Bug 47414 - Prepare Google Apps for work 2.3
Prepare Google Apps for work 2.3
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Google Apps for Work
UCS 4.3
Other other
: P5 normal (vote)
: ---
Assigned To: Erik Damrose
Daniel Tröder
:
Depends on: 46438
Blocks:
  Show dependency treegraph
 
Reported: 2018-07-30 14:27 CEST by Erik Damrose
Modified: 2018-08-21 10:08 CEST (History)
2 users (show)

See Also:
What kind of report is it?: Release Management
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments
current new service account roles (42.11 KB, image/png)
2018-08-06 15:42 CEST, Daniel Tröder
Details
role selection (57.25 KB, image/png)
2018-08-08 15:56 CEST, Erik Damrose
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Erik Damrose univentionstaff 2018-07-30 14:27:28 CEST
After verifying bug #46438, an update to the google apps for work app should be released. This is the tracking bug for this task.
Comment 1 Erik Damrose univentionstaff 2018-07-30 14:31:52 CEST
Created 4.3/google-apps=2.3

With bug 46438 fixed, i also tested the installation and configuration via wizard on a DC Backup - it worked without additional requirements.

I edited the new app, new installations are now allowed on DC Backups.

I adjusted the readme update files.
Comment 2 Erik Damrose univentionstaff 2018-08-03 12:30:05 CEST
The preinst also used in the office365 app regarding an updated univention-saml package was also updated in the google app
Comment 3 Daniel Tröder univentionstaff 2018-08-06 15:42:44 CEST
Created attachment 9619 [details]
current new service account roles

The "Dienstkontonutzer" role is no more (picture in app: http://10.200.3.63/univention/management/modules/googleapps/new_service_account_de.png).

If you tell me which role must be used, I can update the screenshots (de + en).
Comment 4 Erik Damrose univentionstaff 2018-08-08 15:56:59 CEST
Created attachment 9624 [details]
role selection

https://cloud.google.com/iam/docs/service-accounts says

Rolle "Dienstkontonutzer"
Diese Rolle wurde eingestellt. Wenn Sie Vorgänge mit einem Dienstkonto ausführen müssen, verwenden Sie die Rolle Dienstkontobenutzer. Um gewissermaßen dieselben Berechtigungen wie für "Dienstkontonutzer" (Service Account Actor) zu erteilen, sollten Sie auch die Rolle Ersteller von Dienstkonto-Token zuweisen.

I selected the roles in the attached screenshot. Please recreate the images with your toolchain, thanks.
Comment 5 Daniel Tröder univentionstaff 2018-08-14 13:41:44 CEST
I had to also activate Project→Editor for it to work.
The screenshots have been updated.
The packages have been uploaded to the test appcenter.

[4.3] 2a7729f Bug #47414: update scerenshots

univention-google-apps (2.0.0-11)
Comment 6 Daniel Tröder univentionstaff 2018-08-15 14:49:26 CEST
root@ucs26:~# univention-upgrade --ignoreterm --ignoressh
--------------------------------------------------------------------------------
  5329 actions.upgrade                  18-08-15 12:30:43 [    INFO]: Going to upgrade Google Apps for Work Connector (2.3)
  5329 actions.upgrade                  18-08-15 12:30:47 [   DEBUG]: Calling prescript (preinst)
  5329 actions.upgrade                  18-08-15 12:31:10 [   DEBUG]: Calling /var/cache/univention-appcenter/appcenter-test.software-univention.de/4.3/google-apps_20180730140446.preinst --binddn uid=Administrator,cn=users,dc=uni,dc=dtr --bindpwdfile /tmp/tmp8u3V7r --error-file /tmp/tmpdKhprM --version 2.3 --old-version 2.2
  5329 actions.upgrade                  18-08-15 12:31:12 [   DEBUG]: /var/cache/univention-appcenter/appcenter-test.software-univention.de/4.3/google-apps_20180730140446.preinst returned with 1
  5329 actions.upgrade                  18-08-15 12:31:12 [CRITICAL]: Error: The package univention-saml on the DC Master (ucs26.uni.dtr) must at least be 5.0.4-26 before the app can be updated. Please update the DC Master to at least erratalevel 159.

  5329 actions.upgrade                  18-08-15 12:31:12 [CRITICAL]: Unable to upgrade google-apps. Aborting...
--------------------------------------------------------------------------------
root@ucs26:~# ucr set repository/online/server=http://updates-test.software-univention.de/ appcenter/index/verify=no update/secure_apt=no

root@ucs26:~# univention-upgrade --ignoreterm --ignoressh

OK: upgrade works
OK: errata-level-on-master-check workes
OK: manual functional test
Comment 7 Erik Damrose univentionstaff 2018-08-21 10:08:36 CEST
App Update released