[JENKINS-76058] [REGRESSION] - "keyInfoData array empty" error when connecting to EC2 agents after updating sshd plugin to version 2.16.0-167.va_269f38cc024

[jenkins-infra-bot]

v2.15.0-161.vb_200831a_c15b_ works perfectly fine. Updating to 2.16.0-167.va_269f38cc024 results in the following error when trying to establish connection to new agent:

"Unable to check the server key Exception: java.lang.IllegalArgumentException: keyInfoData array empty"

Other information:

• Host Key Verification Strategy set to off

Full stack trace

java.lang.IllegalArgumentException: keyInfoData array empty
at PluginClassLoader for bouncycastle-api//org.bouncycastle.crypto.util.PublicKeyFactory.createKey(Unknown Source)
at PluginClassLoader for ec2//hudson.plugins.ec2.ssh.EC2SSHLauncher$ServerKeyVerifierImpl.verifyServerKey(EC2SSHLauncher.java:401)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.client.session.AbstractClientSession.checkKeys(AbstractClientSession.java:620)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.common.session.helpers.AbstractSession.handleKexMessage(AbstractSession.java:776)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.common.session.helpers.AbstractSession.doHandleMessage(AbstractSession.java:631)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.common.session.helpers.AbstractSession.lambda$handleMessage$0(AbstractSession.java:555)
at PluginClassLoader for mina-sshd-api-common//org.apache.sshd.common.util.threads.ThreadUtils.runAsInternal(ThreadUtils.java:68)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.common.session.helpers.AbstractSession.handleMessage(AbstractSession.java:554)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.common.session.helpers.AbstractSession.decode(AbstractSession.java:1738)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.common.session.helpers.AbstractSession.messageReceived(AbstractSession.java:515)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.common.session.helpers.AbstractSessionIoHandler.messageReceived(AbstractSessionIoHandler.java:76)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.mina.MinaService.messageReceived(MinaService.java:163)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.filterchain.DefaultIoFilterChain$TailFilter.messageReceived(DefaultIoFilterChain.java:1015)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:650)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.filterchain.DefaultIoFilterChain.access$1300(DefaultIoFilterChain.java:49)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.filterchain.DefaultIoFilterChain$EntryImpl$1.messageReceived(DefaultIoFilterChain.java:1128)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.filterchain.IoFilterAdapter.messageReceived(IoFilterAdapter.java:122)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:650)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.filterchain.DefaultIoFilterChain.fireMessageReceived(DefaultIoFilterChain.java:643)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.polling.AbstractPollingIoProcessor.read(AbstractPollingIoProcessor.java:539)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.polling.AbstractPollingIoProcessor.access$1200(AbstractPollingIoProcessor.java:68)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.process(AbstractPollingIoProcessor.java:1224)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.process(AbstractPollingIoProcessor.java:1213)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.run(AbstractPollingIoProcessor.java:683)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:64)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
at java.base/java.lang.Thread.run(Thread.java:1583)

---

Originally reported by patdunne, imported from: [REGRESSION] - "keyInfoData array empty" error when connecting to EC2 agents after updating sshd plugin to version 2.16.0-167.va_269f38cc024

• assignee: allan_burdajewicz
• status: In Review
• priority: Blocker
• component(s): ec2-plugin, mina-sshd-api-plugin
• label(s): regression
• resolution: Unresolved
• votes: 0
• watchers: 7
• imported: 2025-12-06

Raw content of original issue

v2.15.0-161.vb_200831a_c15b_ works perfectly fine. Updating to 2.16.0-167.va_269f38cc024 results in the following error when trying to establish connection to new agent:

"Unable to check the server key Exception: java.lang.IllegalArgumentException: keyInfoData array empty"

Other information:

