Update config

Castex, Antoine

unread,

Apr 25, 2018, 8:59:34 AM4/25/18

to Forseti Security Beta Testers

Hi

there is a bug in the documentation

Modifying the Server configuration files

5. Download the latest configuration from Cloud Storage
$ forseti-server-XXXX-vm@ubuntu> gsutil cp gs://forseti-server-XXX/configs/server/forseti_server_conf.yaml configs/server/forseti_server_conf.yaml

In the compute the file name is forseti_conf_server , not forseti_server_conf

And for the restart service , that dont work :

ubuntu@forseti-client-vm-4540:~/forseti-security$ sudo systemctl restart forseti.service
Failed to restart forseti.service: Unit forseti.service not found.

Cordialement / Best Regards

CASTEX Antoine

Cloud Developer

Technology & Operations - Digital Factory

Group Information Systems & Technology (IS&T)

VEOLIA 30 rue Madeleine Vionnet / 93300 Aubervilliers / France

Bureau : 0 - Ouest - 137F

Direct: +33 1 85 57 70 91

Mobile: +33 6 10 93 63 49

www.veolia.com

--------------------------------------------------------------------------------------------

This e-mail transmission (message and any attached files) may contain information that is proprietary, privileged and/or confidential to Veolia Environnement and/or its affiliates and is intended exclusively for the person(s) to whom it is addressed. If you are not the intended recipient, please notify the sender by return e-mail and delete all copies of this e-mail, including all attachments. Unless expressly authorized, any use, disclosure, publication, retransmission or dissemination of this e-mail and/or of its attachments is strictly prohibited.

Ce message electronique et ses fichiers attaches sont strictement confidentiels et peuvent contenir des elements dont Veolia Environnement et/ou l'une de ses entites affiliees sont proprietaires. Ils sont donc destines a l'usage de leurs seuls destinataires. Si vous avez recu ce message par erreur, merci de le retourner a son emetteur et de le detruire ainsi que toutes les pieces attachees. L'utilisation, la divulgation, la publication, la distribution, ou la reproduction non expressement autorisees de ce message et de ses pieces attachees sont interdites.

--------------------------------------------------------------------------------------------

Castex, Antoine

unread,

Apr 25, 2018, 9:05:14 AM4/25/18

to Forseti Security Beta Testers

update service was because i have both client and server ssh open .... and was not on the good one

On the server side restard is ok but the deploy from gcs is KO :

ubuntu@forseti-server-vm-4540:~/forseti-security$ gsutil cp gs://forseti-server-4540/configs/server/forseti_conf_server.yaml configs/server/forseti_conf_server.yaml
WARNING 0425 13:04:43.753744 multistore_file.py] Cannot access credentials file.
WARNING 0425 13:04:43.753931 multistore_file.py] The credentials file (/home/ubuntu/.gsutil/credstore) is not writable. Opening in read-only mode. Any refreshed credentials will only be valid for this run.
WARNING 0425 13:04:43.754130 multistore_file.py] Credential data store could not be loaded. Will ignore and overwrite.
Copying gs://forseti-server-4540/configs/server/forseti_conf_server.yaml...
OSError: Permission denied. KiB]                                                
ubuntu@forseti-server-vm-4540:~/forseti-security$ Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/metrics_reporter.py", line 71, in ReportMetrics
    handler = logging.FileHandler(LOG_FILE_PATH, mode='w')
  File "/usr/lib/python2.7/logging/__init__.py", line 913, in __init__
    StreamHandler.__init__(self, self._open())
  File "/usr/lib/python2.7/logging/__init__.py", line 943, in _open
    stream = open(self.baseFilename, self.mode)
IOError: [Errno 13] Permission denied: '/home/ubuntu/.gsutil/metrics.log'