← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1770181] [NEW] Cannot create public image or update image to public

 

Public bug reported:

Using both the glance CLI or the OpenStack web UI, I cannot create an
image with public visibility nor can I update an image to have public
visibility.

Why am I provided with this option if I can never do it?
Why is it not allowed?
Why does the UI allow me to attempt the action and then provide an error message with no information about what the problem is?

If I attempt to do the action with glance `glance image-create --name
foo --visibility public ...` or `glance image-update --visibility public
...` it at least gives me a 403 forbidden.

The web UI just gives a generic "Error" message with no information.

>From searching around on the web, it looks like this feature has not
been available for maybe even 4 years! See: https://www.sebastien-
han.fr/blog/2014/10/30/openstack-glance-allow-user-to-create-public-
images/

This user seems to have run into this problem two years ago:
https://ask.openstack.org/en/question/96438/glance-public-image-
create-403-forbidden-you-are-not-authorized-to-complete-this-action-
http-403-error-in-openstack-mitaka/

I can only think this has never been tested as a non admin user, and
that perhaps something different happens when you have more permissions
than I have. Really, I want to be able to do this. But if I am not
allowed, I at least want to know why!

** Affects: horizon
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1770181

Title:
  Cannot create public image or update image to public

Status in OpenStack Dashboard (Horizon):
  New

Bug description:
  Using both the glance CLI or the OpenStack web UI, I cannot create an
  image with public visibility nor can I update an image to have public
  visibility.

  Why am I provided with this option if I can never do it?
  Why is it not allowed?
  Why does the UI allow me to attempt the action and then provide an error message with no information about what the problem is?

  If I attempt to do the action with glance `glance image-create --name
  foo --visibility public ...` or `glance image-update --visibility
  public ...` it at least gives me a 403 forbidden.

  The web UI just gives a generic "Error" message with no information.

  From searching around on the web, it looks like this feature has not
  been available for maybe even 4 years! See: https://www.sebastien-
  han.fr/blog/2014/10/30/openstack-glance-allow-user-to-create-public-
  images/

  This user seems to have run into this problem two years ago:
  https://ask.openstack.org/en/question/96438/glance-public-image-
  create-403-forbidden-you-are-not-authorized-to-complete-this-action-
  http-403-error-in-openstack-mitaka/

  I can only think this has never been tested as a non admin user, and
  that perhaps something different happens when you have more
  permissions than I have. Really, I want to be able to do this. But if
  I am not allowed, I at least want to know why!

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1770181/+subscriptions