yahoo-eng-team team mailing list archive

Thread
Date
[Bug 2120737] [NEW] new location GET api returns Forbidden/NotAuthorized error

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Rajat Dhasmana <2120737@xxxxxxxxxxxxxxxxxx>
Date: Fri, 15 Aug 2025 20:47:23 -0000
Reply-to: Bug 2120737 <2120737@xxxxxxxxxxxxxxxxxx>
Sender: noreply@xxxxxxxxxxxxx
Public bug reported:

When querying the new location GET API from cinder, we get the following
trace in Cinder[1]

While debugging from glance side, turns out the policy check fails

> api_pol.get_locations()
(Pdb) 
webob.exc.HTTPForbidden: You are not authorized to complete fetch_image_location action.
> /opt/stack/glance/glance/api/v2/images.py(1238)get_locations()
-> api_pol.get_locations()
(Pdb) 
> /opt/stack/glance/glance/api/v2/images.py(1244)get_locations()
-> except exception.NotFound as e:
(Pdb) 
> /opt/stack/glance/glance/api/v2/images.py(1246)get_locations()
-> except exception.Forbidden as e:
(Pdb) 
--Return--
> /opt/stack/glance/glance/api/v2/images.py(1246)get_locations()->None
-> except exception.Forbidden as e:

Cinder is configured to use service token and it's visible in the
request context as well

[service_user]
auth_strategy = keystone
send_service_user_token = True
memcached_servers = localhost:11211
cafile = /opt/stack/data/ca-bundle.pem
project_domain_name = Default
project_name = service
user_domain_name = Default
password = ******
username = cinder 
auth_url = http://127.0.0.1/identity
interface = public
auth_type = password


{'_user_id': '6f3f1a9054594bf09ec4856728768290', '_project_id': '468bd6994340486c89275d65d69452b7', '_domain_id': None, '_user_domain_id': 'default', '_project_domain_id': 'default', 'auth_token': 'gAAAAABon5VX9ygk9syMYO5oiSVJdkFXtqbF0CcZkRgPjQuifuOfFQqtafFAtnfrh6htinCRwVQ97cawuKMh9lvdTcHM4n-dCyVJrTzOeisyCuVkz2KPHeZH0Qu9JYUH-Jp0BzlKCShCp8Y8RqPX6A7VvDXab4y2zUJEls7iiHuXjojyXZv-frQ', 'user_name': 'admin', 'project_name': 'admin', 'domain_name': None, 'system_scope': None, 'user_domain_name': 'Default', 'project_domain_name': 'Default', 'is_admin': True, 'is_admin_project': True, 'read_only': False, 'show_deleted': False, 'resource_uuid': None, 'roles': ['member', 'manager', 'admin', 'reader'], 'service_token': 'gAAAAABon5VYjLnGe9C-ojE_p1nDIuOqj2AM76rWjtA3qPyY3qPyMrdl77Fr5yxB54si1F2t6AxO7KDcV5Nd7YRtpVpRl0yAD_VtW9n1eo1o-lzVDsyLn1FYDlh_6IBA1iqwr9vIqiQ9qZ9dj2bO8D7KWPwIql_fXXV5Fb74VfJ8TF1clxq3RUg', 'service_user_id': '118a490377c64e788c8d2512ec4c0210', 'service_user_name': 'cinder', 'service_user_domain_id': 'default', 'service_user_domain_name': 'Default', 'service_project_id': 'ee0d97fa0e8c40688a1e862dc93dfddf', 'service_project_name': 'service', 'service_project_domain_id': 'default', 'service_project_domain_name': 'Default', 'service_roles': ['creator', 'service'], 'request_id': 'req-89560d26-958f-4b7f-9bdd-f1d6dd2c8152', 'global_request_id': None, 'service_catalog': [{'type': 'block-storage', 'name': 'cinder', 'endpoints': [{'region': 'RegionOne', 'publicURL': 'http://127.0.0.1/volume/v3'}]}, {'type': 'placement', 'name': 'placement', 'endpoints': [{'region': 'RegionOne', 'publicURL': 'http://127.0.0.1/placement'}]}, {'type': 'network', 'name': 'neutron', 'endpoints': [{'region': 'RegionOne', 'publicURL': 'http://127.0.0.1:9696/networking'}]}, {'type': 'compute_legacy', 'name': 'nova_legacy', 'endpoints': [{'region': 'RegionOne', 'publicURL': 'http://127.0.0.1/compute/v2/468bd6994340486c89275d65d69452b7'}]}, {'type': 'identity', 'name': 'keystone', 'endpoints': [{'regi
on': 'RegionOne', 'publicURL': 'http://127.0.0.1/identity'}]}, {'type': 'key-manager', 'name': 'barbican', 'endpoints': [{'region': 'RegionOne', 'adminURL': 'http://127.0.0.1/key-manager', 'publicURL': 'http://127.0.0.1/key-manager', 'internalURL': 'http://127.0.0.1/key-manager'}]}, {'type': 'image', 'name': 'glance', 'endpoints': [{'region': 'RegionOne', 'publicURL': 'http://127.0.0.1/image'}]}, {'type': 'compute', 'name': 'nova', 'endpoints': [{'region': 'RegionOne', 'publicURL': 'http://127.0.0.1/compute/v2.1'}]}], 'policy_enforcer': <glance.api.policy.Enforcer object at 0x752c7a917ec0>}


