Hello All,
We have deployed the latest version of the OpenStack using the Kolla-ansible deployment.
Issue description: When we are uploading image from the horizon dashboard using the with the privilege of admin or any other normal user getting below error. we are using the ceph storage as the backend.
Error:
Type Error: response is undefined and Unable to create Image
Details:
1. From CLI I'm able to Upload the image
2. From Horizon getting Error
Command Line Interface
openstack image create cirros-01 --disk-format qcow2 --file cirros-0.6.2-x86_64-disk.img
Output:
+------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Field | Value |
+------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| checksum | c8fc807773e5354afe61636071771906 |
| container_format | bare |
| created_at | 2025-05-26T05:03:04Z |
| disk_format | qcow2 |
| file | /v2/images/f4bba9a3-8640-4162-b9de-0b7e29d32dcf/file |
| id | f4bba9a3-8640-4162-b9de-0b7e29d32dcf |
| min_disk | 0 |
| min_ram | 0 |
| name | cirros-01 |
| owner | 302edafdf0114b41acad32725668cd13 |
| properties | os_hash_algo='sha512', |
| | os_hash_value='1103b92ce8ad966e41235a4de260deb791ff571670c0342666c8582fbb9caefe6af07ebb11d34f44f8414b609b29c1bdf1d72ffa6faa39c88e8721d09847952b', |
| | os_hidden='False', owner_specified.openstack.md5='', owner_specified.openstack.object='images/cirros-01', owner_specified.openstack.sha256='', stores='rbd' |
| protected | False |
| schema | /v2/schemas/image |
| size | 21430272 |
| status | active |
| tags | |
| updated_at | 2025-05-26T05:03:05Z |
| virtual_size | 117440512 |
| visibility | shared |
+------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------+
openstack image list
+--------------------------------------+-----------+--------+
| ID | Name | Status |
+--------------------------------------+-----------+--------+
| 6b92f1ae-9726-469b-a350-f116c36e61d7 | cirros | active |
| f4bba9a3-8640-4162-b9de-0b7e29d32dcf | cirros-01 | active |
+--------------------------------------+-----------+--------+
From CLI images getting created from cli but we have notice from horizon we are getting error but also in the backend image getting queued.
(kolla-venv) root@controller-01:~# openstack image list
+--------------------------------------+-----------+--------+
| ID | Name | Status |
+--------------------------------------+-----------+--------+
| 5f030764-af42-437d-b6ee-670218a0c4e4 | ankit | queued |
| 0195c152-f2b7-42f1-91b4-5e65f7588889 | ankit | queued |
| 6b92f1ae-9726-469b-a350-f116c36e61d7 | cirros | active |
| f4bba9a3-8640-4162-b9de-0b7e29d32dcf | cirros-01 | active |
+--------------------------------------+-----------+--------+
Queued Image
(kolla-venv) root@controller-01:~# openstack image show 5f030764-af42-437d-b6ee-670218a0c4e4
+------------------+------------------------------------------------------+
| Field | Value |
+------------------+------------------------------------------------------+
| container_format | bare |
| created_at | 2025-05-26T05:45:02Z |
| disk_format | qcow2 |
| file | /v2/images/5f030764-af42-437d-b6ee-670218a0c4e4/file |
| id | 5f030764-af42-437d-b6ee-670218a0c4e4 |
| min_disk | 0 |
| min_ram | 0 |
| name | ankit |
| owner | 302edafdf0114b41acad32725668cd13 |
| properties | os_hidden='False' |
| protected | False |
| schema | /v2/schemas/image |
| status | queued |
| tags | |
| updated_at | 2025-05-26T05:45:02Z |
| visibility | shared |
+------------------+------------------------------------------------------+
Active Image
(kolla-venv) root@controller-01:~# openstack image show 6b92f1ae-9726-469b-a350-f116c36e61d7
+------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Field | Value |
+------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| checksum | c8fc807773e5354afe61636071771906 |
| container_format | bare |
| created_at | 2025-05-26T05:02:02Z |
| disk_format | qcow2 |
| file | /v2/images/6b92f1ae-9726-469b-a350-f116c36e61d7/file |
| id | 6b92f1ae-9726-469b-a350-f116c36e61d7 |
| min_disk | 0 |
| min_ram | 0 |
| name | cirros |
| owner | 302edafdf0114b41acad32725668cd13 |
| properties | os_hash_algo='sha512', |
| | os_hash_value='1103b92ce8ad966e41235a4de260deb791ff571670c0342666c8582fbb9caefe6af07ebb11d34f44f8414b609b29c1bdf1d72ffa6faa39c88e8721d09847952b', |
| | os_hidden='False', owner_specified.openstack.md5='', owner_specified.openstack.object='images/cirros', owner_specified.openstack.sha256='', stores='rbd' |
