Details
-
Bug
-
Status: Closed (View Workflow)
-
Blocker
-
Resolution: Fixed
-
Docker - Jenkins LTS Slim (Debian Buster 10) - from Dockerhub
Jenkins LTS 2.249.1 (latest)
AWS Secrets Manager plugin 0.4.0 (latest)
-
-
0.4.1
Description
Getting an Illegal access exception displayed at the end of builds which is causing the build to fail, the build is otherwise successful
Reverting to version 0.3.3 of the plugin resolves the issue so this is definitely related to the recent release.
Stacktrace:
java.lang.IllegalArgumentException: Arguments to class io.jenkins.plugins.credentials.secretsmanager.config.Tag have to be explicitly named at org.jenkinsci.plugins.structs.describable.DescribableModel.instantiate(DescribableModel.java:313) at org.jenkinsci.plugins.structs.describable.DescribableModel.instantiate(DescribableModel.java:272) at sun.reflect.GeneratedMethodAccessor905.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.codehaus.groovy.reflection.CachedMethod.invoke(CachedMethod.java:93) at groovy.lang.MetaMethod.doMethodInvoke(MetaMethod.java:325) at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1213) at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1022) at org.codehaus.groovy.runtime.callsite.PojoMetaClassSite.call(PojoMetaClassSite.java:47) at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:125) at org.codehaus.groovy.runtime.callsite.AbstractCallSite.callSafe(AbstractCallSite.java:87) at org.jenkinsci.plugins.pipeline.modeldefinition.Utils.instantiateDescribable(Utils.groovy:463) at org.jenkinsci.plugins.pipeline.modeldefinition.Utils$instantiateDescribable$10.callStatic(Unknown Source) at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCallStatic(CallSiteArray.java:56) at org.codehaus.groovy.runtime.callsite.AbstractCallSite.callStatic(AbstractCallSite.java:194) at org.kohsuke.groovy.sandbox.impl.Checker$2.call(Checker.java:194) at org.kohsuke.groovy.sandbox.GroovyInterceptor.onStaticCall(GroovyInterceptor.java:35) at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.onStaticCall(SandboxInterceptor.java:186) at org.kohsuke.groovy.sandbox.impl.Checker$2.call(Checker.java:192) at org.kohsuke.groovy.sandbox.impl.Checker.checkedStaticCall(Checker.java:196) at org.kohsuke.groovy.sandbox.impl.Checker.checkedCall(Checker.java:103) at com.cloudbees.groovy.cps.sandbox.SandboxInvoker.methodCall(SandboxInvoker.java:17) at WorkflowScript.run(WorkflowScript) at org.jenkinsci.plugins.pipeline.modeldefinition.ModelInterpreter.instancesFromClosure(ModelInterpreter.groovy:695) at org.jenkinsci.plugins.pipeline.modeldefinition.ModelInterpreter$WhenEvaluator.evaluateWhen(ModelInterpreter.groovy:850) at org.jenkinsci.plugins.pipeline.modeldefinition.ModelInterpreter$WhenEvaluator.passedOrNotEvaluatedBeforeAgent(ModelInterpreter.groovy:837) at org.jenkinsci.plugins.pipeline.modeldefinition.ModelInterpreter.evaluateStage(ModelInterpreter.groovy:271) at org.jenkinsci.plugins.pipeline.modeldefinition.ModelInterpreter.stageInput(ModelInterpreter.groovy:356) at org.jenkinsci.plugins.pipeline.modeldefinition.ModelInterpreter.stageInput(ModelInterpreter.groovy:355) at org.jenkinsci.plugins.pipeline.modeldefinition.ModelInterpreter.evaluateStage(ModelInterpreter.groovy:261) at org.jenkinsci.plugins.pipeline.modeldefinition.ModelInterpreter.inWrappers(ModelInterpreter.groovy:613) at org.jenkinsci.plugins.pipeline.modeldefinition.ModelInterpreter.inWrappers(ModelInterpreter.groovy:612) at