	
Host Key Verification Strategy set to off



Full stack trace

java.lang.IllegalArgumentException: keyInfoData array empty
at PluginClassLoader for bouncycastle-api//org.bouncycastle.crypto.util.PublicKeyFactory.createKey(Unknown Source)
at PluginClassLoader for ec2//hudson.plugins.ec2.ssh.EC2SSHLauncher$ServerKeyVerifierImpl.verifyServerKey(EC2SSHLauncher.java:401)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.client.session.AbstractClientSession.checkKeys(AbstractClientSession.java:620)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.common.session.helpers.AbstractSession.handleKexMessage(AbstractSession.java:776)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.common.session.helpers.AbstractSession.doHandleMessage(AbstractSession.java:631)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.common.session.helpers.AbstractSession.lambda$handleMessage$0(AbstractSession.java:555)
at PluginClassLoader for mina-sshd-api-common//org.apache.sshd.common.util.threads.ThreadUtils.runAsInternal(ThreadUtils.java:68)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.common.session.helpers.AbstractSession.handleMessage(AbstractSession.java:554)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.common.session.helpers.AbstractSession.decode(AbstractSession.java:1738)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.common.session.helpers.AbstractSession.messageReceived(AbstractSession.java:515)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.common.session.helpers.AbstractSessionIoHandler.messageReceived(AbstractSessionIoHandler.java:76)
at PluginClassLoader for mina-sshd-api-core//org.apache.sshd.mina.MinaService.messageReceived(MinaService.java:163)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.filterchain.DefaultIoFilterChain$TailFilter.messageReceived(DefaultIoFilterChain.java:1015)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:650)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.filterchain.DefaultIoFilterChain.access$1300(DefaultIoFilterChain.java:49)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.filterchain.DefaultIoFilterChain$EntryImpl$1.messageReceived(DefaultIoFilterChain.java:1128)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.filterchain.IoFilterAdapter.messageReceived(IoFilterAdapter.java:122)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:650)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.filterchain.DefaultIoFilterChain.fireMessageReceived(DefaultIoFilterChain.java:643)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.polling.AbstractPollingIoProcessor.read(AbstractPollingIoProcessor.java:539)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.polling.AbstractPollingIoProcessor.access$1200(AbstractPollingIoProcessor.java:68)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.process(AbstractPollingIoProcessor.java:1224)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.process(AbstractPollingIoProcessor.java:1213)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.run(AbstractPollingIoProcessor.java:683)
at PluginClassLoader for mina-sshd-api-core//org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:64)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
at java.base/java.lang.Thread.run(Thread.java:1583)

environment

Jenkins - 2.516.2<br/>
EC2 Plugin - 2018.vc13c882e22db_<br/>
MinaSSHD - 2.16.0-167.va_269f38cc024

[jenkins-infra-bot]

jglick:

• Comment link
• Original comment link (no redirect)
• Raw content of original comment:

  If you have any idea how to reproduce this error from scratch, that would be valuable of course.
  
  
    
  
      
  
        ec2-plugin/src/main/java/hudson/plugins/ec2/ssh/EC2SSHLauncher.java
      
      
  
           Line 60
        in
        d60feba
      
    
    
  
      
  
  
          
  
            
  
            
   private static final Logger LOGGER = Logger.getLogger(EC2SSHLauncher.class.getName()); 
          
      
    
  
   seems to be getting a bogus PublicKey?
  
  

If you have any idea how to reproduce this error from scratch, that would be valuable of course.

ec2-plugin/src/main/java/hudson/plugins/ec2/ssh/EC2SSHLauncher.java

Line 60 in d60feba

private static final Logger LOGGER = Logger.getLogger(EC2SSHLauncher.class.getName());

seems to be getting a bogus PublicKey?

[jenkins-infra-bot]

jglick:

• Comment link
• Original comment link (no redirect)
• Raw content of original comment:

  I just set up an EKS cluster running 2.16.0-167 with an EC2 cloud configured to use hostKeyVerificationStrategy: CHECK_NEW_HARD and it worked fine. Also tried with hostKeyVerificationStrategy: OFF, as you seem to use, and that also worked fine.
  

I just set up an EKS cluster running 2.16.0-167 with an EC2 cloud configured to use hostKeyVerificationStrategy: CHECK_NEW_HARD and it worked fine. Also tried with hostKeyVerificationStrategy: OFF, as you seem to use, and that also worked fine.

[jenkins-infra-bot]

allan_burdajewicz:

• Comment link
• Original comment link (no redirect)
• Raw content of original comment:

  The verifier converts to an OpenSSH for the verifier strategies. I was not aware of this in EC2 plugin. Checking the related changes between 2.15.0 / 2.16.0, I found bugfix: fix cert auth failed bug apache/mina-sshd#660.. Will double check on this.
  
  The serverKey is not null. It is the getEncoded() that now produce a IAE. OpenSSHCertificateImpl has not changed and always returned an empty byte array: https://github.com/apache/mina-sshd/blob/sshd-2.16.0/sshd-common/src/main/java/org/apache/sshd/common/config/keys/OpenSshCertificateImpl.java#L193-L196. 
  
  Now maybe the change in bugfix: fix cert auth failed bug apache/mina-sshd#660 returns an OpenSSHCertificate that maybe it did not before.. I need to check on this more but I have a feeling that this is more about the EC2 plugin manipulation of the PublicKey rather than the  mina-sshd ?
  
  Regardless, there is  some kind of problem here that even if you set off the Host Key Verification strategy you are hitting this.
  

