:openqa/os-autoinst-needles-sles.git (fetch)
origin-ssh      gitlab@gitlab.suse.de:openqa/os-autoinst-needles-sles.git (push)

When the gitlab account is unblocked, the following commands need to be executed

geekotest@openqa:~/share/tests/sle/products/sle/needles> git remote rename origin origin-https
geekotest@openqa:~/share/tests/sle/products/sle/needles> git remote rename origin-ssh origin

The https remote doesn't harm to be there, but if necessary, it can be removed with

geekotest@openqa:~/share/tests/sle/products/sle/needles> git remote remove origin-https

#11 Updated by SLindoMansilla 8 months ago

At the moment there are two commits on osd needles clone that cannot be pushed.

Can anyone temporarily give push permissions to my gitlab user SLindoMansilla?

#12 Updated by nicksinger 8 months ago

  • Status changed from Blocked to Resolved

We have the account back. I renamed the remotes accordingly and pushed/pulled left-overs. Everything seems fine.

#13 Updated by okurz 8 months ago

  • Status changed from Resolved to Feedback
  • Priority changed from Immediate to High

Glad to hear that. Thank you for fixing that. I assume though the password was changed and does not correspond anymore what is written in https://gitlab.suse.de/openqa/scripts/-/blob/master/password ?

#14 Updated by nicksinger 8 months ago

  • Priority changed from High to Immediate

#15 Updated by nicksinger 8 months ago

  • Priority changed from Immediate to High

#16 Updated by sebchlad 8 months ago

nicksinger wrote:

We have the account back. I renamed the remotes accordingly and pushed/pulled left-overs. Everything seems fine.

not sure, maybe I do something wrong.
I tried to create hpc needle now in osd and got:
"Fatal error when saving needle.
Task for saving needles failed: Checkout Minion dashboard for further details."

#17 Updated by nicksinger 8 months ago

sebchlad wrote:

nicksinger wrote:

We have the account back. I renamed the remotes accordingly and pushed/pulled left-overs. Everything seems fine.

not sure, maybe I do something wrong.
I tried to create hpc needle now in osd and got:
"Fatal error when saving needle.
Task for saving needles failed: Checkout Minion dashboard for further details."

Thanks for reporting back. Seems like openqa-gru was stuck somehow and didn't even write any error onto the minion dashboard. I've restarted the service now and was able to save a needle. Please try again if it works for you :)
okurz I'd not create a bug about this now as I can't really provide any logging data. The journal was empty, no failed minion logged anything. Feel free to create one anyway if you see the need for it

#18 Updated by sebchlad 8 months ago

nicksinger wrote:

sebchlad wrote:

nicksinger wrote:

We have the account back. I renamed the remotes accordingly and pushed/pulled left-overs. Everything seems fine.

not sure, maybe I do something wrong.
I tried to create hpc needle now in osd and got:
"Fatal error when saving needle.
Task for saving needles failed: Checkout Minion dashboard for further details."

Thanks for reporting back. Seems like openqa-gru was stuck somehow and didn't even write any error onto the minion dashboard. I've restarted the service now and was able to save a needle. Please try again if it works for you :)

yes, all works now. Thx.

#19 Updated by nicksinger 8 months ago

  • Status changed from Feedback to Resolved

Also available in: Atom PDF