[1]
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server [None req-89560d26-958f-4b7f-9bdd-f1d6dd2c8152 admin None] Exception during message handling: cinder.exception.ImageNotAuthorized: Not authorized for image 97ae1a68-ae2a-4be7-b742-23c9cd4d57d3.
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server Traceback (most recent call last):
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/image/glance.py", line 366, in get_location
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     image_meta = client.call(context, method, image_id)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/image/glance.py", line 253, in call
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return getattr(controller, method)(*args, **kwargs)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/glanceclient/common/utils.py", line 652, in inner
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return RequestIdProxy(wrapped(*args, **kwargs))
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server                           ^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/glanceclient/v2/images.py", line 591, in get_image_locations
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     resp, locations = self.http_client.get(url)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server                       ^^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/keystoneauth1/adapter.py", line 393, in get
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return self.request(url, 'GET', **kwargs)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/glanceclient/common/http.py", line 376, in request
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return self._handle_response(resp)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server            ^^^^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/glanceclient/common/http.py", line 116, in _handle_response
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     raise exc.from_response(resp, resp.content)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server glanceclient.exc.HTTPForbidden: HTTP 403 Forbidden: You are not authorized to complete fetch_image_location action.
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server 
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server During handling of the above exception, another exception occurred:
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server 
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server Traceback (most recent call last):
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/oslo_messaging/rpc/server.py", line 172, in _process_incoming
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     res = self.dispatcher.dispatch(message)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/oslo_messaging/rpc/dispatcher.py", line 309, in dispatch
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return self._do_dispatch(endpoint, method, ctxt, args)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/oslo_messaging/rpc/dispatcher.py", line 229, in _do_dispatch
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     result = func(ctxt, **new_args)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server              ^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/decorator.py", line 232, in fun
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return caller(func, *(extras + args), **kw)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/objects/cleanable.py", line 208, in wrapper
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     result = f(*args, **kwargs)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server              ^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/volume/manager.py", line 818, in create_volume
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     _run_flow()
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/volume/manager.py", line 810, in _run_flow
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     flow_engine.run()
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/taskflow/engines/action_engine/engine.py", line 251, in run
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     for _state in self.run_iter(timeout=timeout):
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/taskflow/engines/action_engine/engine.py", line 344, in run_iter
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     failure.Failure.reraise_if_any(er_failures)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/taskflow/types/failure.py", line 338, in reraise_if_any
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     failures[0].reraise()
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/taskflow/types/failure.py", line 350, in reraise
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     raise value
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/taskflow/engines/action_engine/executor.py", line 52, in _execute_task
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     result = task.execute(**arguments)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server              ^^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/volume/flows/manager/create_volume.py", line 323, in execute
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     'image_location': image_service.get_location(context,
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server                       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/image/glance.py", line 370, in get_location
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     _reraise_translated_image_exception(image_id)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/image/glance.py", line 678, in _reraise_translated_image_exception
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     raise new_exc.with_traceback(exc_trace)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/image/glance.py", line 366, in get_location
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     image_meta = client.call(context, method, image_id)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/image/glance.py", line 253, in call
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return getattr(controller, method)(*args, **kwargs)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/glanceclient/common/utils.py", line 652, in inner
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return RequestIdProxy(wrapped(*args, **kwargs))
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server                           ^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/glanceclient/v2/images.py", line 591, in get_image_locations
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     resp, locations = self.http_client.get(url)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server                       ^^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/keystoneauth1/adapter.py", line 393, in get
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return self.request(url, 'GET', **kwargs)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/glanceclient/common/http.py", line 376, in request
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return self._handle_response(resp)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server            ^^^^^^^^^^^^^^^^^^^^^^^^^^^
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/glanceclient/common/http.py", line 116, in _handle_response
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     raise exc.from_response(resp, resp.content)
Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server cinder.exception.ImageNotAuthorized: Not authorized for image 97ae1a68-ae2a-4be7-b742-23c9cd4d57d3.

