| 2017-05-17 07:01:40 |
Silvan Kaiser |
description |
Cinder change https://review.openstack.org/#/c/460640/12 updated the Nova client in Cinder (good). However this broke authentication of the assisted snapshot API usage in a few drivers (NFS, Quobyte, probably more). Log example at http://78.46.57.153:8081/refs-changes-40-460640-12/ :
2017-05-07 20:00:40.876 3080 DEBUG nova.osapi_compute.wsgi.server [req-f370f8a3-f32e-49f4-ac30-69a79604be0d - -] (3080) accepted ('127.0.0.1', 59626) server /usr/local/lib/python2.7/dist-packages/eventlet/wsgi.py:883
2017-05-07 20:00:40.951 3080 DEBUG nova.api.openstack.wsgi [req-82410317-b9ce-4049-ba59-b58f0ca3f5fc tempest-VolumesSnapshotTestJSON-1285119241 tempest-VolumesSnapshotTestJSON-1285119241] Action: 'create', calling method: <bound method AssistedVolumeSnapshotsController.create of <nova.api.openstack.compute.assisted_volume_snapshots.AssistedVolumeSnapshotsController object at 0x7ffb4f2cb410>>, body: {"snapshot": {"create_info": {"snapshot_id": "2d10862b-1719-4357-9e98-f2906f7c9958", "type": "qcow2", "new_file": "volume-cdac1fb9-6e97-4dec-a818-dca14046933e.2d10862b-1719-4357-9e98-f2906f7c9958"}, "volume_id": "cdac1fb9-6e97-4dec-a818-dca14046933e"}} _process_stack /opt/stack/nova/nova/api/openstack/wsgi.py:621
2017-05-07 20:00:40.954 3080 DEBUG nova.policy [req-82410317-b9ce-4049-ba59-b58f0ca3f5fc tempest-VolumesSnapshotTestJSON-1285119241 tempest-VolumesSnapshotTestJSON-1285119241] Policy check for os_compute_api:os-assisted-volume-snapshots:create failed with credentials {'service_roles': [], 'user_id': u'336c34bdc6e84ce9a850b69688da3366', 'roles': [u'Member'], 'user_domain_id': u'default', 'service_project_id': None, 'service_user_id': None, 'service_user_domain_id': None, 'service_project_domain_id': None, 'is_admin_project': True, 'is_admin': False, 'project_id': u'e6bd0e3ffb6f4bc5a64ec1c3806fa19e', 'project_domain_id': u'default'} authorize /opt/stack/nova/nova/policy.py:168
2017-05-07 20:00:40.955 3080 DEBUG nova.api.openstack.wsgi [req-82410317-b9ce-4049-ba59-b58f0ca3f5fc tempest-VolumesSnapshotTestJSON-1285119241 tempest-VolumesSnapshotTestJSON-1285119241] Returning 403 to user: Policy doesn't allow os_compute_api:os-assisted-volume-snapshots:create to be performed. __call__ /opt/stack/nova/nova/api/openstack/wsgi.py:1041
2017-05-07 20:00:40.964 3080 INFO nova.osapi_compute.wsgi.server [req-82410317-b9ce-4049-ba59-b58f0ca3f5fc tempest-VolumesSnapshotTestJSON-1285119241 tempest-VolumesSnapshotTestJSON-1285119241] 127.0.0.1 "POST /v2.1/os-assisted-volume-snapshots HTTP/1.1" status: 403 len: 486 time: 0.0866740
2017-05-07 20:00:41.195 3080 INFO nova.osapi_compute.wsgi.server [req-57b534cb-59fe-42b4-9920-378150d14cbe tempest-TestShelveInstance-619862968 tempest-TestShelveInstance-619862968] 127.0.0.1 "DELETE /v2.1/os-security-groups/f09f8262-202f-443f-b491-3b6e960254a5 HTTP/1.1" status: 202 len: 332 time: 0.4105690
2017-05-07 20:00:41.198 3079 DEBUG nova.osapi_compute.wsgi.server [req-b90f26 |
