[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Jenkins integration



Hi,

I found the problem with Siamak git repo. Plugins.txt refers to blueocean 1.0.0 which doesn't exist anymore. I forked his repo and changed that to 1.0.1 and it builds fine now however I have an OAUTH issues still even on the blueocean image. 


This is a bit of interesting log I found:
Aug  8 16:38:26 master journal: Aug 08, 2017 3:38:26 PM org.openshift.jenkins.plugins.openshiftlogin.OpenShiftSetOAuth setOauth
Aug  8 16:38:26 master journal: INFO: OpenShift OAuth: enable oauth set to true force false lastCheck Tue Aug 08 15:38:16 UTC 2017
Aug  8 16:38:26 master journal: Aug 08, 2017 3:38:26 PM org.openshift.jenkins.plugins.openshiftlogin.OpenShiftSetOAuth setOauth
Aug  8 16:38:26 master journal: INFO: OpenShift OAuth: configured security realm on startup: hudson security HudsonPrivateSecurityRealm 41464f last check Tue Aug 08 15:38:16 UTC 2017
Aug  8 16:38:26 master journal: Aug 08, 2017 3:38:26 PM org.openshift.jenkins.plugins.openshiftlogin.OpenShiftOAuth2SecurityRealm populateDefaults
Aug  8 16:38:26 master journal: INFO: populateDefaults
Aug  8 16:38:26 master journal: java.net.UnknownHostException: openshift.default.svc
Aug  8 16:38:26 master journal: #011at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:184)
Aug  8 16:38:26 master journal: #011at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
Aug  8 16:38:26 master journal: #011at java.net.Socket.connect(Socket.java:589)
Aug  8 16:38:26 master journal: #011at sun.security.ssl.SSLSocketImpl.connect(SSLSocketImpl.java:673)
Aug  8 16:38:26 master journal: #011at sun.net.NetworkClient.doConnect(NetworkClient.java:175)
Aug  8 16:38:26 master journal: #011at sun.net.www.http.HttpClient.openServer(HttpClient.java:463)
Aug  8 16:38:26 master journal: #011at sun.net.www.http.HttpClient.openServer(HttpClient.java:558)
Aug  8 16:38:26 master journal: #011at sun.net.www.protocol.https.HttpsClient.<init>(HttpsClient.java:264)
Aug  8 16:38:26 master journal: #011at sun.net.www.protocol.https.HttpsClient.New(HttpsClient.java:367)
Aug  8 16:38:26 master journal: #011at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.getNewHttpClient(AbstractDelegateHttpsURLConnection.java:191)
Aug  8 16:38:26 master journal: #011at sun.net.www.protocol.http.HttpURLConnection.plainConnect0(HttpURLConnection.java:1138)
Aug  8 16:38:26 master journal: #011at sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:1032)
Aug  8 16:38:26 master journal: #011at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:177)
Aug  8 16:38:26 master journal: #011at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
Aug  8 16:38:26 master journal: #011at com.google.api.client.http.javanet.NetHttpRequest.execute(NetHttpRequest.java:93)
Aug  8 16:38:26 master journal: #011at com.google.api.client.http.HttpRequest.execute(HttpRequest.java:972)
Aug  8 16:38:26 master journal: #011at org.openshift.jenkins.plugins.openshiftlogin.OpenShiftOAuth2SecurityRealm.getOpenShiftUserInfo(OpenShiftOAuth2SecurityRealm.java:489)
Aug  8 16:38:26 master journal: #011at org.openshift.jenkins.plugins.openshiftlogin.OpenShiftOAuth2SecurityRealm.populateDefaults(OpenShiftOAuth2SecurityRealm.java:337)
Aug  8 16:38:26 master journal: #011at org.openshift.jenkins.plugins.openshiftlogin.OpenShiftOAuth2SecurityRealm.<init>(OpenShiftOAuth2SecurityRealm.java:273)
Aug  8 16:38:26 master journal: #011at org.openshift.jenkins.plugins.openshiftlogin.OpenShiftSetOAuth.setOauth(OpenShiftSetOAuth.java:69)
Aug  8 16:38:26 master journal: #011at org.openshift.jenkins.plugins.openshiftlogin.OpenShiftPermissionFilter.doFilter(OpenShiftPermissionFilter.java:106)
Aug  8 16:38:26 master journal: #011at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:132)
Aug  8 16:38:26 master journal: #011at org.jenkinsci.plugins.ssegateway.Endpoint$SSEListenChannelFilter.doFilter(Endpoint.java:225)
Aug  8 16:38:26 master journal: #011at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:132)
Aug  8 16:38:26 master journal: #011at com.cloudbees.jenkins.support.slowrequest.SlowRequestFilter.doFilter(SlowRequestFilter.java:38)
Aug  8 16:38:26 master journal: #011at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:132)
Aug  8 16:38:26 master journal: #011at io.jenkins.blueocean.ResourceCacheControl.doFilter(ResourceCacheControl.java:134)
Aug  8 16:38:26 master journal: #011at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:132)
Aug  8 16:38:26 master journal: #011at jenkins.metrics.impl.MetricsFilter.doFilter(MetricsFilter.java:125)
Aug  8 16:38:26 master journal: #011at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:132)
Aug  8 16:38:26 master journal: #011at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:126)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652)
