← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1366861] [NEW] user unable to read flavor list without admin role

 

Public bug reported:

Hi,

I have created 20 VMs from a snapshot, each user login is associated to
an individual project and this project is added to the custom flavor i
have created, the requirement was to ensure these users don't see each
other's VMs, after launching the image the instances were accessible on
the launch of 20th VM it started throwing error at Instance view as
below

Error: Unable to retrieve instance size information.

On drill down of the instance: Error: Unable to retrieve details for
instance "77521784-86a1-40e0-a083-ad0b560779dc

below are the traces i found in Apache2 log, nova-api log and finally
keystone where it said the user needs Admin access to read the flavor
which is unusual as the project to which the user is associated is
already included in the flavor access list, this was reproducible after
creating 20th VM or later in different projects.

Apache Horizon error:
[Mon Sep 08 15:21:21.969164 2014] [:error] [pid 5945:tid 140202637772544] NotFound: The resource could not be found. (HTTP 404) (Request-ID: req-c10869e3-81ea-4f2a-b6c3-9026cceaf43e)


Nova-api:
2014-09-08 20:51:21.869 2643 INFO nova.osapi_compute.wsgi.server [req-a4cdad89-047e-4451-85ed-caff08efb5f7 3f1474d0b016486c869e488b048ef5bb ab48d34b800545019fae208a43d8c254] 172.31.100.103 "GET /v2/ab48d34b800545019fae208a43d8c254/flavors/detail HTTP/1.1" status: 200 len: 704 time: 0.0101700
2014-09-08 20:51:21.967 2643 INFO nova.api.openstack.wsgi [req-c10869e3-81ea-4f2a-b6c3-9026cceaf43e 3f1474d0b016486c869e488b048ef5bb ab48d34b800545019fae208a43d8c254] HTTP exception thrown: The resource could not be found.


Keystone error:
2014-09-08 20:41:45.346 46413 WARNING keystone.common.wsgi [-] You are not authorized to perform the requested action, admin_required.

** Affects: nova
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1366861

Title:
  user unable to read flavor list without admin role

Status in OpenStack Compute (Nova):
  New

Bug description:
  Hi,

  I have created 20 VMs from a snapshot, each user login is associated
  to an individual project and this project is added to the custom
  flavor i have created, the requirement was to ensure these users don't
  see each other's VMs, after launching the image the instances were
  accessible on the launch of 20th VM it started throwing error at
  Instance view as below

  Error: Unable to retrieve instance size information.

  On drill down of the instance: Error: Unable to retrieve details for
  instance "77521784-86a1-40e0-a083-ad0b560779dc

  below are the traces i found in Apache2 log, nova-api log and finally
  keystone where it said the user needs Admin access to read the flavor
  which is unusual as the project to which the user is associated is
  already included in the flavor access list, this was reproducible
  after creating 20th VM or later in different projects.

  Apache Horizon error:
  [Mon Sep 08 15:21:21.969164 2014] [:error] [pid 5945:tid 140202637772544] NotFound: The resource could not be found. (HTTP 404) (Request-ID: req-c10869e3-81ea-4f2a-b6c3-9026cceaf43e)

  
  Nova-api:
  2014-09-08 20:51:21.869 2643 INFO nova.osapi_compute.wsgi.server [req-a4cdad89-047e-4451-85ed-caff08efb5f7 3f1474d0b016486c869e488b048ef5bb ab48d34b800545019fae208a43d8c254] 172.31.100.103 "GET /v2/ab48d34b800545019fae208a43d8c254/flavors/detail HTTP/1.1" status: 200 len: 704 time: 0.0101700
  2014-09-08 20:51:21.967 2643 INFO nova.api.openstack.wsgi [req-c10869e3-81ea-4f2a-b6c3-9026cceaf43e 3f1474d0b016486c869e488b048ef5bb ab48d34b800545019fae208a43d8c254] HTTP exception thrown: The resource could not be found.

  
  Keystone error:
  2014-09-08 20:41:45.346 46413 WARNING keystone.common.wsgi [-] You are not authorized to perform the requested action, admin_required.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1366861/+subscriptions


Follow ups

References