Group Based Policy

Create policy rule fails with APIC driver

Bug #1406049 reported by Sumit Naiksatam on 2014-12-28

This bug affects 2 people

Affects		Status	Importance	Assigned to	Milestone
	Group Based Policy	Invalid	Medium	Ivar Lazzaro	Group Based Policy next

Bug Description

2014-12-27 20:50:19.421 65893 DEBUG keystonemiddleware.auth_token [req-bd854d86-5d6d-41cb-86f6-a9b48a419399 ] Received request from user: user_id None, project_id None, roles None service: user_id None, project_id None, roles None __call__ /usr/local/lib/python2.7/dist-packages/keystonemiddleware/auth_token.py:821
2014-12-27 20:50:19.423 65893 DEBUG routes.middleware [req-db73a291-be42-48fb-a24c-58529b9691df ] Matched POST /grouppolicy/policy_rules.json __call__ /usr/local/lib/python2.7/dist-packages/routes/middleware.py:100
2014-12-27 20:50:19.423 65893 DEBUG routes.middleware [req-db73a291-be42-48fb-a24c-58529b9691df ] Route path: '/grouppolicy/policy_rules.:(format)', defaults: {'action': u'create', 'controller': <wsgify at 140126880274960 wrapping <function resource at 0x7f71d4f48d70>>} __call__ /usr/local/lib/python2.7/dist-packages/routes/middleware.py:102
2014-12-27 20:50:19.423 65893 DEBUG routes.middleware [req-db73a291-be42-48fb-a24c-58529b9691df ] Match dict: {'action': u'create', 'controller': <wsgify at 140126880274960 wrapping <function resource at 0x7f71d4f48d70>>, 'format': u'json'} __call__ /usr/local/lib/python2.7/dist-packages/routes/middleware.py:103
2014-12-27 20:50:19.425 65893 DEBUG neutron.api.v2.base [req-db73a291-be42-48fb-a24c-58529b9691df None] Request body: {u'policy_rule': {u'policy_actions': [u'a8045930-b18a-4d0b-bab6-4a216a5bc7ee'], u'policy_classifier_id': u'57c6d2a3-a88a-41c5-85cf-1cb23100bb19', u'name': u'ping-policy-rule'}} prepare_request_body /opt/stack/neutron/neutron/api/v2/base.py:582
2014-12-27 20:50:19.426 65893 DEBUG neutron.policy [req-db73a291-be42-48fb-a24c-58529b9691df None] Enforcing rules: ['create_policy_rule'] _build_match_rule /opt/stack/neutron/neutron/policy.py:221
2014-12-27 20:50:19.426 65893 DEBUG neutron.api.v2.base [req-db73a291-be42-48fb-a24c-58529b9691df None] Unknown quota resources ['policy_rule']. create /opt/stack/neutron/neutron/api/v2/base.py:411
2014-12-27 20:50:19.427 65893 DEBUG gbp.neutron.services.grouppolicy.plugin [req-db73a291-be42-48fb-a24c-58529b9691df None] gbp.neutron.services.grouppolicy.plugin.GroupPolicyPlugin method create_policy_rule called with arguments (<neutron.context.Context object at 0x7f71d475f0d0>,) {'policy_rule': {u'policy_rule': {u'name': u'ping-policy-rule', u'policy_actions': [u'a8045930-b18a-4d0b-bab6-4a216a5bc7ee'], 'tenant_id': u'126878f365134a179d15cbdca056b569', u'policy_classifier_id': u'57c6d2a3-a88a-41c5-85cf-1cb23100bb19', 'enabled': True, 'shared': False, 'description': ''}}} wrapper /opt/stack/neutron/neutron/common/log.py:33
2014-12-27 20:50:19.427 65893 DEBUG gbp.neutron.db.grouppolicy.group_policy_db [req-db73a291-be42-48fb-a24c-58529b9691df None] gbp.neutron.services.grouppolicy.plugin.GroupPolicyPlugin method create_policy_rule called with arguments (<neutron.context.Context object at 0x7f71d475f0d0>, {u'policy_rule': {u'name': u'ping-policy-rule', u'policy_actions': [u'a8045930-b18a-4d0b-bab6-4a216a5bc7ee'], 'tenant_id': u'126878f365134a179d15cbdca056b569', u'policy_classifier_id': u'57c6d2a3-a88a-41c5-85cf-1cb23100bb19', 'enabled': True, 'shared': False, 'description': ''}}) {} wrapper /opt/stack/neutron/neutron/common/log.py:33
2014-12-27 20:50:19.440 65893 DEBUG gbp.neutron.db.grouppolicy.group_policy_db [req-db73a291-be42-48fb-a24c-58529b9691df None] gbp.neutron.services.grouppolicy.plugin.GroupPolicyPlugin method get_policy_actions called with arguments (<neutron.context.Context object at 0x7f71d475f0d0>, {'id': [u'a8045930-b18a-4d0b-bab6-4a216a5bc7ee']}, None, None, None, None, False) {} wrapper /opt/stack/neutron/neutron/common/log.py:33
2014-12-27 20:50:19.442 65893 DEBUG gbp.neutron.db.grouppolicy.group_policy_db [req-db73a291-be42-48fb-a24c-58529b9691df None] gbp.neutron.services.grouppolicy.plugin.GroupPolicyPlugin method get_policy_classifiers called with arguments (<neutron.context.Context object at 0x7f71d475f0d0>, {'id': [u'57c6d2a3-a88a-41c5-85cf-1cb23100bb19']}, None, None, None, None, False) {} wrapper /opt/stack/neutron/neutron/common/log.py:33
2014-12-27 20:50:19.449 65893 DEBUG gbp.neutron.db.grouppolicy.group_policy_db [req-db73a291-be42-48fb-a24c-58529b9691df None] gbp.neutron.services.grouppolicy.plugin.GroupPolicyPlugin method get_policy_action called with arguments (<neutron.context.Context object at 0x7f71d475f0d0>, u'a8045930-b18a-4d0b-bab6-4a216a5bc7ee', None) {} wrapper /opt/stack/neutron/neutron/common/log.py:33
2014-12-27 20:50:19.453 65893 DEBUG gbp.neutron.db.grouppolicy.group_policy_db [req-db73a291-be42-48fb-a24c-58529b9691df None] gbp.neutron.services.grouppolicy.plugin.GroupPolicyPlugin method get_policy_classifier called with arguments (<neutron.context.Context object at 0x7f71d475f0d0>, u'57c6d2a3-a88a-41c5-85cf-1cb23100bb19', None) {} wrapper /opt/stack/neutron/neutron/common/log.py:33
