On 05/05/2021 17:34, Christian Rohmann wrote:
But the admin user with id "4b2abc14e511a7c0b10c" doing a resize attempt caused an extend_volume and consequently did trigger a notification of the VM, just as expected and documented in regards to this feature.
Does anybody have any idea what could cause this or where to look for more details?
Apparently this is a (long) known issue (i.e. https://bugzilla.redhat.com/show_bug.cgi?id=1640443) which is caused by
Cinder talking to Nova to have it create the volume-extended event but does so with user credentials and this is denied by the default policy:
--- cut --- 2021-05-06 15:13:12.214 4197 DEBUG nova.api.openstack.wsgi [req-4c291455-a21a-4314-8e57-173e66e6e60a f9c0b52ec43e423e9b5ea63d620f4e27 92a6c19e7482400385806266cdef149c - default default] Returning 403 to user: Po licy doesn't allow os_compute_api:os-server-external-events:create to be performed. __call__ /usr/lib/python3/dist-packages/nova/api/openstack/wsgi.py:941 --- cut ---
Unfortunately cinder does not report or log anything.
Is switching cinder to the "admin" interface the proper approach here or am I missing something else?
Regards
Christian