Bootstrap Failure When Accessing the users Data Bag in Chef SaaS or Chef 360
After migration to Chef SaaS / Chef 360, a bootstrap may fail during recipe compilation when a cookbook attempts to read a data bag named users. The failure occurs even when the Chef user can authenticate successfully and access other Chef Server resources such as cookbooks, roles, environments, and other data bags. The observed error is: ERROR: Failed to list data bag items in data bag: "users" Running knife data bag show users may also return: ERROR: You authenticated successfully to <chef_server_url> as <node_name> but you are not authorized for this action. Response: route is blocked This issue appears specific to the users data bag route and is not a general knife configuration, authentication, or Chef Server ACL issue.