Project permissions not synchronizing from GitHub

SonarQube server version 10.3 (build 82913)
Developer Edition
Deployed using k8s helm chart

I’ve configured the server to authenticate users against GitHub and ensured all the project are linked to a GitHub project.

For the first 19 projects in the list the permissions sync as expected, but for the remainder (49) it silently fails and the project’s permissions don’t get updated to match GitHub. I note that 20 warnings are logged.

Any suggestions on how to diagnose / fix this?

2024.02.07 14:25:50 INFO  web[AY1+6nXDqA4QU6MOAFWM][com.A.C.A.A.A.E] Scheduled Github provisioning task: AY2D9fNngArv0HJhnIfc.
2024.02.07 14:25:51 INFO  ce[][o.s.c.t.CeWorkerImpl] Execute task | type=GITHUB_AUTH_PROVISIONING | id=AY2D9fNngArv0HJhnIfc
2024.02.07 14:25:51 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Check GitHub App is correctly configured | status=SUCCESS | time=293ms
2024.02.07 14:25:51 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Load GitHub app installations from GitHub | status=SUCCESS | time=101ms
2024.02.07 14:25:54 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Load users from GitHub | status=SUCCESS | time=3081ms
2024.02.07 14:25:54 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Load users from DB | status=SUCCESS | time=11ms
2024.02.07 14:25:54 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Reconciliation of GitHub and DB users | status=SUCCESS | time=1ms
2024.02.07 14:25:54 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Deactivate users removed from GitHub | status=SUCCESS | time=0ms
2024.02.07 14:25:54 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Create new users and update existing ones based on GitHub data | status=SUCCESS | time=0ms
2024.02.07 14:25:55 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Load teams from GitHub | status=SUCCESS | time=806ms
2024.02.07 14:25:55 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Load groups from DB | status=SUCCESS | time=3ms
2024.02.07 14:25:55 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Load github roles to sonarqube permissions from DB | status=SUCCESS | time=3ms
2024.02.07 14:25:55 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Reconciliation of GitHub and DB groups | status=SUCCESS | time=0ms
2024.02.07 14:25:55 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Delete groups removed from GitHub | status=SUCCESS | time=0ms
2024.02.07 14:25:55 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Create new groups and update existing ones based on GitHub data | status=SUCCESS | time=0ms
2024.02.07 14:25:55 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Managing groups storing all organizations members | status=SUCCESS | time=3ms
2024.02.07 14:26:27 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Load groups membership from GitHub | status=SUCCESS | time=31570ms
2024.02.07 14:26:27 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Load groups membership from DB | status=SUCCESS | time=45ms
2024.02.07 14:26:27 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Update DB group membership based on GitHub teams | status=SUCCESS | time=14ms
2024.02.07 14:26:27 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Load Github projects existing in SonarQube | status=SUCCESS | time=5ms
2024.02.07 14:26:35 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:36 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:36 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:37 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:38 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:38 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:38 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:39 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:39 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:40 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:40 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:41 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:41 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:42 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:42 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:43 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:44 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:44 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:45 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:45 WARN  ce[AY2D9fNngArv0HJhnIfc][o.s.a.c.g.GithubPermissionConverter] No permission found matching role:none, and permissions null
2024.02.07 14:26:46 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Synchronizing GitHub permissions | status=SUCCESS | time=18876ms
2024.02.07 14:26:46 INFO  ce[AY2D9fNngArv0HJhnIfc][com.A.C.A.C.C.P] Synchronized 1 organizations, 76 groups and 386 users from GitHub. Permissions synchronised for 68 projects.
2024.02.07 14:26:46 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.s.ComputationStepExecutor] Publish synchronization summary | status=SUCCESS | time=2ms
2024.02.07 14:26:46 INFO  ce[AY2D9fNngArv0HJhnIfc][o.s.c.t.CeWorkerImpl] Executed task | type=GITHUB_AUTH_PROVISIONING | id=AY2D9fNngArv0HJhnIfc | status=SUCCESS | time=54877ms

Hi @Stephen_Robin,

Could you please active the debug level for CE logs (see procedure) and send the synchronization logs?

This should give more details on where it fails.

Thanks in advance,
Aurélien

Hi Aurélien,

Thank you for the information on debug logging. It was enough to help me solve the problem by myself.

The project name in the DevOps Platform Integration page is case-sensitive. If you type an incorrectly cased value the “check configuration” button will say that the value is correct, but the permissions sync will silently fail.

It would be great if you could fix that check so we don’t get caught out by this again.

Thanks
Stephen

2 Likes

Hi @Stephen_Robin,

Thanks for the update and I’m glad you could fix the problem on your side.

I have opened a ticket in our backlog to improve this behavior.

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.