-
Notifications
You must be signed in to change notification settings - Fork 856
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Question]: Why does VMSS extension report 401 error? #4826
Comments
I have an update. I just connected to an agent having the same problem and I run
Apparently the VMSS extension is not able to assign read/write permissions to TLDR: The VMSS extension cannot work until read/write permissions are properly assigned for the agent directory to |
Hi @sicil1ano thanks for reporting! |
Describe your question
Using Terraform, I created an Azure VMSS linking it to a custom image built with Packer, using Ubuntu Server 22.04 as base OS.
I passed the service connection details (client id, secret, subscription id and tenant id) to the Packer template.
I followed then the guide here to associate my VMSS to a new agent pool in Azure DevOps Services: https://learn.microsoft.com/en-us/azure/devops/pipelines/agents/scale-set-agents?view=azure-devops
I can see the extension installed and DevOps starting to scale in and out my VMSS. I can also queue builds on the instances. So far so good.
After a while though (10 mins or so), each agent is reported as unhealthy. The log under agent/_diag directory is below.
I don't understand the reason behind this 401 error. I followed the above guide and I am the owner of the subscription where the VMSS lives. I used the service connection linked to the subscription using the service principal automatic configuration.
The log specifies that PAT authentication was used. I guess it was a PAT generated by Azure DevOps, as I wasn't asked to generate one myself. Can you help me understand what is going wrong?
The agent pool diagnostics tab shows this:
Furthermore, the log reports a strange error that I don't know anything about. What is it about? Is it blocking?
System.UnauthorizedAccessException: Access to the path '/proc/2486/oom_score_adj' is denied.
Versions
VMSS extension 1.23 using agent 3.239.1 / Ubuntu Server 22.04
Environment type (Please select at least one enviroment where you face this issue)
Azure DevOps Server type
dev.azure.com (formerly visualstudio.com)
Operation system
No response
Version controll system
No response
Azure DevOps Server Version (if applicable)
No response
The text was updated successfully, but these errors were encountered: