PaladinCloud / CE

Paladin Cloud is an extensible, cloud security platform for developers. Join the community at https://discord.gg/xvCFD29Jj4
https://paladincloud.io/
Apache License 2.0
567 stars 53 forks source link

[BUG] Can't login in the app with default credentials #317

Closed estemendoza closed 2 years ago

estemendoza commented 2 years ago

Microservices

Summary

Can't login in the app

Reproduce steps

Expected Results

Actual Results

Getting a "503 Service Temporary Unavailable" error when sending auth data to /api/auth/user/login

santhosh-challa commented 2 years ago

Hi @estemendoza ,

We are in the process of updating the documentation for the redeploy process. As you pointed out, the state files are needed for running the redeploy from a newer version. We will update the same in the documentation clearly.

As you are trying to destroy the Paladin Cloud, can you try running the destroy from 1.0.2? Also, please let us know if you read the release notes for 1.1.0. We hit the EventBridge bus limit, which needs to be increased before installation.

Please let me know if you have any other questions.

Thanks.

estemendoza commented 2 years ago

Hi @santhosh-challa Thanks for the update on the EventBus stuff, but for now I am more concern on getting the destroy command to work properly.

I tried to execute it using v1.0.2 and it keeps failing:

Step 4: Terraform destroy started
        Time elapsed: 0m 7s [...Exception in thread Thread-1:
Traceback (most recent call last):
  File "/usr/lib64/python3.7/threading.py", line 926, in _bootstrap_inner
    self.run()
  File "/usr/lib64/python3.7/threading.py", line 870, in run
    self._target(*self._args, **self._kwargs)
  File "/home/ec2-user/CE-1.0.2/installer/core/providers/aws/destroy.py", line 142, in destroy_resources
    PyTerraform.save_terraform_output()
  File "/home/ec2-user/CE-1.0.2/installer/core/terraform/__init__.py", line 239, in save_terraform_output
    output_dict = cls.load_terraform_output()
  File "/home/ec2-user/CE-1.0.2/installer/core/terraform/__init__.py", line 264, in load_terraform_output
    working_dir=Settings.TERRAFORM_DIR,
  File "/home/ec2-user/CE-1.0.2/installer/core/lib/python_terraform/__init__.py", line 109, in __init__
    self.read_state_file(self.state)
  File "/home/ec2-user/CE-1.0.2/installer/core/lib/python_terraform/__init__.py", line 419, in read_state_file
    self.tfstate = Tfstate.load_file(file_path)
  File "/home/ec2-user/CE-1.0.2/installer/core/lib/python_terraform/__init__.py", line 54, in load_file
    json_data = json.load(f)
  File "/usr/lib64/python3.7/json/__init__.py", line 296, in load
    parse_constant=parse_constant, object_pairs_hook=object_pairs_hook, **kw)
  File "/usr/lib64/python3.7/json/__init__.py", line 348, in loads
    return _default_decoder.decode(s)
  File "/usr/lib64/python3.7/json/decoder.py", line 337, in decode
    obj, end = self.raw_decode(s, idx=_w(s, 0).end())
  File "/usr/lib64/python3.7/json/decoder.py", line 355, in raw_decode
    raise JSONDecodeError("Expecting value", s, err.value) from None
json.decoder.JSONDecodeError: Expecting value: line 1 column 1 (char 0)

        Error occured, please check error log for more details

logs for destroy command are empty

santhosh-challa commented 2 years ago

Can you upload the logs from the install/log directory?

estemendoza commented 2 years ago

Hi @santhosh-challa Thanks for all your help. This issue is getting longer and longer and I was wondering if you or anyone in Paladin's team would like to join a zoom meeting to tackle this, I would share screen and then we can debug this properly.

santhosh-challa commented 2 years ago

HI @estemendoza , Sure we can do that. Please let us know your time zone. We can do one either on Monday/Tuesday next week.

estemendoza commented 2 years ago

I am in Spain, next Tuesday sounds good to me

santhosh-challa commented 2 years ago

Ok. Please let us know if 4PM on Tuesday your time works.

estemendoza commented 2 years ago

It would be better at 5PM my time, or maybe 3:30PM

santhosh-challa commented 2 years ago

Ok, we can do 5PM your time, which is 8.30PM IST. Please share your email so that we can share meet link or we will update here before the call.