2014-12-27 20:50:19.463 65893 DEBUG keystoneclient.session [req-db73a291-be42-48fb-a24c-58529b9691df ] REQ: curl -g -i -X GET http://10.199.0.115:35357/v2.0/tenants -H "User-Agent: python-keystoneclient" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}077c048863771732cca609aaa5962e945ea825f2" _http_log_request /usr/local/lib/python2.7/dist-packages/keystoneclient/session.py:171
2014-12-27 20:50:19.464 65893 DEBUG urllib3.util.retry [req-db73a291-be42-48fb-a24c-58529b9691df ] Converted retries value: 0 -> Retry(total=0, connect=None, read=None, redirect=0) from_int /usr/local/lib/python2.7/dist-packages/urllib3/util/retry.py:155
2014-12-27 20:50:19.464 65893 INFO urllib3.connectionpool [req-db73a291-be42-48fb-a24c-58529b9691df ] Starting new HTTP connection (1): 10.199.0.115
2014-12-27 20:50:19.495 65893 DEBUG urllib3.connectionpool [req-db73a291-be42-48fb-a24c-58529b9691df ] "GET /v2.0/tenants HTTP/1.1" 403 179 _make_request /usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py:368
2014-12-27 20:50:19.496 65893 DEBUG keystoneclient.session [req-db73a291-be42-48fb-a24c-58529b9691df ] RESP: _http_log_response /usr/local/lib/python2.7/dist-packages/keystoneclient/session.py:199
2014-12-27 20:50:19.496 65893 DEBUG keystoneclient.session [req-db73a291-be42-48fb-a24c-58529b9691df ] Request returned failure status: 403 request /usr/local/lib/python2.7/dist-packages/keystoneclient/session.py:362
2014-12-27 20:50:19.497 65893 ERROR apicapi.apic_mapper [req-db73a291-be42-48fb-a24c-58529b9691df None] Exception in looking up name tenant
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper Traceback (most recent call last):
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/apicapi/apic_mapper.py", line 88, in inner
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper name = func(inst, context, resource_id)
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/apicapi/apic_mapper.py", line 132, in tenant
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper for tenant in self.keystone.tenants.list():
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/keystoneclient/v2_0/tenants.py", line 123, in list
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper tenant_list = self._list('/tenants%s' % query, 'tenants')
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/keystoneclient/base.py", line 113, in _list
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper resp, body = self.client.get(url, **kwargs)
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/keystoneclient/adapter.py", line 130, in get
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper return self.request(url, 'GET', **kwargs)
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/keystoneclient/adapter.py", line 166, in request
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper resp = super(LegacyJsonAdapter, self).request(*args, **kwargs)
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/keystoneclient/adapter.py", line 89, in request
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper return self.session.request(url, method, **kwargs)
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/keystoneclient/utils.py", line 318, in inner
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper return func(*args, **kwargs)
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/keystoneclient/session.py", line 363, in request
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper raise exceptions.from_response(resp, method, url)
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper Forbidden: You are not authorized to perform the requested action: admin_required (Disable debug mode to suppress these details.) (HTTP 403)
2014-12-27 20:50:19.497 65893 TRACE apicapi.apic_mapper
2014-12-27 20:50:19.498 65893 ERROR gbp.neutron.services.grouppolicy.policy_driver_manager [req-db73a291-be42-48fb-a24c-58529b9691df None] Policy driver 'apic' failed in create_policy_rule_postcommit
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager Traceback (most recent call last):
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/opt/stack/gbp/gbp/neutron/services/grouppolicy/policy_driver_manager.py", line 119, in _call_on_drivers
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager getattr(driver.obj, method_name)(context)
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/opt/stack/gbp/gbp/neutron/services/grouppolicy/drivers/cisco/apic/apic_mapping.py", line 210, in create_policy_rule_postcommit
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager tenant = self._tenant_by_sharing_policy(context.current)
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/opt/stack/gbp/gbp/neutron/services/grouppolicy/drivers/cisco/apic/apic_mapping.py", line 1012, in _tenant_by_sharing_policy
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager return self.name_mapper.tenant(None, object['tenant_id'])
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/apicapi/apic_mapper.py", line 88, in inner
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager name = func(inst, context, resource_id)
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/apicapi/apic_mapper.py", line 132, in tenant
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager for tenant in self.keystone.tenants.list():
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/keystoneclient/v2_0/tenants.py", line 123, in list
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager tenant_list = self._list('/tenants%s' % query, 'tenants')
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/keystoneclient/base.py", line 113, in _list
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager resp, body = self.client.get(url, **kwargs)
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/keystoneclient/adapter.py", line 130, in get
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager return self.request(url, 'GET', **kwargs)
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/keystoneclient/adapter.py", line 166, in request
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager resp = super(LegacyJsonAdapter, self).request(*args, **kwargs)
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/keystoneclient/adapter.py", line 89, in request
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager return self.session.request(url, method, **kwargs)
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/keystoneclient/utils.py", line 318, in inner
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager return func(*args, **kwargs)
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/keystoneclient/session.py", line 363, in request
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager raise exceptions.from_response(resp, method, url)
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager Forbidden: You are not authorized to perform the requested action: admin_required (Disable debug mode to suppress these details.) (HTTP 403)
2014-12-27 20:50:19.498 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager
2014-12-27 20:50:19.499 65893 ERROR gbp.neutron.services.grouppolicy.plugin [req-db73a291-be42-48fb-a24c-58529b9691df None] policy_driver_manager.create_policy_rule_postcommit failed, deleting policy_rule 'df73ba3a-1274-4478-aec6-18d2052b6c99'
2014-12-27 20:50:19.499 65893 DEBUG gbp.neutron.services.grouppolicy.plugin [req-db73a291-be42-48fb-a24c-58529b9691df None] gbp.neutron.services.grouppolicy.plugin.GroupPolicyPlugin method delete_policy_rule called with arguments (<neutron.context.Context object at 0x7f71d475f0d0>, 'df73ba3a-1274-4478-aec6-18d2052b6c99') {} wrapper /opt/stack/neutron/neutron/common/log.py:33
2014-12-27 20:50:19.500 65893 DEBUG gbp.neutron.db.grouppolicy.group_policy_db [req-db73a291-be42-48fb-a24c-58529b9691df None] gbp.neutron.services.grouppolicy.plugin.GroupPolicyPlugin method get_policy_rule called with arguments (<neutron.context.Context object at 0x7f71d475f0d0>, 'df73ba3a-1274-4478-aec6-18d2052b6c99', None) {} wrapper /opt/stack/neutron/neutron/common/log.py:33
2014-12-27 20:50:19.507 65893 DEBUG gbp.neutron.services.grouppolicy.drivers.resource_mapping [req-db73a291-be42-48fb-a24c-58529b9691df None] gbp.neutron.services.grouppolicy.drivers.cisco.apic.apic_mapping.ApicMappingDriver method delete_policy_rule_precommit called with arguments (<gbp.neutron.services.grouppolicy.group_policy_context.PolicyRuleContext object at 0x7f71d477fbd0>,) {} wrapper /opt/stack/neutron/neutron/common/log.py:33
2014-12-27 20:50:19.508 65893 DEBUG gbp.neutron.db.grouppolicy.group_policy_db [req-db73a291-be42-48fb-a24c-58529b9691df None] gbp.neutron.services.grouppolicy.plugin.GroupPolicyPlugin method delete_policy_rule called with arguments (<neutron.context.Context object at 0x7f71d475f0d0>, 'df73ba3a-1274-4478-aec6-18d2052b6c99') {} wrapper /opt/stack/neutron/neutron/common/log.py:33
2014-12-27 20:50:19.517 65893 DEBUG keystoneclient.session [req-db73a291-be42-48fb-a24c-58529b9691df ] REQ: curl -g -i -X GET http://10.199.0.115:35357/v2.0/tenants -H "User-Agent: python-keystoneclient" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}077c048863771732cca609aaa5962e945ea825f2" _http_log_request /usr/local/lib/python2.7/dist-packages/keystoneclient/session.py:171
2014-12-27 20:50:19.518 65893 DEBUG urllib3.util.retry [req-db73a291-be42-48fb-a24c-58529b9691df ] Converted retries value: 0 -> Retry(total=0, connect=None, read=None, redirect=0) from_int /usr/local/lib/python2.7/dist-packages/urllib3/util/retry.py:155
2014-12-27 20:50:19.519 65893 INFO urllib3.connectionpool [req-db73a291-be42-48fb-a24c-58529b9691df ] Starting new HTTP connection (1): 10.199.0.115
2014-12-27 20:50:19.549 65893 DEBUG urllib3.connectionpool [req-db73a291-be42-48fb-a24c-58529b9691df ] "GET /v2.0/tenants HTTP/1.1" 403 179 _make_request /usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py:368
