Skip to content

Gitlab Mailroom container fails when using Azure Government Cloud Microsoft Graph.

Summary

Gitlab Mailroom container fails when using Azure Government Cloud Microsoft Graph.

Steps to reproduce

Installed the Helm

Configuration used

Used Helm Chart v6.11.2

     incomingEmail:
        address: git+%{key}@*******.com
        email: git@*********.com
        authToken:
          key: authToken
          secret: ""
        azureAdEndpoint: https://login.microsoftonline.us
        clientId: ********
        clientSecret:
          key: secret
          secret: microsoft-graph-secret
        deleteAfterDelivery: true
        deliveryMethod: sidekiq
        enabled: true
        expungeDeleted: false
        graphEndpoint: https://graph.microsoft.us
        #host: imap.gmail.com
        idleTimeout: 60
        inboxMethod: microsoft_graph
        logger:
          logPath: /dev/stdout
        mailbox: inbox
        #password:
        #  key: password
        #  secret: ""
        pollInterval: 60
        port: 993
        ssl: true
        startTls: false
        tenantId: ************
        user: "git.**********.com"`

Current behavior

(What you're experiencing happening) Gitlab Mailroom container fails when using Azure Government Cloud Microsoft Graph.

Expected behavior

Gitlab Mailroom container successfully starts and does not fail on cross cloud alignment issue.

Versions

  • Chart: 6.11.2
  • Platform:
    • Cloud: AKS
  • Kubernetes: (kubectl version)
    • Client:{Major:"1", Minor:"24", GitVersion:"v1.24.10", GitCommit:"5c1d2d4295f9b4eb12bfbf6429fdf989f2ca8a02", GitTreeState:"clean", BuildDate:"2023-01-18T19:15:31Z", GoVersion:"go1.19.5", Compiler:"gc", Platform:"darwin/arm64"}
    • Server:{Major:"1", Minor:"24", GitVersion:"v1.24.10", GitCommit:"5c1d2d4295f9b4eb12bfbf6429fdf989f2ca8a02", GitTreeState:"clean", BuildDate:"2023-01-27T22:54:20Z", GoVersion:"go1.19.5", Compiler:"gc", Platform:"linux/amd64"}
  • Helm: version.BuildInfo{Version:"v3.11.0", GitCommit:"472c5736ab01133de504a826bd9ee12cbe4e7904", GitTreeState:"clean", GoVersion:"go1.18.10"}

Relevant logs

Timestamp: 2023-05-09 22:49:49Z
{"error":"invalid_request","error_description":"AADSTS900382: Confidential Client is not supported in Cross Cloud request.\\r\\nTrace ID: 212b3976-c73e-4c3e-9f05-265b83049400\\r\\nCorrelation ID: 7a011d6f-81e5-46c5-a155-1907f173ce99\\r\\nTimestamp: 2023-05-09 22:49:49Z","error_codes":[900382],"timestamp":"2023-05-09 22:49:49Z","trace_id":"212b3976-c73e-4c3e-9f05-265b83049400","correlation_id":"7a011d6f-81e5-46c5-a155-1907f173ce99"}
	from /usr/lib/ruby/gems/2.7.0/gems/oauth2-1.4.9/lib/oauth2/client.rb:177:in `get_token'
	from /usr/lib/ruby/gems/2.7.0/gems/oauth2-1.4.9/lib/oauth2/strategy/client_credentials.rb:22:in `get_token'
	from /usr/lib/ruby/gems/2.7.0/gems/gitlab-mail_room-0.0.19/lib/mail_room/microsoft_graph/connection.rb:79:in `setup'
	from /usr/lib/ruby/gems/2.7.0/gems/gitlab-mail_room-0.0.19/lib/mail_room/microsoft_graph/connection.rb:21:in `initialize'
	from /usr/lib/ruby/gems/2.7.0/gems/gitlab-mail_room-0.0.19/lib/mail_room/mailbox_watcher.rb:69:in `new'
	from /usr/lib/ruby/gems/2.7.0/gems/gitlab-mail_room-0.0.19/lib/mail_room/mailbox_watcher.rb:69:in `connection'
	from /usr/lib/ruby/gems/2.7.0/gems/gitlab-mail_room-0.0.19/lib/mail_room/mailbox_watcher.rb:31:in `run'
	from /usr/lib/ruby/gems/2.7.0/gems/gitlab-mail_room-0.0.19/lib/mail_room/coordinator.rb:22:in `each'
	from /usr/lib/ruby/gems/2.7.0/gems/gitlab-mail_room-0.0.19/lib/mail_room/coordinator.rb:22:in `run'
	from /usr/lib/ruby/gems/2.7.0/gems/gitlab-mail_room-0.0.19/lib/mail_room/cli.rb:58:in `start'
	from /usr/lib/ruby/gems/2.7.0/gems/gitlab-mail_room-0.0.19/bin/mail_room:5:in `<top (required)>'
	from /usr/bin/mail_room:23:in `load'
	from /usr/bin/mail_room:23:in `<main>'
Edited by Jason Plum