The error message appears when opening TAB page check volume consistency groups

Bug #1647932 reported by 李廷 on 2016-12-07
This bug affects 2 people
Affects Status Importance Assigned to Milestone

Bug Description

environmental information
[root@controller ~]# cinder --version
[root@controller ~]# openstack --version
openstack 2.2.0
[root@controller ~]# rpm -aq|grep hor

Operation steps:
Land openstack dashboard Management interface
Click menu:

Open TAB page check volume consistency groups
The error message appears on the interface is as follows:
Error: Unable to retrieve volume consistency groups.

李廷 (liting19840711) wrote :

Attachment is screenshot


tags: added: cinder
Michal Dulko (michal-dulko-f) wrote :

Can you provide cinder-api logs?

Sean McGinnis (sean-mcginnis) wrote :

CG tests have been passing, so there's a chance this is a Horizon bug.

李廷 (liting19840711) wrote :

A detailed log of API please see Appendix cinder

Eric Harney (eharney) wrote :

Please provide Horizon logs from when this failure occurs.

Changed in cinder:
status: New → Incomplete
李廷 (liting19840711) wrote :

/var/log/httpd/access_log - - [09/Dec/2016:09:20:37 +0800] "GET /dashboard/project/volumes/?tab=volumes_and_snapshots__cgroups_tab HTTP/1.1" 200 2167 "" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.36"


[Fri Dec 09 01:19:39.582197 2016] [:error] [pid 7129] Recoverable error: Policy doesn't allow consistencygroup:get_all to be performed. (HTTP 403) (Request-ID: req-05893c8c-4473-430c-bb8f-32a14672a5d5)

Changed in cinder:
status: Incomplete → New
wangxiyuan (wangxiyuan) wrote :

The action for consistencygroup is disabled by default using policy limit. You can see some cg actions like: "consistencygroup:get_all": "group:nobody" in the policy.json.
So if you want to use the consistencygroup function, please change the policy first.

李廷 (liting19840711) wrote :

Modify configuration:
Before change:
"Consistencygroup:get_all": "group:nobody"
After the change:
"Consistencygroup:get_all": "group:admin"
Use admin users to operate this menu,
Prompt error after changing configuration:
Unable to retrieve volume consistency Error: groups.

Jeff Zheng (jeffxyz) wrote :

Remove group:nobody to enable these APIs:

"consistencygroup:create": "",
"consistencygroup:delete": "",
"consistencygroup:update": "",
"consistencygroup:get": "",
"consistencygroup:get_all": "",
"consistencygroup:create_cgsnapshot" : "",
"consistencygroup:delete_cgsnapshot": "",
"consistencygroup:get_cgsnapshot": "",
"consistencygroup:get_all_cgsnapshots": "",

Restart Block Storage API service after changing policies.

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers