Page MenuHomePhabricator

ORES puppet error on labs boxes, unable to set user to "deploy-service"
Closed, ResolvedPublic

Description

From ores-web-04.ores.eqiad.wmflabs:/var/log/puppet.log,

Error: Could not find user deploy-service
Error: /Stage[main]/Ores::Web/Ores::Config[main]/File[/etc/ores/99-main.yaml]/owner: change from root to deploy-service failed: Could not find user 
deploy-service
Error: Could not find group deploy-service
Error: /Stage[main]/Ores::Web/Ores::Config[main]/File[/etc/ores/99-main.yaml]/group: change from root to deploy-service failed: Could not find group
 deploy-service

This is probably the wrong approach, but should fix the problem on both labs and production. My reasoning is that we deploy configuration with puppet and not scap, so the permissions don't need to allow deploy-user to write.
https://gerrit.wikimedia.org/r/#/c/362097/

The strange thing is that web-03 does have a deploy-service user, and doesn't experience this error. web-04 doesn't have the user. Maybe the user was an artifact left behind by previous versions of the puppet config?

Event Timeline

Change 363042 had a related patch set uploaded (by Paladox; owner: Paladox):
[operations/puppet@production] ORES: Create user deploy-service using user and group syntax

https://gerrit.wikimedia.org/r/363042

Change 362097 had a related patch set uploaded (by Awight; owner: Awight):
[operations/puppet@production] Tweak ores::web config file user.

https://gerrit.wikimedia.org/r/362097

Change 362097 merged by Alexandros Kosiaris:
[operations/puppet@production] Conditionally switch ores::web config file user depending on context

https://gerrit.wikimedia.org/r/362097

awight reassigned this task from awight to Paladox.

Change 363042 abandoned by Paladox:
ORES: Create user deploy-service using user and group syntax

https://gerrit.wikimedia.org/r/363042