Horizon Object storage dashboard "Error: Unable to fetch security policies"

Bug #2054130 reported by Roman Krček
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
kolla-ansible
New
Undecided
Unassigned

Bug Description

After enabling swift in globals.yml with enable_swift: "yes" the horizon Object storage dashboard fails to load with error "Error: Unable to fetch security policies"

When looking at horizon-error.log, I saw errors when horizon was fetching openstack_ip:8080/info. It returned 401: Unauthorized. The underlying python-swiftclient that horizon uses doesnt use authentication to retrieve data from the /info endpoint.

I traced this back to the fact, that swift_proxy_server is set up in way that endpoint openstack_ip:8080/info requires authentication.
The /info endpoint requires authentication because delay_auth_decision is by default set to False in proxy-server.conf Documentation mentions that when set to False, the public access (that the python-swiftclient expects) is broken. https://docs.openstack.org/swift/latest/overview_auth.html (see the first Note)

swift_delay_auth_decision is set to True when using the S3 API, however in the documentation it is not mentioned that its required to get Swift working. https://github.com/openstack/kolla-ansible/blob/master/ansible/roles/swift/defaults/main.yml#L63

Roman Krček (r-krcek)
summary: - swift_delay_auth_decision should be always True
+ Horizon swift dashboard error "Error: Unable to fetch security policies"
Roman Krček (r-krcek)
description: updated
summary: - Horizon swift dashboard error "Error: Unable to fetch security policies"
+ Horizon Object storage dashboard error "Error: Unable to fetch security
+ policies"
summary: - Horizon Object storage dashboard error "Error: Unable to fetch security
+ Horizon Object storage dashboard "Error: Unable to fetch security
policies"
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.