UI displays no nodes for administrators from 2024.1

Bug #2071454 reported by Andrew Bonney
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ironic UI
New
Undecided
Unassigned

Bug Description

Following the switch to 'enforce_scope' as part of oslo policy changes in 2024.1, the node list can no longer be displayed. I assume this is because a project scoped token is being used as opposed to a system scoped one.

When attempting to view the UI with a user which has an 'admin' role, the following error is seen in the Ironic API output:

Jun 28 10:49:13 infra1-ironic-api-container-cf0605d5 ironic-api-wsgi[410503]: 2024-06-28 10:49:13.846 410503 ERROR ironic.common.policy [None req-606ba5be-8271-4fce-84da-89ad8d537282 a9b6e2d3b0c84fb8b312d2a049b75c23 2c3f3452e0bf49e984ed1c8726211592 - - default default] Rejecting authorization: baremetal:node:list_all is disallowed by policy: oslo_policy.policy.PolicyNotAuthorized: baremetal:node:list_all is disallowed by policy

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.