Details
-
Task
-
Resolution: Done
-
Blocker
-
3.4.0.GA
-
None
-
False
-
None
-
False
Description
Recent changes to switch to the new devspaces-build service account:
- https://gitlab.cee.redhat.com/codeready-workspaces/crw-jenkins/-/commit/843bfd0be29947198dbfaca7c2e60cf1dfc6390e (add new secrets, Dec 1)
- https://gitlab.cee.redhat.com/codeready-workspaces/crw-jenkins/-/commit/e8e28d86961562a823a0eccedc1920155eddb8f8 (use new secrets, Dec 3, for CRW-3099, new PNC secret working)
- https://gitlab.cee.redhat.com/codeready-workspaces/ansible-scripts/-/commit/9d947abe7e167e5f1c20474d918d4f102a3852e0 (ansible config)
- https://gitlab.cee.redhat.com/codeready-workspaces/ansible-scripts/-/commit/2e234561938f33b63b8c22278a6e7a87588f126b (ansible config)
- https://github.com/redhat-developer/devspaces/commit/54e3adf903dcbd0e58712e442aff23b9fdbb7dd2 (non-ansible groovy scripts)
- https://gitlab.cee.redhat.com/codeready-workspaces/crw-jenkins/-/commit/d85d976b3ef7a557faad5a2303d081b844aa4f81 (jenkins jobs)
Not sure why but the keytab file we created and uploaded last month has become a zero-length file:
18:34:37 fatal: [127.0.0.1]: FAILED! => {"changed": true, "cmd": "kinit -k -t /home/hudson/devspaces-build-keytab devspaces-build@IPA.REDHAT.COM", "delta": "0:00:00.023377", "end": "2022-12-15 17:36:01.998408", "msg": "non-zero return code", "rc": 1, "start": "2022-12-15 17:36:01.975031", "stderr": "kinit: Pre-authentication failed: Unsupported key table format version number while getting initial credentials", "stderr_lines": ["kinit: Pre-authentication failed: Unsupported key table format version number while getting initial credentials"], "stdout": "", "stdout_lines": []}
ssh to x86-64-rhel8-p1 worker node
[hudson@x86-64-rhel8-p1 ~]$ ls -la devspaces-build-keytab crw_crw-build-keytab -rw------- 1 hudson hudson 0 Dec 15 17:34 devspaces-build-keytab -rw------- 1 hudson hudson 266 Nov 25 2021 crw_crw-build-keytab
Workaround is to reupload the file at https://main-jenkins-csb-crwqe.apps.ocp-c1.prod.psi.redhat.com/credentials/store/system/domain/_/credential/devspaces-build-keytab/update but that doesn't seem to stick – I reloaded the casc.yaml config and the file is empty again. 