2014-12-27 20:50:19.549 65893 DEBUG keystoneclient.session [req-db73a291-be42-48fb-a24c-58529b9691df ] RESP: _http_log_response /usr/local/lib/python2.7/dist-packages/keystoneclient/session.py:199
2014-12-27 20:50:19.549 65893 DEBUG keystoneclient.session [req-db73a291-be42-48fb-a24c-58529b9691df ] Request returned failure status: 403 request /usr/local/lib/python2.7/dist-packages/keystoneclient/session.py:362
2014-12-27 20:50:19.550 65893 ERROR apicapi.apic_mapper [req-db73a291-be42-48fb-a24c-58529b9691df None] Exception in looking up name tenant
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper Traceback (most recent call last):
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/apicapi/apic_mapper.py", line 88, in inner
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper name = func(inst, context, resource_id)
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/apicapi/apic_mapper.py", line 132, in tenant
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper for tenant in self.keystone.tenants.list():
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/keystoneclient/v2_0/tenants.py", line 123, in list
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper tenant_list = self._list('/tenants%s' % query, 'tenants')
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/keystoneclient/base.py", line 113, in _list
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper resp, body = self.client.get(url, **kwargs)
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/keystoneclient/adapter.py", line 130, in get
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper return self.request(url, 'GET', **kwargs)
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/keystoneclient/adapter.py", line 166, in request
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper resp = super(LegacyJsonAdapter, self).request(*args, **kwargs)
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/keystoneclient/adapter.py", line 89, in request
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper return self.session.request(url, method, **kwargs)
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/keystoneclient/utils.py", line 318, in inner
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper return func(*args, **kwargs)
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper File "/usr/local/lib/python2.7/dist-packages/keystoneclient/session.py", line 363, in request
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper raise exceptions.from_response(resp, method, url)
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper Forbidden: You are not authorized to perform the requested action: admin_required (Disable debug mode to suppress these details.) (HTTP 403)
2014-12-27 20:50:19.550 65893 TRACE apicapi.apic_mapper
2014-12-27 20:50:19.550 65893 ERROR gbp.neutron.services.grouppolicy.policy_driver_manager [req-db73a291-be42-48fb-a24c-58529b9691df None] Policy driver 'apic' failed in delete_policy_rule_postcommit
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager Traceback (most recent call last):
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/opt/stack/gbp/gbp/neutron/services/grouppolicy/policy_driver_manager.py", line 119, in _call_on_drivers
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager getattr(driver.obj, method_name)(context)
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/opt/stack/gbp/gbp/neutron/services/grouppolicy/drivers/cisco/apic/apic_mapping.py", line 309, in delete_policy_rule_postcommit
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager tenant = self._tenant_by_sharing_policy(context.current)
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/opt/stack/gbp/gbp/neutron/services/grouppolicy/drivers/cisco/apic/apic_mapping.py", line 1012, in _tenant_by_sharing_policy
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager return self.name_mapper.tenant(None, object['tenant_id'])
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/apicapi/apic_mapper.py", line 88, in inner
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager name = func(inst, context, resource_id)
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/apicapi/apic_mapper.py", line 132, in tenant
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager for tenant in self.keystone.tenants.list():
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/keystoneclient/v2_0/tenants.py", line 123, in list
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager tenant_list = self._list('/tenants%s' % query, 'tenants')
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/keystoneclient/base.py", line 113, in _list
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager resp, body = self.client.get(url, **kwargs)
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/keystoneclient/adapter.py", line 130, in get
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager return self.request(url, 'GET', **kwargs)
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/keystoneclient/adapter.py", line 166, in request