Aug  8 16:38:26 master journal: #011at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:49)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652)
Aug  8 16:38:26 master journal: #011at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:84)
Aug  8 16:38:26 master journal: #011at hudson.security.UnwrapSecurityExceptionFilter.doFilter(UnwrapSecurityExceptionFilter.java:51)
Aug  8 16:38:26 master journal: #011at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
Aug  8 16:38:26 master journal: #011at jenkins.security.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:117)
Aug  8 16:38:26 master journal: #011at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
Aug  8 16:38:26 master journal: #011at org.acegisecurity.providers.anonymous.AnonymousProcessingFilter.doFilter(AnonymousProcessingFilter.java:125)
Aug  8 16:38:26 master journal: #011at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
Aug  8 16:38:26 master journal: #011at org.acegisecurity.ui.rememberme.RememberMeProcessingFilter.doFilter(RememberMeProcessingFilter.java:135)
Aug  8 16:38:26 master journal: #011at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
Aug  8 16:38:26 master journal: #011at org.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:271)
Aug  8 16:38:26 master journal: Aug 08, 2017 3:38:26 PM org.openshift.jenkins.plugins.openshiftlogin.OpenShiftOAuth2SecurityRealm populateDefaults
Aug  8 16:38:26 master journal: INFO: OpenShift OAuth returning false with namespace ci SA dir null default /run/secrets/kubernetes.io/serviceaccount SA name null default null client ID
 null default null secret null default [LONG STRING HERE] redirect null default null server null default https:
//openshift.default.svc
Aug  8 16:38:26 master journal: Aug 08, 2017 3:38:26 PM org.openshift.jenkins.plugins.openshiftlogin.OpenShiftOAuth2SecurityRealm populateDefaults
Aug  8 16:38:26 master journal: INFO: populateDefaults
Aug  8 16:38:26 master journal: java.net.UnknownHostException: openshift.default.svc
Aug  8 16:38:26 master journal: #011at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:184)
Aug  8 16:38:26 master journal: #011at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
Aug  8 16:38:26 master journal: #011at java.net.Socket.connect(Socket.java:589)
Aug  8 16:38:26 master journal: #011at sun.security.ssl.SSLSocketImpl.connect(SSLSocketImpl.java:673)
Aug  8 16:38:26 master journal: #011at sun.net.NetworkClient.doConnect(NetworkClient.java:175)
Aug  8 16:38:26 master journal: #011at sun.net.www.http.HttpClient.openServer(HttpClient.java:463)
Aug  8 16:38:26 master journal: #011at sun.net.www.http.HttpClient.openServer(HttpClient.java:558)
Aug  8 16:38:26 master journal: #011at sun.net.www.protocol.https.HttpsClient.<init>(HttpsClient.java:264)
Aug  8 16:38:26 master journal: #011at sun.net.www.protocol.https.HttpsClient.New(HttpsClient.java:367)
Aug  8 16:38:26 master journal: #011at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.getNewHttpClient(AbstractDelegateHttpsURLConnection.java:191)
Aug  8 16:38:26 master journal: #011at sun.net.www.protocol.http.HttpURLConnection.plainConnect0(HttpURLConnection.java:1138)
Aug  8 16:38:26 master journal: #011at sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:1032)
Aug  8 16:38:26 master journal: #011at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:177)
Aug  8 16:38:26 master journal: #011at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
Aug  8 16:38:26 master journal: #011at com.google.api.client.http.javanet.NetHttpRequest.execute(NetHttpRequest.java:93)
Aug  8 16:38:26 master journal: #011at com.google.api.client.http.HttpRequest.execute(HttpRequest.java:972)
Aug  8 16:38:26 master journal: #011at org.openshift.jenkins.plugins.openshiftlogin.OpenShiftOAuth2SecurityRealm.getOpenShiftUserInfo(OpenShiftOAuth2SecurityRealm.java:489)
Aug  8 16:38:26 master journal: #011at org.openshift.jenkins.plugins.openshiftlogin.OpenShiftOAuth2SecurityRealm.populateDefaults(OpenShiftOAuth2SecurityRealm.java:337)
Aug  8 16:38:26 master journal: #011at org.openshift.jenkins.plugins.openshiftlogin.OpenShiftSetOAuth.setOauth(OpenShiftSetOAuth.java:73)
Aug  8 16:38:26 master journal: #011at org.openshift.jenkins.plugins.openshiftlogin.OpenShiftPermissionFilter.doFilter(OpenShiftPermissionFilter.java:106)
Aug  8 16:38:26 master journal: #011at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:132)
Aug  8 16:38:26 master journal: #011at org.jenkinsci.plugins.ssegateway.Endpoint$SSEListenChannelFilter.doFilter(Endpoint.java:225)
Aug  8 16:38:26 master journal: #011at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:132)
Aug  8 16:38:26 master journal: #011at com.cloudbees.jenkins.support.slowrequest.SlowRequestFilter.doFilter(SlowRequestFilter.java:38)
Aug  8 16:38:26 master journal: #011at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:132)
Aug  8 16:38:26 master journal: #011at io.jenkins.blueocean.ResourceCacheControl.doFilter(ResourceCacheControl.java:134)
