Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jenkins access issues for vagrant machines #2778

Open
sxa opened this issue Oct 7, 2022 · 4 comments
Open

Jenkins access issues for vagrant machines #2778

sxa opened this issue Oct 7, 2022 · 4 comments

Comments

@sxa
Copy link
Member

sxa commented Oct 7, 2022

The infra-vagrant machines have been using an explicit user list to determine who can use them. This should not be the case and the default access for all people in the committers/triage teams should be able to run on those systems (Or possible restricted to the infrastructure* teams)

It's unclear why this was originally done, but I have so far failed to be able to switch it to work any other way. This issue will cover trying to resolve that.

@sxa sxa self-assigned this Oct 7, 2022
@sxa sxa added the security label Oct 7, 2022
@sxa sxa added this to the 2022-10 (October) milestone Oct 7, 2022
@sxa sxa changed the title Access request for vagrant machines Jenkins access issues for vagrant machines Nov 7, 2022
@sxa
Copy link
Member Author

sxa commented Jan 31, 2023

Tested today and it's still a problem: 13:02:13 ?bethgriggs? lacks permission to run on ?infra-ibmcloud-vagrant-x64-1.5? (Same for all five agents) from https://ci.adoptopenjdk.net/view/Tooling/job/VagrantPlaybookCheck/1594/console

@sxa
Copy link
Member Author

sxa commented Mar 17, 2023

Added @BethGriggs to AdoptOpenJDK*infrastructure today and it worked, so that will need some extra analysis to detmine why.
Compare https://ci.adoptium.net/job/VagrantPlaybookCheck/OS=Ubuntu2004,label=vagrant/1640/console (FAILED) with https://ci.adoptium.net/job/VagrantPlaybookCheck/OS=Ubuntu2004,label=vagrant/1643/console (worked)
So at least we know it's somehow group membership related.

@sxa
Copy link
Member Author

sxa commented Mar 20, 2023

https://ci.adoptium.net/job/VagrantPlaybookCheck/1641/console worked while Beth was added into the infrastructure team, but https://ci.adoptium.net/job/VagrantPlaybookCheck/1646/ still seems to be failing after removing her from that team again, but adding her explicitly to the VPC job ACL.

@sxa
Copy link
Member Author

sxa commented Mar 21, 2023

I'm going to remove this from the March milestone just now as we have a solution (Add users to the infrastructure team) but this should be available to infrastructure-triage too.

@sxa sxa removed this from the 2023-03 (March) milestone Mar 21, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant