gate issue with ssh

Bug #1687408 reported by Eduardo Gonzalez
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
kolla
Fix Released
High
Eduardo Gonzalez
Newton
Fix Released
High
Eduardo Gonzalez
Ocata
Fix Released
High
Eduardo Gonzalez
Pike
Fix Released
High
Eduardo Gonzalez
kolla-ansible
Fix Released
High
Eduardo Gonzalez
Ocata
Fix Released
High
Eduardo Gonzalez
Pike
Fix Released
High
Eduardo Gonzalez

Bug Description

Due a recent change in infra to remove puppet from nodepool, ssh-keyscan is needed for each node in the pool.
Also, ssh/config permissions are 664 currently, causing error `Bad owner or permissions on /home/jenkins/.ssh/config`

http://logs.openstack.org/68/461368/1/check/gate-kolla-ansible-dsvm-deploy-centos-binary-centos-7-nv/0a94da7/console.html#_2017-05-01_12_06_08_440775

Config file should only be writen by owner.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla (master)

Reviewed: https://review.openstack.org/460783
Committed: https://git.openstack.org/cgit/openstack/kolla/commit/?id=508f73e059fdfe8e051c58762dc8e21d826d54db
Submitter: Jenkins
Branch: master

commit 508f73e059fdfe8e051c58762dc8e21d826d54db
Author: Eduardo Gonzalez <email address hidden>
Date: Fri Apr 28 01:57:42 2017 +0200

    Add ssh-keyscan to unblock kolla gate

    As a change to remove puppet from infra nodepool,
    ssh-keyscan is needed for each node [0]

    Permissions to ssh/config file should be 600 instead
    of current 664 [1]

    Refs:
    [0] http://lists.openstack.org/pipermail/openstack-dev/2017-April/116036.html
    [1] http://logs.openstack.org/68/461368/1/check/gate-kolla-ansible-dsvm-deploy-centos-binary-centos-7-nv/0a94da7/console.html#_2017-05-01_12_06_08_440775

    Closes-Bug: #1687408
    Change-Id: I338e457fff35d8a28bd9f96e88dbb4ee55a47864

Changed in kolla:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla (stable/ocata)

Reviewed: https://review.openstack.org/461862
Committed: https://git.openstack.org/cgit/openstack/kolla/commit/?id=6cdd99875e8c1a07400b026d015916e37c0c70e3
Submitter: Jenkins
Branch: stable/ocata

commit 6cdd99875e8c1a07400b026d015916e37c0c70e3
Author: Eduardo Gonzalez <email address hidden>
Date: Fri Apr 28 01:57:42 2017 +0200

    Add ssh-keyscan to unblock kolla gate

    As a change to remove puppet from infra nodepool,
    ssh-keyscan is needed for each node [0]

    Permissions to ssh/config file should be 600 instead
    of current 664 [1]

    Refs:
    [0] http://lists.openstack.org/pipermail/openstack-dev/2017-April/116036.html
    [1] http://logs.openstack.org/68/461368/1/check/gate-kolla-ansible-dsvm-deploy-centos-binary-centos-7-nv/0a94da7/console.html#_2017-05-01_12_06_08_440775

    Closes-Bug: #1687408
    Change-Id: I338e457fff35d8a28bd9f96e88dbb4ee55a47864
    (cherry picked from commit 508f73e059fdfe8e051c58762dc8e21d826d54db)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (master)

Reviewed: https://review.openstack.org/461368
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=ba6e3249d2bc1e125a95ea2fc13ac7b130c2059a
Submitter: Jenkins
Branch: master

commit ba6e3249d2bc1e125a95ea2fc13ac7b130c2059a
Author: Eduardo Gonzalez <email address hidden>
Date: Mon May 1 13:02:43 2017 +0100

    Change ssh/config permissions to 600

    ssh/config permissions are 664 currently, causing error
    `Bad owner or permissions on /home/jenkins/.ssh/config`

    http://logs.openstack.org/68/461368/1/check/gate-kolla-ansible-dsvm-deploy-centos-binary-centos-7-nv/0a94da7/console.html#_2017-05-01_12_06_08_440775

    config file should only be writen by owner.

    Closes-Bug: #1687408
    Change-Id: Id804f11a91858fa297e5236beb2110e3511eabec

Changed in kolla-ansible:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/ocata)

Reviewed: https://review.openstack.org/462052
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=b969608f50e5588c1b4312fb4cffa7d83d454197
Submitter: Jenkins
Branch: stable/ocata

commit b969608f50e5588c1b4312fb4cffa7d83d454197
Author: Eduardo Gonzalez <email address hidden>
Date: Mon May 1 13:02:43 2017 +0100

    Add ssh-keyscan to unblock kolla-ansible gate

    As a change to remove puppet from infra nodepool, ssh-keyscan is needed
    for each node.[0] Host key checking was disabled by default by jenkins
    user.[1]

    ssh/config permissions are 664 currently, causing error
    `Bad owner or permissions on /home/jenkins/.ssh/config`
    Config file should only be writen by owner.[2]

    Refs:
    [0] http://lists.openstack.org/pipermail/openstack-dev/2017-April/116036.html
    [1] https://review.openstack.org/#/c/460731/
    [2] http://logs.openstack.org/68/461368/1/check/gate-kolla-ansible-dsvm-deploy-centos-binary-centos-7-nv/0a94da7/console.html#_2017-05-01_12_06_08_440775

    This change was merged with PS https://review.openstack.org/#/c/460782/
    in order to fix the gate with only one change.

    Closes-Bug: #1687408
    Change-Id: Id804f11a91858fa297e5236beb2110e3511eabec
    (cherry picked from commit ba6e3249d2bc1e125a95ea2fc13ac7b130c2059a)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla (stable/newton)

Reviewed: https://review.openstack.org/462025
Committed: https://git.openstack.org/cgit/openstack/kolla/commit/?id=f04af9e6b31d4d4f1a94ff86f349e45d552f0dd4
Submitter: Jenkins
Branch: stable/newton

commit f04af9e6b31d4d4f1a94ff86f349e45d552f0dd4
Author: Eduardo Gonzalez <email address hidden>
Date: Fri Apr 28 01:57:42 2017 +0200

    Add ssh-keyscan to unblock kolla gate

    As a change to remove puppet from infra nodepool,
    ssh-keyscan is needed for each node [0]

    Permissions to ssh/config file should be 600 instead
    of current 664 [1]

    Fix unit tests for missing fedora:
    ValueError: Valid values are [centos, rhel, ubuntu, oraclelinux, debian], but found 'fedora'

    Refs:
    [0] http://lists.openstack.org/pipermail/openstack-dev/2017-April/116036.html
    [1] http://logs.openstack.org/68/461368/1/check/gate-kolla-ansible-dsvm-deploy-centos-binary-centos-7-nv/0a94da7/console.html#_2017-05-01_12_06_08_440775

    Closes-Bug: #1687408
    Change-Id: I338e457fff35d8a28bd9f96e88dbb4ee55a47864
    (cherry picked from commit 508f73e059fdfe8e051c58762dc8e21d826d54db)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 5.0.0.0b2

This issue was fixed in the openstack/kolla-ansible 5.0.0.0b2 development milestone.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla 5.0.0.0b2

This issue was fixed in the openstack/kolla 5.0.0.0b2 development milestone.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 4.0.2

This issue was fixed in the openstack/kolla-ansible 4.0.2 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla 4.0.2

This issue was fixed in the openstack/kolla 4.0.2 release.

Revision history for this message
Jeffrey Zhang (jeffrey4l) wrote :

this bug is fixed on all branches.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.