Rbac:R3.0-59-Some VM's going to error state if we crate multiple VM's as _member_
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
Juniper Openstack | Status tracked in Trunk | |||||
R3.0 |
Fix Committed
|
High
|
Deepinder Setia | |||
R3.1 |
Fix Committed
|
High
|
Deepinder Setia | |||
Trunk |
Fix Committed
|
High
|
Deepinder Setia |
Bug Description
VMs are created on tenant2 as user2-tenant2. But for one of the vm the the owner is service tenant. (own=0762bd818f
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_DEBUG]: VncApiError: rbac: +++ admin=no, u=user1-tenant2, r='_member_'
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_DEBUG]: VncApiError: rbac: +++ (R:e6739af1-
-416c-b484-
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_INFO]: VncApiStatsLog: api_stats = << operation_type = GET user = user1-tenant2 useragent = a5s8:/usr/
100 domain_name = default-domain project_name = tenant2 object_type = virtual_network response_
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_DEBUG]: VncApiError: rbac: u=user1-tenant2, r=[u'_member_'], o=instance-ips, op=R, rules=7, proj:b032829dca
ne
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_DEBUG]: VncApiError: Rule 1) fqname-to-id *:CRUD, (-1,False)
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_DEBUG]: VncApiError: Rule 2) id-to-fqname *:CRUD, (-1,False)
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_DEBUG]: VncApiError: Rule 3) useragent-kv *:CRUD, (-1,False)
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_DEBUG]: VncApiError: Rule 4) documentation *:R, (-1,False)
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_DEBUG]: VncApiError: Rule 5) / *:R, (-1,False)
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_DEBUG]: VncApiError: Rule 6) *.* role-test1:
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_DEBUG]: VncApiError: Rule 7) *.* _member_:CRUD, (0,True)
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_DEBUG]: VncApiError: rbac: +++ admin=no, u=user1-tenant2, r='_member_'
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_DEBUG]: VncApiError: rbac: --- (R:38323b6c-
mask=007 perms=700, (usr=b032829dca
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_NOTICE]: VncApiError: rbac: user1-tenant2 doesn't have read permission in tenant 0762bd818f904a6
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_DEBUG]: VncApiError: rbac: --- (R:f34a9ad2-
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_NOTICE]: VncApiError: rbac: user1-tenant2 doesn't have read permission in tenant 0762bd818f904a6
09/07/2016 03:21:15 PM [contrail-api]: __default__ [SYS_INFO]: VncApiStatsLog: api_stats = << operation_type = GET user = user1-tenant2 useragent = a5s8:/usr/
tags: | added: rbac |
summary: |
Rbac:R3.0-59-Some VM's going to error state if we crate multiple VM's + as _member_ |
information type: | Proprietary → Public |
Review in progress for https:/ /review. opencontrail. org/23990
Submitter: Deepinder Setia (<email address hidden>)