The error message appears when opening TAB page check volume consistency groups

[李廷]

environmental information
[root@controller ~]# cinder --version
1.6.0
[root@controller ~]# openstack --version
openstack 2.2.0
[root@controller ~]# rpm -aq|grep hor
python-django-horizon-9.0.1-1.el7.noarch

Operation steps:
Land openstack dashboard Management interface
Click menu：
projects——compute——Volumes

Open TAB page check volume consistency groups
The error message appears on the interface is as follows:
Error: Unable to retrieve volume consistency groups.

[李廷 (liting19840711)]

Attachment is screenshot

cinder-volume-consistency-groups.png

[Michal Dulko (michal-dulko-f)]

Can you provide cinder-api logs?

[Sean McGinnis (sean-mcginnis)]

CG tests have been passing, so there's a chance this is a Horizon bug.

[李廷 (liting19840711)]

ok.
A detailed log of API please see Appendix cinder

[Eric Harney (eharney)]

Please provide Horizon logs from when this failure occurs.

[李廷 (liting19840711)]

/var/log/httpd/access_log

10.200.80.51 - - [09/Dec/2016:09:20:37 +0800] "GET /dashboard/project/volumes/?tab=volumes_and_snapshots__cgroups_tab HTTP/1.1" 200 2167 "http://172.23.27.11/dashboard/project/volumes/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.36"

/var/log/httpd/error_log

[Fri Dec 09 01:19:39.582197 2016] [:error] [pid 7129] Recoverable error: Policy doesn't allow consistencygroup:get_all to be performed. (HTTP 403) (Request-ID: req-05893c8c-4473-430c-bb8f-32a14672a5d5)

[wangxiyuan (wangxiyuan)]

The action for consistencygroup is disabled by default using policy limit. You can see some cg actions like: "consistencygroup:get_all": "group:nobody" in the policy.json.
So if you want to use the consistencygroup function, please change the policy first.

[李廷 (liting19840711)]

Modify configuration:
/etc/cinder/policy.json
Before change:
"Consistencygroup:get_all": "group:nobody"
After the change:
"Consistencygroup:get_all": "group:admin"
Use admin users to operate this menu,
Prompt error after changing configuration:
Unable to retrieve volume consistency Error: groups.

[Jeff Zheng (jeffxyz)]

Remove group:nobody to enable these APIs:

{
"consistencygroup:create": "",
"consistencygroup:delete": "",
"consistencygroup:update": "",
"consistencygroup:get": "",
"consistencygroup:get_all": "",
"consistencygroup:create_cgsnapshot" : "",
"consistencygroup:delete_cgsnapshot": "",
"consistencygroup:get_cgsnapshot": "",
"consistencygroup:get_all_cgsnapshots": "",
}

Restart Block Storage API service after changing policies.
https://docs.openstack.org/admin-guide/blockstorage-consistency-groups.html