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager resp = super(LegacyJsonAdapter, self).request(*args, **kwargs)
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/keystoneclient/adapter.py", line 89, in request
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager return self.session.request(url, method, **kwargs)
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/keystoneclient/utils.py", line 318, in inner
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager return func(*args, **kwargs)
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager File "/usr/local/lib/python2.7/dist-packages/keystoneclient/session.py", line 363, in request
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager raise exceptions.from_response(resp, method, url)
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager Forbidden: You are not authorized to perform the requested action: admin_required (Disable debug mode to suppress these details.) (HTTP 403)
2014-12-27 20:50:19.550 65893 TRACE gbp.neutron.services.grouppolicy.policy_driver_manager
2014-12-27 20:50:19.551 65893 ERROR gbp.neutron.services.grouppolicy.plugin [req-db73a291-be42-48fb-a24c-58529b9691df None] policy_driver_manager.delete_policy_rule_postcommit failed, deleting policy_rule 'df73ba3a-1274-4478-aec6-18d2052b6c99'
2014-12-27 20:50:19.552 65893 ERROR root [req-db73a291-be42-48fb-a24c-58529b9691df ] Original exception being dropped: ['Traceback (most recent call last):\n', ' File "/opt/stack/gbp/gbp/neutron/services/grouppolicy/plugin.py", line 951, in create_policy_rule\n policy_context)\n', ' File "/opt/stack/gbp/gbp/neutron/services/grouppolicy/policy_driver_manager.py", line 280, in create_policy_rule_postcommit\n self._call_on_drivers("create_policy_rule_postcommit", context)\n', ' File "/opt/stack/gbp/gbp/neutron/services/grouppolicy/policy_driver_manager.py", line 134, in _call_on_drivers\n method=method_name\n', 'GroupPolicyDriverError: create_policy_rule_postcommit failed.\n']
2014-12-27 20:50:19.552 65893 ERROR neutron.api.v2.resource [req-db73a291-be42-48fb-a24c-58529b9691df None] create failed
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource Traceback (most recent call last):
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource File "/opt/stack/neutron/neutron/api/v2/resource.py", line 87, in resource
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource result = method(request=request, **args)
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource File "/opt/stack/neutron/neutron/api/v2/base.py", line 448, in create
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource obj = obj_creator(request.context, **kwargs)
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource File "/opt/stack/neutron/neutron/common/log.py", line 34, in wrapper
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource return method(*args, **kwargs)
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource File "/opt/stack/gbp/gbp/neutron/services/grouppolicy/plugin.py", line 957, in create_policy_rule
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource self.delete_policy_rule(context, result['id'])
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource File "/opt/stack/neutron/neutron/common/log.py", line 34, in wrapper
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource return method(*args, **kwargs)
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource File "/opt/stack/gbp/gbp/neutron/services/grouppolicy/plugin.py", line 1003, in delete_policy_rule
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource " failed, deleting policy_rule '%s'"), id)
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource File "/opt/stack/neutron/neutron/openstack/common/excutils.py", line 82, in __exit__
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource six.reraise(self.type_, self.value, self.tb)
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource File "/opt/stack/gbp/gbp/neutron/services/grouppolicy/plugin.py", line 998, in delete_policy_rule
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource policy_context)
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource File "/opt/stack/gbp/gbp/neutron/services/grouppolicy/policy_driver_manager.py", line 293, in delete_policy_rule_postcommit
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource continue_on_failure=True)
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource File "/opt/stack/gbp/gbp/neutron/services/grouppolicy/policy_driver_manager.py", line 134, in _call_on_drivers
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource method=method_name
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource GroupPolicyDriverError: delete_policy_rule_postcommit failed.
2014-12-27 20:50:19.552 65893 TRACE neutron.api.v2.resource
2014-12-27 20:50:19.553 65893 INFO neutron.wsgi [req-db73a291-be42-48fb-a24c-58529b9691df None] 10.199.0.115 - - [27/Dec/2014 20:50:19] "POST /v2.0/grouppolicy/policy_rules.json HTTP/1.1" 500 327 0.134971