The verifier converts to an OpenSSH for the verifier strategies. I was not aware of this in EC2 plugin. Checking the related changes between 2.15.0 / 2.16.0, I found apache/mina-sshd#660.. Will double check on this.

The serverKey is not null. It is the getEncoded() that now produce a IAE. OpenSSHCertificateImpl has not changed and always returned an empty byte array: https://github.com/apache/mina-sshd/blob/sshd-2.16.0/sshd-common/src/main/java/org/apache/sshd/common/config/keys/OpenSshCertificateImpl.java#L193-L196.

Now maybe the change in apache/mina-sshd#660 returns an OpenSSHCertificate that maybe it did not before.. I need to check on this more but I have a feeling that this is more about the EC2 plugin manipulation of the PublicKey rather than the mina-sshd ?

Regardless, there is some kind of problem here that even if you set off the Host Key Verification strategy you are hitting this.

[jenkins-infra-bot]

patdunne:

• Comment link
• Original comment link (no redirect)
• Raw content of original comment:

  Thanks for looking into this so quickly. I'll see if there is any additional information I can scrape from my side in regards to this issue but as has been said the Host Key Verification strategy of off should result in this issue not being apparent.
  

Thanks for looking into this so quickly. I'll see if there is any additional information I can scrape from my side in regards to this issue but as has been said the Host Key Verification strategy of off should result in this issue not being apparent.

[jenkins-infra-bot]

allan_burdajewicz:

• Comment link
• Original comment link (no redirect)
• Raw content of original comment:

  [JENKINS-76058] Fix OpenSSH Certificate Hostkey handling + Improve verifier #1141 is in review. There is an incremental https://repo.jenkins-ci.org/incrementals/org/jenkins-ci/plugins/ec2/2023.vf486f9eece04/ available.
  

#1141 is in review. There is an incremental https://repo.jenkins-ci.org/incrementals/org/jenkins-ci/plugins/ec2/2023.vf486f9eece04/ available.

[jenkins-infra-bot]

patdunne:

• Comment link
• Original comment link (no redirect)
• Raw content of original comment:

  I've applied the incremental and it fixes the outlined issue. An existing agent that was running but the plugin was unable to connect to, connected after update. Appreciate the quick turnaround. However it does seem that the incremental build has a different bug where the presence of a subnet id and network-interface -> subnet id definition is causing the launch of an agent node to fail.
  
  I can create a bug against the incremental ec2 plugin? Or what's the correct protocol here? The stack trace is outlined below
  
  software.amazon.awssdk.services.ec2.model.Ec2Exception: Network interfaces and an instance-level subnet ID may not be specified on the same request (Service: Ec2, Status Code: 400, Request ID: fc80e23c-8838-485a-a16a-325f884d633a) (SDK Attempt Count: 1)
  at PluginClassLoader for aws-java-sdk2-ec2//software.amazon.awssdk.services.ec2.model.Ec2Exception$BuilderImpl.build(Ec2Exception.java:113)
  at PluginClassLoader for aws-java-sdk2-ec2//software.amazon.awssdk.services.ec2.model.Ec2Exception$BuilderImpl.build(Ec2Exception.java:61)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.utils.RetryableStageHelper.retryPolicyDisallowedRetryException(RetryableStageHelper.java:168)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.RetryableStage.execute(RetryableStage.java:73)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.RetryableStage.execute(RetryableStage.java:36)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.RequestPipelineBuilder$ComposingRequestPipelineStage.execute(RequestPipelineBuilder.java:206)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.StreamManagingStage.execute(StreamManagingStage.java:53)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.StreamManagingStage.execute(StreamManagingStage.java:35)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallTimeoutTrackingStage.executeWithTimer(ApiCallTimeoutTrackingStage.java:82)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallTimeoutTrackingStage.execute(ApiCallTimeoutTrackingStage.java:62)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallTimeoutTrackingStage.execute(ApiCallTimeoutTrackingStage.java:43)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallMetricCollectionStage.execute(ApiCallMetricCollectionStage.java:50)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallMetricCollectionStage.execute(ApiCallMetricCollectionStage.java:32)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.RequestPipelineBuilder$ComposingRequestPipelineStage.execute(RequestPipelineBuilder.java:206)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.RequestPipelineBuilder$ComposingRequestPipelineStage.execute(RequestPipelineBuilder.java:206)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.ExecutionFailureExceptionReportingStage.execute(ExecutionFailureExceptionReportingStage.java:37)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.ExecutionFailureExceptionReportingStage.execute(ExecutionFailureExceptionReportingStage.java:26)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.AmazonSyncHttpClient$RequestExecutionBuilderImpl.execute(AmazonSyncHttpClient.java:210)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.handler.BaseSyncClientHandler.invoke(BaseSyncClientHandler.java:103)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.handler.BaseSyncClientHandler.doExecute(BaseSyncClientHandler.java:173)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.handler.BaseSyncClientHandler.lambda$execute$1(BaseSyncClientHandler.java:80)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.handler.BaseSyncClientHandler.measureApiCallSuccess(BaseSyncClientHandler.java:182)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.handler.BaseSyncClientHandler.execute(BaseSyncClientHandler.java:74)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.client.handler.SdkSyncClientHandler.execute(SdkSyncClientHandler.java:45)
  at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.awscore.client.handler.AwsSyncClientHandler.execute(AwsSyncClientHandler.java:53)
  at PluginClassLoader for aws-java-sdk2-ec2//software.amazon.awssdk.services.ec2.DefaultEc2Client.runInstances(DefaultEc2Client.java:39192)
  at PluginClassLoader for ec2//hudson.plugins.ec2.SlaveTemplate.provisionOndemand(SlaveTemplate.java:2208)
  at PluginClassLoader for ec2//hudson.plugins.ec2.SlaveTemplate.provisionOndemand(SlaveTemplate.java:2128)
  at PluginClassLoader for ec2//hudson.plugins.ec2.SlaveTemplate.provision(SlaveTemplate.java:1887)
  at PluginClassLoader for ec2//hudson.plugins.ec2.EC2Cloud.getNewOrExistingAvailableSlave(EC2Cloud.java:1013)
  at PluginClassLoader for ec2//hudson.plugins.ec2.EC2Cloud.doProvision(EC2Cloud.java:684)
  at java.base/java.lang.invoke.MethodHandle.invokeWithArguments(MethodHandle.java:733)
  at org.kohsuke.stapler.Function$MethodFunction.invoke(Function.java:484)
  at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:497)
  at org.kohsuke.stapler.interceptor.RequirePOST$Processor.invoke(RequirePOST.java:79)
  at org.kohsuke.stapler.PreInvokeInterceptedFunction.invoke(PreInvokeInterceptedFunction.java:26)
  at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:218)
  at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:140)
  at org.kohsuke.stapler.MetaClass$12.doDispatch(MetaClass.java:686)
  at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:61)
  at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:800)
  at org.kohsuke.stapler.Stapler.invoke(Stapler.java:938)
  at org.kohsuke.stapler.MetaClass$10.dispatch(MetaClass.java:590)
  at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:800)
  at org.kohsuke.stapler.Stapler.invoke(Stapler.java:938)
  at org.kohsuke.stapler.MetaClass$2.doDispatch(MetaClass.java:244)
  at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:61)
  at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:800)
  at org.kohsuke.stapler.Stapler.invoke(Stapler.java:938)
  at org.kohsuke.stapler.Stapler.invoke(Stapler.java:721)
  at org.kohsuke.stapler.Stapler.service(Stapler.java:253)
  at Jenkins Main ClassLoader//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:587)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHolder.handle(ServletHolder.java:765)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1668)
  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:204)
  at PluginClassLoader for sse-gateway//org.jenkinsci.plugins.ssegateway.Endpoint$SSEListenChannelFilter.doFilter(Endpoint.java:248)
  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:201)
  at PluginClassLoader for metrics//jenkins.metrics.impl.MetricsFilter.doFilter(MetricsFilter.java:125)
  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:201)
  at jenkins.util.HttpServletFilter$1.doFilter(HttpServletFilter.java:77)
  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:201)
  at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:207)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)
  at jenkins.ErrorAttributeFilter.doFilter(ErrorAttributeFilter.java:29)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)
