After upgrading to 15.0.1 from 14.10.5 Uploading Images, Artifacts Giving 403 Forbidden

  1. While Uploading the Image in the MR description getting an error.

Logs:


Excon::Error::Forbidden (Expected(204) <=> Actual(403 Forbidden)
excon.error.response
  :body          => "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>XXXXXXXFMAPZP</RequestId><HostId>//XXXXX0fVqCNen07su+IRntvXXXXXXXXXXXZvnl6/EftUBgYO6U5+ETkz3DxQqyltU4OA=</HostId></Error>"
  :cookies       => [
  ]
  :headers       => {
    "Content-Type"     => "application/xml"
    "Date"             => "Tue, 07 Jun 2022 11:36:22 GMT"
    "Server"           => "AmazonS3"
    "x-amz-id-2"       => "//XXXXXXX0fVqCNen07su+IRntvXXXXXa271jKD7p11DnQtZvnl6/EftUBgYO6U5+ETkz3DxQqyXXltU4OA="
    "x-amz-request-id" => "XXGGDXXX7C4FMAPZP"
  }
  :host          => "XXX.s3.ap-southeast-1.amazonaws.com"
  :local_address => "172.10.1.50"
  :local_port    => 56674
  :path          => "/tmp/uploads/1654601782-167585-0015-8059-8f52d0568d300d22078b4c1dcec1606a"
  :port          => 443
  :reason_phrase => "Forbidden"
  :remote_ip     => "52.219.37.27"
  :status        => 403
  :status_line   => "HTTP/1.1 403 Forbidden\r\n"
):

app/uploaders/object_storage.rb:379:in `store!'
app/services/upload_service.rb:18:in `execute'
app/controllers/concerns/uploads_actions.rb:17:in `create'
app/controllers/application_controller.rb:527:in `set_current_admin'
lib/gitlab/session.rb:11:in `with_session'
app/controllers/application_controller.rb:518:in `set_session_storage'
lib/gitlab/i18n.rb:105:in `with_locale'
lib/gitlab/i18n.rb:111:in `with_user_locale'
app/controllers/application_controller.rb:512:in `set_locale'
app/controllers/application_controller.rb:506:in `set_current_context'
lib/gitlab/metrics/elasticsearch_rack_middleware.rb:16:in `call'
lib/gitlab/middleware/rails_queue_duration.rb:33:in `call'
lib/gitlab/middleware/memory_report.rb:13:in `call'
lib/gitlab/middleware/speedscope.rb:13:in `call'
lib/gitlab/database/load_balancing/rack_middleware.rb:23:in `call'
lib/gitlab/metrics/rack_middleware.rb:16:in `block in call'
lib/gitlab/metrics/web_transaction.rb:46:in `run'
lib/gitlab/metrics/rack_middleware.rb:16:in `call'
lib/gitlab/jira/middleware.rb:19:in `call'
lib/gitlab/middleware/go.rb:20:in `call'
lib/gitlab/etag_caching/middleware.rb:21:in `call'
lib/gitlab/middleware/query_analyzer.rb:11:in `block in call'
lib/gitlab/database/query_analyzer.rb:37:in `within'
lib/gitlab/middleware/query_analyzer.rb:11:in `call'
lib/gitlab/middleware/multipart.rb:178:in `block in call'
lib/gitlab/middleware/multipart.rb:63:in `with_open_files'
lib/gitlab/middleware/multipart.rb:177:in `call'
lib/gitlab/middleware/read_only/controller.rb:50:in `call'
lib/gitlab/middleware/read_only.rb:18:in `call'
lib/gitlab/middleware/same_site_cookies.rb:27:in `call'
lib/gitlab/middleware/handle_malformed_strings.rb:21:in `call'
lib/gitlab/middleware/basic_health_check.rb:25:in `call'
lib/gitlab/middleware/handle_ip_spoof_attack_error.rb:25:in `call'
lib/gitlab/middleware/request_context.rb:21:in `call'
lib/gitlab/middleware/webhook_recursion_detection.rb:15:in `call'
config/initializers/fix_local_cache_middleware.rb:11:in `call'
lib/gitlab/middleware/compressed_json.rb:26:in `call'
lib/gitlab/middleware/rack_multipart_tempfile_factory.rb:19:in `call'
lib/gitlab/middleware/sidekiq_web_static.rb:20:in `call'
lib/gitlab/metrics/requests_rack_middleware.rb:77:in `call'
lib/gitlab/middleware/release_env.rb:13:in `call'
  1. CI/CD it not able to upload artifacts:

Logs:

WARNING: Uploading artifacts as "archive" to coordinator... POST https://xyz.domain.in/api/v4/jobs/105127/artifacts: 400 Bad Request (Expected(204) <=> Actual(403 Forbidden)
excon.error.response
  :body          => "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>XXXBAK2Z60QGRB</RequestId><HostId>XXXX0ptzIejXXXXXkWvS13+XXXXygtEYx1G4wR/eaR\\/oVClDPvDTxOLUQceF8Tiauft6jLs43QFWfk=</HostId></Error>"
  :cookies       => [
  ]
  :headers       => {
    "Content-Type"     => "application/xml"
    "Date"             => "Tue, 07 Jun 2022 05:08:09 GMT"
    "Server"           => "AmazonS3"
    "x-amz-id-2"       => "XXXXX0ptzIejkWvS13+Akdlygt1G4wRXXX/eaR/oVClDPvDTxOLUQceF8Tiauft6jLs43QFWfk="
    "x-amz-request-id" => "XXXXXXXAK2Z60QGRB"
  }
  :host          => "XXX.s3.ap-southeast-1.amazonaws.com"
  :local_address => "172.10.1.50"
  :local_port    => 52546
  :path          => "/tmp/uploads/1654578489-167688-0011-7373-352936b2509df2f44cca08519b962da2"
  :port          => 443
  :reason_phrase => "Forbidden"
  :remote_ip     => "52.219.132.47"
  :status        => 403
  :status_line   => "HTTP/1.1 403 Forbidden\r\n"
)  id=105127 responseStatus=400 Bad Request status=400 token=XYZSYS

Object Storage Configuration: /etc/gitlab/gitlab.rb

gitlab_rails['artifacts_object_store_connection'] = {
  'provider' => 'AWS',
  'region'   => 'ap-southeast-1',
  'aws_access_key_id' => 'AAAAAA',
  'aws_secret_access_key' => 'AAAAAA'
}

Similar one for uploads ...

Fixed the issue, here is a thread for the same After upgrading to 15.0.1 from 14.10.5 Uploading Images, Artifacts Giving 403 Forbidden (#364529) · Issues · GitLab.org / GitLab · GitLab