yahoo-eng-team team mailing list archive

Thread
Date
[Bug 1969054] [NEW] when enabled enforce_new_defaults, create server failed

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: luffy Wong <1969054@xxxxxxxxxxxxxxxxxx>
Date: Thu, 14 Apr 2022 08:27:35 -0000
Reply-to: Bug 1969054 <1969054@xxxxxxxxxxxxxxxxxx>
Sender: noreply@xxxxxxxxxxxxx
Public bug reported:

Description
===========
When enabled enforce_new_defaults in nova.conf. system scope admin failed to create a server.It occure an error in neutron log(controller node).

2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova Traceback (most recent call last):
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/neutron/notifiers/nova.py", line 266, in send_events
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     batched_events)
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/novaclient/v2/server_external_events.py", line 39, in create
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     return_raw=True)
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/novaclient/base.py", line 363, in _create
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     resp, body = self.api.client.post(url, body=body)
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/keystoneauth1/adapter.py", line 401, in post
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     return self.request(url, 'POST', **kwargs)
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/novaclient/client.py", line 78, in request
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     raise exceptions.from_response(resp, body, url, method)
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova novaclient.exceptions.Forbidden: Policy doesn't allow os_compute_api:os-server-external-events:create to be performed. (HTTP 403) (Request-ID: req-928afad8-32b9-420
8-8e5e-e2bc9061a56a) 

Steps to reproduce
==================
1、enabled enforce_new_defaults in nova.conf and restart nova
2、empty policy.yaml  >/etc/nova/policy.yaml
3、use admin(system scope) to create a server 
4、create server failed
5、disabled enforce_new_defaults ,admin could create server successfully.

Expected result
===============
admin user create the server successfully.

Actual result
=============
The status of server stuck in "BUILD" ,after 5 mimutes,it become "error".

It occure an error in neutron log(controller node).

2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova Traceback (most recent call last):
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/neutron/notifiers/nova.py", line 266, in send_events
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     batched_events)
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/novaclient/v2/server_external_events.py", line 39, in create
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     return_raw=True)
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/novaclient/base.py", line 363, in _create
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     resp, body = self.api.client.post(url, body=body)
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/keystoneauth1/adapter.py", line 401, in post
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     return self.request(url, 'POST', **kwargs)
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/novaclient/client.py", line 78, in request
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     raise exceptions.from_response(resp, body, url, method)
2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova novaclient.exceptions.Forbidden: Policy doesn't allow os_compute_api:os-server-external-events:create to be performed. (HTTP 403) (Request-ID: req-928afad8-32b9-420
8-8e5e-e2bc9061a56a) 

Environment
===========
OS release centos8.2
openstack victoria
nova 22.2.2
neutron 17.2
keystone 18.0

** Affects: nova
     Importance: Undecided
         Status: New


** Tags: doc

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1969054

Title:
  when enabled enforce_new_defaults,create server failed

Status in OpenStack Compute (nova):
  New

Bug description:
  Description
  ===========
  When enabled enforce_new_defaults in nova.conf. system scope admin failed to create a server.It occure an error in neutron log(controller node).

  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova Traceback (most recent call last):
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/neutron/notifiers/nova.py", line 266, in send_events
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     batched_events)
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/novaclient/v2/server_external_events.py", line 39, in create
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     return_raw=True)
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/novaclient/base.py", line 363, in _create
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     resp, body = self.api.client.post(url, body=body)
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/keystoneauth1/adapter.py", line 401, in post
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     return self.request(url, 'POST', **kwargs)
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/novaclient/client.py", line 78, in request
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     raise exceptions.from_response(resp, body, url, method)
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova novaclient.exceptions.Forbidden: Policy doesn't allow os_compute_api:os-server-external-events:create to be performed. (HTTP 403) (Request-ID: req-928afad8-32b9-420
  8-8e5e-e2bc9061a56a) 

  Steps to reproduce
  ==================
  1、enabled enforce_new_defaults in nova.conf and restart nova
  2、empty policy.yaml  >/etc/nova/policy.yaml
  3、use admin(system scope) to create a server 
  4、create server failed
  5、disabled enforce_new_defaults ,admin could create server successfully.

  Expected result
  ===============
  admin user create the server successfully.

  Actual result
  =============
  The status of server stuck in "BUILD" ,after 5 mimutes,it become "error".

  It occure an error in neutron log(controller node).

  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova Traceback (most recent call last):
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/neutron/notifiers/nova.py", line 266, in send_events
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     batched_events)
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/novaclient/v2/server_external_events.py", line 39, in create
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     return_raw=True)
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/novaclient/base.py", line 363, in _create
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     resp, body = self.api.client.post(url, body=body)
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/keystoneauth1/adapter.py", line 401, in post
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     return self.request(url, 'POST', **kwargs)
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova   File "/usr/lib/python3.6/site-packages/novaclient/client.py", line 78, in request
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova     raise exceptions.from_response(resp, body, url, method)
  2022-04-14 09:36:29.743 876530 ERROR neutron.notifiers.nova novaclient.exceptions.Forbidden: Policy doesn't allow os_compute_api:os-server-external-events:create to be performed. (HTTP 403) (Request-ID: req-928afad8-32b9-420
  8-8e5e-e2bc9061a56a) 

  Environment
  ===========
  OS release centos8.2
  openstack victoria
  nova 22.2.2
  neutron 17.2
  keystone 18.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1969054/+subscriptions
Follow ups

[Bug 1969054] Re: when enabled enforce_new_defaults, create server failed
From: Sylvain Bauza, 2022-04-19