  at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:154)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)
  at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:94)
  at jenkins.security.AcegiSecurityExceptionFilter.doFilter(AcegiSecurityExceptionFilter.java:52)
  at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:99)
  at hudson.security.UnwrapSecurityExceptionFilter.doFilter(UnwrapSecurityExceptionFilter.java:54)
  at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:99)
  at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:125)
  at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:119)
  at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:99)
  at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:100)
  at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:99)
  at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:114)
  at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:105)
  at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:99)
  at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:235)
  at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:229)
  at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:99)
  at jenkins.security.BasicHeaderProcessor.doFilter(BasicHeaderProcessor.java:106)
  at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:99)
  at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:117)
  at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87)
  at hudson.security.HttpSessionContextIntegrationFilter2.doFilter(HttpSessionContextIntegrationFilter2.java:63)
  at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:99)
  at hudson.security.ChainedServletFilter2.doFilter(ChainedServletFilter2.java:111)
  at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:173)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)
  at org.kohsuke.stapler.UncaughtExceptionFilter.doFilter(UncaughtExceptionFilter.java:26)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)
  at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:86)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)
  at org.kohsuke.stapler.DiagnosticThreadNameFilter.doFilter(DiagnosticThreadNameFilter.java:31)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)
  at jenkins.security.SuspiciousRequestFilter.doFilter(SuspiciousRequestFilter.java:38)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler.doHandle(ServletHandler.java:526)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ScopedHandler.handle(ScopedHandler.java:127)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.security.SecurityHandler.handle(SecurityHandler.java:574)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.HandlerWrapper.handle(HandlerWrapper.java:124)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ScopedHandler.nextHandle(ScopedHandler.java:197)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.SessionHandler.doHandle(SessionHandler.java:612)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ScopedHandler.nextHandle(ScopedHandler.java:195)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ContextHandler.doHandle(ContextHandler.java:1045)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ScopedHandler.nextScope(ScopedHandler.java:164)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler.doScope(ServletHandler.java:483)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ScopedHandler.nextScope(ScopedHandler.java:162)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.SessionHandler.doScope(SessionHandler.java:589)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ScopedHandler.nextScope(ScopedHandler.java:162)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ContextHandler.doScope(ContextHandler.java:966)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ScopedHandler.handle(ScopedHandler.java:125)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ContextHandler.handle(ContextHandler.java:1719)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.HttpChannel$RequestDispatchable.dispatch(HttpChannel.java:1565)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.HttpChannel.dispatch(HttpChannel.java:724)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.HttpChannel.handle(HttpChannel.java:512)
  at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ContextHandler$CoreContextHandler$CoreToNestedHandler.handle(ContextHandler.java:3029)
  at Jenkins Main ClassLoader//org.eclipse.jetty.server.handler.ContextHandler.handle(ContextHandler.java:1071)
  at Jenkins Main ClassLoader//org.eclipse.jetty.server.handler.gzip.GzipHandler.handle(GzipHandler.java:611)
  at Jenkins Main ClassLoader//org.eclipse.jetty.server.Server.handle(Server.java:182)
  at Jenkins Main ClassLoader//org.eclipse.jetty.server.internal.HttpChannelState$HandlerInvoker.run(HttpChannelState.java:678)
  at Jenkins Main ClassLoader//org.eclipse.jetty.server.internal.HttpConnection.onFillable(HttpConnection.java:416)
  at Jenkins Main ClassLoader//org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:322)
  at Jenkins Main ClassLoader//org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:99)
  at Jenkins Main ClassLoader//org.eclipse.jetty.io.ssl.SslConnection$SslEndPoint.onFillable(SslConnection.java:575)
  at Jenkins Main ClassLoader//org.eclipse.jetty.io.ssl.SslConnection.onFillable(SslConnection.java:390)
  at Jenkins Main ClassLoader//org.eclipse.jetty.io.ssl.SslConnection$2.succeeded(SslConnection.java:150)
  at Jenkins Main ClassLoader//org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:99)
  at Jenkins Main ClassLoader//org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53)
  at Jenkins Main ClassLoader//org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:480)
  at Jenkins Main ClassLoader//org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:443)
  at Jenkins Main ClassLoader//org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:293)
  at Jenkins Main ClassLoader//org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.run(AdaptiveExecutionStrategy.java:201)
  at Jenkins Main ClassLoader//org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:311)
  at Jenkins Main ClassLoader//org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:981)
  at Jenkins Main ClassLoader//org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.doRunJob(QueuedThreadPool.java:1211)
  at Jenkins Main ClassLoader//org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1166)
  at java.base/java.lang.Thread.run(Thread.java:1583)
  