** Affects: glance
     Importance: Undecided
     Assignee: Rajat Dhasmana (whoami-rajat)
         Status: In Progress

** Changed in: glance
       Status: New => In Progress

** Changed in: glance
     Assignee: (unassigned) => Rajat Dhasmana (whoami-rajat)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/2120737

Title:
  new location GET api returns Forbidden/NotAuthorized error

Status in Glance:
  In Progress

Bug description:
  When querying the new location GET API from cinder, we get the
  following trace in Cinder[1]

  While debugging from glance side, turns out the policy check fails

  > api_pol.get_locations()
  (Pdb) 
  webob.exc.HTTPForbidden: You are not authorized to complete fetch_image_location action.
  > /opt/stack/glance/glance/api/v2/images.py(1238)get_locations()
  -> api_pol.get_locations()
  (Pdb) 
  > /opt/stack/glance/glance/api/v2/images.py(1244)get_locations()
  -> except exception.NotFound as e:
  (Pdb) 
  > /opt/stack/glance/glance/api/v2/images.py(1246)get_locations()
  -> except exception.Forbidden as e:
  (Pdb) 
  --Return--
  > /opt/stack/glance/glance/api/v2/images.py(1246)get_locations()->None
  -> except exception.Forbidden as e:

  Cinder is configured to use service token and it's visible in the
  request context as well

  [service_user]
  auth_strategy = keystone
  send_service_user_token = True
  memcached_servers = localhost:11211
  cafile = /opt/stack/data/ca-bundle.pem
  project_domain_name = Default
  project_name = service
  user_domain_name = Default
  password = ******
  username = cinder 
  auth_url = http://127.0.0.1/identity
  interface = public
  auth_type = password

  
  {'_user_id': '6f3f1a9054594bf09ec4856728768290', '_project_id': '468bd6994340486c89275d65d69452b7', '_domain_id': None, '_user_domain_id': 'default', '_project_domain_id': 'default', 'auth_token': 'gAAAAABon5VX9ygk9syMYO5oiSVJdkFXtqbF0CcZkRgPjQuifuOfFQqtafFAtnfrh6htinCRwVQ97cawuKMh9lvdTcHM4n-dCyVJrTzOeisyCuVkz2KPHeZH0Qu9JYUH-Jp0BzlKCShCp8Y8RqPX6A7VvDXab4y2zUJEls7iiHuXjojyXZv-frQ', 'user_name': 'admin', 'project_name': 'admin', 'domain_name': None, 'system_scope': None, 'user_domain_name': 'Default', 'project_domain_name': 'Default', 'is_admin': True, 'is_admin_project': True, 'read_only': False, 'show_deleted': False, 'resource_uuid': None, 'roles': ['member', 'manager', 'admin', 'reader'], 'service_token': 'gAAAAABon5VYjLnGe9C-ojE_p1nDIuOqj2AM76rWjtA3qPyY3qPyMrdl77Fr5yxB54si1F2t6AxO7KDcV5Nd7YRtpVpRl0yAD_VtW9n1eo1o-lzVDsyLn1FYDlh_6IBA1iqwr9vIqiQ9qZ9dj2bO8D7KWPwIql_fXXV5Fb74VfJ8TF1clxq3RUg', 'service_user_id': '118a490377c64e788c8d2512ec4c0210', 'service_user_name': 'cinder', 'service_user_domain_id': 'default', 'service_user_domain_name': 'Default', 'service_project_id': 'ee0d97fa0e8c40688a1e862dc93dfddf', 'service_project_name': 'service', 'service_project_domain_id': 'default', 'service_project_domain_name': 'Default', 'service_roles': ['creator', 'service'], 'request_id': 'req-89560d26-958f-4b7f-9bdd-f1d6dd2c8152', 'global_request_id': None, 'service_catalog': [{'type': 'block-storage', 'name': 'cinder', 'endpoints': [{'region': 'RegionOne', 'publicURL': 'http://127.0.0.1/volume/v3'}]}, {'type': 'placement', 'name': 'placement', 'endpoints': [{'region': 'RegionOne', 'publicURL': 'http://127.0.0.1/placement'}]}, {'type': 'network', 'name': 'neutron', 'endpoints': [{'region': 'RegionOne', 'publicURL': 'http://127.0.0.1:9696/networking'}]}, {'type': 'compute_legacy', 'name': 'nova_legacy', 'endpoints': [{'region': 'RegionOne', 'publicURL': 'http://127.0.0.1/compute/v2/468bd6994340486c89275d65d69452b7'}]}, {'type': 'identity', 'name': 'keystone', 'endpoints': [{'regi
  on': 'RegionOne', 'publicURL': 'http://127.0.0.1/identity'}]}, {'type': 'key-manager', 'name': 'barbican', 'endpoints': [{'region': 'RegionOne', 'adminURL': 'http://127.0.0.1/key-manager', 'publicURL': 'http://127.0.0.1/key-manager', 'internalURL': 'http://127.0.0.1/key-manager'}]}, {'type': 'image', 'name': 'glance', 'endpoints': [{'region': 'RegionOne', 'publicURL': 'http://127.0.0.1/image'}]}, {'type': 'compute', 'name': 'nova', 'endpoints': [{'region': 'RegionOne', 'publicURL': 'http://127.0.0.1/compute/v2.1'}]}], 'policy_enforcer': <glance.api.policy.Enforcer object at 0x752c7a917ec0>}