| protected | False |
| schema | /v2/schemas/image |
| size | 21430272 |
| status | active |
| tags | |
| updated_at | 2025-05-26T05:02:03Z |
| virtual_size | 117440512 |
| visibility | shared |
+------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------+
Please find the horizon logs also
2025-05-26 04:53:24.723082 /var/lib/kolla/venv/lib/python3.12/site-packages/oslo_policy/policy.py:1133: UserWarning: Policy "modify_image": "rule:context_is_admin or (role:member and project_id:%(project_id)s)" failed scope check. The token used to make the request was domain scoped but the policy requires ['project'] scope. This behavior may change in the future where using the intended scope is required
2025-05-26 04:53:24.723167 warnings.warn(msg)
2025-05-26 04:53:24.732065 /var/lib/kolla/venv/lib/python3.12/site-packages/oslo_policy/policy.py:1133: UserWarning: Policy "reactivate": "rule:context_is_admin or (role:member and project_id:%(project_id)s)" failed scope check. The token used to make the request was domain scoped but the policy requires ['project'] scope. This behavior may change in the future where using the intended scope is required
2025-05-26 04:53:24.732130 warnings.warn(msg)
2025-05-26 04:53:34.669166 /var/lib/kolla/venv/lib/python3.12/site-packages/oslo_policy/policy.py:1133: UserWarning: Policy "os_compute_api:os-simple-tenant-usage:show": "rule:project_reader_or_admin" failed scope check. The token used to make the request was domain scoped but the policy requires ['project'] scope. This behavior may change in the future where using the intended scope is required
2025-05-26 04:53:34.669253 warnings.warn(msg)
2025-05-26 04:53:34.670620 /var/lib/kolla/venv/lib/python3.12/site-packages/oslo_policy/policy.py:1133: UserWarning: Policy "os_compute_api:os-quota-sets:update": "rule:context_is_admin" failed scope check. The token used to make the request was domain scoped but the policy requires ['project'] scope. This behavior may change in the future where using the intended scope is required
2025-05-26 04:53:34.670653 warnings.warn(msg)
2025-05-26 04:54:01.749398 /var/lib/kolla/venv/lib/python3.12/site-packages/openstack_dashboard/api/keystone.py:408: DeprecationWarning: Using the 'project' argument is deprecated in version '1.7.0' and will be removed in version '2.0.0', please use the 'default_project' argument instead
2025-05-26 04:54:01.749516 users = keystoneclient(request, admin=True).users.list(**kwargs)
2025-05-26 04:54:28.131860 /var/lib/kolla/venv/lib/python3.12/site-packages/oslo_policy/policy.py:1133: UserWarning: Policy "deactivate": "rule:context_is_admin or (role:member and project_id:%(project_id)s)" failed scope check. The token used to make the request was domain scoped but the policy requires ['project'] scope. This behavior may change in the future where using the intended scope is required
2025-05-26 04:54:28.131939 warnings.warn(msg)
2025-05-26 04:54:33.886717 Project switch successful for user "admin".
2025-05-26 04:54:44.853694 Forbidden: /api/glance/images/4b2517db-1352-45ed-ae87-5a6179bc3422/actions/reactivate
2025-05-26 04:54:51.522777 /var/lib/kolla/venv/lib/python3.12/site-packages/oslo_policy/policy.py:1133: UserWarning: Policy "deactivate": "rule:context_is_admin or (role:member and project_id:%(project_id)s)" failed scope check. The token used to make the request was domain scoped but the policy requires ['project'] scope. This behavior may change in the future where using the intended scope is required
2025-05-26 04:54:51.522876 warnings.warn(msg)
2025-05-26 04:55:07.647877 Project switch successful for user "admin".
2025-05-26 04:55:09.798541 OPENSTACK_IMAGE_BACKEND has a format "" unsupported by glance
2025-05-26 04:55:09.798708 OPENSTACK_IMAGE_BACKEND has a format "docker" unsupported by glance
2025-05-26 04:55:09.798760 OPENSTACK_IMAGE_BACKEND has a format "ova" unsupported by glance
2025-05-26 05:03:59.763647 /var/lib/kolla/venv/lib/python3.12/site-packages/oslo_policy/policy.py:1133: UserWarning: Policy "communitize_image": "rule:context_is_admin or (role:member and project_id:%(project_id)s)" failed scope check. The token used to make the request was domain scoped but the policy requires ['project'] scope. This behavior may change in the future where using the intended scope is required
2025-05-26 05:03:59.763801 warnings.warn(msg)
Please help to solve this issue. also I don't see any issue or error in the glance api logs