Closed Bug 1539173 Opened 6 years ago Closed 6 years ago

Allow releasemgmt1.private.releng.mdc1 to access to github-production-release-asset-2e65be.s3.amazonaws.com

Categories

(Infrastructure & Operations :: Proxy ACL Request, task)

Product:
Infrastructure & Operations
Component:
Proxy ACL Request
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: calixte, Assigned: cknowles)

Details

It's required to download data for a python library.
The pip logs:
Requirement already satisfied: whatthepatch>=0.0.5 in /usr/lib/python2.7/site-packages (from -r requirements.txt (line 17)) (0.0.5)
Collecting en-core-web-sm from https://github.com/explosion/spacy-models/releases/download/en_core_web_sm-2.1.0/en_core_web_sm-2.1.0.tar.gz#egg=en-core-web-sm (from -r requirements.txt (line 18))
Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))': /84940268/85ec3200-48aa-11e9-9878-337412e36828?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20190326%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20190326T150845Z&X-Amz-Expires=300&X-Amz-Signature=bc14df97b245af6cc327d909a2c7be7797cded4b68b3adcf5475bcf521f272dc&X-Amz-SignedHeaders=host&actor_id=0&response-content-disposition=attachment%3B%20filename%3Den_core_web_sm-2.1.0.tar.gz&response-content-type=application%2Foctet-stream
Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))': /84940268/85ec3200-48aa-11e9-9878-337412e36828?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20190326%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20190326T150845Z&X-Amz-Expires=300&X-Amz-Signature=bc14df97b245af6cc327d909a2c7be7797cded4b68b3adcf5475bcf521f272dc&X-Amz-SignedHeaders=host&actor_id=0&response-content-disposition=attachment%3B%20filename%3Den_core_web_sm-2.1.0.tar.gz&response-content-type=application%2Foctet-stream
Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))': /84940268/85ec3200-48aa-11e9-9878-337412e36828?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20190326%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20190326T150845Z&X-Amz-Expires=300&X-Amz-Signature=bc14df97b245af6cc327d909a2c7be7797cded4b68b3adcf5475bcf521f272dc&X-Amz-SignedHeaders=host&actor_id=0&response-content-disposition=attachment%3B%20filename%3Den_core_web_sm-2.1.0.tar.gz&response-content-type=application%2Foctet-stream
Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))': /84940268/85ec3200-48aa-11e9-9878-337412e36828?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20190326%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20190326T150845Z&X-Amz-Expires=300&X-Amz-Signature=bc14df97b245af6cc327d909a2c7be7797cded4b68b3adcf5475bcf521f272dc&X-Amz-SignedHeaders=host&actor_id=0&response-content-disposition=attachment%3B%20filename%3Den_core_web_sm-2.1.0.tar.gz&response-content-type=application%2Foctet-stream
Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',))': /84940268/85ec3200-48aa-11e9-9878-337412e36828?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20190326%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20190326T150845Z&X-Amz-Expires=300&X-Amz-Signature=bc14df97b245af6cc327d909a2c7be7797cded4b68b3adcf5475bcf521f272dc&X-Amz-SignedHeaders=host&actor_id=0&response-content-disposition=attachment%3B%20filename%3Den_core_web_sm-2.1.0.tar.gz&response-content-type=application%2Foctet-stream
Could not install packages due to an EnvironmentError: HTTPSConnectionPool(host='github-production-release-asset-2e65be.s3.amazonaws.com', port=443): Max retries exceeded with url: /84940268/85ec3200-48aa-11e9-9878-337412e36828?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20190326%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20190326T150845Z&X-Amz-Expires=300&X-Amz-Signature=bc14df97b245af6cc327d909a2c7be7797cded4b68b3adcf5475bcf521f272dc&X-Amz-SignedHeaders=host&actor_id=0&response-content-disposition=attachment%3B%20filename%3Den_core_web_sm-2.1.0.tar.gz&response-content-type=application%2Foctet-stream (Caused by ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',)))

Looking at proxy logs - see a bunch of these denies:

1553509623.096 1 10.49.75.16 53800 - - TCP_DENIED - 80 3946 CONNECT github-production-release-asset-2e65be.s3.amazonaws.com:443 - - text/html

And those are the only denies to this host. Will add apropos rules to the proxies.

Assignee: infra → cknowles

added to puppet in commit 12e4976ea66aa14d61761d06e64122e0bf87f7db

Verified that it's live on the proxies.

Let me know if there's any questions or concerns.

Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.