Cinder netapp driver - Insufficient privileges gathering stats

[Jorge Martinez]

* Detailed bug description:

 Cinder-volume module is spamming the log /var/log/cinder/cinder-volume.log with these messages:

2017-03-16 07:36:30.013 5410 ERROR cinder.volume.drivers.netapp.dataontap.performance.perf_cmode [req-edbef337-f895-4997-8c9e-dc269b7a0d55 - - - - -] Could not get utilization counters from node ESJC-DSNT-SN01P
2017-03-16 07:36:30.013 5410 ERROR cinder.volume.drivers.netapp.dataontap.performance.perf_cmode Traceback (most recent call last):
2017-03-16 07:36:30.013 5410 ERROR cinder.volume.drivers.netapp.dataontap.performance.perf_cmode File "/usr/lib/python2.7/dist-packages/cinder/volume/drivers/netapp/dataontap/performance/
....
....
2017-03-16 07:36:30.013 5410 ERROR cinder.volume.drivers.netapp.dataontap.performance.perf_cmode raise NaApiError(code, msg)
2017-03-16 07:36:30.013 5410 ERROR cinder.volume.drivers.netapp.dataontap.performance.perf_cmode NaApiError: NetApp API failed. Reason - 13003:Insufficient privileges: user 'ost-jc2' does not have read access to this resource
2017-03-16 07:36:30.013 5410 ERROR cinder.volume.drivers.netapp.dataontap.performance.perf_cmode

* Steps to reproduce:

 - Configure NFS backend for cinder services on Mitaka (Mirantis 9.1) using cinder_netapp FUel plugin [2]

 - Create the netapp user required for this integration using netapp documentation [3]

 - Start cinder services

 [2] https://github.com/openstack/fuel-plugin-cinder-netapp

 [3] http://netapp.github.io/openstack-deploy-ops-guide/mitaka/content/cinder.fas.configuration.html#cinder.cdot.account_permissions

Expected results:

 No errors are show in the /var/log/cinder/cinder-volume.log

Actual result:

 Log /var/log/cinder/cinder-volume.log being spammed with previous indicated errors.

Reproducibility:

 No action is needed. Log display the error on a rate of 1 per minute.

Workaround:

 None

* Impact:

 Cinder volume log get full of improper error messages.

* Description of the environment:
- Operation system: Unbuntu 14.04 trusty (MOS 9.1)
- Versions of components: cinder versions 2:8.1.0-6~u14.04+mos14
- Reference architecture: cinder using NFS as backend (netapp driver)
- Network model: N/A
- Related projects installed: N/A

* Additional information:

 After reporting this problem to NetApp support, they said is a known bug and patch is now released [4]

 Problem is that the patch seems to apply only to Ocata, maybe nobody else report it with Mitaka yet.

[4] https://review.openstack.org/#/c/433251/1

[Fuel Devops McRobotson (fuel-devops-robot)]

Reviewed: https://review.fuel-infra.org/32377
Submitter: Pkgs Jenkins <email address hidden>
Branch: 10.0/newton

Commit: 5073b04bf31e59d57f43ec92a2a59d0f5455c6a6
Author: Jose Porrua <email address hidden>
Date: Tue Mar 28 14:23:50 2017

NetApp: Track SVM and Cluster scoped credentials

This fix avoids logging an exception when a user
chooses to use an SVM scoped account. cDOT
driver requires cluster scoped privileges to
gather backend statistics, performance
counters, etc. These APIs are not available for
SVM scoped credentials.

Change-Id: If2e3bae98db225ff0cfc9e868eaaeef088135562
Closes-Bug: #1673848
(cherry picked from commit 0f9b6e9ac2ddfd4f90b1a3a71ec46fa56008aaee)

[Fuel Devops McRobotson (fuel-devops-robot)]

Fix proposed to branch: 9.0/mitaka
Change author: Jose Porrua <email address hidden>
Review: https://review.fuel-infra.org/36303

[Fuel Devops McRobotson (fuel-devops-robot)]

Change abandoned by Max Yatsenko <email address hidden> on branch: 9.0/mitaka
Review: https://review.fuel-infra.org/36303

[Max Yatsenko (myatsenko)]

As this issue doesn't affect system functionality and it's not a blocker for component functioning this issue won't be fix.