Cinder change https://review.openstack.org/#/c/460640/12 updated the Nova client in Cinder. However this broke authentication of the assisted snapshot API usage in a few drivers (NFS, Quobyte, probably more). Log example at http://78.46.57.153:8081/refs-changes-40-460640-12/ :
2017-05-07 20:00:40.876 3080 DEBUG nova.osapi_compute.wsgi.server [req-f370f8a3-f32e-49f4-ac30-69a79604be0d - -] (3080) accepted ('127.0.0.1', 59626) server /usr/local/lib/python2.7/dist-packages/eventlet/wsgi.py:883
2017-05-07 20:00:40.951 3080 DEBUG nova.api.openstack.wsgi [req-82410317-b9ce-4049-ba59-b58f0ca3f5fc tempest-VolumesSnapshotTestJSON-1285119241 tempest-VolumesSnapshotTestJSON-1285119241] Action: 'create', calling method: <bound method AssistedVolumeSnapshotsController.create of <nova.api.openstack.compute.assisted_volume_snapshots.AssistedVolumeSnapshotsController object at 0x7ffb4f2cb410>>, body: {"snapshot": {"create_info": {"snapshot_id": "2d10862b-1719-4357-9e98-f2906f7c9958", "type": "qcow2", "new_file": "volume-cdac1fb9-6e97-4dec-a818-dca14046933e.2d10862b-1719-4357-9e98-f2906f7c9958"}, "volume_id": "cdac1fb9-6e97-4dec-a818-dca14046933e"}} _process_stack /opt/stack/nova/nova/api/openstack/wsgi.py:621
2017-05-07 20:00:40.954 3080 DEBUG nova.policy [req-82410317-b9ce-4049-ba59-b58f0ca3f5fc tempest-VolumesSnapshotTestJSON-1285119241 tempest-VolumesSnapshotTestJSON-1285119241] Policy check for os_compute_api:os-assisted-volume-snapshots:create failed with credentials {'service_roles': [], 'user_id': u'336c34bdc6e84ce9a850b69688da3366', 'roles': [u'Member'], 'user_domain_id': u'default', 'service_project_id': None, 'service_user_id': None, 'service_user_domain_id': None, 'service_project_domain_id': None, 'is_admin_project': True, 'is_admin': False, 'project_id': u'e6bd0e3ffb6f4bc5a64ec1c3806fa19e', 'project_domain_id': u'default'} authorize /opt/stack/nova/nova/policy.py:168
2017-05-07 20:00:40.955 3080 DEBUG nova.api.openstack.wsgi [req-82410317-b9ce-4049-ba59-b58f0ca3f5fc tempest-VolumesSnapshotTestJSON-1285119241 tempest-VolumesSnapshotTestJSON-1285119241] Returning 403 to user: Policy doesn't allow os_compute_api:os-assisted-volume-snapshots:create to be performed. __call__ /opt/stack/nova/nova/api/openstack/wsgi.py:1041
2017-05-07 20:00:40.964 3080 INFO nova.osapi_compute.wsgi.server [req-82410317-b9ce-4049-ba59-b58f0ca3f5fc tempest-VolumesSnapshotTestJSON-1285119241 tempest-VolumesSnapshotTestJSON-1285119241] 127.0.0.1 "POST /v2.1/os-assisted-volume-snapshots HTTP/1.1" status: 403 len: 486 time: 0.0866740
2017-05-07 20:00:41.195 3080 INFO nova.osapi_compute.wsgi.server [req-57b534cb-59fe-42b4-9920-378150d14cbe tempest-TestShelveInstance-619862968 tempest-TestShelveInstance-619862968] 127.0.0.1 "DELETE /v2.1/os-security-groups/f09f8262-202f-443f-b491-3b6e960254a5 HTTP/1.1" status: 202 len: 332 time: 0.4105690
2017-05-07 20:00:41.198 3079 DEBUG nova.osapi_compute.wsgi.server [req-b90f26 |
|
