Details
-
Bug
-
Status: Resolved (View Workflow)
-
Major
-
Resolution: Fixed
-
None
Description
Resuming build at ... after Jenkins restart [Pipeline] End of Pipeline java.io.IOException: Failed to load build state at org.jenkinsci.plugins.workflow.cps.CpsFlowExecution$3.onSuccess(CpsFlowExecution.java:610) at org.jenkinsci.plugins.workflow.cps.CpsFlowExecution$3.onSuccess(CpsFlowExecution.java:608) at org.jenkinsci.plugins.workflow.cps.CpsFlowExecution$4$1.run(CpsFlowExecution.java:651) at org.jenkinsci.plugins.workflow.cps.CpsVmExecutorService$1.run(CpsVmExecutorService.java:35) at ... Caused by: org.acegisecurity.AccessDeniedException: Please login to access job ... at jenkins.model.Jenkins.getItem(Jenkins.java:2724) at jenkins.model.Jenkins.getItem(Jenkins.java:324) at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830) at hudson.model.Run.fromExternalizableId(Run.java:2314) at org.jenkinsci.plugins.workflow.support.steps.ExecutorStepExecution$PlaceholderTask.runForDisplay(ExecutorStepExecution.java:385) at org.jenkinsci.plugins.workflow.support.steps.ExecutorStepExecution$PlaceholderTask.getDisplayName(ExecutorStepExecution.java:398) at org.jenkinsci.plugins.workflow.support.steps.ExecutorStepExecution$PlaceholderTask.getFullDisplayName(ExecutorStepExecution.java:407) at org.jenkinsci.plugins.workflow.support.pickles.ExecutorPickle$1.printWaitingMessage(ExecutorPickle.java:116) at org.jenkinsci.plugins.workflow.support.pickles.TryRepeatedly$1.run(TryRepeatedly.java:95) at ...
Presumably there is no anonymous read access, and the Timer thread used by TryRepeatedly neglected to impersonate SYSTEM.
Attachments
Issue Links
- is duplicated by
-
JENKINS-42504 Pipeline build hangs with "Failed to load build state" due to org.acegisecurity.AccessDeniedException
-
- Resolved
-
- is related to
-
JENKINS-42707 ReverseBuildTrigger can throw AccessDeniedException
-
- Resolved
-
-
JENKINS-63868 PlaceholderTask.getOwnerTask vulnerable to AccessDeniedException
-
- Resolved
-
-
JENKINS-50296 ThreadPools for remoting should run as SYSTEM user
-
- Resolved
-
- relates to
-
JENKINS-42577 Jenkins.version saved only from doConfigSubmit
-
- Resolved
-
-
JENKINS-42586 OldDataMonitor.referTo can throw AccessDeniedException
-
- Open
-
-
JENKINS-45553 Parallel pipeline execution scales poorly
-
- Closed
-
- links to
Activity
Field | Original Value | New Value |
---|---|---|
Epic Link | JENKINS-35399 [ 171192 ] |
Link |
This issue relates to |
Link | This issue relates to JENKINS-42586 [ JENKINS-42586 ] |
Assignee | Jesse Glick [ jglick ] |
Status | Open [ 1 ] | In Progress [ 3 ] |
Component/s | workflow-durable-task-step-plugin [ 21715 ] | |
Component/s | workflow-support-plugin [ 21719 ] | |
Summary | TryRepeatedly fails to run as ACL.SYSTEM | PlaceholderTask.runForDisplay vulnerable to AccessDeniedException |
Remote Link | This issue links to "jenkins-test-harness PR 52 (Web Link)" [ 15649 ] |
Remote Link | This issue links to "core PR 2790 (Web Link)" [ 15650 ] |
Remote Link | This issue links to "core PR 2791 (Web Link)" [ 15651 ] |
Remote Link | This issue links to "core PR 2792 (Web Link)" [ 15652 ] |
Remote Link | This issue links to "workflow-support PR 32 (Web Link)" [ 15653 ] |
Remote Link | This issue links to "workflow-durable-task-step PR 34 (Web Link)" [ 15654 ] |
Status | In Progress [ 3 ] | In Review [ 10005 ] |
Resolution | Fixed [ 1 ] | |
Status | In Review [ 10005 ] | Resolved [ 5 ] |
Link |
This issue is related to |
Labels | lts-candidate |
Component/s | core [ 15593 ] |
Labels | lts-candidate |
Link |
This issue is duplicated by |
Link |
This issue relates to |
Remote Link | This issue links to "CloudBees Internal OSS-2089 (Web Link)" [ 18425 ] |
Link |
This issue is related to |
Link |
This issue is related to |
Or rather anonymous DISCOVER access but not READ, an unusual configuration. Reproducible, though see
JENKINS-42577for why reproducing can be tricky.Perhaps core should impersonate SYSTEM in Timer threads automatically, since this is hardly the first time such a bug has occurred.