ORES puppet error on labs boxes, unable to set user to "deploy-service"
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	awight
	Jun 28 2017, 11:59 PM

Description

From ores-web-04.ores.eqiad.wmflabs:/var/log/puppet.log,

Error: Could not find user deploy-service
Error: /Stage[main]/Ores::Web/Ores::Config[main]/File[/etc/ores/99-main.yaml]/owner: change from root to deploy-service failed: Could not find user 
deploy-service
Error: Could not find group deploy-service
Error: /Stage[main]/Ores::Web/Ores::Config[main]/File[/etc/ores/99-main.yaml]/group: change from root to deploy-service failed: Could not find group
 deploy-service

This is probably the wrong approach, but should fix the problem on both labs and production. My reasoning is that we deploy configuration with puppet and not scap, so the permissions don't need to allow deploy-user to write.
https://gerrit.wikimedia.org/r/#/c/362097/

The strange thing is that web-03 does have a deploy-service user, and doesn't experience this error. web-04 doesn't have the user. Maybe the user was an artifact left behind by previous versions of the puppet config?

Details

	Subject	Repo	Branch	Lines +/-
	ORES: Create user deploy-service using user and group syntax	operations/puppet	production	+12 -0
	Conditionally switch ores::web config file user depending on context	operations/puppet	production	+12 -4

Customize query in gerrit

Related Objects

Mentioned In: Blog Post: Status update (July 11th, 2017)

Event Timeline

awight created this task.Jun 28 2017, 11:59 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 28 2017, 11:59 PM

Paladox subscribed.Jun 29 2017, 12:23 AM

Halfak added a subscriber: akosiaris.Jul 3 2017, 4:50 PM

awight updated the task description. (Show Details)Jul 3 2017, 5:09 PM

Change 363042 had a related patch set uploaded (by Paladox; owner: Paladox):
[operations/puppet@production] ORES: Create user deploy-service using user and group syntax

https://gerrit.wikimedia.org/r/363042

gerritbot added a project: Patch-For-Review.Jul 3 2017, 6:48 PM

awight claimed this task.Jul 5 2017, 9:32 PM

awight moved this task from Review to Parked on the Machine-Learning-Team (Active Tasks) board.

Change 362097 had a related patch set uploaded (by Awight; owner: Awight):
[operations/puppet@production] Tweak ores::web config file user.

https://gerrit.wikimedia.org/r/362097

Change 362097 merged by Alexandros Kosiaris:
[operations/puppet@production] Conditionally switch ores::web config file user depending on context

https://gerrit.wikimedia.org/r/362097

awight closed this task as Resolved.Jul 6 2017, 5:45 PM

awight reassigned this task from awight to Paladox.

awight moved this task from Parked to Completed on the Machine-Learning-Team (Active Tasks) board.

Change 363042 abandoned by Paladox:
ORES: Create user deploy-service using user and group syntax