Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] BSS Logging is insufficient for troubleshooting #27

Open
alexlovelltroy opened this issue Apr 15, 2024 · 2 comments
Open

[BUG] BSS Logging is insufficient for troubleshooting #27

alexlovelltroy opened this issue Apr 15, 2024 · 2 comments
Labels
bug Something isn't working

Comments

@alexlovelltroy
Copy link
Member

When debugging containers for the quickstart, I found log lines like those below:

2024/04/15 18:49:32 failed to initialize auth token: failed to parse JWK set: failed to unmarshal JWK set: error reading token: EOF
<--snip-->
2024/04/15 18:50:17 Failed to obtain client credentials and token: no access token found
2024/04/15 18:50:22 Attempting to obtain access token (attempt 10/10)
<--snip-->
2024/04/15 18:50:27 Access to SM service http://smd:27779 failed: Failed refreshing JWT: Failed to get access token: Exhausted 10 attempts at obtaining client credentials and token

Then bss died.

Clearly there's a problem with bss attempting to fetch a token for use in querying smd, but I can't tell enough information to start troubleshooting the issue.

What endpoint was used to obtain the EOF JWK?
Was the download successful, but the file was empty?
Was there a problem with name resolution?
Was the server on the other end slow?
BSS has clearly exited because it believes that further attempts to start up will be unsuccessful. Why?

What about using SMD?
Did SMD reject any requests due to failed JWT checks? If so which ones? Were there messages associated?

@alexlovelltroy alexlovelltroy added the bug Something isn't working label Apr 15, 2024
@davidallendj
Copy link
Contributor

This seems to be caused by opaal failing to fetch the JWKS from hydra if hydra fails to start whenever BSS tries making a request to the /keys endpoint. When this happens, it doesn't look like any of the code paths in opaal are returning an error or redirect (which is not suppose to happen). So in addition to making BSS's logging more informative, we also need to improve logging messages in opaal as well.

@davidallendj
Copy link
Contributor

To help with debugging issues like this in the future, the plan is to add the OpenCHAMI middleware to the router in BSS like with SMD. See related SMD issue:
OpenCHAMI/smd#27

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants