Generic driver broken with glance enforcing RBAC defaults/scope

Bug #2031191 reported by Goutham Pacha Ravi
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Shared File Systems Service (Manila)
Fix Released
Medium
Goutham Pacha Ravi

Bug Description

Failure was observed in the CI since May 2023; when glance configuration in devstack was updated to enforce_scope and enforce_new_defaults by default: https://review.opendev.org/c/openstack/devstack/+/883601/

Steps to reproduce:

1) Create a devstack with the generic driver
2) Create share network, you could use the "private" network that's created by default on devstack
3) Create share with network

   openstack share create NFS 1 --share-type dhss_true --share-network share-net

You'll see the share transitions to "error" status. The generic driver fails to create a service VM (share server) for the share; the reason is because it is unable to list glance images:

Manila.conf: https://paste.openstack.org/show/bpJjDRpZZPPpq98NybCI/
Glance.conf: https://paste.openstack.org/show/blmcLnlaXWrQVjNXOv2F/
Generic driver manila share log: https://paste.openstack.org/show/bqMdG6TRkIfvhX4iQsOR/

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to manila-tempest-plugin (master)

Related fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/manila-tempest-plugin/+/891239

Vida Haririan (vhariria)
tags: added: driver generic
Vida Haririan (vhariria)
Changed in manila:
assignee: nobody → Goutham Pacha Ravi (gouthamr)
status: New → In Progress
milestone: none → bobcat-1
Revision history for this message
Vida Haririan (vhariria) wrote :
Changed in manila:
milestone: bobcat-1 → none
milestone: none → bobcat-rc1
Changed in manila:
importance: Undecided → Medium
Vida Haririan (vhariria)
tags: added: rbac
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to manila-tempest-plugin (master)

Reviewed: https://review.opendev.org/c/openstack/manila-tempest-plugin/+/891239
Committed: https://opendev.org/openstack/manila-tempest-plugin/commit/838733e183bc410b267a00eded2efd2cc2704225
Submitter: "Zuul (22348)"
Branch: master

commit 838733e183bc410b267a00eded2efd2cc2704225
Author: Goutham Pacha Ravi <email address hidden>
Date: Fri Aug 11 14:56:13 2023 -0700

    [CI] Disable glance RBAC enforcement in generic jobs

    We have a problem with glance's RBAC changes
    in the generic driver. Disable the enforcement temporarily
    while we explore a fix

    Related-Bug: #2031191
    Change-Id: Ia9c9eb4542c576e3e4d94334e62649abf3cb6faf
    Signed-off-by: Goutham Pacha Ravi <email address hidden>

Changed in manila:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.