Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigate "ERROR Permission denied" #230

Open
nsklikas opened this issue Mar 14, 2025 · 1 comment
Open

Investigate "ERROR Permission denied" #230

nsklikas opened this issue Mar 14, 2025 · 1 comment
Labels
bug Something isn't working

Comments

@nsklikas
Copy link
Contributor

On the dev deployment we are getting this error:

unit-admin-ui-0: 14:57:19 ERROR unit.admin-ui/0.juju-log receive-ca-cert:12: Uncaught exception while in charm code:
Traceback (most recent call last):
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/venv/ops/model.py", line 3320, in _run
    result = subprocess.run(args, **kwargs)  # type: ignore
  File "/usr/lib/python3.10/subprocess.py", line 526, in run
    raise CalledProcessError(retcode, process.args,
subprocess.CalledProcessError: Command '('/var/lib/juju/tools/unit-admin-ui-0/secret-get', 'secret://fe8f9454-18a5-4bc5-8170-a02476fe3437/cu4ppr7mp25c74h0upfg', '--format=json')' returned non-zero exit status 1.

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/./src/charm.py", line 427, in <module>
    main(IdentityPlatformAdminUIOperatorCharm)
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/venv/ops/main.py", line 40, in main
    return _main.main(charm_class=charm_class, use_juju_for_storage=use_juju_for_storage)
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/venv/ops/_main.py", line 558, in main
    manager.run()
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/venv/ops/_main.py", line 543, in run
    self._emit()
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/venv/ops/_main.py", line 504, in _emit
    ops.charm._evaluate_status(self.charm)
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/venv/ops/charm.py", line 1399, in _evaluate_status
    charm.on.collect_unit_status.emit()
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/venv/ops/framework.py", line 347, in emit
    framework._emit(event)
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/venv/ops/framework.py", line 906, in _emit
    self._reemit(event_path)
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/venv/ops/framework.py", line 996, in _reemit
    custom_handler(event)
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/./src/charm.py", line 352, in _on_collect_status
    if not openfga_store_readiness(self):
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/src/utils.py", line 77, in openfga_store_readiness
    return charm.openfga_integration.is_store_ready()
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/src/integrations.py", line 133, in is_store_ready
    provider_data = self._openfga_requirer.get_store_info()
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/lib/charms/openfga_k8s/v1/openfga.py", line 284, in get_store_info
    token_secret = self.model.get_secret(id=data.token_secret_id)
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/venv/ops/model.py", line 308, in get_secret
    content = self._backend.secret_get(id=id, label=label)
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/venv/ops/model.py", line 3692, in secret_get
    result = self._run('secret-get', *args, return_output=True, use_json=True)
  File "/var/lib/juju/agents/unit-admin-ui-0/charm/venv/ops/model.py", line 3322, in _run
    raise ModelError(e.stderr) from e
ops.model.ModelError: ERROR permission denied

We should investigate to see if it is something we can fix

@nsklikas nsklikas added the bug Something isn't working label Mar 14, 2025
Copy link

Thank you for reporting your feedback to us!

The internal ticket has been created: https://warthogs.atlassian.net/browse/IAM-1368.

This message was autogenerated

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant