Affects Version/s: 11.4.2-client, 11.4.4-client, 11.6.2-client, 11.8.0-client
Fix Version/s: None
Component/s: Chef Client
I have a role that takes a long time to run. Part of that is it installs a large number of packages on the system, and Fedora yum is slow.
When chef-client starts all is well. The system installs a number of cookbook files, execute resources, etc. Then we get into a 15 minute chain of package installs. When those are all done, the next resource again is a cookbook_file. This fails on 403 Forbidden.
[2013-06-05T21:15:37+00:00] INFO: cookbook_file[/etc/chef/parse_role.rb] created file /etc/chef/parse_role.rb
[2013-06-05T21:15:37+00:00] INFO: directory[/var/cache/chef] mode changed to 700
[2013-06-05T21:15:38+00:00] INFO: directory[/var/dist] created directory /var/dist
[2013-06-05T21:15:38+00:00] INFO: link[/cgroup] created
[2013-06-05T21:15:38+00:00] INFO: package[zip] installing zip-3.0-4.fc17 from fedora repository
... LOTS OF PACKAGES ...
[2013-06-05T21:31:44+00:00] INFO: package[davfs2] installed version 1.4.6-3.fc17
[2013-06-05T21:31:44+00:00] ERROR: cookbook_file[/etc/davfs2/davfs2.conf] (jenkins::davfs line 3) has had an error
[2013-06-05T21:31:44+00:00] ERROR: cookbook_file[/etc/davfs2/davfs2.conf] (/var/cache/chef/cookbooks/jenkins/recipes/davfs.rb:3:in `from_file') had an error:
cookbook_file[/etc/davfs2/davfs2.conf] (jenkins::davfs line 3) had an error: Net::HTTPServerException: 403 "Forbidden"
If I restart chef at this point, it picks up where it left off just fine and continues.
This seems to indicate to me that there are some credentials used for communication with the chef server to download the cookbook_file, and that they timeout after a period of time. Obviously in the middle of the chef run, this is not optimal. Or maybe there's a way for me to continue a longer timeout of these credentials?