Comment 9 for bug 1963685

Revision history for this message
Alexander Litvinov (alitvinov) wrote (last edit ):

Facing this issue on fresh deployment of jammy/yoga, all octavia tests fail with the following traceback.

Subsribing ~field-high

octavia_tempest_plugin.tests.api.v2.test_pool.PoolAPITest.test_HTTPS_RR_pool_delete
-----------------------------------------------------------------------------------
Traceback (most recent call last):
  File "/home/ubuntu/snap/fcbtest/42/.rally/verification/verifier-d60afffa-8574-412b-8e38-a955ff090098/repo/tempest/test.py", line 168, in setUpClass
    raise value.with_traceback(trace)
  File "/home/ubuntu/snap/fcbtest/42/.rally/verification/verifier-d60afffa-8574-412b-8e38-a955ff090098/repo/tempest/test.py", line 153, in setUpClass
    cls.setup_credentials()
  File "/snap/fcbtest/42/lib/python3.10/site-packages/octavia_tempest_plugin/tests/test_base.py", line 154, in setup_credentials
    roles = cls.os_admin.role_assignments_client.list_role_assignments(
  File "/home/ubuntu/snap/fcbtest/42/.rally/verification/verifier-d60afffa-8574-412b-8e38-a955ff090098/repo/tempest/lib/services/identity/v3/role_assignments_client.py", line 46, in list_role_assignments
    resp, body = self.get(url)
  File "/home/ubuntu/snap/fcbtest/42/.rally/verification/verifier-d60afffa-8574-412b-8e38-a955ff090098/repo/tempest/lib/common/rest_client.py", line 314, in get
    return self.request('GET', url, extra_headers, headers)
  File "/home/ubuntu/snap/fcbtest/42/.rally/verification/verifier-d60afffa-8574-412b-8e38-a955ff090098/repo/tempest/lib/common/rest_client.py", line 720, in request
    self._error_checker(resp, resp_body)
  File "/home/ubuntu/snap/fcbtest/42/.rally/verification/verifier-d60afffa-8574-412b-8e38-a955ff090098/repo/tempest/lib/common/rest_client.py", line 821, in _error_checker
    raise exceptions.Forbidden(resp_body, resp=resp)
tempest.lib.exceptions.Forbidden: Forbidden
Details: {'code': 403, 'message': 'You are not authorized to perform the requested action: identity:list_role_assignments.', 'title': 'Forbidden'}

policy.json from keystone unit:
https://pastebin.canonical.com/p/MH5YwvX5dj/