yahoo-eng-team team mailing list archive

[Adam Gandelman <1170156@xxxxxxxxxxxxxxxxxx>]

** Changed in: glance/grizzly
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1170156

Title:
  Forbidden 403 error while get public image from multitenant swift
  storage where object is chunked (larger than 5GB)

Status in OpenStack Image Registry and Delivery Service (Glance):
  Fix Released
Status in Glance grizzly series:
  Fix Released

Bug description:
  How to reproduce:
  1. Use multitenant swift store for glance.
  2. Create a public image larger than 5GB.
  3. Launch instance with this image from another tenant.

  How to fix:
  For chunked object not enough just ".r:*" acl permission for public image, we must also set ".rlistings" permission on container.

  Simple, in glance/store/swift.py (class MultiTenantStore, def set_acls),
  if public:
              headers['X-Container-Read'] = ".r:*,.rlistings"
   (may be, something this we must add for read_tenants acls)

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1170156/+subscriptions