yahoo-eng-team team mailing list archive

[Rodolfo Alonso <2048198@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

If any policy rules is defined in the policy file, the neutron-lib role enforcer is writing WARNING log messages. E.g.:
"""
WARNING oslo_policy.policy [None req-99d94096-bf0c-4898-979c-42da329c27a4 None None] Policies ['get_floatingip'] reference a rule that is not defined.
"""

This is happening when the policy file rules are loaded. These rules
could not be in the rule enforcer base rules [2] (currently 3: admin,
advance service and service role). If that happens, the oslo.policy
``Enforcer`` will write the referred WARNING message.

Although this behavior is harmful, it is needed a way to avoid these
kind of messages.


[1]https://github.com/openstack/neutron-lib/blob/9e3a3a608670d2d7bc0ae98fd39551920e563efe/neutron_lib/policy/_engine.py#L62-L66
[2]https://github.com/openstack/neutron-lib/blob/9e3a3a608670d2d7bc0ae98fd39551920e563efe/neutron_lib/policy/_engine.py#L33-L46

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/2048198

Title:
  neutron-lib role enforcer is writting warning messages

Status in neutron:
  New

Bug description:
  If any policy rules is defined in the policy file, the neutron-lib role enforcer is writing WARNING log messages. E.g.:
  """
  WARNING oslo_policy.policy [None req-99d94096-bf0c-4898-979c-42da329c27a4 None None] Policies ['get_floatingip'] reference a rule that is not defined.
  """

  This is happening when the policy file rules are loaded. These rules
  could not be in the rule enforcer base rules [2] (currently 3: admin,
  advance service and service role). If that happens, the oslo.policy
  ``Enforcer`` will write the referred WARNING message.

  Although this behavior is harmful, it is needed a way to avoid these
  kind of messages.

  
  [1]https://github.com/openstack/neutron-lib/blob/9e3a3a608670d2d7bc0ae98fd39551920e563efe/neutron_lib/policy/_engine.py#L62-L66
  [2]https://github.com/openstack/neutron-lib/blob/9e3a3a608670d2d7bc0ae98fd39551920e563efe/neutron_lib/policy/_engine.py#L33-L46

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/2048198/+subscriptions