-
Bug
-
Resolution: Unresolved
-
Minor
-
node-sharing-plugin 2.0.4
jenkins 2.176.3
In the jenkins log:
WARNING: No valid crumb was included in request for /cloud/NodeSharing-<id>/api/reportUsage by nsp-user. Returning 403.
I believe this is being triggered by https://jenkins.io/doc/upgrade-guide/2.176/#SECURITY-626
The crumb that is issued can only be used in a single session but no session handling is present in the nsp code.
This also affects the 'Test connection' from the executor to the orchestrator.
[JENKINS-59187] node-sharing-plugin: fails to use crumb correctly since Jenkins 2.176
James Dingwall
created issue -
James Dingwall
made changes -
| Description |
Original:
In the jenkins log: WARNING: No valid crumb was included in request for /cloud/NodeSharing-<id>/api/reportUsage by nsp-user. Returning 403. I believe this is being triggered by https://jenkins.io/doc/upgrade-guide/2.176/#SECURITY-626 The crumb that is issued can only be used in a single session but no session handling is present in the nsp code. |
New:
In the jenkins log: WARNING: No valid crumb was included in request for /cloud/NodeSharing-<id>/api/reportUsage by nsp-user. Returning 403. I believe this is being triggered by [https://jenkins.io/doc/upgrade-guide/2.176/#SECURITY-626] The crumb that is issued can only be used in a single session but no session handling is present in the nsp code. This also affects the 'Test connection' from the executor to the orchestrator. |