Glusterfs create share from snapshot, "nfs.rpc-auth-allow" is not initialized

Bug #1943035 reported by Lin PeiWen
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Shared File Systems Service (Manila)
In Progress
Undecided
Carlos Eduardo

Bug Description

I created share from snapshot in the glusterfs driver, and the creation was successful. From the glusterfs volume, I found "nfs.rpc-auth-allow" = "10.0.0.1,all". The normal default is "all" because my manila share access rule is clean.

environment
==========
I am using Manila Master/Victoria version

Glusetrfs NFS drive

gluster version: glusterfs 8.2

Configuration:

glusterfs_ share_layout = layout_ volume. GlusterfsVolume MappedLayout
glusterfs_ nfs_server_type = Gluster

Steps to reproduce
==================

[root@controller ~]# manila access-allow 0908-001 ip 10.0.0.1
+------ ------- -+----- ------- ---- --- ------- -------- ----+
| Property | Value |
+------ ------- -+----- ------- ------- ------- -------- ----+
| ID card | c92e0b5d -a6be -4104-8eed-1a6ef96d0f eb |
| share_id | 7d7a8ed6- 5b9d-492d- a926-97117c68ff 4d |
| access_level | rw |
| access_to | 10.0.0.1 |
| Access type | ip |
| Status | queued_to_apply |
| access_key | None |
| created_at | 2021-09-08T11 :17: 55.000000 |
| Update time | None |
| Metadata | {} |
+------ ------- -+----- ------- ------- ------- -------- ----+

[root@controller ~]# manila access-list 0908-001
+------ ------- ------- ------- -----------+--- ------- ----+--- ------- ------+ ------- ------- +- ----- --+---- ------- -+----- ------- ------- ------- --+ ---- -------- +
| ID card | Access type | access_to | access_level | Status | access_key | created_at | Update time |
+------ ------- ------- ------- ------- ----+---- ------ -----+--- -------------+ ------- ------- +------ --+--- -------- -+------------ ------- ------- --+---- ------- -+
| c92e0b5d -a6be -4104-8eed-1a6ef96d0f eb | ip | 10.0.0.1 | rw | active | none | 2021-09-08T11 :17: 55.000000 | none |
+------ ------- ------- ------- ------- ----+---- ------ -----+--- ------- ------+ ------- ------- +------ --+--- -- ----- -+----- ------- -------------- --+---- ------- -+

#Manila snapshot creation --name= 0908-001- snap02 0908-001

# manila create --name 0908-001- snap02- clone06 --share-type glusterfs --snapshot-id deea91ea- 65e6-433e- a954-983ce57f6d 97 --availability-zone nova NFS 3
[root@controller ~]# manila shows 0908-lpw- 001-snap02- clone06
+------ ------- ------- ------- ------- ----- +- -------- ------ ------- ------- ------- ------- -------------- - ----- ---+
| Property | Value |
+------ ------- ------- -------------- -----+- -------- ------ ------- ------- -------------- ------- ------- - ----- ---+
| ID card | 6ce0c16c- 7d0b-4b6c- 97a3-07f1974869 4b |
| Dimensions | 3 |
| Availability_Region| Rising Star|
| created_at | 2021-09-08T12 :27: 45.000000 |
| Status | Available |
| Name | 0908-lpw- 001-snap02- clone06 |
| Description | None |
| project_id | 964f97eb3c04449 5874b08c5de2207 e8 |
| Snapshot_id | deea91ea- 65e6-433e- a954-983ce57f6d 97 |
| share_network_id | None |
| share_proto | NFS |
| Metadata | {} |
| Sharing type | a5a657df- b406-40d5- 8178-0895380657 eb |
| is_public | Error |
| Snapshot support | true |
| Task Status | None |
| Share type name | glusterfs |
| access_rules_status | Active |
| Copy Type | None |
| has_replicas | Error |
| User ID | 63a560d401fb41a dac0333ab6e5aec dd |
| CREATE_ share_from_ SNAPSHOT_ support| true|
| Revert to_snapshot_support | true|
| share_group_id | None |
| source_ share_group_ SNAPSHOT_ member_ ID | None |
| mount_snapshot_support | error |
| Progress | 100% |
| share_server_id | None |
| Host | Controller @glusterfsnfs1 # GLUSTERFSNFS1 |
| export_locations | |
| | id = 3d477ce4- 704c-4706- bcc5-3b51442a42 98 |
| | Path = 172.27. 144.47: / Manila-e7afb40e-6c2d-413a-bcab-45718d8c63 ed |
| | Preferred = false |
| | share_instance_id = e7afb40e- 6c2d-413a- bcab-45718d8c63 ed |
| | is_admin_only = false |
+------ ------- ------- ------- ------- -----+- -------- ------ ------- ------- ------- ------- ------- ------- - ----- ----+

# manila access-list 6ce0c16c-7d0b-4b6c-97a3-07f19748694b
+----+-------------+-----------+--------------+--- ----+------------+------------+------------+
| id | access_type | access_to | access_level | state | access_key | created_at | updated_at |
+----+-------------+-----------+--------------+--- ----+------------+------------+------------+
+----+-------------+-----------+--------------+--- ----+------------+------------+------------+

# gluster volume info manila-e7afb40e-6c2d-413a-bcab-45718d8c63ed

Volume name: manila- e7afb40e- 6c2d-413a- bcab-45718d8c63 ED
Type: Copy
Volume ID: 91f771bc-c908-4786- 95df-960714fca4 D5
Status: Originator
Number of snapshots: 0
The number of bricks: 1×3 = 3
Transmission type: tcp
Option reconfiguration:
user.manila- cloned- from: 983b689f- 9974-4d46- 808a-ab819027db 72
nfs.rpc -auth-reject: *
nfs.rpc-auth-allow: 10.0.0.1 ,all
user.manila-share: e7afb40e-6c2d-413a-bcab-45718d8c63ed

Lin PeiWen (linpeiwen)
description: updated
description: updated
description: updated
Changed in manila:
assignee: nobody → Lin PeiWen (linpeiwen)
Lin PeiWen (linpeiwen)
summary: - Glusterfs create share from snapshot, "nfs.rpc-auth-reject" is not
+ Glusterfs create share from snapshot, "nfs.rpc-auth-allow" is not
initialized
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to manila (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/manila/+/808011

Changed in manila:
status: New → In Progress
Vida Haririan (vhariria)
Changed in manila:
assignee: Lin PeiWen (linpeiwen) → Carlos Eduardo (silvacarlose)
Revision history for this message
Vida Haririan (vhariria) wrote :
Revision history for this message
Vida Haririan (vhariria) wrote :
Revision history for this message
Vida Haririan (vhariria) wrote :

See related comments in manila-dalmatian-m2-bugsquash ethercal https://ethercalc.net/o2qsmjpagsfb

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.