Sumit Naiksatam (snaiksat) on 2014-12-28

Changed in group-based-policy:
milestone:	none → juno-gbp-2
milestone:	juno-gbp-2 → juno-release

Sumit Naiksatam (snaiksat) on 2014-12-28

Changed in group-based-policy:
importance:	Critical → Medium

Sumit Naiksatam (snaiksat) on 2014-12-30

Changed in group-based-policy:
assignee:	Sumit Naiksatam (snaiksat) → Ivar Lazzaro (mmaleckk)

Revision history for this message

Sumit Naiksatam (snaiksat) wrote on 2014-12-30:

I workaround has been provided by changing the Neutron keystone user to be the admin (change in neutron.conf).

Sumit Naiksatam (snaiksat) on 2015-01-06

Changed in group-based-policy:
status:	Confirmed → Triaged
milestone:	2014.2rc2 → kilo-gbp-1

Sumit Naiksatam (snaiksat) on 2015-02-17

Changed in group-based-policy:
milestone:	kilo-gbp-1 → kilo-gbp-2

Sumit Naiksatam (snaiksat) on 2015-03-17

Changed in group-based-policy:
milestone:	kilo-gbp-2 → kilo-gbp-3

Sumit Naiksatam (snaiksat) on 2015-08-18

Changed in group-based-policy:
milestone:	kilo-gbp-3 → next

Revision history for this message

Ivar Lazzaro (mmaleckk) wrote on 2015-10-20:

Looks like admin_user and admin_password are not really referring to an admin tenant in the keyston_conf section of the neutron.conf file. Therefore Keystone is returning the error when trying to retrieve the tenant name:

Forbidden: You are not authorized to perform the requested action: admin_required (Disable debug mode to suppress these details.) (HTTP 403)

Revision history for this message

Ivar Lazzaro (mmaleckk) wrote on 2016-01-28:

This bug was solved as part of an change in APICAPI.

Sumit Naiksatam (snaiksat) on 2016-01-28

Changed in group-based-policy:
status:	Triaged → Invalid

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.