{"action":"created","issue":{"url":"https://api.github.com/repos/F5Networks/f5-azure-arm-templates/issues/31","repository_url":"https://api.github.com/repos/F5Networks/f5-azure-arm-templates","labels_url":"https://api.github.com/repos/F5Networks/f5-azure-arm-templates/issues/31/labels{/name}","comments_url":"https://api.github.com/repos/F5Networks/f5-azure-arm-templates/issues/31/comments","events_url":"https://api.github.com/repos/F5Networks/f5-azure-arm-templates/issues/31/events","html_url":"https://github.com/F5Networks/f5-azure-arm-templates/issues/31","id":255138914,"number":31,"title":"[WAF Autoscale] Service Discovery iApp troubleshoot","user":{"login":"tkam8","id":19481266,"avatar_url":"https://avatars2.githubusercontent.com/u/19481266?v=4","gravatar_id":"","url":"https://api.github.com/users/tkam8","html_url":"https://github.com/tkam8","followers_url":"https://api.github.com/users/tkam8/followers","following_url":"https://api.github.com/users/tkam8/following{/other_user}","gists_url":"https://api.github.com/users/tkam8/gists{/gist_id}","starred_url":"https://api.github.com/users/tkam8/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tkam8/subscriptions","organizations_url":"https://api.github.com/users/tkam8/orgs","repos_url":"https://api.github.com/users/tkam8/repos","events_url":"https://api.github.com/users/tkam8/events{/privacy}","received_events_url":"https://api.github.com/users/tkam8/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2017-09-05T01:42:34Z","updated_at":"2017-09-06T22:30:16Z","closed_at":null,"author_association":"NONE","body":"## Description\r\nSeems that when the service principal contains a \"+\" char, TCL interprets that as a space causing authentication with Azure to fail. \r\n\r\n\r\n\r\n## Template\r\nhttps://github.com/F5Networks/f5-azure-arm-templates/tree/master/supported/solutions/autoscale/waf/existing_stack\r\n\r\n\r\n## Severity Level\r\n\r\nSeverity: 4\r\n\r\nSeverity level definitions:\r\n 1. **Severity 1 (Critical)** : Defect is causing systems to be offline and/or nonfunctional. immediate attention is required.\r\n 2. **Severity 2 (High)** : Defect is causing major obstruction of system operations.\r\n 3. **Severity 3 (Medium)** : Defect is causing intermittent errors in system operations.\r\n 4. **Severity 4 (Low)** : Defect is causing infrequent interuptions in system operations.\r\n 5. **Severity 5 (Trival)** : Defect is not causing any interuptions to system operations, but none-the-less is a bug.\r\n\r\n## Logs /var/log/restnoded/restnoded.log\r\n\r\nI obfuscated the secret and IDs but the secret looks very similar to how it originally was\r\n\r\n\r\nMon, 04 Sep 2017 15:15:52 GMT - fine: [CloudNodesWorker] onGet\r\nMon, 04 Sep 2017 15:15:52 GMT - fine: [CloudNodesWorker] using cloud azure\r\nMon, 04 Sep 2017 15:15:52 GMT - fine: Initializing cloud provider\r\nMon, 04 Sep 2017 15:15:52 GMT - finest: providerOptions: mgmtPort=8443, resourceGroup=WP-RG1, subscriptionId=1a1a1a1a-1a1a1a-1a1a-1a1a-1a1a1a1a, clientId=1a1a1a1a-1a1a-1a1a-1a1a-1a1a1a1a1a1a1a, tenantId=fd38e1e8-4f0a-4ac4-8865-3299689ba56d, secret=EE2EEEE bOeeeeeeek/8T0u8/9sdofijsSOdSikwQdOI=      <---plus sign is a space!!