yahoo-eng-team team mailing list archive

[Esha Seth <eshaseth@xxxxxxxxxx>]

Public bug reported:

There have been several changes in community in Newton on nova and
neutron client interactions. The interactions are not consistently using
admin context and credentials/token of nova user always instead
sometimes using the logged in user credentials. Due to this the
create_port is not getting allowed for non-admin users.

https://github.com/openstack/nova/blob/master/nova/network/neutronv2/api.py#L117-L137

# NOTE(dprince): In the case where no auth_token is present we allow use
of # neutron admin tenant credentials if it is an admin context. This is
to # support some services (metadata API) where an admin context is used
# without an auth token

** Affects: nova
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1608601

Title:
  create_port is failing for non admin context as Nova neutronclient
  interactions are not using admin context consistently

Status in OpenStack Compute (nova):
  New

Bug description:
  There have been several changes in community in Newton on nova and
  neutron client interactions. The interactions are not consistently
  using admin context and credentials/token of nova user always instead
  sometimes using the logged in user credentials. Due to this the
  create_port is not getting allowed for non-admin users.

  https://github.com/openstack/nova/blob/master/nova/network/neutronv2/api.py#L117-L137

  # NOTE(dprince): In the case where no auth_token is present we allow
  use of # neutron admin tenant credentials if it is an admin context.
  This is to # support some services (metadata API) where an admin
  context is used # without an auth token

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1608601/+subscriptions