I've applied the incremental and it fixes the outlined issue. An existing agent that was running but the plugin was unable to connect to, connected after update. Appreciate the quick turnaround. However it does seem that the incremental build has a different bug where the presence of a subnet id and network-interface -> subnet id definition is causing the launch of an agent node to fail.

I can create a bug against the incremental ec2 plugin? Or what's the correct protocol here? The stack trace is outlined below

software.amazon.awssdk.services.ec2.model.Ec2Exception: Network interfaces and an instance-level subnet ID may not be specified on the same request (Service: Ec2, Status Code: 400, Request ID: fc80e23c-8838-485a-a16a-325f884d633a) (SDK Attempt Count: 1)
at PluginClassLoader for aws-java-sdk2-ec2//software.amazon.awssdk.services.ec2.model.Ec2Exception$BuilderImpl.build(Ec2Exception.java:113)
at PluginClassLoader for aws-java-sdk2-ec2//software.amazon.awssdk.services.ec2.model.Ec2Exception$BuilderImpl.build(Ec2Exception.java:61)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.utils.RetryableStageHelper.retryPolicyDisallowedRetryException(RetryableStageHelper.java:168)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.RetryableStage.execute(RetryableStage.java:73)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.RetryableStage.execute(RetryableStage.java:36)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.RequestPipelineBuilder$ComposingRequestPipelineStage.execute(RequestPipelineBuilder.java:206)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.StreamManagingStage.execute(StreamManagingStage.java:53)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.StreamManagingStage.execute(StreamManagingStage.java:35)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallTimeoutTrackingStage.executeWithTimer(ApiCallTimeoutTrackingStage.java:82)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallTimeoutTrackingStage.execute(ApiCallTimeoutTrackingStage.java:62)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallTimeoutTrackingStage.execute(ApiCallTimeoutTrackingStage.java:43)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallMetricCollectionStage.execute(ApiCallMetricCollectionStage.java:50)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.ApiCallMetricCollectionStage.execute(ApiCallMetricCollectionStage.java:32)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.RequestPipelineBuilder$ComposingRequestPipelineStage.execute(RequestPipelineBuilder.java:206)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.RequestPipelineBuilder$ComposingRequestPipelineStage.execute(RequestPipelineBuilder.java:206)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.ExecutionFailureExceptionReportingStage.execute(ExecutionFailureExceptionReportingStage.java:37)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.pipeline.stages.ExecutionFailureExceptionReportingStage.execute(ExecutionFailureExceptionReportingStage.java:26)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.http.AmazonSyncHttpClient$RequestExecutionBuilderImpl.execute(AmazonSyncHttpClient.java:210)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.handler.BaseSyncClientHandler.invoke(BaseSyncClientHandler.java:103)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.handler.BaseSyncClientHandler.doExecute(BaseSyncClientHandler.java:173)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.handler.BaseSyncClientHandler.lambda$execute$1(BaseSyncClientHandler.java:80)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.handler.BaseSyncClientHandler.measureApiCallSuccess(BaseSyncClientHandler.java:182)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.internal.handler.BaseSyncClientHandler.execute(BaseSyncClientHandler.java:74)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.core.client.handler.SdkSyncClientHandler.execute(SdkSyncClientHandler.java:45)
at PluginClassLoader for aws-java-sdk2-core//software.amazon.awssdk.awscore.client.handler.AwsSyncClientHandler.execute(AwsSyncClientHandler.java:53)
at PluginClassLoader for aws-java-sdk2-ec2//software.amazon.awssdk.services.ec2.DefaultEc2Client.runInstances(DefaultEc2Client.java:39192)
at PluginClassLoader for ec2//hudson.plugins.ec2.SlaveTemplate.provisionOndemand(SlaveTemplate.java:2208)
at PluginClassLoader for ec2//hudson.plugins.ec2.SlaveTemplate.provisionOndemand(SlaveTemplate.java:2128)
at PluginClassLoader for ec2//hudson.plugins.ec2.SlaveTemplate.provision(SlaveTemplate.java:1887)
at PluginClassLoader for ec2//hudson.plugins.ec2.EC2Cloud.getNewOrExistingAvailableSlave(EC2Cloud.java:1013)
at PluginClassLoader for ec2//hudson.plugins.ec2.EC2Cloud.doProvision(EC2Cloud.java:684)
at java.base/java.lang.invoke.MethodHandle.invokeWithArguments(MethodHandle.java:733)
at org.kohsuke.stapler.Function$MethodFunction.invoke(Function.java:484)
at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:497)
at org.kohsuke.stapler.interceptor.RequirePOST$Processor.invoke(RequirePOST.java:79)
at org.kohsuke.stapler.PreInvokeInterceptedFunction.invoke(PreInvokeInterceptedFunction.java:26)
at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:218)
at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:140)
at org.kohsuke.stapler.MetaClass$12.doDispatch(MetaClass.java:686)
at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:61)
at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:800)
at org.kohsuke.stapler.Stapler.invoke(Stapler.java:938)
at org.kohsuke.stapler.MetaClass$10.dispatch(MetaClass.java:590)
at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:800)
at org.kohsuke.stapler.Stapler.invoke(Stapler.java:938)
at org.kohsuke.stapler.MetaClass$2.doDispatch(MetaClass.java:244)
at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:61)
at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:800)
at org.kohsuke.stapler.Stapler.invoke(Stapler.java:938)
at org.kohsuke.stapler.Stapler.invoke(Stapler.java:721)
at org.kohsuke.stapler.Stapler.service(Stapler.java:253)
at Jenkins Main ClassLoader//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:587)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHolder.handle(ServletHolder.java:765)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1668)
at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:204)
at PluginClassLoader for sse-gateway//org.jenkinsci.plugins.ssegateway.Endpoint$SSEListenChannelFilter.doFilter(Endpoint.java:248)
at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:201)
at PluginClassLoader for metrics//jenkins.metrics.impl.MetricsFilter.doFilter(MetricsFilter.java:125)
at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:201)
at jenkins.util.HttpServletFilter$1.doFilter(HttpServletFilter.java:77)
at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:201)
at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:207)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)
at jenkins.ErrorAttributeFilter.doFilter(ErrorAttributeFilter.java:29)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)
at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:154)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)
at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:94)
at jenkins.security.AcegiSecurityExceptionFilter.doFilter(AcegiSecurityExceptionFilter.java:52)
at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:99)
at hudson.security.UnwrapSecurityExceptionFilter.doFilter(UnwrapSecurityExceptionFilter.java:54)
at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:99)
at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:125)
at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:119)
at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:99)
at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:100)
at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:99)
at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:114)
at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:105)
at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:99)
at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:235)
at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:229)
at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:99)
at jenkins.security.BasicHeaderProcessor.doFilter(BasicHeaderProcessor.java:106)
at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:99)
at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:117)
at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87)
at hudson.security.HttpSessionContextIntegrationFilter2.doFilter(HttpSessionContextIntegrationFilter2.java:63)
at hudson.security.ChainedServletFilter2$1.doFilter(ChainedServletFilter2.java:99)
at hudson.security.ChainedServletFilter2.doFilter(ChainedServletFilter2.java:111)
at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:173)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)
at org.kohsuke.stapler.UncaughtExceptionFilter.doFilter(UncaughtExceptionFilter.java:26)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)
at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:86)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)
at org.kohsuke.stapler.DiagnosticThreadNameFilter.doFilter(DiagnosticThreadNameFilter.java:31)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)
at jenkins.security.SuspiciousRequestFilter.doFilter(SuspiciousRequestFilter.java:38)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler.doHandle(ServletHandler.java:526)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ScopedHandler.handle(ScopedHandler.java:127)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.security.SecurityHandler.handle(SecurityHandler.java:574)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.HandlerWrapper.handle(HandlerWrapper.java:124)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ScopedHandler.nextHandle(ScopedHandler.java:197)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.SessionHandler.doHandle(SessionHandler.java:612)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ScopedHandler.nextHandle(ScopedHandler.java:195)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ContextHandler.doHandle(ContextHandler.java:1045)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ScopedHandler.nextScope(ScopedHandler.java:164)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.servlet.ServletHandler.doScope(ServletHandler.java:483)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ScopedHandler.nextScope(ScopedHandler.java:162)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.SessionHandler.doScope(SessionHandler.java:589)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ScopedHandler.nextScope(ScopedHandler.java:162)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ContextHandler.doScope(ContextHandler.java:966)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ScopedHandler.handle(ScopedHandler.java:125)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ContextHandler.handle(ContextHandler.java:1719)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.HttpChannel$RequestDispatchable.dispatch(HttpChannel.java:1565)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.HttpChannel.dispatch(HttpChannel.java:724)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.HttpChannel.handle(HttpChannel.java:512)
at Jenkins Main ClassLoader//org.eclipse.jetty.ee9.nested.ContextHandler$CoreContextHandler$CoreToNestedHandler.handle(ContextHandler.java:3029)
at Jenkins Main ClassLoader//org.eclipse.jetty.server.handler.ContextHandler.handle(ContextHandler.java:1071)
at Jenkins Main ClassLoader//org.eclipse.jetty.server.handler.gzip.GzipHandler.handle(GzipHandler.java:611)
at Jenkins Main ClassLoader//org.eclipse.jetty.server.Server.handle(Server.java:182)
at Jenkins Main ClassLoader//org.eclipse.jetty.server.internal.HttpChannelState$HandlerInvoker.run(HttpChannelState.java:678)
at Jenkins Main ClassLoader//org.eclipse.jetty.server.internal.HttpConnection.onFillable(HttpConnection.java:416)
at Jenkins Main ClassLoader//org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:322)
at Jenkins Main ClassLoader//org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:99)
at Jenkins Main ClassLoader//org.eclipse.jetty.io.ssl.SslConnection$SslEndPoint.onFillable(SslConnection.java:575)
at Jenkins Main ClassLoader//org.eclipse.jetty.io.ssl.SslConnection.onFillable(SslConnection.java:390)
at Jenkins Main ClassLoader//org.eclipse.jetty.io.ssl.SslConnection$2.succeeded(SslConnection.java:150)
at Jenkins Main ClassLoader//org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:99)
at Jenkins Main ClassLoader//org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53)
at Jenkins Main ClassLoader//org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:480)
at Jenkins Main ClassLoader//org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:443)
at Jenkins Main ClassLoader//org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:293)
at Jenkins Main ClassLoader//org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.run(AdaptiveExecutionStrategy.java:201)
at Jenkins Main ClassLoader//org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:311)
at Jenkins Main ClassLoader//org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:981)
at Jenkins Main ClassLoader//org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.doRunJob(QueuedThreadPool.java:1211)
at Jenkins Main ClassLoader//org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1166)
at java.base/java.lang.Thread.run(Thread.java:1583)

