race: concurrent deployments corrupt secret token

Bug #1067213 reported by Dave Cheney
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
juju-core
Fix Released
Low
Unassigned

Bug Description

lucky(~/src/launchpad.net/juju-core/cmd/juju) % juju bootstrap --upload-tools
lucky(~/src/launchpad.net/juju-core/cmd/juju) % juju deploy nova-volume & juju deploy openerp-server & juju deploy openerp-web & juju deploy stackmobile &
[1] 28308
[2] 28309
[3] 28310
[4] 28311
lucky(~/src/launchpad.net/juju-core/cmd/juju) % error: unauthorized access
error: unauthorized access
error: unauthorized access

[1] Exit 1 juju deploy nova-volume
[2] Done juju deploy openerp-server
[3]- Exit 1 juju deploy openerp-web
[4]+ Exit 1 juju deploy stackmobile
lucky(~/src/launchpad.net/juju-core/cmd/juju) %
lucky(~/src/launchpad.net/juju-core/cmd/juju) % juju status
machines:
  0:
    agent-version: 0.0.1
    dns-name: ec2-23-23-51-13.compute-1.amazonaws.com
    instance-id: i-5a1a1927
  1:
    dns-name: ec2-184-73-144-122.compute-1.amazonaws.com
    instance-id: i-eec7c493
services:
  openerp-server:
    charm: openerp-server
    exposed: false
    units:
      openerp-server/0:
        machine: 1
        status: pending

Revision history for this message
Dave Cheney (dave-cheney) wrote :

Doing a `juju status` before deploying _may_ help.

lucky(~/src/launchpad.net/juju-core/cmd/juju) % juju bootstrap --upload-tools
lucky(~/src/launchpad.net/juju-core/cmd/juju) % juju status
machines:
  0:
    agent-version: 0.0.1
    dns-name: ec2-54-242-124-253.compute-1.amazonaws.com
    instance-id: i-20d3d05d
services: {}
lucky(~/src/launchpad.net/juju-core/cmd/juju) % juju deploy nova-volume & juju deploy openerp-server & juju deploy openerp-web & juju deploy stackmobile &
[1] 29049
[2] 29050
[3] 29051
[4] 29052
lucky(~/src/launchpad.net/juju-core/cmd/juju) %
[1] Done juju deploy nova-volume
[2] Done juju deploy openerp-server
[3]- Done juju deploy openerp-web
[4]+ Done juju deploy stackmobile

Changed in juju-core:
assignee: nobody → Roger Peppe (rogpeppe)
Changed in juju-core:
milestone: 1.9.1 → 1.9.2
Revision history for this message
Dave Cheney (dave-cheney) wrote :

Rog, is this fixed ?

Changed in juju-core:
status: New → Confirmed
milestone: 1.9.2 → 1.9.3
Changed in juju-core:
milestone: 1.9.3 → 1.9.4
Revision history for this message
Dave Cheney (dave-cheney) wrote :

Still an issue

lucky(~/src/launchpad.net/juju-core) % juju deploy -n10 mysql &
[1] 12073
lucky(~/src/launchpad.net/juju-core) % juju deploy -n10 mysql mysql-1 &
[2] 12077
lucky(~/src/launchpad.net/juju-core) %
lucky(~/src/launchpad.net/juju-core) %
lucky(~/src/launchpad.net/juju-core) %
lucky(~/src/launchpad.net/juju-core) %
lucky(~/src/launchpad.net/juju-core) %
lucky(~/src/launchpad.net/juju-core) % error: unauthorized access

[2]+ Exit 1 juju deploy -n10 mysql mysql-1

Changed in juju-core:
assignee: Roger Peppe (rogpeppe) → nobody
Revision history for this message
Roger Peppe (rogpeppe) wrote :

I *think* I know why this happens and how to fix it.

Changed in juju-core:
milestone: 1.9.4 → none
Revision history for this message
William Reade (fwereade) wrote :

This looks very likely to be related to the admin-secret jiggery-pokery around first connect. Given the uncertainty around how the story will look in an API-only world, there's not much point fixing it for state connections at this stage... *but* there's definitely still potential for it to be a problem, so I'm not closing it.

Changed in juju-core:
importance: High → Medium
status: Confirmed → Triaged
importance: Medium → Low
Curtis Hovey (sinzui)
tags: added: deploy race-condition
Curtis Hovey (sinzui)
Changed in juju-core:
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.