I seem to be locked out of my GitHub tenant
# spicedb
v
I seem to be locked out of my GitHub tenant
j
I see the error that you're running into on prod
apparently your tenant has a link to an object definition that you've since removed
can you remember what the last schema change that you made before getting locked out was?
v
yes I think Bryana was doing this
she attempted to deploy a new version of the schema
and one relation is gone
but she mention the system prevented her from loading the schema
j
did it remove the
issue
object definition?
v
no, she removed
Repository.owner
. I think?
but there were relationships in the DB
Issue
. object definition is new
j
was a schema with
issue
ever successfully uploaded?
v
i think it may have not. Bryana mentions
zed
. says issue does not exist
j
ok, it's probably a race condition between our tenancy layer and the underlying spicedb
v
feel free to delete the tenant, we can recreate it, we have our schema persisted in a git repo
j
you can also just make more
I don't want to delete it just yet for forensic reasons
v
yeah that makes sense 👍🏻
can you indicate how to delete tenants via the UI tho? I have an old one that I didn't manage to delete
j
you can't yet
it's something we have to do manually, and we really don't do it for users very often
b
Hi! Thanks for looking into this 🥲
I guess I found a bug 😬
j
yep, the current way we handle tenancy on authzed.com is getting replaced in the not-too-distant future
b
`Error: rpc error: code = NotFound desc = Object Definition
github/issue
not found`
that's the error I get from the CLI
j
yep, and that's the error that the graphql resolver is getting as well
do you have the file that you tried to upload to the tenant that caused the problem?
b
sure, 1 sec
j
you can DM or send securely if need be
b
I'll DM you, no trade secrets y'all already figured out our entire permissions system and put it on youtube 😄
j
btw this shouldn't be a problem in spicedb since it can just directly enumerate the existing object definitions without the need for links like tenancy uses
v
with tenancy uses you refer to "references in the schema in the tenant"?
j
no i mean the isolation layer that we run between users and spicedb for authzed.com
v
ah got it 👍🏻
b
@User I DM'd you
j
thanks!
i'm going to try to fix the tenant by just removing the
issue
link
ok, see if you can see it again in the console
b
I can!
zed schema read
works
it does not have the issue object
it looks to be the old version
v
dang, and I just created another tenant
b
hehe
v
and the name is "GitHub" so I can't distinguish it from the other one 😅
Jake do you mind deleting
github2
? 🙏🏻
b
are we already the most annoying customers? lol
j
did you upload anything to it?
v
no, it's empty
j
ok one sec
the tenant should be gone
please don't make me do that again
v
sorry for the trouble Jake! Thanks for the help!
j
hi @User and @User, can you let us know if you were updating the schema from
zed
(or via an API call) or via the UI?
and/or were there any concurrent updates occurring?
3 Views