[jenkins-infra-bot]

jglick:

• Comment link
• Original comment link (no redirect)
• Raw content of original comment:

  The subnet exception sounds like an unrelated bug that should be filed separately, probably a regression from the fix of JENKINS-75002.
  

The subnet exception sounds like an unrelated bug that should be filed separately, probably a regression from the fix of JENKINS-75002.

[jenkins-infra-bot]

patdunne:

• Comment link
• Original comment link (no redirect)
• Raw content of original comment:

  https://issue-redirect.jenkins.io/issue/76068 created
  

https://issue-redirect.jenkins.io/issue/76068 created

[jenkins-infra-bot]

vwagh:

• Comment link
• Original comment link (no redirect)
• Raw content of original comment:

  FYI I've reverted my changes which is causing the issue 
  Revert "[JENKINS-75002] Removed associatePublicIp check for building the NW interface obj" #1143
  
  allan_burdajewicz Could you pls share the steps to reproduce? 
  
  Testing done
  
  	
  Build is green.
  	
  Added 2 new unit tests which checks for existence of the networkInterface object irrespective of allowedPublicIpAddress values.
  	
  Tried provisioning the EC2 instance with changes & its launching the instance in both cases.
  	
  
  		
  Checked Allow Public IP : It launches the EC2 instance & connect to it. ✅
  		
  Unchecked Allow Public IP ⚠️
  		
  
  			
  In localhost (Launch but not connects): it just launch the EC2 instance but do not connect ❌
  			
  On AWS cloud (Launch & connects): Where jenkin instance on AWS cloud, it launch as well connects to EC2 instance ✅
  		
  		
  	
  	
  
  
  I done simple testing with my fix as mentioned above [JENKINS-75002] Removed associatePublicIp check for building the NW interface obj #1138
  So need suggestions to avoid this regression 
  

FYI I've reverted my changes which is causing the issue 
#1143

allan_burdajewicz Could you pls share the steps to reproduce? 

Testing done

1. Build is green.
2. Added 2 new unit tests which checks for existence of the networkInterface object irrespective of allowedPublicIpAddress values.
3. Tried provisioning the EC2 instance with changes & its launching the instance in both cases.
   • Checked Allow Public IP : It launches the EC2 instance & connect to it. ✅
   • Unchecked Allow Public IP ⚠️
     • In localhost (Launch but not connects): it just launch the EC2 instance but do not connect ❌
     • On AWS cloud (Launch & connects): Where jenkin instance on AWS cloud, it launch as well connects to EC2 instance ✅

I done simple testing with my fix as mentioned above #1138
So need suggestions to avoid this regression 

[jenkins-infra-bot]

allan_burdajewicz:

• Comment link
• Original comment link (no redirect)
• Raw content of original comment:

  This caused a regression JENKINS-76068(https://issue-redirect.jenkins.io/issue/76083).
  vwagh For JENKINS-76068(https://issue-redirect.jenkins.io/issue/76068), I don't see the connection with the host key verifiers issue. Or is the host key verifier bug blocking you for the testing of JENKINS-76068(https://issue-redirect.jenkins.io/issue/76068)  ? I hadn't done manual testing as mentioned in the PR. I don't have EC2 environments ready so I need some time to do it. The PR [JENKINS-76083] Fix tests for SSH Verifiers + fix regression  #1146 should have the fix for the regression in the host key verifiers. Still undergoing manual testing.
  

This caused a regression JENKINS-76068(https://issue-redirect.jenkins.io/issue/76083).
vwagh For JENKINS-76068(https://issue-redirect.jenkins.io/issue/76068), I don't see the connection with the host key verifiers issue. Or is the host key verifier bug blocking you for the testing of JENKINS-76068(https://issue-redirect.jenkins.io/issue/76068) ? I hadn't done manual testing as mentioned in the PR. I don't have EC2 environments ready so I need some time to do it. The PR #1146 should have the fix for the regression in the host key verifiers. Still undergoing manual testing.