Bug 1001280

Summary: oo-accept-node flags administrative user processes
Product: OpenShift Online Reporter: Sten Turpin <sten>
Component: ContainersAssignee: Jason DeTiberus <jdetiber>
Status: CLOSED NOTABUG QA Contact: libra bugs <libra-bugs>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 2.xCC: dmcphers, jdetiber
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-08-26 20:45:21 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Sten Turpin 2013-08-26 20:13:45 UTC
Description of problem: oo-accept-node reports "process is owned by a gear that's no longer on the system" for administrative users


Version-Release number of selected component (if applicable): openshift-origin-node-util-1.13.9-1.el6oso.noarch


How reproducible: usually, on staging


Steps to Reproduce:
1. run oo-accept-node

Actual results:
oo-accept-node flags processes belonging to administrative users: 
[sturpin ~]$ sudo oo-accept-node -v
INFO: loading node configuration file /etc/openshift/node.conf
INFO: loading resource limit file /etc/openshift/resource_limits.conf
INFO: finding external network device
INFO: checking node public hostname resolution
INFO: checking selinux status
INFO: checking selinux openshift-hosted policy
INFO: checking selinux booleans
INFO: checking selinux nodes
INFO: checking package list
INFO: checking services
INFO: checking kernel semaphores >= 512
INFO: checking cgroups configuration
INFO: checking cgroups processes
FAIL: Process 9981 is owned by a gear that's no longer on the system, uid: 703
FAIL: Process 10002 is owned by a gear that's no longer on the system, uid: 703
INFO: checking presence of tc qdisc
INFO: checking for cgroup filter
INFO: checking presence of tc classes
INFO: checking filesystem quotas
INFO: checking quota db file selinux label
INFO: checking 62 user accounts
INFO: checking application dirs
INFO: checking system httpd configs
INFO: checking cartridge repository
2 ERRORS
[sturpin ~]$ grep 703 /etc/passwd
sturpin:x:703:703:Sten Turpin:/home/sturpin:/bin/bash


Expected results:
oo-accept-node should ignore non-gear users for this check. 

Additional info:

Comment 1 Jason DeTiberus 2013-08-26 20:45:21 UTC
GEAR_MIN_UID and GEAR_MAX_UID needed to be updated to match the default district values being used.

Comment 2 Dan McPherson 2013-08-26 21:18:04 UTC
Was this added to the release ticket?

Comment 3 Sten Turpin 2013-08-27 13:51:14 UTC
It's on the release ticket, and added to the 2.0.32 release.