8000 Detect permission problems · Issue #35 · m-lab/alertmanager-github-receiver · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Detect permission problems #35
Open
@cjyar

Description

@cjyar

According to https://developer.github.com/v3/issues/#create-an-issue:

Only users with push access can set labels for new issues. Labels are silently dropped otherwise.

Scenario:

  • alertmanager-github-receiver is running as a user without permission to push to a repo.
  • An alert is generated, and the program creates an issue. It tries to add labels to the issue, but no labels are added.
  • Alertmanager periodically resends the alert. The next time alertmanager-github-receiver receives it, it checks to see if the issue already exists. It searches based on labels first, so it doesn't find the existing issue.
  • alertmanager-github-receiver creates a duplicate issue.
  • It does so again every time alertmanager resends the alert.

It seems like there are a few things we should/could do:

  1. Warn users that they need to have push permissions for the service account.
  2. Detect insufficient permissions and warn the user.
  3. Refuse to create duplicate issues.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0