yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #20655
[Bug 1366861] [NEW] user unable to read flavor list without admin role
Public bug reported:
Hi,
I have created 20 VMs from a snapshot, each user login is associated to
an individual project and this project is added to the custom flavor i
have created, the requirement was to ensure these users don't see each
other's VMs, after launching the image the instances were accessible on
the launch of 20th VM it started throwing error at Instance view as
below
Error: Unable to retrieve instance size information.
On drill down of the instance: Error: Unable to retrieve details for
instance "77521784-86a1-40e0-a083-ad0b560779dc
below are the traces i found in Apache2 log, nova-api log and finally
keystone where it said the user needs Admin access to read the flavor
which is unusual as the project to which the user is associated is
already included in the flavor access list, this was reproducible after
creating 20th VM or later in different projects.
Apache Horizon error:
[Mon Sep 08 15:21:21.969164 2014] [:error] [pid 5945:tid 140202637772544] NotFound: The resource could not be found. (HTTP 404) (Request-ID: req-c10869e3-81ea-4f2a-b6c3-9026cceaf43e)
Nova-api:
2014-09-08 20:51:21.869 2643 INFO nova.osapi_compute.wsgi.server [req-a4cdad89-047e-4451-85ed-caff08efb5f7 3f1474d0b016486c869e488b048ef5bb ab48d34b800545019fae208a43d8c254] 172.31.100.103 "GET /v2/ab48d34b800545019fae208a43d8c254/flavors/detail HTTP/1.1" status: 200 len: 704 time: 0.0101700
2014-09-08 20:51:21.967 2643 INFO nova.api.openstack.wsgi [req-c10869e3-81ea-4f2a-b6c3-9026cceaf43e 3f1474d0b016486c869e488b048ef5bb ab48d34b800545019fae208a43d8c254] HTTP exception thrown: The resource could not be found.
Keystone error:
2014-09-08 20:41:45.346 46413 WARNING keystone.common.wsgi [-] You are not authorized to perform the requested action, admin_required.
** Affects: nova
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1366861
Title:
user unable to read flavor list without admin role
Status in OpenStack Compute (Nova):
New
Bug description:
Hi,
I have created 20 VMs from a snapshot, each user login is associated
to an individual project and this project is added to the custom
flavor i have created, the requirement was to ensure these users don't
see each other's VMs, after launching the image the instances were
accessible on the launch of 20th VM it started throwing error at
Instance view as below
Error: Unable to retrieve instance size information.
On drill down of the instance: Error: Unable to retrieve details for
instance "77521784-86a1-40e0-a083-ad0b560779dc
below are the traces i found in Apache2 log, nova-api log and finally
keystone where it said the user needs Admin access to read the flavor
which is unusual as the project to which the user is associated is
already included in the flavor access list, this was reproducible
after creating 20th VM or later in different projects.
Apache Horizon error:
[Mon Sep 08 15:21:21.969164 2014] [:error] [pid 5945:tid 140202637772544] NotFound: The resource could not be found. (HTTP 404) (Request-ID: req-c10869e3-81ea-4f2a-b6c3-9026cceaf43e)
Nova-api:
2014-09-08 20:51:21.869 2643 INFO nova.osapi_compute.wsgi.server [req-a4cdad89-047e-4451-85ed-caff08efb5f7 3f1474d0b016486c869e488b048ef5bb ab48d34b800545019fae208a43d8c254] 172.31.100.103 "GET /v2/ab48d34b800545019fae208a43d8c254/flavors/detail HTTP/1.1" status: 200 len: 704 time: 0.0101700
2014-09-08 20:51:21.967 2643 INFO nova.api.openstack.wsgi [req-c10869e3-81ea-4f2a-b6c3-9026cceaf43e 3f1474d0b016486c869e488b048ef5bb ab48d34b800545019fae208a43d8c254] HTTP exception thrown: The resource could not be found.
Keystone error:
2014-09-08 20:41:45.346 46413 WARNING keystone.common.wsgi [-] You are not authorized to perform the requested action, admin_required.
To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1366861/+subscriptions
Follow ups
References