Project

General

Profile

Actions

action #89047

closed

Failed to commit needles, gitlab account blocked 2021-02-24

Added by okurz almost 4 years ago. Updated almost 4 years ago.

Status:
Resolved
Priority:
High
Assignee:
Category:
-
Start date:
2021-02-24
Due date:
% Done:

0%

Estimated time:

Description

Observation

Reported in https://chat.suse.de/channel/testing?msg=wpXCDohMos3AHXd2k

Failed to save welcome-before-select-product-sled-20210224.
Unable to fetch from origin master: Fetching origin
remote:
remote: ========================================================================
remote:
remote: Your account has been blocked.
remote:
remote: ========================================================================
remote:
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
error: Could not fetch origin

Acceptance criteria

  • AC1: Saving needles from OSD web UI works again

Suggestions


Related issues 4 (0 open4 closed)

Related to openQA Infrastructure (public) - action #75067: save_needle minion task fails because "Your account has been blocked"Resolvedokurz2020-10-22

Actions
Related to openQA Infrastructure (public) - action #67804: use non-personal account and key for pushing needles on osd to gitlab.suse.deResolvedokurz2020-05-252020-11-05

Actions
Related to openQA Infrastructure (public) - action #67213: pushing needles on osd to gitlab.suse.de failsResolvedokurz2020-05-25

Actions
Related to openQA Infrastructure (public) - action #42920: Gitlab user gets blocked: Try out gitlab deployment tokens for openQAResolvednicksinger2018-10-25

Actions
Actions #1

Updated by nicksinger almost 4 years ago

  • Assignee set to nicksinger
Actions #2

Updated by nicksinger almost 4 years ago

  • Status changed from Workable to Blocked

As already described by okurz the login is not possible as the password gets reported as "wrong". Resetting it over the idp-portal didn't work for me as I have no clue what e-mail for that user is used. I've created infra-ticket "[RT-ADM #185915] AutoReply: [openqa] openqa-pusher account on gitlab blocked" now.

Actions #3

Updated by okurz almost 4 years ago

I suggest to also reference URLs for EngInfra tickets, easier to click around this way :) So the according ticket is
https://infra.nue.suse.com/SelfService/Display.html?id=185915

Actions #4

Updated by nicksinger almost 4 years ago

I never can see infra tickets anyway but good you put the link here :)
In the meantime while we wait for an answer I created https://gitlab.suse.de/nicksinger/github-autologin which could automate our gitlab login over the webui in the future to avoid blocked accounts.

Actions #5

Updated by okurz almost 4 years ago

It seems slindomansilla has replaced the git ssh URL with an https URL but I am not aware of any place where he might have documented that so noting it here. This is a kinda workaround by allowing to pull from the gitlab repo but not allowing to push so this would need to be reverted as soon as the account is ok again. Evzenie Sujskaja told me over private chat that they will add the employee flag to the openqa-pusher account. Nothing heard since this morning though.

Actions #6

Updated by okurz almost 4 years ago

  • Related to action #75067: save_needle minion task fails because "Your account has been blocked" added
Actions #7

Updated by okurz almost 4 years ago

  • Related to action #67804: use non-personal account and key for pushing needles on osd to gitlab.suse.de added
Actions #8

Updated by okurz almost 4 years ago

  • Related to action #67213: pushing needles on osd to gitlab.suse.de fails added
Actions #9

Updated by okurz almost 4 years ago

  • Related to action #42920: Gitlab user gets blocked: Try out gitlab deployment tokens for openQA added
Actions #10

Updated by SLindoMansilla almost 4 years ago

Applying workaround:

changing remote from SSH url gitlab@gitlab.suse.de:openqa/os-autoinst-needles-sles.git to HTTPS url https://gitlab.suse.de/openqa/os-autoinst-needles-sles.git.

This allows to fetch data without user authentication, but doesn't allow by default any push (webui credentials would be needed)

geekotest@openqa:~/share/tests/sle/products/sle/needles> git remote -v
origin  https://gitlab.suse.de/openqa/os-autoinst-needles-sles.git (fetch)
origin  https://gitlab.suse.de/openqa/os-autoinst-needles-sles.git (push)
origin-ssh      gitlab@gitlab.suse.de:openqa/os-autoinst-needles-sles.git (fetch)
origin-ssh      gitlab@gitlab.suse.de:openqa/os-autoinst-needles-sles.git (push)

When the gitlab account is unblocked, the following commands need to be executed

geekotest@openqa:~/share/tests/sle/products/sle/needles> git remote rename origin origin-https
geekotest@openqa:~/share/tests/sle/products/sle/needles> git remote rename origin-ssh origin

The https remote doesn't harm to be there, but if necessary, it can be removed with

geekotest@openqa:~/share/tests/sle/products/sle/needles> git remote remove origin-https
Actions #11

Updated by SLindoMansilla almost 4 years ago

At the moment there are two commits on osd needles clone that cannot be pushed.

Can anyone temporarily give push permissions to my gitlab user SLindoMansilla?

Actions #12

Updated by nicksinger almost 4 years ago

  • Status changed from Blocked to Resolved

We have the account back. I renamed the remotes accordingly and pushed/pulled left-overs. Everything seems fine.

Actions #13

Updated by okurz almost 4 years ago

  • Status changed from Resolved to Feedback
  • Priority changed from Immediate to High

Glad to hear that. Thank you for fixing that. I assume though the password was changed and does not correspond anymore what is written in https://gitlab.suse.de/openqa/scripts/-/blob/master/password ?

Actions #14

Updated by nicksinger almost 4 years ago

  • Priority changed from High to Immediate
Actions #15

Updated by nicksinger almost 4 years ago

  • Priority changed from Immediate to High
Actions #16

Updated by sebchlad almost 4 years ago

nicksinger wrote:

We have the account back. I renamed the remotes accordingly and pushed/pulled left-overs. Everything seems fine.

not sure, maybe I do something wrong.
I tried to create hpc needle now in osd and got:
"Fatal error when saving needle.
Task for saving needles failed: Checkout Minion dashboard for further details."

Actions #17

Updated by nicksinger almost 4 years ago

sebchlad wrote:

nicksinger wrote:

We have the account back. I renamed the remotes accordingly and pushed/pulled left-overs. Everything seems fine.

not sure, maybe I do something wrong.
I tried to create hpc needle now in osd and got:
"Fatal error when saving needle.
Task for saving needles failed: Checkout Minion dashboard for further details."

Thanks for reporting back. Seems like openqa-gru was stuck somehow and didn't even write any error onto the minion dashboard. I've restarted the service now and was able to save a needle. Please try again if it works for you :)
@okurz I'd not create a bug about this now as I can't really provide any logging data. The journal was empty, no failed minion logged anything. Feel free to create one anyway if you see the need for it

Actions #18

Updated by sebchlad almost 4 years ago

nicksinger wrote:

sebchlad wrote:

nicksinger wrote:

We have the account back. I renamed the remotes accordingly and pushed/pulled left-overs. Everything seems fine.

not sure, maybe I do something wrong.
I tried to create hpc needle now in osd and got:
"Fatal error when saving needle.
Task for saving needles failed: Checkout Minion dashboard for further details."

Thanks for reporting back. Seems like openqa-gru was stuck somehow and didn't even write any error onto the minion dashboard. I've restarted the service now and was able to save a needle. Please try again if it works for you :)

yes, all works now. Thx.

Actions #19

Updated by nicksinger almost 4 years ago

  • Status changed from Feedback to Resolved
Actions

Also available in: Atom PDF