When there is 1 or more orgs that a user does not have read permission to, we need to

Here is additional output using -VV . <div class="

knife tidy server report should handle missing read permission about knife-tidy HOT 2 OPEN

jeremymv2 commented on July 26, 2024

knife tidy server report should handle missing read permission

from knife-tidy.

Comments (2)

anniehedgpeth commented on July 26, 2024 3

Ahh, I wish I would have looked at the issues sooner - would have saved me some frustration. I removed the /organizations from my knife.rb and added the --orgs option, and it worked fine.

Even just updating the README with this info would be helpful.

from knife-tidy.

MattKempfert commented on July 26, 2024

Here is additional output using -VV.

INFO: Using configuration from /Users/matt/secrets/knife.rb
Writing to /Users/matt/reports directory
DEBUG: Chef::HTTP calling Chef::HTTP::JSONInput#handle_request
DEBUG: Chef::HTTP calling Chef::HTTP::JSONOutput#handle_request
DEBUG: Chef::HTTP calling Chef::HTTP::CookieManager#handle_request
DEBUG: Chef::HTTP calling Chef::HTTP::Decompressor#handle_request
DEBUG: Chef::HTTP calling Chef::HTTP::Authenticator#handle_request
DEBUG: Signing the request as chef_admin
DEBUG: Chef::HTTP calling Chef::HTTP::RemoteRequestID#handle_request
DEBUG: Chef::HTTP calling Chef::HTTP::APIVersions#handle_request
DEBUG: Chef::HTTP calling Chef::HTTP::ValidateContentLength#handle_request
DEBUG: Initiating GET to https://chef.xyz.com/organizations
DEBUG: ---- HTTP Request Header Data: ----
DEBUG: Accept: application/json
DEBUG: Accept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3
DEBUG: X-Ops-Server-API-Version: 1
DEBUG: X-OPS-SIGN: algorithm=sha1;version=1.1;
DEBUG: X-OPS-USERID: chef_admin
DEBUG: X-OPS-TIMESTAMP: 2018-02-07T21:35:59Z

...

DEBUG: X-OPS-AUTHORIZATION-6: xxxxxxxFaWCMxgHiiJEQIA9pTMGkgOUZaQk+k09pHA==
DEBUG: HOST: chef.xyz.com:443
DEBUG: X-REMOTE-REQUEST-ID: 43b9afdd-452b-41d5-a07f-fb094920751f
DEBUG: ---- End HTTP Request Header Data ----
DEBUG: ---- HTTP Status and Header Data: ----
DEBUG: HTTP 1.1 403 Forbidden

...

Looks like the Response: missing read permission error occurs when the /organizations endpoint is hit. According to https://docs.chef.io/api_chef_server.html#organizations /organizations is only available to the pivotal user.

It'd be great to find another way to gather the list of organizations (to non pivotal users) or return a different error message when the pivotal user isn't used.

from knife-tidy.

Recommend Projects