  
  [1]
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server [None req-89560d26-958f-4b7f-9bdd-f1d6dd2c8152 admin None] Exception during message handling: cinder.exception.ImageNotAuthorized: Not authorized for image 97ae1a68-ae2a-4be7-b742-23c9cd4d57d3.
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server Traceback (most recent call last):
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/image/glance.py", line 366, in get_location
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     image_meta = client.call(context, method, image_id)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/image/glance.py", line 253, in call
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return getattr(controller, method)(*args, **kwargs)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/glanceclient/common/utils.py", line 652, in inner
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return RequestIdProxy(wrapped(*args, **kwargs))
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server                           ^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/glanceclient/v2/images.py", line 591, in get_image_locations
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     resp, locations = self.http_client.get(url)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server                       ^^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/keystoneauth1/adapter.py", line 393, in get
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return self.request(url, 'GET', **kwargs)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/glanceclient/common/http.py", line 376, in request
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return self._handle_response(resp)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server            ^^^^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/glanceclient/common/http.py", line 116, in _handle_response
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     raise exc.from_response(resp, resp.content)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server glanceclient.exc.HTTPForbidden: HTTP 403 Forbidden: You are not authorized to complete fetch_image_location action.
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server 
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server During handling of the above exception, another exception occurred:
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server 
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server Traceback (most recent call last):
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/oslo_messaging/rpc/server.py", line 172, in _process_incoming
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     res = self.dispatcher.dispatch(message)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/oslo_messaging/rpc/dispatcher.py", line 309, in dispatch
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return self._do_dispatch(endpoint, method, ctxt, args)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/oslo_messaging/rpc/dispatcher.py", line 229, in _do_dispatch
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     result = func(ctxt, **new_args)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server              ^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/decorator.py", line 232, in fun
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return caller(func, *(extras + args), **kw)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/objects/cleanable.py", line 208, in wrapper
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     result = f(*args, **kwargs)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server              ^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/volume/manager.py", line 818, in create_volume
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     _run_flow()
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/volume/manager.py", line 810, in _run_flow
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     flow_engine.run()
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/taskflow/engines/action_engine/engine.py", line 251, in run
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     for _state in self.run_iter(timeout=timeout):
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/taskflow/engines/action_engine/engine.py", line 344, in run_iter
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     failure.Failure.reraise_if_any(er_failures)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/taskflow/types/failure.py", line 338, in reraise_if_any
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     failures[0].reraise()
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/taskflow/types/failure.py", line 350, in reraise
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     raise value
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/taskflow/engines/action_engine/executor.py", line 52, in _execute_task
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     result = task.execute(**arguments)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server              ^^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/volume/flows/manager/create_volume.py", line 323, in execute
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     'image_location': image_service.get_location(context,
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server                       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/image/glance.py", line 370, in get_location
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     _reraise_translated_image_exception(image_id)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/image/glance.py", line 678, in _reraise_translated_image_exception
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     raise new_exc.with_traceback(exc_trace)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/image/glance.py", line 366, in get_location
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     image_meta = client.call(context, method, image_id)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/cinder/cinder/image/glance.py", line 253, in call
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return getattr(controller, method)(*args, **kwargs)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/glanceclient/common/utils.py", line 652, in inner
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return RequestIdProxy(wrapped(*args, **kwargs))
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server                           ^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/glanceclient/v2/images.py", line 591, in get_image_locations
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     resp, locations = self.http_client.get(url)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server                       ^^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/keystoneauth1/adapter.py", line 393, in get
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return self.request(url, 'GET', **kwargs)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/glanceclient/common/http.py", line 376, in request
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     return self._handle_response(resp)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server            ^^^^^^^^^^^^^^^^^^^^^^^^^^^
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server   File "/opt/stack/data/venv/lib/python3.12/site-packages/glanceclient/common/http.py", line 116, in _handle_response
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server     raise exc.from_response(resp, resp.content)
  Aug 16 01:46:41 ubuntu-VirtualBox cinder-volume[463186]: ERROR oslo_messaging.rpc.server cinder.exception.ImageNotAuthorized: Not authorized for image 97ae1a68-ae2a-4be7-b742-23c9cd4d57d3.

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/2120737/+subscriptions