Hm I know I ve done this before but I m getting a 500 when t

Question

Hm I know I ve done this before but I m getting a 500 when trying to `fleetctl apply f `

Jason · Answer

Also this page <https github com kolide fleet blob master docs cli setup guide md> needs a small fix

Jason · Answer

it lists ```fleetctl get options gt options yaml```

Jason · Answer

when it should be ```fleetctl get config gt lt filename gt ```

Lucas Rodriguez · Answer

Hi Could you share us the full output when running `fleetctl apply f`

Lucas Rodriguez · Answer

gt Also this page needs a small fix That s the old repository This is the official fleet repository

Lucas Rodriguez · Answer

Apart from the docs in Github we have <https fleetdm com docs>

Jason · Answer

oh ha sorry about that Google messed me up there slightly smiling face

Jason · Answer

``` fleetctl apply f fleetconfig yml applying fleet config apply config received status 500 forbidden forbidden```

Jason · Answer

Thanks < Lucas Rodriguez>

Lucas Rodriguez · Answer

Also please share `fleetctl` s version If you get a 500 you could check `fleet serve` logs

Jason · Answer

``` fleetctl version fleetctl version 4 9 0 branch HEAD revision 3018ad0fb45f7f6422b3d12e6a9f4e17d1079420 build date 2022 01 22 build user runner go version go1 17 2```

Lucas Rodriguez · Answer

OK let us know if you can get `fleet serve` logs that correspond to the 500 anything with `level=error`

Jason · Answer

Ok will do

Lucas Rodriguez · Answer

`forbidden` generally means the user you are logged in as in `fleetctl` is not authorized to apply the config But the server logs should tell us what s really going on

Jason · Answer

hi < Lucas Rodriguez> I ve got this

Jason · Answer

``` component http err forbidden internal Missing authorization check level info path api v1 fleet config ts 2022 01 28T14 10 40 330143989Z ```

Jason · Answer

my config for fleetctl is using an API token and not username pw if that helps

Lucas Rodriguez · Answer

OK by grabbing the token from the UI and editing `~ fleet config`

Lucas Rodriguez · Answer

Also what s the `Role` of the account under My Account

Lucas Rodriguez · Answer

Are you able get config `fleetctl get config`

Jason · Answer

correct on the config file

Jason · Answer

My role is Admin

Jason · Answer

yes I can `get config` that s how I grabbed the config to edit now trying to upload the revised version

Lucas Rodriguez · Answer

OK could you share the config you are trying to apply please do redact any sensitive information We ll be trying to reproduce on our end

Jason · Answer

I can tell you exactly what I am doing it s very simply

Jason · Answer

I just want to change the host decorator

Jason · Answer

so I am dumping the config and changing one line

Jason · Answer

``` SELECT hostname AS hostname FROM system info ``` to

Jason · Answer

``` SELECT computer name AS hostname FROM system info ```

Lucas Rodriguez · Answer

OK that makes sense Will open a Github issue One last thing can you confirm the version of the fleet server is also 4 9 0

Jason · Answer

yes it is

Jason · Answer

I will try using a username pw in a minute to see if that fixes it

Lucas Rodriguez · Answer

gt component http err forbidden internal Missing authorization check level info path api v1 fleet config ts 2022 01 28T14 10 40 330143989Z Any other error logs around this to add to the Github issue

Lucas Rodriguez · Answer

Also you mentioned you were admin are you a global admin as in

Jason · Answer

checking now

Jason · Answer

it seems I also cannot create a new user probably same root case

Jason · Answer

oh nevermind that one was because of a duplicate email address

Lucas Rodriguez · Answer

gt Also you mentioned you were admin are you a global admin as in Under My Account

Lucas Rodriguez · Answer

My mistake you are probably running Fleet Free which doesn t have Teams support slightly smiling face

Lucas Rodriguez · Answer

Here it is <https github com fleetdm fleet issues 3913> feel free to add any extra information there

Jason · Answer

thx

Lucas Rodriguez · Answer

Like the error logs surrounding the Missing authorization check error

Jason · Answer

ok

Jason · Answer

also I created that local user

Jason · Answer

deleted my config file

Jason · Answer

and i can ```fleetctl login```

Jason · Answer

but when I get config it wants me to log in again

Jason · Answer

``` fleetctl get config Invalid session Please log in with fleetctl login```

Jason · Answer

running fleetctl on an m1 mac btw

Lucas Rodriguez · Answer

OK does `fleetctl login` run successfully

Jason · Answer

``` + Fleet login successful and context configured ```

Lucas Rodriguez · Answer

Could this be a mixture of running a local ` fleetctl` vs a system installed `fleetctl` without ` `

Jason · Answer

oh I m running it with

Jason · Answer

fleetctl xyz

Lucas Rodriguez · Answer

Ack

Jason · Answer

I should try it with linux maybe

Jason · Answer

m1 strangeness maybe haven t run into it yet but thats not to say it couldn t happen

Lucas Rodriguez · Answer

Could be added that to the issue

Lucas Rodriguez · Answer

You could inspect the `~ fleet config` file and check if the content makes sense

Lucas Rodriguez · Answer

that s what `fleetctl` uses sets

Lucas Rodriguez · Answer

E g in my test case ```contexts default address email token ```

Jason · Answer

yeah I checked that too seems fine

Jason · Answer

rootca is blank but it s a publicly trusted cert

Lucas Rodriguez · Answer

OK feel free to post any updates on the linked issue

Noah Talerman · Answer

Hey < Jason> were you able to resolve this issue

Jason · Answer

hi < Noah Talerman> I have not I ve been stuck on another on fire thing and have not had a chance

Lucas Rodriguez · Answer

< Jason> Whenever possible please attach the `config yml` you were trying to apply here or in with sensitive fields redacted We cannot seem to reproduce cc < Reed Haynes>

Jason · Answer

Thanks Lucas I am going to try once more and get back to you It s possible it was our WAF I will investigate