org.jenkinsci.plugins.pipeline.modeldefinition.ModelInterpreter.evaluateStage(ModelInterpreter.groovy:259) at org.jenkinsci.plugins.pipeline.modeldefinition.ModelInterpreter.withEnvBlock(ModelInterpreter.groovy:443) at org.jenkinsci.plugins.pipeline.modeldefinition.ModelInterpreter.withEnvBlock(ModelInterpreter.groovy:442) at org.jenkinsci.plugins.pipeline.modeldefinition.ModelInterpreter.evaluateStage(ModelInterpreter.groovy:254) at ___cps.transform___(Native Method) at com.cloudbees.groovy.cps.impl.ContinuationGroup.methodCall(ContinuationGroup.java:86) at com.cloudbees.groovy.cps.impl.FunctionCallBlock$ContinuationImpl.dispatchOrArg(FunctionCallBlock.java:113) at com.cloudbees.groovy.cps.impl.FunctionCallBlock$ContinuationImpl.fixArg(FunctionCallBlock.java:83) at sun.reflect.GeneratedMethodAccessor228.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at com.cloudbees.groovy.cps.impl.ContinuationPtr$ContinuationImpl.receive(ContinuationPtr.java:72) at com.cloudbees.groovy.cps.impl.CollectionLiteralBlock$ContinuationImpl.dispatch(CollectionLiteralBlock.java:55) at com.cloudbees.groovy.cps.impl.CollectionLiteralBlock$ContinuationImpl.item(CollectionLiteralBlock.java:45) at sun.reflect.GeneratedMethodAccessor234.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at com.cloudbees.groovy.cps.impl.ContinuationPtr$ContinuationImpl.receive(ContinuationPtr.java:72) at com.cloudbees.groovy.cps.impl.ConstantBlock.eval(ConstantBlock.java:21) at com.cloudbees.groovy.cps.Next.step(Next.java:83) at com.cloudbees.groovy.cps.Continuable$1.call(Continuable.java:174) at com.cloudbees.groovy.cps.Continuable$1.call(Continuable.java:163) at org.codehaus.groovy.runtime.GroovyCategorySupport$ThreadCategoryInfo.use(GroovyCategorySupport.java:129) at org.codehaus.groovy.runtime.GroovyCategorySupport.use(GroovyCategorySupport.java:268) at com.cloudbees.groovy.cps.Continuable.run0(Continuable.java:163) at org.jenkinsci.plugins.workflow.cps.SandboxContinuable.access$001(SandboxContinuable.java:18) at org.jenkinsci.plugins.workflow.cps.SandboxContinuable.run0(SandboxContinuable.java:51) at org.jenkinsci.plugins.workflow.cps.CpsThread.runNextChunk(CpsThread.java:185) at org.jenkinsci.plugins.workflow.cps.CpsThreadGroup.run(CpsThreadGroup.java:400) at org.jenkinsci.plugins.workflow.cps.CpsThreadGroup.access$400(CpsThreadGroup.java:96) at org.jenkinsci.plugins.workflow.cps.CpsThreadGroup$2.call(CpsThreadGroup.java:312) at org.jenkinsci.plugins.workflow.cps.CpsThreadGroup$2.call(CpsThreadGroup.java:276) at org.jenkinsci.plugins.workflow.cps.CpsVmExecutorService$2.call(CpsVmExecutorService.java:67) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at hudson.remoting.SingleLaneExecutorService$1.run(SingleLaneExecutorService.java:136) at jenkins.util.ContextResettingExecutorService$1.run(ContextResettingExecutorService.java:28) at jenkins.security.ImpersonatingExecutorService$1.run(ImpersonatingExecutorService.java:59) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.run(FutureTask.java:266) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:748)
Attachments
Activity
Chris Kilding
added a comment - Could you also share an example build script which is failing? 
Brett Delle Grazie
added a comment - Hi chriskilding,
I specify config through Jenkins CasC however we don't actually configure anything for the secrets manager plugin specifically (no endpoints or filters are specified)
Its upgraded on an existing Jenkins.