Aug  8 16:38:26 master journal: #011at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:132)
Aug  8 16:38:26 master journal: #011at jenkins.metrics.impl.MetricsFilter.doFilter(MetricsFilter.java:125)
Aug  8 16:38:26 master journal: #011at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:132)
Aug  8 16:38:26 master journal: #011at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:126)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652)
Aug  8 16:38:26 master journal: #011at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:49)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652)
Aug  8 16:38:26 master journal: #011at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:84)
Aug  8 16:38:26 master journal: #011at hudson.security.UnwrapSecurityExceptionFilter.doFilter(UnwrapSecurityExceptionFilter.java:51)
Aug  8 16:38:26 master journal: #011at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
Aug  8 16:38:26 master journal: #011at jenkins.security.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:117)
Aug  8 16:38:26 master journal: #011at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
Aug  8 16:38:26 master journal: #011at org.acegisecurity.providers.anonymous.AnonymousProcessingFilter.doFilter(AnonymousProcessingFilter.java:125)
Aug  8 16:38:26 master journal: #011at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
Aug  8 16:38:26 master journal: #011at org.acegisecurity.ui.rememberme.RememberMeProcessingFilter.doFilter(RememberMeProcessingFilter.java:135)
Aug  8 16:38:26 master journal: #011at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
Aug  8 16:38:26 master journal: #011at org.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:271)
Aug  8 16:38:26 master journal: #011at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
Aug  8 16:38:26 master journal: #011at jenkins.security.BasicHeaderProcessor.doFilter(BasicHeaderProcessor.java:93)
Aug  8 16:38:26 master journal: #011at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
Aug  8 16:38:26 master journal: #011at org.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilter(HttpSessionContextIntegrationFilter.java:249)
Aug  8 16:38:26 master journal: #011at hudson.security.HttpSessionContextIntegrationFilter2.doFilter(HttpSessionContextIntegrationFilter2.java:67)
Aug  8 16:38:26 master journal: #011at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:87)
Aug  8 16:38:26 master journal: #011at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:76)
Aug  8 16:38:26 master journal: #011at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:171)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652)
Aug  8 16:38:26 master journal: #011at org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:49)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652)
Aug  8 16:38:26 master journal: #011at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:82)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652)
Aug  8 16:38:26 master journal: #011at org.kohsuke.stapler.DiagnosticThreadNameFilter.doFilter(DiagnosticThreadNameFilter.java:30)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:585)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:553)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:223)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1127)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:515)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1061)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.server.Server.handle(Server.java:499)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:311)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257)
Aug  8 16:38:26 master journal: #011at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:544)
Aug  8 16:38:26 master journal: #011at winstone.BoundedExecutorService$1.run(BoundedExecutorService.java:77)
Aug  8 16:38:26 master journal: #011at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
Aug  8 16:38:26 master journal: #011at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
Aug  8 16:38:26 master journal: #011at java.lang.Thread.run(Thread.java:748)
Aug  8 16:38:26 master journal: 
Aug  8 16:38:26 master journal: Aug 08, 2017 3:38:26 PM org.openshift.jenkins.plugins.openshiftlogin.OpenShiftOAuth2SecurityRealm populateDefaults
Aug  8 16:38:26 master journal: INFO: OpenShift OAuth returning false with namespace ci SA dir null default /run/secrets/kubernetes.io/serviceaccount SA name null default null client ID null default null secret null default [LONG STRING HERE] redirect null default null server null default https://openshift.default.svc
Aug  8 16:38:26 master journal: Aug 08, 2017 3:38:26 PM org.openshift.jenkins.plugins.openshiftlogin.OpenShiftSetOAuth setOauth
Aug  8 16:38:26 master journal: INFO: OpenShift OAuth: running in OpenShift pod with required OAuth features: false