Thanks.

estemendoza commented 2 years ago

Awesome, that works fine for me. Tuesday 5PM, my email is my username at gmail dot com

santhosh-challa commented 2 years ago

Hi @estemendoza,

We are waiting for you on the call, hope you received the invite.

kkhamruddin-pk commented 2 years ago

I faced the same issue, Allowing traffic between the RDS and ELB (paladian app) fixed the issue.

santhosh-challa commented 2 years ago

Hi @estemendoza ,

We have a new release https://github.com/PaladinCloud/CE/releases/tag/1.2.0 Please let me know your good time this week to schedule the installation call.

estemendoza commented 2 years ago

Hi @santhosh-challa. Can you get together on Friday same time as the first meeting? Thanks

santhosh-challa commented 2 years ago

Hi @estemendoza, Friday same time may not be possible as I have some other calls scheduled. Can we do your 3 PM on Friday? which is 6.30 PM IST. Please confirm.

estemendoza commented 2 years ago

Yes, no problem with that new time.

santhosh-challa commented 2 years ago

Thanks, I will send out an invite.

santhosh-challa commented 2 years ago

Hi @estemendoza,

Did you try logging into UI post our call? We tried internally and UI worked fine. Please let us know if you have some time to debug this issue this week.

Thanks, Santhosh

estemendoza commented 2 years ago

hey! I tried to login again and I am not getting a 502 error now, but getting a timeout error, so login doesn't go through.

How did you try it? did you try it in our instance?

santhosh-challa commented 2 years ago

No :) We use an external load balancer internally with a certificate. I once tried without the certificate and only an external load balancer. I did get 502 once and post refreshing the browser it went away. Maybe some intermittent issue, I wanted to debug but it went away quickly. That is the reason I wanted to check with you if the error is still there.

The timeout issue may be with SG issue. can you please check once SG settings and retry?

Subbu-PaladinCloud commented 2 years ago

Hi @estemendoza , any update here, were you able to login now ?

estemendoza commented 2 years ago

Hey! So, I tried last week and I still wasn't able to login correctly and I tried today and I can't access the UI, it's giving me a timeout error. Can we meet maybe Wednesday or Thursday?

Subbu-PaladinCloud commented 2 years ago

Sure, could you please suggest some times ?

estemendoza commented 2 years ago

Wednesday after 6PM CEST, Thursday between 5 and 7 PM CEST

Manishpandey11 commented 2 years ago

Hi i want to contribute in this project

Subbu-PaladinCloud commented 2 years ago

@Manishpandey11 , great.. can you please join our slack channel on PaladinCloud.io and also star our repo on Github. I will DM you and we can discuss your contribution.

Subbu-PaladinCloud commented 2 years ago

@estemendoza we are on a call waiting for you. Are you able to join ?

estemendoza commented 2 years ago

Hi guys, sorry I didn't join but you never confirmed me when the meeting was going to take place and I never received any meeting invitation either. Can we try tomorrow or next week?

Subbu-PaladinCloud commented 2 years ago

Hmm.. I thought I sent an invite out.. sorry if you did not get it.. we can try and setup early next week and I will post the meeting link here in this chat. Please let me know your availability

estemendoza commented 2 years ago

What about Monday after 4 PM CEST?

Subbu-PaladinCloud commented 2 years ago

yes, it works, here is the link : https://meet.google.com/kud-oqnr-waj Monday, September 26 · 10:00 – 11:00am ET

estemendoza commented 2 years ago

Awesome, see you on Monday

rnithinpaladin commented 2 years ago

Hi @estemendoza

can you try installing latest release 1.3.0 . and while installing please delete this "/home/ec2-user/CE/webapp/src/config/configurations.ts.new" file

estemendoza commented 2 years ago

Got it, does that still need me to open the sec group for the database?

Subbu-PaladinCloud commented 2 years ago

@estemendoza , if you are good with your install now, please close out this ticket for now and if you find any other bugs/requests, please feel free to open a new one. Thanks.