yahoo-eng-team team mailing list archive

Thread
Date
[Bug 1970723] [NEW] Correct Error message is not shown

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Ekaterina Chernova <1970723@xxxxxxxxxxxxxxxxxx>
Date: Thu, 28 Apr 2022 08:21:35 -0000
Reply-to: Bug 1970723 <1970723@xxxxxxxxxxxxxxxxxx>
Sender: noreply@xxxxxxxxxxxxx
Public bug reported:

Try to create a volume by a regular user.
400 error is shown

But in logs there is info about forbidden action.

It will be good to show the actual reason to the user

2022-04-28 08:07:00.190799 2022-04-28 08:07:00.187 14 ERROR cinder.volume.volume_utils   File "/var/lib/openstack/lib/python3.6/site-packages/castellan/key_manager/barbican_key_manager.py", line 260, in create_key
2022-04-28 08:07:00.190803 2022-04-28 08:07:00.187 14 ERROR cinder.volume.volume_utils     raise exception.KeyManagerError(reason=e)
2022-04-28 08:07:00.190808 2022-04-28 08:07:00.187 14 ERROR cinder.volume.volume_utils castellan.common.exception.KeyManagerError: Key manager error: Forbidden: Order creation attempt not allowed - please review your user/project privileges
2022-04-28 08:07:00.190817 2022-04-28 08:07:00.187 14 ERROR cinder.volume.volume_utils 
2022-04-28 08:07:00.190874 
2022-04-28 08:07:00.205306 2022-04-28 08:07:00.203 14 WARNING cinder.volume.api [req-3a934586-4114-4b95-9115-cb537b036fc3 f0c4e4e360ad44c19f804c694302edda e15c062664c249d9a17866296e54c875 - default default] Task 'cinder.volume.flows.api.create_volume.ExtractVolumeRequestTask;volume:create' (c2ab30d9-f68b-4d82-80ed-85e547ba331c) transitioned into state 'FAILURE' from state 'RUNNING'
2022-04-28 08:07:00.205352 1 predecessors (most recent first):
2022-04-28 08:07:00.205356   Flow 'volume_create_api': cinder.exception.Invalid: Key manager error
2022-04-28 08:07:00.205360 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api Traceback (most recent call last):
2022-04-28 08:07:00.205364 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/castellan/key_manager/barbican_key_manager.py", line 253, in create_key
2022-04-28 08:07:00.205368 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     order_ref = key_order.submit()
2022-04-28 08:07:00.205371 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/v1/orders.py", line 34, in wrapper
2022-04-28 08:07:00.205375 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     return func(self, *args)
2022-04-28 08:07:00.205378 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/v1/orders.py", line 236, in submit
2022-04-28 08:07:00.205382 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     response = self._api.post(self._entity, json=order_dict)
2022-04-28 08:07:00.205386 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/client.py", line 75, in post
2022-04-28 08:07:00.205390 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     return super(_HTTPClient, self).post(path, *args, **kwargs).json()
2022-04-28 08:07:00.205393 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/keystoneauth1/adapter.py", line 401, in post
2022-04-28 08:07:00.205398 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     return self.request(url, 'POST', **kwargs)
2022-04-28 08:07:00.205401 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/client.py", line 63, in request
2022-04-28 08:07:00.205404 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     self._check_status_code(resp)
2022-04-28 08:07:00.205409 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/client.py", line 107, in _check_status_code
2022-04-28 08:07:00.205412 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     status
2022-04-28 08:07:00.205416 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api barbicanclient.exceptions.HTTPClientError: Forbidden: Order creation attempt not allowed - please review your user/project privileges
2022-04-28 08:07:00.205419 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api 
2022-04-28 08:07:00.205422 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api During handling of the above exception, another exception occurred:
2022-04-28 08:07:00.205425 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api 
2022-04-28 08:07:00.205428 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api Traceback (most recent call last):
2022-04-28 08:07:00.205431 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/volume_utils.py", line 934, in create_encryption_key
2022-04-28 08:07:00.205435 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     length=length)
2022-04-28 08:07:00.205438 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/castellan/key_manager/barbican_key_manager.py", line 260, in create_key
2022-04-28 08:07:00.205442 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     raise exception.KeyManagerError(reason=e)
2022-04-28 08:07:00.205446 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api castellan.common.exception.KeyManagerError: Key manager error: Forbidden: Order creation attempt not allowed - please review your user/project privileges
2022-04-28 08:07:00.205450 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api 
2022-04-28 08:07:00.205453 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api During handling of the above exception, another exception occurred:
2022-04-28 08:07:00.205456 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api 
2022-04-28 08:07:00.205525 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api Traceback (most recent call last):
2022-04-28 08:07:00.205529 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/taskflow/engines/action_engine/executor.py", line 53, in _execute_task
2022-04-28 08:07:00.205532 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     result = task.execute(**arguments)
2022-04-28 08:07:00.205536 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/flows/api/create_volume.py", line 429, in execute
2022-04-28 08:07:00.205540 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     image_meta)   # new key id that's been cloned already
2022-04-28 08:07:00.205544 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/flows/api/create_volume.py", line 348, in _get_encryption_key_id
2022-04-28 08:07:00.205548 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     volume_type_id)
2022-04-28 08:07:00.205551 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/volume_utils.py", line 940, in create_encryption_key
2022-04-28 08:07:00.205555 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     raise exception.Invalid(message="Key manager error")
2022-04-28 08:07:00.205558 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api cinder.exception.Invalid: Key manager error
2022-04-28 08:07:00.205685 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api

** Affects: horizon
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1970723

Title:
  Correct Error message is not shown

Status in OpenStack Dashboard (Horizon):
  New

Bug description:
  Try to create a volume by a regular user.
  400 error is shown

  But in logs there is info about forbidden action.