# oc version
oc v1.5.1
kubernetes v1.5.2+43a9be4
features: Basic-Auth GSSAPI Kerberos SPNEGO


I think I will just come back to version 3.2 and 3.3 as I didn't have any issues with any of these versions... since version 3.4 I just constantly run into more and more issues :/.

Thank you for your help.


On 8 August 2017 at 16:35, Ben Parees <bparees redhat com> wrote:


On Tue, Aug 8, 2017 at 10:52 AM, Thorvald Hallvardsson <thorvald hallvardsson gmail com> wrote:
Hi,

I'm trying to run jenkins on OpenShift to integrate it nicely with pipelines and OAUTH. I have done that in the past and it was all working but I'm trying to reproduce what I used to do before and it simply doesn't work. I don't know why but from one version to another OpenShift is becominbg more and more pain. 

I was following official blog article https://blog.openshift.com/openshift-pipelines-jenkins-blue-ocean/ which used to work however jenkins changed something now and that build simply doesn't work anymore:
Cloning "https://github.com/siamaksade/jenkins-blueocean.git" ...
WARNING: timed out waiting for git server, will wait 1m4s
Commit: 70cff8557908b592d291e6ea0b3a018069b61324 (updated README)
Author: Siamak Sadeghianfar <ssadeghi redhat com>
Date: Thu Apr 6 18:48:41 2017 +0700
---> Copying repository files ...
---> Installing Jenkins 0 plugins using /opt/openshift/plugins.txt ...
Creating initial locks...
Locking blueocean:1.0.0
Analyzing war...
Downloading plugins...
Downloading plugin: blueocean from https://updates.jenkins-ci.org/download/plugins/blueocean/1.0.0/blueocean.hpi
Downloading plugin: blueocean-plugin from https://updates.jenkins-ci.org/download/plugins/blueocean-plugin/1.0.0/blueocean-plugin.hpi
Failed to download plugin: blueocean or blueocean-plugin
Failed to install plugins.
error: build error: non-zero (13) exit code from openshift/jenkins-2-centos7 sha256:ad29fc43c3f9015a0fdbb3f3ba366ff511303f7f3a0bbb1bc4652ecf70eb3712

Simply because second link drops 404... blueocean-plugin.hpi doesn't exist anymore. 

Sounds like some stuff has bit-rotted in that blog, CCing Siamak in case he has time to update it.

But note that we do already install blue ocean in our jenkins centos image and we'll be adding it to our rhel image most likely in 3.7.

 


I decided OK... I don't need blueocean so I will just go for standard Jenkins from OpenShift templates. That did install successfuly but when I click on the link it asks for username and password (on Jenkins screen) so simply OAUTH doesn't work at all. 

The pod has 
# oc exec jenkins-1-28l8x env |grep -i auth
OPENSHIFT_ENABLE_OAUTH=true

it is running but ... yeah how do I integrate it with my pipelines? Any ideas?

Gabe and Mo (on CC) have added some debug for oauth flow failures, what version of openshift are you running and can you provide openshift master logs and jenkins pod logs?


 

Thanks!

_______________________________________________
users mailing list
users lists openshift redhat com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users




--
Ben Parees | OpenShift



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]