Correct Error message is not shown

[Ekaterina Chernova]

Try to create a volume by a regular user.
400 error is shown

But in logs there is info about forbidden action.

It will be good to show the actual reason to the user

2022-04-28 08:07:00.190799 2022-04-28 08:07:00.187 14 ERROR cinder.volume.volume_utils File "/var/lib/openstack/lib/python3.6/site-packages/castellan/key_manager/barbican_key_manager.py", line 260, in create_key
2022-04-28 08:07:00.190803 2022-04-28 08:07:00.187 14 ERROR cinder.volume.volume_utils raise exception.KeyManagerError(reason=e)
2022-04-28 08:07:00.190808 2022-04-28 08:07:00.187 14 ERROR cinder.volume.volume_utils castellan.common.exception.KeyManagerError: Key manager error: Forbidden: Order creation attempt not allowed - please review your user/project privileges
2022-04-28 08:07:00.190817 2022-04-28 08:07:00.187 14 ERROR cinder.volume.volume_utils
2022-04-28 08:07:00.190874
2022-04-28 08:07:00.205306 2022-04-28 08:07:00.203 14 WARNING cinder.volume.api [req-3a934586-4114-4b95-9115-cb537b036fc3 f0c4e4e360ad44c19f804c694302edda e15c062664c249d9a17866296e54c875 - default default] Task 'cinder.volume.flows.api.create_volume.ExtractVolumeRequestTask;volume:create' (c2ab30d9-f68b-4d82-80ed-85e547ba331c) transitioned into state 'FAILURE' from state 'RUNNING'
2022-04-28 08:07:00.205352 1 predecessors (most recent first):
2022-04-28 08:07:00.205356 Flow 'volume_create_api': cinder.exception.Invalid: Key manager error
2022-04-28 08:07:00.205360 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api Traceback (most recent call last):
2022-04-28 08:07:00.205364 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api File "/var/lib/openstack/lib/python3.6/site-packages/castellan/key_manager/barbican_key_manager.py", line 253, in create_key
2022-04-28 08:07:00.205368 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api order_ref = key_order.submit()
2022-04-28 08:07:00.205371 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/v1/orders.py", line 34, in wrapper
2022-04-28 08:07:00.205375 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api return func(self, *args)
2022-04-28 08:07:00.205378 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/v1/orders.py", line 236, in submit
2022-04-28 08:07:00.205382 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api response = self._api.post(self._entity, json=order_dict)
2022-04-28 08:07:00.205386 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/client.py", line 75, in post
2022-04-28 08:07:00.205390 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api return super(_HTTPClient, self).post(path, *args, **kwargs).json()
2022-04-28 08:07:00.205393 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api File "/var/lib/openstack/lib/python3.6/site-packages/keystoneauth1/adapter.py", line 401, in post
2022-04-28 08:07:00.205398 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api return self.request(url, 'POST', **kwargs)
2022-04-28 08:07:00.205401 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/client.py", line 63, in request
2022-04-28 08:07:00.205404 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api self._check_status_code(resp)
2022-04-28 08:07:00.205409 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/client.py", line 107, in _check_status_code
2022-04-28 08:07:00.205412 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api status
2022-04-28 08:07:00.205416 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api barbicanclient.exceptions.HTTPClientError: Forbidden: Order creation attempt not allowed - please review your user/project privileges
2022-04-28 08:07:00.205419 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
2022-04-28 08:07:00.205422 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api During handling of the above exception, another exception occurred:
2022-04-28 08:07:00.205425 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
2022-04-28 08:07:00.205428 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api Traceback (most recent call last):
2022-04-28 08:07:00.205431 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api File "/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/volume_utils.py", line 934, in create_encryption_key
2022-04-28 08:07:00.205435 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api length=length)
2022-04-28 08:07:00.205438 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api File "/var/lib/openstack/lib/python3.6/site-packages/castellan/key_manager/barbican_key_manager.py", line 260, in create_key
2022-04-28 08:07:00.205442 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api raise exception.KeyManagerError(reason=e)
2022-04-28 08:07:00.205446 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api castellan.common.exception.KeyManagerError: Key manager error: Forbidden: Order creation attempt not allowed - please review your user/project privileges
2022-04-28 08:07:00.205450 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
2022-04-28 08:07:00.205453 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api During handling of the above exception, another exception occurred:
2022-04-28 08:07:00.205456 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
2022-04-28 08:07:00.205525 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api Traceback (most recent call last):
2022-04-28 08:07:00.205529 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api File "/var/lib/openstack/lib/python3.6/site-packages/taskflow/engines/action_engine/executor.py", line 53, in _execute_task
2022-04-28 08:07:00.205532 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api result = task.execute(**arguments)
2022-04-28 08:07:00.205536 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api File "/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/flows/api/create_volume.py", line 429, in execute
2022-04-28 08:07:00.205540 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api image_meta) # new key id that's been cloned already
2022-04-28 08:07:00.205544 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api File "/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/flows/api/create_volume.py", line 348, in _get_encryption_key_id
2022-04-28 08:07:00.205548 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api volume_type_id)
2022-04-28 08:07:00.205551 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api File "/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/volume_utils.py", line 940, in create_encryption_key
2022-04-28 08:07:00.205555 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api raise exception.Invalid(message="Key manager error")
2022-04-28 08:07:00.205558 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api cinder.exception.Invalid: Key manager error
2022-04-28 08:07:00.205685 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api

[Akihiro Motoki (amotoki)]

It looks like a log from cinder.volume.api, but horizon does not call cinder.volume.api directly. Horizon talks with cinder via API. Horizon shows an error message returned from cinder API at least in the recent versions. I don't know which version of horizon you use, but if you use the recent versions you can see an error message from Cinder API.
Considering this I don't think it is a valid bug but am marking it as Incomplete to give time to the bug reporter to provider more information on the detail.

[Launchpad Janitor (janitor)]

[Expired for OpenStack Dashboard (Horizon) because there has been no activity for 60 days.]