  It will be good to show the actual reason to the user

  2022-04-28 08:07:00.190799 2022-04-28 08:07:00.187 14 ERROR cinder.volume.volume_utils   File "/var/lib/openstack/lib/python3.6/site-packages/castellan/key_manager/barbican_key_manager.py", line 260, in create_key
  2022-04-28 08:07:00.190803 2022-04-28 08:07:00.187 14 ERROR cinder.volume.volume_utils     raise exception.KeyManagerError(reason=e)
  2022-04-28 08:07:00.190808 2022-04-28 08:07:00.187 14 ERROR cinder.volume.volume_utils castellan.common.exception.KeyManagerError: Key manager error: Forbidden: Order creation attempt not allowed - please review your user/project privileges
  2022-04-28 08:07:00.190817 2022-04-28 08:07:00.187 14 ERROR cinder.volume.volume_utils 
  2022-04-28 08:07:00.190874 
  2022-04-28 08:07:00.205306 2022-04-28 08:07:00.203 14 WARNING cinder.volume.api [req-3a934586-4114-4b95-9115-cb537b036fc3 f0c4e4e360ad44c19f804c694302edda e15c062664c249d9a17866296e54c875 - default default] Task 'cinder.volume.flows.api.create_volume.ExtractVolumeRequestTask;volume:create' (c2ab30d9-f68b-4d82-80ed-85e547ba331c) transitioned into state 'FAILURE' from state 'RUNNING'
  2022-04-28 08:07:00.205352 1 predecessors (most recent first):
  2022-04-28 08:07:00.205356   Flow 'volume_create_api': cinder.exception.Invalid: Key manager error
  2022-04-28 08:07:00.205360 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api Traceback (most recent call last):
  2022-04-28 08:07:00.205364 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/castellan/key_manager/barbican_key_manager.py", line 253, in create_key
  2022-04-28 08:07:00.205368 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     order_ref = key_order.submit()
  2022-04-28 08:07:00.205371 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/v1/orders.py", line 34, in wrapper
  2022-04-28 08:07:00.205375 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     return func(self, *args)
  2022-04-28 08:07:00.205378 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/v1/orders.py", line 236, in submit
  2022-04-28 08:07:00.205382 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     response = self._api.post(self._entity, json=order_dict)
  2022-04-28 08:07:00.205386 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/client.py", line 75, in post
  2022-04-28 08:07:00.205390 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     return super(_HTTPClient, self).post(path, *args, **kwargs).json()
  2022-04-28 08:07:00.205393 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/keystoneauth1/adapter.py", line 401, in post
  2022-04-28 08:07:00.205398 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     return self.request(url, 'POST', **kwargs)
  2022-04-28 08:07:00.205401 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/client.py", line 63, in request
  2022-04-28 08:07:00.205404 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     self._check_status_code(resp)
  2022-04-28 08:07:00.205409 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/client.py", line 107, in _check_status_code
  2022-04-28 08:07:00.205412 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     status
  2022-04-28 08:07:00.205416 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api barbicanclient.exceptions.HTTPClientError: Forbidden: Order creation attempt not allowed - please review your user/project privileges
  2022-04-28 08:07:00.205419 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api 
  2022-04-28 08:07:00.205422 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api During handling of the above exception, another exception occurred:
  2022-04-28 08:07:00.205425 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api 
  2022-04-28 08:07:00.205428 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api Traceback (most recent call last):
  2022-04-28 08:07:00.205431 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/volume_utils.py", line 934, in create_encryption_key
  2022-04-28 08:07:00.205435 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     length=length)
  2022-04-28 08:07:00.205438 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/castellan/key_manager/barbican_key_manager.py", line 260, in create_key
  2022-04-28 08:07:00.205442 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     raise exception.KeyManagerError(reason=e)
  2022-04-28 08:07:00.205446 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api castellan.common.exception.KeyManagerError: Key manager error: Forbidden: Order creation attempt not allowed - please review your user/project privileges
  2022-04-28 08:07:00.205450 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api 
  2022-04-28 08:07:00.205453 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api During handling of the above exception, another exception occurred:
  2022-04-28 08:07:00.205456 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api 
  2022-04-28 08:07:00.205525 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api Traceback (most recent call last):
  2022-04-28 08:07:00.205529 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/taskflow/engines/action_engine/executor.py", line 53, in _execute_task
  2022-04-28 08:07:00.205532 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     result = task.execute(**arguments)
  2022-04-28 08:07:00.205536 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/flows/api/create_volume.py", line 429, in execute
  2022-04-28 08:07:00.205540 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     image_meta)   # new key id that's been cloned already
  2022-04-28 08:07:00.205544 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/flows/api/create_volume.py", line 348, in _get_encryption_key_id
  2022-04-28 08:07:00.205548 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     volume_type_id)
  2022-04-28 08:07:00.205551 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api   File "/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/volume_utils.py", line 940, in create_encryption_key
  2022-04-28 08:07:00.205555 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api     raise exception.Invalid(message="Key manager error")
  2022-04-28 08:07:00.205558 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api cinder.exception.Invalid: Key manager error
  2022-04-28 08:07:00.205685 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1970723/+subscriptions
Follow ups

[Bug 1970723] Re: Correct Error message is not shown
From: Launchpad Bug Tracker, 2022-06-29