Project

General

Profile

Actions

Bug #16775

closed

[umbrella ticket] problems with virtual machine permissions in a federated cluster

Added by Nico César over 3 years ago. Updated over 3 years ago.

Status:
Resolved
Priority:
Normal
Assigned To:
Category:
-
Target version:
Story points:
-

Description

Webshell session (by typing it directly works.)

As a user if I go to the menu "Virtual machines" I get a Not Found error


Files

2020-08-28_11-50_1.png (21.9 KB) 2020-08-28_11-50_1.png Nico César, 08/28/2020 03:50 PM
2020-08-28_11-50.png (19 KB) 2020-08-28_11-50.png webshell Nico César, 08/28/2020 03:50 PM

Related issues

Related to Arvados - Bug #16779: arvados-login-sync incorrectly skips users without an ssh keyResolvedPeter Amstutz08/31/2020Actions
Related to Arvados - Bug #16773: webshell sends token too earlyClosedActions
Related to Arvados - Bug #16778: Cannot set up federated user with a VM with LoginClusterResolvedPeter Amstutz09/03/2020Actions
Actions #1

Updated by Peter Amstutz over 3 years ago

Related, I can't set up a user with this VM.

{"method":"GET","path":"/users/setup","format":"js","controller":"UsersController","action":"setup","status":422,"duration":168.09,"view":0.18,"request_id":"req-9ojtemrlgf3yo46bmn5l",
"params":{"utf8":"✓","user_uuid":"jutro-tpzed-4kzy3ru32jks04c","openid_prefix":"https://www.google.com/accounts/o8/id","vm_uuid":"pirca-2x53u-fajzxqyzqjczi5y","groups":""},"@timestamp
":"2020-08-28T15:54:18.704Z","@version":"1","message":"[422] GET /users/setup (UsersController#setup)"}
#<ArvadosApiClient::ApiErrorResponseException: request failed: https://jutro.arvadosapi.com/arvados/v1/users/setup: 422 Unprocessable Entity: request failed: http://localhost:8004/arv
ados/v1/users/setup: 422 Unprocessable Entity: #<RuntimeError: No vm found for pirca-2x53u-fajzxqyzqjczi5y> (req-d7okbgn8i2w739w83jv2) [API: 422]>
/var/www/arvados-workbench/current/app/models/arvados_api_client.rb:180:in `api'
/var/www/arvados-workbench/current/app/models/user.rb:99:in `setup'
/var/www/arvados-workbench/current/app/controllers/users_controller.rb:223:in `block in setup'
/var/www/arvados-workbench/shared/vendor_bundle/ruby/2.5.0/gems/actionpack-5.0.7.2/lib/action_controller/metal/mime_responds.rb:195:in `respond_to'
/var/www/arvados-workbench/current/app/controllers/users_controller.rb:205:in `setup'
Actions #2

Updated by Peter Amstutz over 3 years ago

Here's the error.

The user setup is being forwarded to jutro. But, the VM exists on pirca, not jutro, so the setup fails with "not found" for the VM.

Aug 28 16:06:36 api.pirca.arvadosapi.com arvados-controller[25922]: {"PID":25922,"RequestID":"req-493kocbjkd1nzznoliv4","level":"info","msg":"response",
"remoteAddr":"127.0.0.1:43616","reqBytes":273,"reqForwardedFor":"10.254.0.199","reqHost":"pirca.arvadosapi.com","reqMethod":"POST",
"reqPath":"arvados/v1/users/setup",
"reqQuery":"","respBody":
"{\"errors\":[\"request failed: https://jutro.arvadosapi.com/arvados/v1/users/setup: 422 Unprocessable Entity: request failed: http://
localhost:8004/arvados/v1/users/setup: 422 Unprocessable Entity: #\\u003cRuntimeError: No vm found for pirca-2x53u-fajzxqyzqjczi5y\\u003e (req-493kocbjkd1nzzno
liv4)\"]}\n","respBytes":296,"respStatus":"Unprocessable Entity","respStatusCode":422,"time":"2020-08-28T16:06:36.400522433Z","timeToStatus":0.023293,"timeTota
l":0.023308,"timeWriteBody":0.000015}
Actions #3

Updated by Peter Amstutz over 3 years ago

Findings:

  1. There's a real bug setting up federated users with local VMs (#note-2)
  2. If I log in as nico's user it shows 1 VM in the list on pirca. jutro is not configured with any VMs, so we expect that list to be empty. I can log in with webshell with the nico user.
  3. The "mrubenfield" user is supposed to have an account on shell, but doesn't. This is why he can't login with webshell. I suspect that arvados-login-sync is skipping him because he hasn't uploaded an ssh public key. However, an ssh key is not needed to log in via webshell, so this is a bug in aravdos-login-sync.
  4. The javascript timeout hack in webshell UI isn't a factor here, although it is worth fixing. Also, in the process of looking into this, I ran into an issue with rails assets which might be new in 5.2?
Actions #4

Updated by Peter Amstutz over 3 years ago

  • Related to Bug #16779: arvados-login-sync incorrectly skips users without an ssh key added
Actions #5

Updated by Peter Amstutz over 3 years ago

  • Related to Bug #16773: webshell sends token too early added
Actions #6

Updated by Peter Amstutz over 3 years ago

  • Related to Bug #16778: Cannot set up federated user with a VM with LoginCluster added
Actions #7

Updated by Peter Amstutz over 3 years ago

  • Subject changed from Regular user can't see virtual machines in a federated cluster to problems with virtual machine permissions in a federated cluster
Actions #8

Updated by Peter Amstutz over 3 years ago

  • Subject changed from problems with virtual machine permissions in a federated cluster to [umbrella ticket] problems with virtual machine permissions in a federated cluster
Actions #9

Updated by Peter Amstutz over 3 years ago

  • Category deleted (Workbench)
Actions #10

Updated by Peter Amstutz over 3 years ago

  • Assigned To set to Peter Amstutz
Actions #12

Updated by Peter Amstutz over 3 years ago

  • Status changed from New to In Progress
Actions #13

Updated by Peter Amstutz over 3 years ago

  • Target version changed from 2020-09-09 Sprint to 2020-09-23 Sprint
Actions #14

Updated by Peter Amstutz over 3 years ago

  • Status changed from In Progress to Resolved
Actions

Also available in: Atom PDF