yahoo-eng-team team mailing list archive

Thread
Date
[Bug 1517702] [NEW] create a rbac policy target_tenant_id=self, can not delete this policy

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: zhaobo <zhaobo6@xxxxxxxxxx>
Date: Thu, 19 Nov 2015 02:49:18 -0000
Reply-to: Bug 1517702 <1517702@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
Public bug reported:


I create a network use admin with just input the network name. I want to make this network just shared with myself. So I create a policy about  it.But after a period , I want to make this network to share to other tenants or delete this policy , it cannot work.

repo 
----------------
1. neutron net-create test1    with    admin tenant A
2. neutron rbac-create test --type network --action access_as_shared --target-tenant admin_tenant
3.neutron rbac-delete policy_id                  ------> hit error
4.neutron rbac-update policy_id  --target-tenant demo_tenant         ------> hit error  

So this policy cannot delete.

err_details
-----------------
2015-11-19 02:46:57.687 ERROR neutron.callbacks.manager [req-5300e9fd-518d-46d8-b168-4ff3ea8e11bc admin 5d73438ed76a4399b8d2996a699146c5] Error during notification for neutron.plugins.ml2.plugin.Ml2Plugin.validate_network_rbac_policy_change rbac-policy, before_update
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager Traceback (most recent call last):
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager   File "/opt/stack/neutron/neutron/callbacks/manager.py", line 141, in _notify_loop
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager     callback(resource, event, trigger, **kwargs)
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager   File "/opt/stack/neutron/neutron/db/db_base_plugin_v2.py", line 151, in validate_network_rbac_policy_change
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager     tenant_to_check)
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager   File "/opt/stack/neutron/neutron/db/db_base_plugin_v2.py", line 157, in ensure_no_tenant_ports_on_network
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager     ctx_admin = ctx.get_admin_context()
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager InvalidSharedSetting: Unable to reconfigure sharing settings for network d207350c-6d19-45fc-a3a4-2c70bf35a933. Multiple tenants are using it.
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager 
2015-11-19 02:46:57.687 ERROR neutron.callbacks.manager [req-5300e9fd-518d-46d8-b168-4ff3ea8e11bc admin 5d73438ed76a4399b8d2996a699146c5] Error during notification for neutron.plugins.ml2.plugin.Ml2Plugin.validate_network_rbac_policy_change rbac-policy, before_update
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager Traceback (most recent call last):
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager   File "/opt/stack/neutron/neutron/callbacks/manager.py", line 141, in _notify_loop
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager     callback(resource, event, trigger, **kwargs)
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager   File "/opt/stack/neutron/neutron/db/db_base_plugin_v2.py", line 151, in validate_network_rbac_policy_change
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager     tenant_to_check)
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager   File "/opt/stack/neutron/neutron/db/db_base_plugin_v2.py", line 157, in ensure_no_tenant_ports_on_network
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager     ctx_admin = ctx.get_admin_context()
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager InvalidSharedSetting: Unable to reconfigure sharing settings for network d207350c-6d19-45fc-a3a4-2c70bf35a933. Multiple tenants are using it.
2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager

** Affects: neutron
     Importance: Undecided
     Assignee: zhaobo (zhaobo6)
         Status: New

** Changed in: neutron
     Assignee: (unassigned) => zhaobo (zhaobo6)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1517702

Title:
  create a rbac policy target_tenant_id=self, can not delete this policy

Status in neutron:
  New

Bug description:
  
  I create a network use admin with just input the network name. I want to make this network just shared with myself. So I create a policy about  it.But after a period , I want to make this network to share to other tenants or delete this policy , it cannot work.

  repo 
  ----------------
  1. neutron net-create test1    with    admin tenant A
  2. neutron rbac-create test --type network --action access_as_shared --target-tenant admin_tenant
  3.neutron rbac-delete policy_id                  ------> hit error
  4.neutron rbac-update policy_id  --target-tenant demo_tenant         ------> hit error  

  So this policy cannot delete.

  err_details
  -----------------
  2015-11-19 02:46:57.687 ERROR neutron.callbacks.manager [req-5300e9fd-518d-46d8-b168-4ff3ea8e11bc admin 5d73438ed76a4399b8d2996a699146c5] Error during notification for neutron.plugins.ml2.plugin.Ml2Plugin.validate_network_rbac_policy_change rbac-policy, before_update
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager Traceback (most recent call last):
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager   File "/opt/stack/neutron/neutron/callbacks/manager.py", line 141, in _notify_loop
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager     callback(resource, event, trigger, **kwargs)
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager   File "/opt/stack/neutron/neutron/db/db_base_plugin_v2.py", line 151, in validate_network_rbac_policy_change
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager     tenant_to_check)
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager   File "/opt/stack/neutron/neutron/db/db_base_plugin_v2.py", line 157, in ensure_no_tenant_ports_on_network
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager     ctx_admin = ctx.get_admin_context()
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager InvalidSharedSetting: Unable to reconfigure sharing settings for network d207350c-6d19-45fc-a3a4-2c70bf35a933. Multiple tenants are using it.
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager 
  2015-11-19 02:46:57.687 ERROR neutron.callbacks.manager [req-5300e9fd-518d-46d8-b168-4ff3ea8e11bc admin 5d73438ed76a4399b8d2996a699146c5] Error during notification for neutron.plugins.ml2.plugin.Ml2Plugin.validate_network_rbac_policy_change rbac-policy, before_update
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager Traceback (most recent call last):
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager   File "/opt/stack/neutron/neutron/callbacks/manager.py", line 141, in _notify_loop
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager     callback(resource, event, trigger, **kwargs)
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager   File "/opt/stack/neutron/neutron/db/db_base_plugin_v2.py", line 151, in validate_network_rbac_policy_change
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager     tenant_to_check)
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager   File "/opt/stack/neutron/neutron/db/db_base_plugin_v2.py", line 157, in ensure_no_tenant_ports_on_network
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager     ctx_admin = ctx.get_admin_context()
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager InvalidSharedSetting: Unable to reconfigure sharing settings for network d207350c-6d19-45fc-a3a4-2c70bf35a933. Multiple tenants are using it.
  2015-11-19 02:46:57.687 TRACE neutron.callbacks.manager

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1517702/+subscriptions
Follow ups

[Bug 1517702] Re: create a rbac policy target_tenant_id=self, can not delete this policy
From: OpenStack Infra, 2017-04-17