The error message appears when opening TAB page check volume consistency groups

Bug #1647932 reported by 李廷 on 2016-12-07
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Cinder
Undecided
Unassigned

Bug Description

environmental information
[root@controller ~]# cinder --version
1.6.0
[root@controller ~]# openstack --version
openstack 2.2.0
[root@controller ~]# rpm -aq|grep hor
python-django-horizon-9.0.1-1.el7.noarch

Operation steps:
Land openstack dashboard Management interface
Click menu:
projects——compute——Volumes

Open TAB page check volume consistency groups
The error message appears on the interface is as follows:
Error: Unable to retrieve volume consistency groups.

李廷 (liting19840711) wrote :

Attachment is screenshot

cinder-volume-consistency-groups.png

tags: added: cinder
Michal Dulko (michal-dulko-f) wrote :

Can you provide cinder-api logs?

Sean McGinnis (sean-mcginnis) wrote :

CG tests have been passing, so there's a chance this is a Horizon bug.

李廷 (liting19840711) wrote :

ok.
A detailed log of API please see Appendix cinder

Eric Harney (eharney) wrote :

Please provide Horizon logs from when this failure occurs.

Changed in cinder:
status: New → Incomplete
李廷 (liting19840711) wrote :

/var/log/httpd/access_log

10.200.80.51 - - [09/Dec/2016:09:20:37 +0800] "GET /dashboard/project/volumes/?tab=volumes_and_snapshots__cgroups_tab HTTP/1.1" 200 2167 "http://172.23.27.11/dashboard/project/volumes/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.36"

/var/log/httpd/error_log

[Fri Dec 09 01:19:39.582197 2016] [:error] [pid 7129] Recoverable error: Policy doesn't allow consistencygroup:get_all to be performed. (HTTP 403) (Request-ID: req-05893c8c-4473-430c-bb8f-32a14672a5d5)

Changed in cinder:
status: Incomplete → New
wangxiyuan (wangxiyuan) wrote :

The action for consistencygroup is disabled by default using policy limit. You can see some cg actions like: "consistencygroup:get_all": "group:nobody" in the policy.json.
So if you want to use the consistencygroup function, please change the policy first.

李廷 (liting19840711) wrote :

Modify configuration:
/etc/cinder/policy.json
Before change:
"Consistencygroup:get_all": "group:nobody"
After the change:
"Consistencygroup:get_all": "group:admin"
Use admin users to operate this menu,
Prompt error after changing configuration:
Unable to retrieve volume consistency Error: groups.

Jeff Zheng (jeffxyz) wrote :

Remove group:nobody to enable these APIs:

{
"consistencygroup:create": "",
"consistencygroup:delete": "",
"consistencygroup:update": "",
"consistencygroup:get": "",
"consistencygroup:get_all": "",
"consistencygroup:create_cgsnapshot" : "",
"consistencygroup:delete_cgsnapshot": "",
"consistencygroup:get_cgsnapshot": "",
"consistencygroup:get_all_cgsnapshots": "",
}

Restart Block Storage API service after changing policies.
https://docs.openstack.org/admin-guide/blockstorage-consistency-groups.html

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers