glance client ignores --owner parameter when image-list is paginated

[George Shuklin]

Glance client accepts --owner as parameter, but ignores it (does not send to the server).

Steps to reproduce:

1. Create few images for different tenants
2. Configure environment for the administrator user
3. Request glance image-list --owner=tenant1_uuid

Expected behavior:
List of the images belonging to specified tenant.

Actual behavior:
List of all images.

Snippet from --debug output:

glance --debug image-list --owner=9a4fadf4481e40ad8ddf421a00d9d330
curl -i -X GET -H 'User-Agent: python-glanceclient' -H 'Content-Type: application/octet-stream' -H 'Accept-Encoding: gzip, deflate' -H 'Accept: */*' -H 'X-Auth-Token: ***' --cert None --key None https://lab.internal:9292/v1/images/detail?sort_key=name&sort_dir=asc&limit=20&is_public=None

glance --version
0.14.0

ii python-glanceclient 1:0.14.0-0ubuntu1~cloud0 all Client library for Openstack glance server.

[Ian Cordasco (icordasc)]

That's a fairly old version of glanceclient and not one that we actively support. Could you test against a more recent version please?

[George Shuklin (george-shuklin)]

Well, I will test against newer version, but this version is still supported by ubuntu as part of the cloud-archive project, AFAIK.

[Ian Cordasco (icordasc)]

Meaning this is still a problem George?

[Raga lahari (raga-lahari)]

I tested with glance client 0.15.0 and It works fine with the expected behaviour that's it lists the images belonging to specified tenant.

The behaviour as per implementation is it does not send the owner ID in the curl REST API request calls .
Instead in response it receives all images and filters based on owner parameter and lists only the specified tenant images.

[George Shuklin (george-shuklin)]

OK, than means that older version for juno/cloud-archive has a problem. It still supported and should be fixed.

[James Page (james-page)]

Policy prohibits me from pushing an entire new version of glanceclient into the Juno Cloud Archive; we need to identify a specific fix for this problem so that we can produce a stable update.

[James Page (james-page)]

Actually this does exist in 0.15.0 as well; but you only hit this problem if the image-list call gets paginated due to a large number of images.

I think it was fixed in https://github.com/openstack/python-glanceclient/commit/f98ab688eff8fff4bdb5f650da3516715d62f232 (included in 0.17.0) when the call to get the owner switched from pop -> get, ensuring that its left in the filters dictionary for subsequent calls.

[James Page (james-page)]

Confirmed for all supported Cloud Archive pockets apart from Liberty (which has the requested commit).

[George Shuklin (george-shuklin)]

BTW, it is a very annoying issue for operators: we have no way to see all images of the blocked/wiped tenant.