Brett Delle Grazie
added a comment - Hi chriskilding ,
I specify config through Jenkins CasC however we don't actually configure anything for the secrets manager plugin specifically (no endpoints or filters are specified)
Its upgraded on an existing Jenkins.
Brett Delle Grazie
added a comment - Hi chriskilding,
Relevant usage in a pipeline:
pipeline {
agent {
label 'some-node'
}
options {
ansiColor('xterm')
parallelsAlwaysFailFast()
timeout(time: 10, unit: 'MINUTES')
}
stages {
...
stage('Publish') {
environment {
ARTIFACTORY = credentials('some-aws-credentials-reference')
}
steps {
...
}
}
}
post {
always {
}
}
}
Not sure its going to help much though
Brett Delle Grazie
added a comment - Hi chriskilding ,
Relevant usage in a pipeline:
pipeline {
agent {
label 'some-node'
}
options {
ansiColor( 'xterm' )
parallelsAlwaysFailFast()
timeout(time: 10, unit: 'MINUTES' )
}
stages {
...
stage( 'Publish' ) {
environment {
ARTIFACTORY = credentials( 'some-aws-credentials-reference' )
}
steps {
...
}
}
}
post {
always {
}
}
}
Not sure its going to help much though Chris Kilding
added a comment - Starting work on a fix in https://github.com/jenkinsci/aws-secrets-manager-credentials-provider-plugin/pull/39
Chris Kilding
added a comment - Starting work on a fix in https://github.com/jenkinsci/aws-secrets-manager-credentials-provider-plugin/pull/39 Brett Delle Grazie
added a comment - chriskilding that's awesome - thank you! Chris Kilding
added a comment - Before we go down the rabbit hole of experimental builds, while version 0.4.0 was installed did you try restarting Jenkins? I am wondering if something to do with the Tag class was stuck in a cache.
Chris Kilding
added a comment - Before we go down the rabbit hole of experimental builds, while version 0.4.0 was installed did you try restarting Jenkins? I am wondering if something to do with the Tag class was stuck in a cache. Brett Delle Grazie
added a comment - Yes, I restarted Jenkins by shutting it down and retriggering a docker redeployment (ECS)
Brett Delle Grazie
added a comment - Yes, I restarted Jenkins by shutting it down and retriggering a docker redeployment (ECS) Hmm, guess not an in-memory cache issue then.
This is a Jenkins Incrementals build of the fix. It reverts the change to the `@Symbol` annotation for the Tag class which was in 0.4.0:
aws-secrets-manager-credentials-provider-0.4.1-rc79.60556b833118.hpi
If you could try installing this, and let me know if it fixes the problem, that would be great 
Chris Kilding
added a comment - - edited Hmm, guess not an in-memory cache issue then.
This is a Jenkins Incrementals build of the fix. It reverts the change to the `@Symbol` annotation for the Tag class which was in 0.4.0:
aws-secrets-manager-credentials-provider-0.4.1-rc79.60556b833118.hpi
If you could try installing this, and let me know if it fixes the problem, that would be great Brett Delle Grazie
added a comment - Sure will do - but it will be overnight (UK time)
Thanks! Brett Delle Grazie
added a comment - chriskilding that seems to have done the trick - I have no further failures - thank you!
Brett Delle Grazie
added a comment - chriskilding that seems to have done the trick - I have no further failures - thank you! Chris Kilding
added a comment - Hi again,
I've now released this in version 0.4.1. If you could give that a spin and confirm it's fixed the problem, we should be good to close this.
Chris Kilding
added a comment - Hi again,
I've now released this in version 0.4.1. If you could give that a spin and confirm it's fixed the problem, we should be good to close this. Brett Delle Grazie
added a comment - chriskilding Confirmed - thank you very much! 
Hi Brett, thanks for reporting this.
In 0.4.0, the Filters and Tag classes were deprecated, replaced by the ListSecrets class (with a list of Filter instances). The Tag class hadn't been modified for a while before that, so indeed this is probably caused by the latest release.
I have one idea of what might have caused this, which I only noticed this morning... could you confirm what kind of setup you've got?