Hi
Environment:
Kolla ansible, 2023.1
Kolla ansible, 2023.2
I tested this issue on both 2023.1 and 2023.2 envs.
Following command doesn't work until is added option show_multiple_locations = True to [DEFAULT] section of glance-api.conf :
openstack image create --os-volume-api-version 3.1 --disk-format raw --private --volume a6f4d3bb-3dcb-45c5-936e-1c54c5358871 test_from_vol_raw
In Cinder logs I get following errors (when there is no show_multiple_locations set to True) :
2024-05-02 17:21:07.910 23 INFO cinder.volume.manager [req-8aa582a0-d226-4c6e-85bb-02a8554d1325 req-f14bc7c2-b46e-4cd2-8591-d2c4767e09be 72c57ff9ef7d4086b0122fd0afbf0a6b a8c19c08cbb3426db352608e093e74ee - - - -] Created volume successfully.
2024-05-02 17:21:08.152 23 ERROR cinder.volume.manager [req-8aa582a0-d226-4c6e-85bb-02a8554d1325 req-f14bc7c2-b46e-4cd2-8591-d2c4767e09be 72c57ff9ef7d4086b0122fd0afbf0a6b a8c19c08cbb3426db352608e093e74ee - - - -] Upload volume to image encountered an error (image-id: 689a708d-9975-4d8c-960c-f5bb7fe128e1).: cinder.exception.ImageNotAuthorized: Not authorized for image 689a708d-9975-4d8c-960c-f5bb7fe128e1.
2024-05-02 17:21:08.153 23 INFO cinder.message.api [req-8aa582a0-d226-4c6e-85bb-02a8554d1325 req-f14bc7c2-b46e-4cd2-8591-d2c4767e09be 72c57ff9ef7d4086b0122fd0afbf0a6b a8c19c08cbb3426db352608e093e74ee - - - -] Creating message record for request_id = req-f14bc7c2-b46e-4cd2-8591-d2c4767e09be
2024-05-02 17:21:08.214 23 WARNING cinder.volume.manager [req-8aa582a0-d226-4c6e-85bb-02a8554d1325 req-f14bc7c2-b46e-4cd2-8591-d2c4767e09be 72c57ff9ef7d4086b0122fd0afbf0a6b a8c19c08cbb3426db352608e093e74ee - - - -] Deleting image in unexpected status: queued.: cinder.exception.ImageNotAuthorized: Not authorized for image 689a708d-9975-4d8c-960c-f5bb7fe128e1.
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server [req-8aa582a0-d226-4c6e-85bb-02a8554d1325 req-f14bc7c2-b46e-4cd2-8591-d2c4767e09be 72c57ff9ef7d4086b0122fd0afbf0a6b a8c19c08cbb3426db352608e093e74ee - - - -] Exception during message handling: cinder.exception.ImageNotAuthorized: Not authorized for image 689a708d-9975-4d8c-960c-f5bb7fe128e1.
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server Traceback (most recent call last):
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/cinder/image/glance.py", line 383, in add_location
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server return client.call(context, 'add_location',
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/cinder/image/glance.py", line 255, in call
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server return getattr(controller, method)(*args, **kwargs)
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/glanceclient/v2/images.py", line 503, in add_location
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server response = self._send_image_update_request(image_id, add_patch)
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/glanceclient/common/utils.py", line 649, in inner
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server return RequestIdProxy(wrapped(*args, **kwargs))
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/glanceclient/v2/images.py", line 483, in _send_image_update_request
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server resp, body = self.http_client.patch(url, headers=hdrs,
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/keystoneauth1/adapter.py", line 407, in patch
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server return self.request(url, 'PATCH', **kwargs)
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/glanceclient/common/http.py", line 380, in request
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server return self._handle_response(resp)
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/glanceclient/common/http.py", line 120, in _handle_response
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server raise exc.from_response(resp, resp.content)
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server glanceclient.exc.HTTPForbidden: HTTP 403 Forbidden: It's not allowed to add locations if locations are invisible.
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server During handling of the above exception, another exception occurred:
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server Traceback (most recent call last):
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/oslo_messaging/rpc/server.py", line 165, in _process_incoming
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server res = self.dispatcher.dispatch(message)
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/oslo_messaging/rpc/dispatcher.py", line 309, in dispatch
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server return self._do_dispatch(endpoint, method, ctxt, args)
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/oslo_messaging/rpc/dispatcher.py", line 229, in _do_dispatch
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server result = func(ctxt, **new_args)
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/cinder/volume/manager.py", line 1810, in copy_volume_to_image
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server with excutils.save_and_reraise_exception():
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/oslo_utils/excutils.py", line 227, in __exit__
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server self.force_reraise()
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/oslo_utils/excutils.py", line 200, in force_reraise
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server raise self.value
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/cinder/volume/manager.py", line 1784, in copy_volume_to_image
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server and self._clone_image_volume_and_add_location(
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/cinder/volume/manager.py", line 1739, in _clone_image_volume_and_add_location
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server image_registered = image_service.add_location(
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/cinder/image/glance.py", line 386, in add_location
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server _reraise_translated_image_exception(image_id)
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/cinder/image/glance.py", line 653, in _reraise_translated_image_exception
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server raise new_exc.with_traceback(exc_trace)
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/cinder/image/glance.py", line 383, in add_location
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server return client.call(context, 'add_location',
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/cinder/image/glance.py", line 255, in call
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server return getattr(controller, method)(*args, **kwargs)
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/glanceclient/v2/images.py", line 503, in add_location
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server response = self._send_image_update_request(image_id, add_patch)
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/glanceclient/common/utils.py", line 649, in inner
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server return RequestIdProxy(wrapped(*args, **kwargs))
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/glanceclient/v2/images.py", line 483, in _send_image_update_request
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server resp, body = self.http_client.patch(url, headers=hdrs,
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/keystoneauth1/adapter.py", line 407, in patch
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server return self.request(url, 'PATCH', **kwargs)
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/glanceclient/common/http.py", line 380, in request
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server return self._handle_response(resp)
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server File "/var/lib/kolla/venv/lib/python3.10/site-packages/glanceclient/common/http.py", line 120, in _handle_response
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server raise exc.from_response(resp, resp.content)
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server cinder.exception.ImageNotAuthorized: Not authorized for image 689a708d-9975-4d8c-960c-f5bb7fe128e1.
2024-05-02 17:21:08.330 23 ERROR oslo_messaging.rpc.server
based on very old note:
# This option is deprecated for removal since Newton.
# Its value may be silently ignored in the future.
# Reason: Use of this option, deprecated since Newton, is a security risk and
# will be removed once we figure out a way to satisfy those use cases that
# currently require it. An earlier announcement that the same functionality can
# be achieved with greater granularity by using policies is incorrect. You
# cannot work around this option via policy configuration at the present time,
# though that is the direction we believe the fix will take. Please keep an eye
# on the Glance release notes to stay up to date on progress in addressing this
# issue.
#show_multiple_locations = false
show_multiple_locations = True
this option shouldn't be used, and in default config this option isn't set.
Maybe I'm missing some other solution to this problem ? Is there any other setting which allows creating image from volume ?
Regards
Lukasz