\r\n\r\n\r\nMon, 04 Sep 2017 15:15:52 GMT - severe: Error while getting nodes Error: Failed to acquire token for application with the provided secret. \r\nError: Get Token request returned http error: 401 and server response: {\"error\":\"invalid_client\",\"error_description\":\"AADSTS70002: Error validating credentials. AADSTS50012: Invalid client secret is provided.\\r\\nTrace ID: \r\n----snip----\r\n    at /config/cloud/node_modules/f5-cloud-libs/node_modules/f5-cloud-libs-azure/node_modules/ms-rest-azure/lib/credentials/applicationTokenCredentials.js:131:29\r\n    at /config/cloud/node_modules/f5-cloud-libs/node_modules/f5-cloud-libs-azure/node_modules/ms-rest-azure/node_modules/adal-node/lib/token-request.js:150:11\r\n    at Request._callback (/config/cloud/node_modules/f5-cloud-libs/node_modules/f5-cloud-libs-azure/node_modules/ms-rest-azure/node_modules/adal-node/lib/util.js:133:7)\r\n    at Request.self.callback (/config/cloud/node_modules/f5-cloud-libs/node_modules/f5-cloud-libs-azure/node_modules/ms-rest-azure/node_modules/adal-node/node_modules/request/request.js:188:22)\r\n    at emitTwo (events.js:87:13)\r\n    at Request.emit (events.js:172:7)\r\n    at Request.<anonymous> (/config/cloud/node_modules/f5-cloud-libs/node_modules/f5-cloud-libs-azure/node_modules/ms-rest-azure/node_modules/adal-node/node_modules/request/request.js:1171:10)\r\n    at emitOne (events.js:77:13)\r\n    at Request.emit (events.js:169:7)\r\n    at IncomingMessage.<anonymous> (/config/cloud/node_modules/f5-cloud-libs/node_modules/f5-cloud-libs-azure/node_modules/ms-rest-azure/node_modules/adal-node/node_modules/request/request.js:1091:12)\r\nMon, 04 Sep 2017 15:15:52 GMT - severe: [ErrorHandlingModule] RestOperation failed: \"/shared/cloud/nodes?memberAddressType=private&mgmtPort=8443&cloud=azure&memberTag=application%3Dwordpress&providerOptions=resourceGroup%3DWP-RG1%2C\r\n----snip----\r\n%2Csecret%EE2EEEE+bOeeeeeeek/8T0u8/9sdofijsSOdSikwQdOI=memberPort=80\".   <---the plus sign exists here tho\r\n"},"comment":{"url":"https://api.github.com/repos/F5Networks/f5-azure-arm-templates/issues/comments/327629958","html_url":"https://github.com/F5Networks/f5-azure-arm-templates/issues/31#issuecomment-327629958","issue_url":"https://api.github.com/repos/F5Networks/f5-azure-arm-templates/issues/31","id":327629958,"user":{"login":"jsevedge","id":17343485,"avatar_url":"https://avatars2.githubusercontent.com/u/17343485?v=4","gravatar_id":"","url":"https://api.github.com/users/jsevedge","html_url":"https://github.com/jsevedge","followers_url":"https://api.github.com/users/jsevedge/followers","following_url":"https://api.github.com/users/jsevedge/following{/other_user}","gists_url":"https://api.github.com/users/jsevedge/gists{/gist_id}","starred_url":"https://api.github.com/users/jsevedge/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jsevedge/subscriptions","organizations_url":"https://api.github.com/users/jsevedge/orgs","repos_url":"https://api.github.com/users/jsevedge/repos","events_url":"https://api.github.com/users/jsevedge/events{/privacy}","received_events_url":"https://api.github.com/users/jsevedge/received_events","type":"User","site_admin":false},"created_at":"2017-09-06T22:30:16Z","updated_at":"2017-09-06T22:30:16Z","author_association":"CONTRIBUTOR","body":"@tkam8 Thanks for bringing this to our attention, we are working on reproducing this and then getting it fixed within the service discovery iApp."}}
{"actor":{"display_login":"jsevedge"}}