Hey @mikepower79,
Thanks for the logs and I am sorry this is such a headache for you at the moment, I can get this in front of our engineers but I am afraid we are still seeing access denied errors in your logs for the task logs and until that gets fixed there is not much we can do really as this is external so we cant fix any code or bug that is present, no other customers have reported this issue on 2023.1.10235
so I do not think this is a bug.
2023-06-16 02:42:37.4836 1 62 ERROR Failed to append the following log entry:"
"CorrelationId: "ServerTasks-3409467_S4WQ4ZJ8K8/1b2c3ef4ffcd44fc9797bc588c458065/9eb8dc6211a542a8b1a99915afa002f3/768eaec6a1f649debf528559d6bcea6d""
"Message: "Executing Validate Octopus release format (type Run a Script) on EUXXX60-ITXXXX89 "
System.UnauthorizedAccessException: Access to the path '/taskLogs/servertasks-3409467_s4wq4zj8k8.txt' is denied.
---> System.IO.IOException: Permission denied
2023-06-16 02:42:59.4925 1 60 ERROR Failed to append the following log entry:"
"CorrelationId: "ServerTasks-3409460_GSYEL5L9N8/3ee7bed8c96a445aa54c4d5983b4f142/399d25deaf5f425389abdb185580d70e""
"Message: "Exit code: 0"
System.UnauthorizedAccessException: Access to the path '/taskLogs/servertasks-3409460_gsyel5l9n8.txt' is denied.
---> System.IO.IOException: Permission denied
2023-06-16 02:44:59.5255 1 46 ERROR Failed to append the following log entry:"
"CorrelationId: "ServerTasks-3409467_S4WQ4ZJ8K8/3f11685b01ec41d3bec7e64fa6850f5c/08c4f34dea3545f39a0f332082ae95df""
"Message: "Performing variable substitution on 'D:\Octopus\```\Work\20230616024452-3409467-23826\Script.ps1'"
System.UnauthorizedAccessException: Access to the path '/taskLogs/servertasks-3409467_s4wq4zj8k8.txt' is denied.
---> System.IO.IOException: Permission denied
2023-06-16 04:22:37.6543 1 50 ERROR Failed to append the following log entry:"
"CorrelationId: "ServerTasks-3409553_U4LSLMUJ2F/c4a959488aba469da5e70dbd387e974d/78ccfb36fff14e898ac1645c0cb7f1a4""
"Message: "Acquiring isolation mutex PackageRetention with NoIsolation in ServerTasks-3409553"
System.UnauthorizedAccessException: Access to the path '/taskLogs/servertasks-3409553_u4lslmuj2f.txt' is denied.
---> System.IO.IOException: Permission denied
2023-06-16 04:34:53.9498 1 163 ERROR Failed to append the following log entry:"
"CorrelationId: "ServerTasks-3409553_U4LSLMUJ2F/98767a07ba6f4d648566752989685c01""
"Message: "The step failed: Activity Deploying list of projects on EUXXX60-ITXXXX89 failed with error 'The remote script failed with exit code 1'."
System.UnauthorizedAccessException: Access to the path '/taskLogs/servertasks-3409553_u4lslmuj2f.txt' is denied.
---> System.IO.IOException: Permission denied
There are over 90 of those error messages in your latest server log, they are all different task logs and because Octopus does not have permissions to edit the task logs that is why you are seeing it in the UI where it completes the task (because that is a database function not a file share function) but then the UI shows the steps are still not complete because that relies on the fileshare for Octopus to write to the task log and send that back to the UI.
I can see if the engineers have a screenshot of the permissions they have for one of our cloud instances but usually its the Octopus server service account that needs full control to the Tasks Logs folder on the file share, I am sure you have seen the HA documentation but this bit describes what you need to do for the shared storage.
Does this happen on every project, you mentioned there are hundreds but that would be the case if there was a permissions issue.
If this does not happen on every project, if you have a few nodes and they have different service accounts that are running the Octopus Server service it may be that one nodes service account has not been granted access to the file share.
You mentioned you don’t have any access restrictions on the file share and if that is the case it might be worth trying to put the nodes service account in the file share and give it full control. I have seen it before where in Windows you need to actually put an account in the security of that folder for the account to be able to access it so it may be that you need to give explicit permissions here.
You can see what node is deploying what project using the dev tools on your browser so if you go to deploy a project you know is not having the UI issue and grab the node information, then you deploy a project that has the issue and they are different nodes you can look at the node with the issue and see what service account it is running under, you can then make sure that is added to the file share.
I would look at all of your nodes too and ensure they are all using the same service account for Octopus just so it makes it easier permissions wise for the file share, if one of the accounts is different it makes it harder to fault find on the nodes when this sort of thing happens.
Let me know if this happens on all of the deployments or just a few and let me know if you manage to pinpoint the node that’s the issue and add that to the shared storage, I would look at all the nodes and make sure they are all using the same service account and I would also try explicitly adding that account to the file share Task Log folder to see if that alleviates this issue.
It might be worth getting us a screenshot of the Task Log folder for your file share if possible (just the permissions) so we can take a look and see if we can advise there. Regarding the engineers, I will send the information we have to them but as mentioned we can only advise on permissions at this point because we cannot control that, the only error we have to go off at the moment is there are permission issues on your file share which all line up with the issues you are seeing in the UI.
I am really hoping we can get to the bottom of this as I can completely see this being a huge pain point for you so I am sorry this is happening.
Let me know how you get on with what I have suggested and if you can get us a screenshot of the permissions (and possibly the Octopus server service - just for the account that’s running the nodes) that would be helpful.
Kind Regards,
Clare